level=info msg="Memory available for map entries (0.003% of 67421634560B): 168554086B" subsys=config level=info msg="option bpf-ct-global-tcp-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-ct-global-any-max set by dynamic sizing to 295708" subsys=config level=info msg="option bpf-nat-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-neigh-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-sock-rev-map-max set by dynamic sizing to 295708" subsys=config level=info msg=" --agent-health-port='9879'" subsys=daemon level=info msg=" --agent-labels=''" subsys=daemon level=info msg=" --agent-liveness-update-interval='1s'" subsys=daemon level=info msg=" --agent-not-ready-taint-key='node.cilium.io/agent-not-ready'" subsys=daemon level=info msg=" --allocator-list-timeout='3m0s'" subsys=daemon level=info msg=" --allow-icmp-frag-needed='true'" subsys=daemon level=info msg=" --allow-localhost='auto'" subsys=daemon level=info msg=" --annotate-k8s-node='false'" subsys=daemon level=info msg=" --api-rate-limit=''" subsys=daemon level=info msg=" --arping-refresh-period='30s'" subsys=daemon level=info msg=" --auto-create-cilium-node-resource='true'" subsys=daemon level=info msg=" --auto-direct-node-routes='false'" subsys=daemon level=info msg=" --bgp-announce-lb-ip='false'" subsys=daemon level=info msg=" --bgp-announce-pod-cidr='false'" subsys=daemon level=info msg=" --bgp-config-path='/var/lib/cilium/bgp/config.yaml'" subsys=daemon level=info msg=" --bpf-auth-map-max='524288'" subsys=daemon level=info msg=" --bpf-ct-global-any-max='262144'" subsys=daemon level=info msg=" --bpf-ct-global-tcp-max='524288'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-fin='10s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-syn='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp-grace='1m0s'" subsys=daemon level=info msg=" --bpf-filter-priority='1'" subsys=daemon level=info msg=" --bpf-fragments-map-max='8192'" subsys=daemon level=info msg=" --bpf-lb-acceleration='disabled'" subsys=daemon level=info msg=" --bpf-lb-affinity-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-algorithm='random'" subsys=daemon level=info msg=" --bpf-lb-dev-ip-addr-inherit=''" subsys=daemon level=info msg=" --bpf-lb-dsr-dispatch='opt'" subsys=daemon level=info msg=" --bpf-lb-dsr-l4-xlate='frontend'" subsys=daemon level=info msg=" --bpf-lb-external-clusterip='false'" subsys=daemon level=info msg=" --bpf-lb-maglev-hash-seed='JLfvgnHc2kaSUFaI'" subsys=daemon level=info msg=" --bpf-lb-maglev-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-maglev-table-size='16381'" subsys=daemon level=info msg=" --bpf-lb-map-max='65536'" subsys=daemon level=info msg=" --bpf-lb-mode='snat'" subsys=daemon level=info msg=" --bpf-lb-rev-nat-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-rss-ipv4-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-rss-ipv6-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-service-backend-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-service-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-sock='false'" subsys=daemon level=info msg=" --bpf-lb-sock-hostns-only='false'" subsys=daemon level=info msg=" --bpf-lb-source-range-map-max='0'" subsys=daemon level=info msg=" --bpf-map-dynamic-size-ratio='0.0025'" subsys=daemon level=info msg=" --bpf-map-event-buffers=''" subsys=daemon level=info msg=" --bpf-nat-global-max='524288'" subsys=daemon level=info msg=" --bpf-neigh-global-max='524288'" subsys=daemon level=info msg=" --bpf-policy-map-full-reconciliation-interval='15m0s'" subsys=daemon level=info msg=" --bpf-policy-map-max='16384'" subsys=daemon level=info msg=" --bpf-root='/sys/fs/bpf'" subsys=daemon level=info msg=" --bpf-sock-rev-map-max='262144'" subsys=daemon level=info msg=" --bypass-ip-availability-upon-restore='false'" subsys=daemon level=info msg=" --certificates-directory='/var/run/cilium/certs'" subsys=daemon level=info msg=" --cflags=''" subsys=daemon level=info msg=" --cgroup-root='/run/cilium/cgroupv2'" subsys=daemon level=info msg=" --cilium-endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --cluster-health-port='4240'" subsys=daemon level=info msg=" --cluster-id='0'" subsys=daemon level=info msg=" --cluster-name='default'" subsys=daemon level=info msg=" --cluster-pool-ipv4-cidr='10.0.0.0/8'" subsys=daemon level=info msg=" --cluster-pool-ipv4-mask-size='24'" subsys=daemon level=info msg=" --clustermesh-config='/var/lib/cilium/clustermesh/'" subsys=daemon level=info msg=" --clustermesh-ip-identities-sync-timeout='1m0s'" subsys=daemon level=info msg=" --cmdref=''" subsys=daemon level=info msg=" --cni-chaining-mode='none'" subsys=daemon level=info msg=" --cni-chaining-target=''" subsys=daemon level=info msg=" --cni-exclusive='true'" subsys=daemon level=info msg=" --cni-external-routing='false'" subsys=daemon level=info msg=" --cni-log-file='/var/run/cilium/cilium-cni.log'" subsys=daemon level=info msg=" --cnp-node-status-gc-interval='0s'" subsys=daemon level=info msg=" --config=''" subsys=daemon level=info msg=" --config-dir='/tmp/cilium/config-map'" subsys=daemon level=info msg=" --config-sources='config-map:kube-system/cilium-config'" subsys=daemon level=info msg=" --conntrack-gc-interval='0s'" subsys=daemon level=info msg=" --conntrack-gc-max-interval='0s'" subsys=daemon level=info msg=" --crd-wait-timeout='5m0s'" subsys=daemon level=info msg=" --custom-cni-conf='false'" subsys=daemon level=info msg=" --datapath-mode='veth'" subsys=daemon level=info msg=" --debug='false'" subsys=daemon level=info msg=" --debug-verbose=''" subsys=daemon level=info msg=" --derive-masquerade-ip-addr-from-device=''" subsys=daemon level=info msg=" --devices=''" subsys=daemon level=info msg=" --direct-routing-device=''" subsys=daemon level=info msg=" --disable-cnp-status-updates='true'" subsys=daemon level=info msg=" --disable-endpoint-crd='false'" subsys=daemon level=info msg=" --disable-envoy-version-check='false'" subsys=daemon level=info msg=" --disable-iptables-feeder-rules=''" subsys=daemon level=info msg=" --dns-max-ips-per-restored-rule='1000'" subsys=daemon level=info msg=" --dns-policy-unload-on-shutdown='false'" subsys=daemon level=info msg=" --dnsproxy-concurrency-limit='0'" subsys=daemon level=info msg=" --dnsproxy-concurrency-processing-grace-period='0s'" subsys=daemon level=info msg=" --dnsproxy-enable-transparent-mode='true'" subsys=daemon level=info msg=" --dnsproxy-lock-count='128'" subsys=daemon level=info msg=" --dnsproxy-lock-timeout='500ms'" subsys=daemon level=info msg=" --egress-gateway-policy-map-max='16384'" subsys=daemon level=info msg=" --egress-gateway-reconciliation-trigger-interval='1s'" subsys=daemon level=info msg=" --egress-masquerade-interfaces=''" subsys=daemon level=info msg=" --egress-multi-home-ip-rule-compat='false'" subsys=daemon level=info msg=" --enable-auto-protect-node-port-range='true'" subsys=daemon level=info msg=" --enable-bandwidth-manager='false'" subsys=daemon level=info msg=" --enable-bbr='false'" subsys=daemon level=info msg=" --enable-bgp-control-plane='false'" subsys=daemon level=info msg=" --enable-bpf-clock-probe='false'" subsys=daemon level=info msg=" --enable-bpf-masquerade='false'" subsys=daemon level=info msg=" --enable-bpf-tproxy='false'" subsys=daemon level=info msg=" --enable-cilium-api-server-access='*'" subsys=daemon level=info msg=" --enable-cilium-endpoint-slice='false'" subsys=daemon level=info msg=" --enable-cilium-health-api-server-access='*'" subsys=daemon level=info msg=" --enable-custom-calls='false'" subsys=daemon level=info msg=" --enable-endpoint-health-checking='true'" subsys=daemon level=info msg=" --enable-endpoint-routes='false'" subsys=daemon level=info msg=" --enable-envoy-config='false'" subsys=daemon level=info msg=" --enable-external-ips='false'" subsys=daemon level=info msg=" --enable-health-check-nodeport='true'" subsys=daemon level=info msg=" --enable-health-checking='true'" subsys=daemon level=info msg=" --enable-high-scale-ipcache='false'" subsys=daemon level=info msg=" --enable-host-firewall='false'" subsys=daemon level=info msg=" --enable-host-legacy-routing='false'" subsys=daemon level=info msg=" --enable-host-port='false'" subsys=daemon level=info msg=" --enable-hubble='false'" subsys=daemon level=info msg=" --enable-hubble-recorder-api='true'" subsys=daemon level=info msg=" --enable-icmp-rules='true'" subsys=daemon level=info msg=" --enable-identity-mark='true'" subsys=daemon level=info msg=" --enable-ip-masq-agent='false'" subsys=daemon level=info msg=" --enable-ipsec='false'" subsys=daemon level=info msg=" --enable-ipsec-key-watcher='true'" subsys=daemon level=info msg=" --enable-ipv4='true'" subsys=daemon level=info msg=" --enable-ipv4-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv4-egress-gateway='false'" subsys=daemon level=info msg=" --enable-ipv4-fragment-tracking='true'" subsys=daemon level=info msg=" --enable-ipv4-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6='false'" subsys=daemon level=info msg=" --enable-ipv6-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv6-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6-ndp='false'" subsys=daemon level=info msg=" --enable-k8s='true'" subsys=daemon level=info msg=" --enable-k8s-api-discovery='false'" subsys=daemon level=info msg=" --enable-k8s-endpoint-slice='true'" subsys=daemon level=info msg=" --enable-k8s-event-handover='false'" subsys=daemon level=info msg=" --enable-k8s-networkpolicy='true'" subsys=daemon level=info msg=" --enable-k8s-terminating-endpoint='true'" subsys=daemon level=info msg=" --enable-l2-announcements='false'" subsys=daemon level=info msg=" --enable-l2-neigh-discovery='true'" subsys=daemon level=info msg=" --enable-l2-pod-announcements='false'" subsys=daemon level=info msg=" --enable-l7-proxy='true'" subsys=daemon level=info msg=" --enable-local-node-route='true'" subsys=daemon level=info msg=" --enable-local-redirect-policy='false'" subsys=daemon level=info msg=" --enable-mke='false'" subsys=daemon level=info msg=" --enable-monitor='true'" subsys=daemon level=info msg=" --enable-nat46x64-gateway='false'" subsys=daemon level=info msg=" --enable-node-port='false'" subsys=daemon level=info msg=" --enable-pmtu-discovery='false'" subsys=daemon level=info msg=" --enable-policy='default'" subsys=daemon level=info msg=" --enable-recorder='false'" subsys=daemon level=info msg=" --enable-remote-node-identity='true'" subsys=daemon level=info msg=" --enable-runtime-device-detection='false'" subsys=daemon level=info msg=" --enable-sctp='false'" subsys=daemon level=info msg=" --enable-service-topology='false'" subsys=daemon level=info msg=" --enable-session-affinity='false'" subsys=daemon level=info msg=" --enable-srv6='false'" subsys=daemon level=info msg=" --enable-stale-cilium-endpoint-cleanup='true'" subsys=daemon level=info msg=" --enable-svc-source-range-check='true'" subsys=daemon level=info msg=" --enable-tracing='false'" subsys=daemon level=info msg=" --enable-unreachable-routes='false'" subsys=daemon level=info msg=" --enable-vtep='false'" subsys=daemon level=info msg=" --enable-well-known-identities='false'" subsys=daemon level=info msg=" --enable-wireguard='false'" subsys=daemon level=info msg=" --enable-wireguard-userspace-fallback='false'" subsys=daemon level=info msg=" --enable-xdp-prefilter='false'" subsys=daemon level=info msg=" --enable-xt-socket-fallback='true'" subsys=daemon level=info msg=" --encrypt-interface=''" subsys=daemon level=info msg=" --encrypt-node='false'" subsys=daemon level=info msg=" --endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --endpoint-queue-size='25'" subsys=daemon level=info msg=" --endpoint-status=''" subsys=daemon level=info msg=" --envoy-config-timeout='2m0s'" subsys=daemon level=info msg=" --envoy-log=''" subsys=daemon level=info msg=" --exclude-local-address=''" subsys=daemon level=info msg=" --external-envoy-proxy='false'" subsys=daemon level=info msg=" --fixed-identity-mapping=''" subsys=daemon level=info msg=" --fqdn-regex-compile-lru-size='1024'" subsys=daemon level=info msg=" --gops-port='9890'" subsys=daemon level=info msg=" --http-403-msg=''" subsys=daemon level=info msg=" --http-idle-timeout='0'" subsys=daemon level=info msg=" --http-max-grpc-timeout='0'" subsys=daemon level=info msg=" --http-normalize-path='true'" subsys=daemon level=info msg=" --http-request-timeout='3600'" subsys=daemon level=info msg=" --http-retry-count='3'" subsys=daemon level=info msg=" --http-retry-timeout='0'" subsys=daemon level=info msg=" --hubble-disable-tls='false'" subsys=daemon level=info msg=" --hubble-event-buffer-capacity='4095'" subsys=daemon level=info msg=" --hubble-event-queue-size='0'" subsys=daemon level=info msg=" --hubble-export-file-compress='false'" subsys=daemon level=info msg=" --hubble-export-file-max-backups='5'" subsys=daemon level=info msg=" --hubble-export-file-max-size-mb='10'" subsys=daemon level=info msg=" --hubble-export-file-path=''" subsys=daemon level=info msg=" --hubble-listen-address=''" subsys=daemon level=info msg=" --hubble-metrics=''" subsys=daemon level=info msg=" --hubble-metrics-server=''" subsys=daemon level=info msg=" --hubble-monitor-events=''" subsys=daemon level=info msg=" --hubble-prefer-ipv6='false'" subsys=daemon level=info msg=" --hubble-recorder-sink-queue-size='1024'" subsys=daemon level=info msg=" --hubble-recorder-storage-path='/var/run/cilium/pcaps'" subsys=daemon level=info msg=" --hubble-skip-unknown-cgroup-ids='true'" subsys=daemon level=info msg=" --hubble-socket-path='/var/run/cilium/hubble.sock'" subsys=daemon level=info msg=" --hubble-tls-cert-file=''" subsys=daemon level=info msg=" --hubble-tls-client-ca-files=''" subsys=daemon level=info msg=" --hubble-tls-key-file=''" subsys=daemon level=info msg=" --identity-allocation-mode='crd'" subsys=daemon level=info msg=" --identity-change-grace-period='5s'" subsys=daemon level=info msg=" --identity-gc-interval='15m0s'" subsys=daemon level=info msg=" --identity-heartbeat-timeout='30m0s'" subsys=daemon level=info msg=" --identity-restore-grace-period='10m0s'" subsys=daemon level=info msg=" --install-egress-gateway-routes='false'" subsys=daemon level=info msg=" --install-iptables-rules='true'" subsys=daemon level=info msg=" --install-no-conntrack-iptables-rules='false'" subsys=daemon level=info msg=" --ip-allocation-timeout='2m0s'" subsys=daemon level=info msg=" --ip-masq-agent-config-path='/etc/config/ip-masq-agent'" subsys=daemon level=info msg=" --ipam='cluster-pool'" subsys=daemon level=info msg=" --ipam-cilium-node-update-rate='15s'" subsys=daemon level=info msg=" --ipam-multi-pool-pre-allocation='default=8'" subsys=daemon level=info msg=" --ipsec-key-file=''" subsys=daemon level=info msg=" --ipsec-key-rotation-duration='5m0s'" subsys=daemon level=info msg=" --iptables-lock-timeout='5s'" subsys=daemon level=info msg=" --iptables-random-fully='false'" subsys=daemon level=info msg=" --ipv4-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv4-node='auto'" subsys=daemon level=info msg=" --ipv4-pod-subnets=''" subsys=daemon level=info msg=" --ipv4-range='auto'" subsys=daemon level=info msg=" --ipv4-service-loopback-address='169.254.42.1'" subsys=daemon level=info msg=" --ipv4-service-range='auto'" subsys=daemon level=info msg=" --ipv6-cluster-alloc-cidr='f00d::/64'" subsys=daemon level=info msg=" --ipv6-mcast-device=''" subsys=daemon level=info msg=" --ipv6-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv6-node='auto'" subsys=daemon level=info msg=" --ipv6-pod-subnets=''" subsys=daemon level=info msg=" --ipv6-range='auto'" subsys=daemon level=info msg=" --ipv6-service-range='auto'" subsys=daemon level=info msg=" --join-cluster='false'" subsys=daemon level=info msg=" --k8s-api-server=''" subsys=daemon level=info msg=" --k8s-client-burst='10'" subsys=daemon level=info msg=" --k8s-client-qps='5'" subsys=daemon level=info msg=" --k8s-heartbeat-timeout='30s'" subsys=daemon level=info msg=" --k8s-kubeconfig-path=''" subsys=daemon level=info msg=" --k8s-namespace='kube-system'" subsys=daemon level=info msg=" --k8s-require-ipv4-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-require-ipv6-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-service-cache-size='128'" subsys=daemon level=info msg=" --k8s-service-proxy-name=''" subsys=daemon level=info msg=" --k8s-sync-timeout='3m0s'" subsys=daemon level=info msg=" --k8s-watcher-endpoint-selector='metadata.name!=kube-scheduler,metadata.name!=kube-controller-manager,metadata.name!=etcd-operator,metadata.name!=gcp-controller-manager'" subsys=daemon level=info msg=" --keep-config='false'" subsys=daemon level=info msg=" --kube-proxy-replacement='disabled'" subsys=daemon level=info msg=" --kube-proxy-replacement-healthz-bind-address=''" subsys=daemon level=info msg=" --kvstore=''" subsys=daemon level=info msg=" --kvstore-connectivity-timeout='2m0s'" subsys=daemon level=info msg=" --kvstore-lease-ttl='15m0s'" subsys=daemon level=info msg=" --kvstore-max-consecutive-quorum-errors='2'" subsys=daemon level=info msg=" --kvstore-opt=''" subsys=daemon level=info msg=" --kvstore-periodic-sync='5m0s'" subsys=daemon level=info msg=" --l2-announcements-lease-duration='15s'" subsys=daemon level=info msg=" --l2-announcements-renew-deadline='5s'" subsys=daemon level=info msg=" --l2-announcements-retry-period='2s'" subsys=daemon level=info msg=" --l2-pod-announcements-interface=''" subsys=daemon level=info msg=" --label-prefix-file=''" subsys=daemon level=info msg=" --labels=''" subsys=daemon level=info msg=" --lib-dir='/var/lib/cilium'" subsys=daemon level=info msg=" --local-max-addr-scope='252'" subsys=daemon level=info msg=" --local-router-ipv4=''" subsys=daemon level=info msg=" --local-router-ipv6=''" subsys=daemon level=info msg=" --log-driver=''" subsys=daemon level=info msg=" --log-opt=''" subsys=daemon level=info msg=" --log-system-load='false'" subsys=daemon level=info msg=" --max-controller-interval='0'" subsys=daemon level=info msg=" --mesh-auth-enabled='true'" subsys=daemon level=info msg=" --mesh-auth-gc-interval='5m0s'" subsys=daemon level=info msg=" --mesh-auth-mutual-listener-port='0'" subsys=daemon level=info msg=" --mesh-auth-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-rotated-identities-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-signal-backoff-duration='1s'" subsys=daemon level=info msg=" --mesh-auth-spiffe-trust-domain='spiffe.cilium'" subsys=daemon level=info msg=" --mesh-auth-spire-admin-socket=''" subsys=daemon level=info msg=" --metrics=''" subsys=daemon level=info msg=" --mke-cgroup-mount=''" subsys=daemon level=info msg=" --monitor-aggregation='medium'" subsys=daemon level=info msg=" --monitor-aggregation-flags='all'" subsys=daemon level=info msg=" --monitor-aggregation-interval='5s'" subsys=daemon level=info msg=" --monitor-queue-size='0'" subsys=daemon level=info msg=" --mtu='0'" subsys=daemon level=info msg=" --node-encryption-opt-out-labels='node-role.kubernetes.io/control-plane'" subsys=daemon level=info msg=" --node-port-acceleration='disabled'" subsys=daemon level=info msg=" --node-port-algorithm='random'" subsys=daemon level=info msg=" --node-port-bind-protection='true'" subsys=daemon level=info msg=" --node-port-mode='snat'" subsys=daemon level=info msg=" --node-port-range='30000,32767'" subsys=daemon level=info msg=" --nodes-gc-interval='5m0s'" subsys=daemon level=info msg=" --operator-api-serve-addr='127.0.0.1:9234'" subsys=daemon level=info msg=" --policy-audit-mode='false'" subsys=daemon level=info msg=" --policy-queue-size='100'" subsys=daemon level=info msg=" --policy-trigger-interval='1s'" subsys=daemon level=info msg=" --pprof='false'" subsys=daemon level=info msg=" --pprof-address='localhost'" subsys=daemon level=info msg=" --pprof-port='6060'" subsys=daemon level=info msg=" --preallocate-bpf-maps='false'" subsys=daemon level=info msg=" --prepend-iptables-chains='true'" subsys=daemon level=info msg=" --procfs='/host/proc'" subsys=daemon level=info msg=" --prometheus-serve-addr=':9962'" subsys=daemon level=info msg=" --proxy-connect-timeout='2'" subsys=daemon level=info msg=" --proxy-gid='1337'" subsys=daemon level=info msg=" --proxy-idle-timeout-seconds='60'" subsys=daemon level=info msg=" --proxy-max-connection-duration-seconds='0'" subsys=daemon level=info msg=" --proxy-max-requests-per-connection='0'" subsys=daemon level=info msg=" --proxy-prometheus-port='9964'" subsys=daemon level=info msg=" --read-cni-conf=''" subsys=daemon level=info msg=" --remove-cilium-node-taints='true'" subsys=daemon level=info msg=" --restore='true'" subsys=daemon level=info msg=" --route-metric='0'" subsys=daemon level=info msg=" --routing-mode='tunnel'" subsys=daemon level=info msg=" --set-cilium-is-up-condition='true'" subsys=daemon level=info msg=" --set-cilium-node-taints='true'" subsys=daemon level=info msg=" --sidecar-istio-proxy-image='cilium/istio_proxy'" subsys=daemon level=info msg=" --single-cluster-route='false'" subsys=daemon level=info msg=" --skip-cnp-status-startup-clean='false'" subsys=daemon level=info msg=" --socket-path='/var/run/cilium/cilium.sock'" subsys=daemon level=info msg=" --srv6-encap-mode='reduced'" subsys=daemon level=info msg=" --state-dir='/var/run/cilium'" subsys=daemon level=info msg=" --synchronize-k8s-nodes='true'" subsys=daemon level=info msg=" --tofqdns-dns-reject-response-code='refused'" subsys=daemon level=info msg=" --tofqdns-enable-dns-compression='true'" subsys=daemon level=info msg=" --tofqdns-endpoint-max-ip-per-hostname='50'" subsys=daemon level=info msg=" --tofqdns-idle-connection-grace-period='0s'" subsys=daemon level=info msg=" --tofqdns-max-deferred-connection-deletes='10000'" subsys=daemon level=info msg=" --tofqdns-min-ttl='0'" subsys=daemon level=info msg=" --tofqdns-pre-cache=''" subsys=daemon level=info msg=" --tofqdns-proxy-port='0'" subsys=daemon level=info msg=" --tofqdns-proxy-response-max-delay='100ms'" subsys=daemon level=info msg=" --trace-payloadlen='128'" subsys=daemon level=info msg=" --trace-sock='true'" subsys=daemon level=info msg=" --tunnel=''" subsys=daemon level=info msg=" --tunnel-port='6082'" subsys=daemon level=info msg=" --tunnel-protocol='geneve'" subsys=daemon level=info msg=" --unmanaged-pod-watcher-interval='15'" subsys=daemon level=info msg=" --use-cilium-internal-ip-for-ipsec='false'" subsys=daemon level=info msg=" --version='false'" subsys=daemon level=info msg=" --vlan-bpf-bypass=''" subsys=daemon level=info msg=" --vtep-cidr=''" subsys=daemon level=info msg=" --vtep-endpoint=''" subsys=daemon level=info msg=" --vtep-mac=''" subsys=daemon level=info msg=" --vtep-mask=''" subsys=daemon level=info msg=" --wireguard-encapsulate='false'" subsys=daemon level=info msg=" --write-cni-conf-when-ready='/host/etc/cni/net.d/05-cilium.conflist'" subsys=daemon level=info msg=" _ _ _" subsys=daemon level=info msg=" ___|_| |_|_ _ _____" subsys=daemon level=info msg="| _| | | | | | |" subsys=daemon level=info msg="|___|_|_|_|___|_|_|_|" subsys=daemon level=info msg="Cilium 1.14.8 cf6e022e 2024-03-13T12:23:35-04:00 go version go1.21.8 linux/amd64" subsys=daemon level=info msg="clang (10.0.0) and kernel (5.15.0) versions: OK!" subsys=linux-datapath level=info msg="linking environment: OK!" subsys=linux-datapath level=info msg="Kernel config file not found: if the agent fails to start, check the system requirements at https://docs.cilium.io/en/stable/operations/system_requirements" subsys=probes level=info msg="Detected mounted BPF filesystem at /sys/fs/bpf" subsys=bpf level=info msg="Mounted cgroupv2 filesystem at /run/cilium/cgroupv2" subsys=cgroups level=info msg="Parsing base label prefixes from default label list" subsys=labels-filter level=info msg="Parsing additional label prefixes from user inputs: []" subsys=labels-filter level=info msg="Final label prefixes to be used for identity evaluation:" subsys=labels-filter level=info msg=" - reserved:.*" subsys=labels-filter level=info msg=" - :io\\.kubernetes\\.pod\\.namespace" subsys=labels-filter level=info msg=" - :io\\.cilium\\.k8s\\.namespace\\.labels" subsys=labels-filter level=info msg=" - :app\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:io\\.kubernetes" subsys=labels-filter level=info msg=" - !:kubernetes\\.io" subsys=labels-filter level=info msg=" - !:.*beta\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:k8s\\.io" subsys=labels-filter level=info msg=" - !:pod-template-generation" subsys=labels-filter level=info msg=" - !:pod-template-hash" subsys=labels-filter level=info msg=" - !:controller-revision-hash" subsys=labels-filter level=info msg=" - !:annotation.*" subsys=labels-filter level=info msg=" - !:etcd_node" subsys=labels-filter level=info msg=Invoked duration=1.239695ms function="pprof.glob..func1 (cell.go:50)" subsys=hive level=info msg=Invoked duration="63.191µs" function="gops.registerGopsHooks (cell.go:38)" subsys=hive level=info msg=Invoked duration=1.46751ms function="metrics.NewRegistry (registry.go:65)" subsys=hive level=info msg=Invoked duration="6.84µs" function="metrics.glob..func1 (cell.go:12)" subsys=hive level=info msg="Spire Delegate API Client is disabled as no socket path is configured" subsys=spire-delegate level=info msg="Mutual authentication handler is disabled as no port is configured" subsys=auth level=info msg=Invoked duration=98.402326ms function="cmd.glob..func4 (daemon_main.go:1607)" subsys=hive level=info msg=Invoked duration="12.33µs" function="gc.registerSignalHandler (cell.go:47)" subsys=hive level=info msg=Invoked duration="16.35µs" function="utime.initUtimeSync (cell.go:29)" subsys=hive level=info msg=Invoked duration="95.362µs" function="agentliveness.newAgentLivenessUpdater (agent_liveness.go:43)" subsys=hive level=info msg=Invoked duration="64.521µs" function="l2responder.NewL2ResponderReconciler (l2responder.go:63)" subsys=hive level=info msg=Invoked duration="79.812µs" function="garp.newGARPProcessor (processor.go:27)" subsys=hive level=info msg=Starting subsys=hive level=info msg="Started gops server" address="127.0.0.1:9890" subsys=gops level=info msg="Start hook executed" duration="474.913µs" function="gops.registerGopsHooks.func1 (cell.go:43)" subsys=hive level=info msg="Start hook executed" duration="5.97µs" function="metrics.NewRegistry.func1 (registry.go:86)" subsys=hive level=info msg="Establishing connection to apiserver" host="https://10.96.0.1:443" subsys=k8s-client level=info msg="Serving prometheus metrics on :9962" subsys=metrics level=info msg="Connected to apiserver" subsys=k8s-client level=info msg="Start hook executed" duration=10.379537ms function="client.(*compositeClientset).onStart" subsys=hive level=info msg="Start hook executed" duration=6.45316ms function="authmap.newAuthMap.func1 (cell.go:27)" subsys=hive level=info msg="Start hook executed" duration="181.845µs" function="configmap.newMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="110.933µs" function="signalmap.newMap.func1 (cell.go:44)" subsys=hive level=info msg="Start hook executed" duration="310.369µs" function="nodemap.newNodeMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="144.044µs" function="eventsmap.newEventsMap.func1 (cell.go:35)" subsys=hive level=info msg="Start hook executed" duration="152.524µs" function="*cni.cniConfigManager.Start" subsys=hive level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Wrote CNI configuration file to /host/etc/cni/net.d/05-cilium.conflist" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Start hook executed" duration=92.839762ms function="datapath.newDatapath.func1 (cells.go:113)" subsys=hive level=info msg="Restored 0 node IDs from the BPF map" subsys=linux-datapath level=info msg="Start hook executed" duration="109.123µs" function="datapath.newDatapath.func2 (cells.go:126)" subsys=hive level=info msg="Start hook executed" duration="15.08µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Node].Start" subsys=hive level=info msg="Start hook executed" duration="2.55µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNode].Start" subsys=hive level=info msg="Using autogenerated IPv4 allocation range" subsys=node v4Prefix=10.111.0.0/16 level=info msg="no local ciliumnode found, will not restore cilium internal ips from k8s" subsys=daemon level=info msg="Start hook executed" duration=104.113437ms function="node.NewLocalNodeStore.func1 (local_node_store.go:76)" subsys=hive level=info msg="Start hook executed" duration="9.97µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration=100.570635ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration="3.2µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Using discoveryv1.EndpointSlice" subsys=k8s level=info msg="Start hook executed" duration=101.04309ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Start hook executed" duration="5.9µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Pod].Start" subsys=hive level=info msg="Start hook executed" duration="14.68µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Namespace].Start" subsys=hive level=info msg="Start hook executed" duration="1.95µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="2.761µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumClusterwideNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="1.87µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumCIDRGroup].Start" subsys=hive level=info msg="Start hook executed" duration="28.111µs" function="endpointmanager.newDefaultEndpointManager.func1 (cell.go:203)" subsys=hive level=info msg="Start hook executed" duration="54.702µs" function="cmd.newPolicyTrifecta.func1 (policy.go:135)" subsys=hive level=info msg="Start hook executed" duration="89.802µs" function="*manager.manager.Start" subsys=hive level=info msg="Serving cilium node monitor v1.2 API at unix:///var/run/cilium/monitor1_2.sock" subsys=monitor-agent level=info msg="Start hook executed" duration="433.112µs" function="agent.newMonitorAgent.func1 (cell.go:61)" subsys=hive level=info msg="Start hook executed" duration="4.14µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumL2AnnouncementPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="43.521µs" function="*job.group.Start" subsys=hive level=info msg="Start hook executed" duration="361.36µs" function="proxy.newProxy.func1 (cell.go:55)" subsys=hive level=info msg="Envoy: Starting xDS gRPC server listening on /var/run/cilium/envoy/sockets/xds.sock" subsys=envoy-manager level=info msg="Start hook executed" duration="990.968µs" function="signal.provideSignalManager.func1 (cell.go:25)" subsys=hive level=info msg="Datapath signal listener running" subsys=signal level=info msg="Start hook executed" duration="880.424µs" function="auth.registerAuthManager.func1 (cell.go:109)" subsys=hive level=info msg="Start hook executed" duration="3.08µs" function="auth.registerGCJobs.func1 (cell.go:158)" subsys=hive level=info msg="Start hook executed" duration="26.201µs" function="*job.group.Start" subsys=hive level=warning msg="Deprecated value for --kube-proxy-replacement: disabled (use either \"true\", or \"false\")" subsys=daemon level=info msg="Auto-disabling \"enable-node-port\", \"enable-external-ips\", \"bpf-lb-sock\", \"enable-host-port\" features and falling back to \"enable-host-legacy-routing\"" subsys=daemon level=info msg="Inheriting MTU from external network interface" device=ens3 ipAddr=199.19.213.111 mtu=1500 subsys=mtu level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_ipcache, recreating and re-pinning map cilium_ipcache" file-path=/sys/fs/bpf/tc/globals/cilium_ipcache name=cilium_ipcache subsys=bpf level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_tunnel_map, recreating and re-pinning map cilium_tunnel_map" file-path=/sys/fs/bpf/tc/globals/cilium_tunnel_map name=cilium_tunnel_map subsys=bpf level=info msg="Restored services from maps" failedServices=0 restoredServices=0 subsys=service level=info msg="Restored backends from maps" failedBackends=0 restoredBackends=0 skippedBackends=0 subsys=service level=info msg="Reading old endpoints..." subsys=daemon level=info msg="No old endpoints found." subsys=daemon level=info msg="Waiting until all Cilium CRDs are available" subsys=k8s level=info msg="All Cilium CRDs have been found and are available" subsys=k8s level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=info msg="Successfully created CiliumNode resource" subsys=nodediscovery level=warning msg="Unable to create CiliumNode resource, will retry" error="ciliumnodes.cilium.io \"instance\" already exists" subsys=nodediscovery level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=warning msg="Waiting for k8s node information" error="required IPv4 PodCIDR not available" subsys=k8s level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=info msg="Received own node information from API server" ipAddr.ipv4=199.19.213.111 ipAddr.ipv6="" k8sNodeIP=199.19.213.111 labels="map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:]" nodeName=instance subsys=k8s v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="k8s mode: Allowing localhost to reach local endpoints" subsys=daemon level=info msg="Detected devices" devices="[]" subsys=linux-datapath level=info msg="Enabling k8s event listener" subsys=k8s-watcher level=info msg="Removing stale endpoint interfaces" subsys=daemon level=info msg="Waiting until local node addressing before starting watchers depending on it" subsys=k8s-watcher level=info msg="Skipping kvstore configuration" subsys=daemon level=info msg="Initializing node addressing" subsys=daemon level=info msg="Initializing cluster-pool IPAM" subsys=ipam v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="Restoring endpoints..." subsys=daemon level=info msg="Endpoints restored" failed=0 restored=0 subsys=daemon level=info msg="Addressing information:" subsys=daemon level=info msg=" Cluster-Name: default" subsys=daemon level=info msg=" Cluster-ID: 0" subsys=daemon level=info msg=" Local node-name: instance" subsys=daemon level=info msg=" Node-IPv6: " subsys=daemon level=info msg=" External-Node IPv4: 199.19.213.111" subsys=daemon level=info msg=" Internal-Node IPv4: 10.0.0.32" subsys=daemon level=info msg=" IPv4 allocation prefix: 10.0.0.0/24" subsys=daemon level=info msg=" Loopback IPv4: 169.254.42.1" subsys=daemon level=info msg=" Local IPv4 addresses:" subsys=daemon level=info msg=" - 199.19.213.111" subsys=daemon level=info msg=" - 172.17.0.100" subsys=daemon level=info msg=" - 10.96.240.200" subsys=daemon level=info msg="Node updated" clusterName=default nodeName=instance subsys=nodemanager level=info msg="Adding local node to cluster" node="{instance default [{InternalIP 199.19.213.111} {CiliumInternalIP 10.0.0.32}] 10.0.0.0/24 [] [] 10.0.0.251 0 local 0 map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:] map[] 1 }" subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Waiting until all pre-existing resources have been received" subsys=k8s-watcher level=info msg="Initializing identity allocator" subsys=identity-cache level=info msg="Allocating identities between range" cluster-id=0 max=65535 min=256 subsys=identity-cache level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.core.bpf_jit_enable sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.all.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.fib_multipath_use_neigh sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.unprivileged_bpf_disabled sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.timer_migration sysParamValue=0 level=info msg="Setting up BPF datapath" bpfClockSource=ktime bpfInsnSet="" subsys=datapath-loader level=info msg="Iptables rules installed" subsys=iptables level=info msg="Adding new proxy port rules for cilium-dns-egress:34719" id=cilium-dns-egress subsys=proxy level=info msg="Iptables proxy rules installed" subsys=iptables level=info msg="Start hook executed" duration=2.90783916s function="cmd.newDaemonPromise.func1 (daemon_main.go:1663)" subsys=hive level=info msg="Starting IP identity watcher" subsys=ipcache level=info msg="Start hook executed" duration="21.771µs" function="utime.initUtimeSync.func1 (cell.go:33)" subsys=hive level=info msg="Initializing daemon" subsys=daemon level=info msg="Validating configured node address ranges" subsys=daemon level=info msg="Starting connection tracking garbage collector" subsys=daemon level=info msg="Start hook executed" duration="8.03µs" function="*job.group.Start" subsys=hive level=info msg="Start hook executed" duration="79.632µs" function="l2respondermap.newMap.func1 (l2_responder_map4.go:44)" subsys=hive level=info msg="Start hook executed" duration="17.921µs" function="*job.group.Start" subsys=hive level=info msg="Initial scan of connection tracking completed" subsys=ct-gc level=info msg="Regenerating restored endpoints" numRestored=0 subsys=daemon level=info msg="Creating host endpoint" subsys=daemon level=info msg="Finished regenerating restored endpoints" regenerated=0 subsys=daemon total=0 level=info msg="Deleted orphan backends" orphanBackends=0 subsys=service level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=473 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=473 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=473 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Launching Cilium health daemon" subsys=daemon level=info msg="Launching Cilium health endpoint" subsys=daemon level=info msg="Started healthz status API server" address="127.0.0.1:9879" subsys=daemon level=info msg="Processing queued endpoint deletion requests from /var/run/cilium/deleteQueue" subsys=daemon level=info msg="processing 0 queued deletion requests" subsys=daemon level=info msg="Initializing Cilium API" subsys=daemon level=info msg="Daemon initialization completed" bootstrapTime=3.947471429s subsys=daemon level=info msg="Hubble server is disabled" subsys=hubble level=info msg="Serving cilium API at unix:///var/run/cilium/cilium.sock" subsys=daemon level=info msg="Compiled new BPF template" BPFCompilationTime=299.239602ms file-path=/var/run/cilium/state/templates/dcc005f0a6d9e8b773d0e8747a53a53e2b455b9857bb7dcd54a2c0e6325c9292/bpf_host.o subsys=datapath-loader level=info msg="Create endpoint request" addressing="&{10.0.0.179 c4ee10f4-976b-426c-b2c8-790ca4b9a157 default }" containerID=294fe60fefa77c62ccf7211d414335363e6ea7a2a4016ab19df740ace675abf3 datapathConfiguration="&{false false false false false }" interface=lxcf37f4622a647 k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-z9w2m labels="[]" subsys=daemon sync-build=true level=info msg="Create endpoint request" addressing="&{10.0.0.128 e92745ce-9d97-4680-91bb-26076a4d73cd default }" containerID=29296a43297faf3bdc7a056416b0d7e39720888413d77fc1fae0f9686544dbea datapathConfiguration="&{false false false false false }" interface=lxc1c14af4df1a5 k8sPodName=kube-system/coredns-7c96b6546b-49jd9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=294fe60fef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2839 ipv4=10.0.0.179 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-z9w2m subsys=endpoint level=info msg="New endpoint" containerID=29296a4329 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3074 ipv4=10.0.0.128 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-49jd9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=29296a4329 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3074 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.128 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-49jd9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:kube-system]" subsys=crd-allocator level=info msg="Resolving identity labels (blocking)" containerID=294fe60fef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2839 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=a43a6f2b-080b-4562-9a7e-85ecf892eef4,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=a43a6f2b-080b-4562-9a7e-85ecf892eef4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.179 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-z9w2m subsys=endpoint level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=coredns;k8s:io.kubernetes.pod.namespace=kube-system;k8s:k8s-app=kube-dns;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=29296a4329 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3074 identity=1677 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.128 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-49jd9 oldIdentity="no identity" subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="Waiting for endpoint to be generated" containerID=29296a4329 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3074 identity=1677 ipv4=10.0.0.128 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-49jd9 subsys=endpoint level=info msg="Invalid state transition skipped" containerID=294fe60fef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2839 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.179 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-z9w2m line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=certgen;k8s:batch.kubernetes.io/controller-uid=a43a6f2b-080b-4562-9a7e-85ecf892eef4;k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen;k8s:controller-uid=a43a6f2b-080b-4562-9a7e-85ecf892eef4;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;k8s:job-name=envoy-gateway-gateway-helm-certgen;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=294fe60fef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2839 identity=19836 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=a43a6f2b-080b-4562-9a7e-85ecf892eef4,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=a43a6f2b-080b-4562-9a7e-85ecf892eef4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.179 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-z9w2m oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=294fe60fef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2839 identity=19836 ipv4=10.0.0.179 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-z9w2m subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=473 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1785 ipv4=10.0.0.251 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1785 identityLabels="reserved:health" ipv4=10.0.0.251 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1785 identity=4 identityLabels="reserved:health" ipv4=10.0.0.251 ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Compiled new BPF template" BPFCompilationTime=1.100938489s file-path=/var/run/cilium/state/templates/a1ee53cc869c955383d45b8c78ce7f2d65241bb3442f877791c893b86a91220c/bpf_lxc.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID=29296a4329 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3074 identity=1677 ipv4=10.0.0.128 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-49jd9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=29296a4329 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3074 identity=1677 ipv4=10.0.0.128 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-49jd9 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=294fe60fef datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2839 identity=19836 ipv4=10.0.0.179 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-z9w2m subsys=endpoint level=info msg="Successful endpoint creation" containerID=294fe60fef datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2839 identity=19836 ipv4=10.0.0.179 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-z9w2m subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1785 identity=4 ipv4=10.0.0.251 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Serving cilium health API at unix:///var/run/cilium/health.sock" subsys=health-server level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=294fe60fef endpointID=2839 k8sNamespace=envoy-gateway-system k8sPodName=envoy-gateway-gateway-helm-certgen-z9w2m subsys=daemon level=info msg="Releasing key" key="[k8s:app=certgen k8s:batch.kubernetes.io/controller-uid=a43a6f2b-080b-4562-9a7e-85ecf892eef4 k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen k8s:controller-uid=a43a6f2b-080b-4562-9a7e-85ecf892eef4 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen k8s:io.kubernetes.pod.namespace=envoy-gateway-system k8s:job-name=envoy-gateway-gateway-helm-certgen]" subsys=allocator level=info msg="Removed endpoint" containerID=294fe60fef datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2839 identity=19836 ipv4=10.0.0.179 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-z9w2m subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.198 96bcb388-6988-4e6e-970f-0f8d40e47b22 default }" containerID=72771e3934f74ec82d6c28cd88605161957ab9f332170a12e0b2e1ecb662c83f datapathConfiguration="&{false false false false false }" interface=lxc722287e6c451 k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-cm28t labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=72771e3934 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=47 ipv4=10.0.0.198 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-cm28t subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=72771e3934 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=47 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.198 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-cm28t subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=72771e3934 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=47 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.198 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-cm28t line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=envoy-gateway;k8s:app.kubernetes.io/name=gateway-helm;k8s:control-plane=envoy-gateway;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=72771e3934 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=47 identity=15025 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.198 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-cm28t oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=72771e3934 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=47 identity=15025 ipv4=10.0.0.198 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-cm28t subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=72771e3934 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=47 identity=15025 ipv4=10.0.0.198 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-cm28t subsys=endpoint level=info msg="Successful endpoint creation" containerID=72771e3934 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=47 identity=15025 ipv4=10.0.0.198 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-cm28t subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=473 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_00473 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_00473 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_00473 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_00473:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=473 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.179 73d31b99-1a23-464f-ab06-0fdd483a16cc default }" containerID=ffd904e24ac945b07215791cc08ee21086bb4eeb195a560e8bfdcbf90f2adf82 datapathConfiguration="&{false false false false false }" interface=lxc74eb21f47302 k8sPodName=kube-system/coredns-67659f764b-gg2fw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ffd904e24a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1991 ipv4=10.0.0.179 ipv6= k8sPodName=kube-system/coredns-67659f764b-gg2fw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ffd904e24a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1991 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.179 ipv6= k8sPodName=kube-system/coredns-67659f764b-gg2fw subsys=endpoint level=info msg="Identity of endpoint changed" containerID=ffd904e24a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1991 identity=1677 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.179 ipv6= k8sPodName=kube-system/coredns-67659f764b-gg2fw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ffd904e24a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1991 identity=1677 ipv4=10.0.0.179 ipv6= k8sPodName=kube-system/coredns-67659f764b-gg2fw subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.95 16e47965-def6-4d1e-b272-5cd2adf783d4 default }" containerID=a3d8923415080982e9446569fcabf18fa2fe8c81843829dda55064efa371d743 datapathConfiguration="&{false false false false false }" interface=lxc6860c1d91bc1 k8sPodName=kube-system/coredns-67659f764b-psf4d labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a3d8923415 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=985 ipv4=10.0.0.95 ipv6= k8sPodName=kube-system/coredns-67659f764b-psf4d subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a3d8923415 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=985 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.95 ipv6= k8sPodName=kube-system/coredns-67659f764b-psf4d subsys=endpoint level=info msg="Identity of endpoint changed" containerID=a3d8923415 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=985 identity=1677 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.95 ipv6= k8sPodName=kube-system/coredns-67659f764b-psf4d oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a3d8923415 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=985 identity=1677 ipv4=10.0.0.95 ipv6= k8sPodName=kube-system/coredns-67659f764b-psf4d subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a3d8923415 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=985 identity=1677 ipv4=10.0.0.95 ipv6= k8sPodName=kube-system/coredns-67659f764b-psf4d subsys=endpoint level=info msg="Successful endpoint creation" containerID=a3d8923415 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=985 identity=1677 ipv4=10.0.0.95 ipv6= k8sPodName=kube-system/coredns-67659f764b-psf4d subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=ffd904e24a datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1991 identity=1677 ipv4=10.0.0.179 ipv6= k8sPodName=kube-system/coredns-67659f764b-gg2fw subsys=endpoint level=info msg="Successful endpoint creation" containerID=ffd904e24a datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1991 identity=1677 ipv4=10.0.0.179 ipv6= k8sPodName=kube-system/coredns-67659f764b-gg2fw subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.162 c3d24fc9-d339-46ee-aa0b-fe468258af45 default }" containerID=2e851ddb8e39f6e50d6da9f5b68349e536c19a54f8c2937bd500cc0276f216dd datapathConfiguration="&{false false false false false }" interface=lxcb6f900c8bb59 k8sPodName=local-path-storage/local-path-provisioner-679c578f5-7fcc2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2e851ddb8e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1332 ipv4=10.0.0.162 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-7fcc2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2e851ddb8e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1332 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.162 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-7fcc2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=2e851ddb8e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1332 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.162 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-7fcc2 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=local-path-provisioner;k8s:app.kubernetes.io/name=local-path-provisioner;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2e851ddb8e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1332 identity=4455 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.162 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-7fcc2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2e851ddb8e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1332 identity=4455 ipv4=10.0.0.162 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-7fcc2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2e851ddb8e datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1332 identity=4455 ipv4=10.0.0.162 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-7fcc2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=2e851ddb8e datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1332 identity=4455 ipv4=10.0.0.162 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-7fcc2 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=29296a4329 endpointID=3074 k8sNamespace=kube-system k8sPodName=coredns-7c96b6546b-49jd9 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=coredns k8s:io.kubernetes.pod.namespace=kube-system k8s:k8s-app=kube-dns]" subsys=allocator level=info msg="Removed endpoint" containerID=29296a4329 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3074 identity=1677 ipv4=10.0.0.128 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-49jd9 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.93 ee4fe2ff-2038-439b-9ac9-08ce41e87a97 default }" containerID=3618e3884ab18b4aec330583f9d1a03368018ae4a1874e095bb73481c72a18c8 datapathConfiguration="&{false false false false false }" interface=lxcada00891e25a k8sPodName=cert-manager/cert-manager-webhook-7d6b59cfdc-tqh67 labels="[]" subsys=daemon sync-build=true level=info msg="Create endpoint request" addressing="&{10.0.0.11 65ae7ba9-cef8-4c2d-8c6a-5a29d8731d83 default }" containerID=c9d07ba918d86b9d3b5b84ee7ee142f79ae4836f8e0050efa4720c51f9082d2a datapathConfiguration="&{false false false false false }" interface=lxc7b6ae124515d k8sPodName=cert-manager/cert-manager-79c48d47db-24wv6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3618e3884a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1677 ipv4=10.0.0.93 ipv6= k8sPodName=cert-manager/cert-manager-webhook-7d6b59cfdc-tqh67 subsys=endpoint level=info msg="New endpoint" containerID=c9d07ba918 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2629 ipv4=10.0.0.11 ipv6= k8sPodName=cert-manager/cert-manager-79c48d47db-24wv6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.48 b3823e83-f30f-4f42-bd48-826f1b8f4216 default }" containerID=262d5d060d7c94ca8b5c8995631c9164f8e5e0ddc0099d4b934c87d66bc47000 datapathConfiguration="&{false false false false false }" interface=lxc722fdd2f2be3 k8sPodName=cert-manager/cert-manager-cainjector-579c9dd7cd-57986 labels="[]" subsys=daemon sync-build=true level=info msg="Resolving identity labels (blocking)" containerID=3618e3884a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1677 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.15.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.15.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.93 ipv6= k8sPodName=cert-manager/cert-manager-webhook-7d6b59cfdc-tqh67 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c9d07ba918 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2629 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.15.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.15.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.11 ipv6= k8sPodName=cert-manager/cert-manager-79c48d47db-24wv6 subsys=endpoint level=info msg="New endpoint" containerID=262d5d060d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=281 ipv4=10.0.0.48 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-579c9dd7cd-57986 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Resolving identity labels (blocking)" containerID=262d5d060d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=281 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.15.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.15.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.48 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-579c9dd7cd-57986 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app=webhook;k8s:app.kubernetes.io/component=webhook;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=webhook;k8s:app.kubernetes.io/version=v1.15.5;k8s:helm.sh/chart=cert-manager-v1.15.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=262d5d060d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=281 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.48 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-579c9dd7cd-57986 line=611 subsys=endpoint level=info msg="Invalid state transition skipped" containerID=c9d07ba918 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2629 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.11 ipv6= k8sPodName=cert-manager/cert-manager-79c48d47db-24wv6 line=611 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Identity of endpoint changed" containerID=3618e3884a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1677 identity=42110 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.15.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.15.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.93 ipv6= k8sPodName=cert-manager/cert-manager-webhook-7d6b59cfdc-tqh67 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3618e3884a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1677 identity=42110 ipv4=10.0.0.93 ipv6= k8sPodName=cert-manager/cert-manager-webhook-7d6b59cfdc-tqh67 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=cert-manager;k8s:app.kubernetes.io/component=controller;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cert-manager;k8s:app.kubernetes.io/version=v1.15.5;k8s:helm.sh/chart=cert-manager-v1.15.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c9d07ba918 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2629 identity=27911 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.15.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.15.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.11 ipv6= k8sPodName=cert-manager/cert-manager-79c48d47db-24wv6 oldIdentity="no identity" subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Waiting for endpoint to be generated" containerID=c9d07ba918 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2629 identity=27911 ipv4=10.0.0.11 ipv6= k8sPodName=cert-manager/cert-manager-79c48d47db-24wv6 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=cainjector;k8s:app.kubernetes.io/component=cainjector;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cainjector;k8s:app.kubernetes.io/version=v1.15.5;k8s:helm.sh/chart=cert-manager-v1.15.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=262d5d060d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=281 identity=24356 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.15.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.15.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.48 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-579c9dd7cd-57986 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=262d5d060d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=281 identity=24356 ipv4=10.0.0.48 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-579c9dd7cd-57986 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c9d07ba918 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2629 identity=27911 ipv4=10.0.0.11 ipv6= k8sPodName=cert-manager/cert-manager-79c48d47db-24wv6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=c9d07ba918 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2629 identity=27911 ipv4=10.0.0.11 ipv6= k8sPodName=cert-manager/cert-manager-79c48d47db-24wv6 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=3618e3884a datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1677 identity=42110 ipv4=10.0.0.93 ipv6= k8sPodName=cert-manager/cert-manager-webhook-7d6b59cfdc-tqh67 subsys=endpoint level=info msg="Successful endpoint creation" containerID=3618e3884a datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1677 identity=42110 ipv4=10.0.0.93 ipv6= k8sPodName=cert-manager/cert-manager-webhook-7d6b59cfdc-tqh67 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=262d5d060d datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=281 identity=24356 ipv4=10.0.0.48 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-579c9dd7cd-57986 subsys=endpoint level=info msg="Successful endpoint creation" containerID=262d5d060d datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=281 identity=24356 ipv4=10.0.0.48 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-579c9dd7cd-57986 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.19 fa2745aa-f082-47ed-a558-25d72cd1ff8a default }" containerID=84775101042c268965125c327cf4718302933502ffa26df9e8694a47a7154b41 datapathConfiguration="&{false false false false false }" interface=lxcddf2839e1cfd k8sPodName=cert-manager/cert-manager-startupapicheck-bnzg4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8477510104 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3964 ipv4=10.0.0.19 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-bnzg4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8477510104 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3964 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.15.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=a4e4a94f-7029-4ce4-a139-995da8036eed,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=a4e4a94f-7029-4ce4-a139-995da8036eed,k8s:helm.sh/chart=cert-manager-v1.15.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.19 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-bnzg4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=startupapicheck;k8s:app.kubernetes.io/component=startupapicheck;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=startupapicheck;k8s:app.kubernetes.io/version=v1.15.5;k8s:batch.kubernetes.io/controller-uid=a4e4a94f-7029-4ce4-a139-995da8036eed;k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck;k8s:controller-uid=a4e4a94f-7029-4ce4-a139-995da8036eed;k8s:helm.sh/chart=cert-manager-v1.15.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck;k8s:io.kubernetes.pod.namespace=cert-manager;k8s:job-name=cert-manager-startupapicheck;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8477510104 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3964 identity=1079 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.15.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=a4e4a94f-7029-4ce4-a139-995da8036eed,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=a4e4a94f-7029-4ce4-a139-995da8036eed,k8s:helm.sh/chart=cert-manager-v1.15.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.19 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-bnzg4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8477510104 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3964 identity=1079 ipv4=10.0.0.19 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-bnzg4 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8477510104 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3964 identity=1079 ipv4=10.0.0.19 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-bnzg4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=8477510104 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3964 identity=1079 ipv4=10.0.0.19 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-bnzg4 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=8477510104 endpointID=3964 k8sNamespace=cert-manager k8sPodName=cert-manager-startupapicheck-bnzg4 subsys=daemon level=info msg="Releasing key" key="[k8s:app=startupapicheck k8s:app.kubernetes.io/component=startupapicheck k8s:app.kubernetes.io/instance=cert-manager k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=startupapicheck k8s:app.kubernetes.io/version=v1.15.5 k8s:batch.kubernetes.io/controller-uid=a4e4a94f-7029-4ce4-a139-995da8036eed k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck k8s:controller-uid=a4e4a94f-7029-4ce4-a139-995da8036eed k8s:helm.sh/chart=cert-manager-v1.15.5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager k8s:io.cilium.k8s.namespace.labels.name=cert-manager k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck k8s:io.kubernetes.pod.namespace=cert-manager k8s:job-name=cert-manager-startupapicheck]" subsys=allocator level=info msg="Removed endpoint" containerID=8477510104 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3964 identity=1079 ipv4=10.0.0.19 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-bnzg4 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.13 004d5c93-09b8-465f-beb3-68b4b3d75fd5 default }" containerID=3ac45e7f6e4b1e55651fe39f008d4090608091fe5b4db4efedcd5f6b6684d114 datapathConfiguration="&{false false false false false }" interface=lxcf755b574ec7d k8sPodName=ingress-nginx/ingress-nginx-admission-create-2cpj5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3ac45e7f6e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2526 ipv4=10.0.0.13 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-2cpj5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3ac45e7f6e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2526 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=d1daa313-c73c-4a89-9336-505886a9d73c,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=d1daa313-c73c-4a89-9336-505886a9d73c,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.13 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-2cpj5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=3ac45e7f6e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2526 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.13 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-2cpj5 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=d1daa313-c73c-4a89-9336-505886a9d73c;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create;k8s:controller-uid=d1daa313-c73c-4a89-9336-505886a9d73c;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-create;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3ac45e7f6e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2526 identity=34631 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=d1daa313-c73c-4a89-9336-505886a9d73c,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=d1daa313-c73c-4a89-9336-505886a9d73c,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.13 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-2cpj5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3ac45e7f6e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2526 identity=34631 ipv4=10.0.0.13 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-2cpj5 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3ac45e7f6e datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2526 identity=34631 ipv4=10.0.0.13 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-2cpj5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=3ac45e7f6e datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2526 identity=34631 ipv4=10.0.0.13 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-2cpj5 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=3ac45e7f6e endpointID=2526 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-create-2cpj5 subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=d1daa313-c73c-4a89-9336-505886a9d73c k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create k8s:controller-uid=d1daa313-c73c-4a89-9336-505886a9d73c k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-create]" subsys=allocator level=info msg="Removed endpoint" containerID=3ac45e7f6e datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2526 identity=34631 ipv4=10.0.0.13 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-2cpj5 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.63 ad3c3da2-a97a-4e3b-a048-f4e8bc5856bf default }" containerID=5f5f76c8ae1e587577f9b5d2c7b73eb2b861525b52b33e5f6796afd86acd3001 datapathConfiguration="&{false false false false false }" interface=lxce5947091f4d5 k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-c72nd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5f5f76c8ae datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=743 ipv4=10.0.0.63 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-c72nd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5f5f76c8ae datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=743 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.63 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-c72nd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=5f5f76c8ae datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=743 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.63 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-c72nd line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=default-backend;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend;k8s:io.kubernetes.pod.namespace=ingress-nginx;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5f5f76c8ae datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=743 identity=25028 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.63 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-c72nd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5f5f76c8ae datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=743 identity=25028 ipv4=10.0.0.63 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-c72nd subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5f5f76c8ae datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=743 identity=25028 ipv4=10.0.0.63 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-c72nd subsys=endpoint level=info msg="Successful endpoint creation" containerID=5f5f76c8ae datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=743 identity=25028 ipv4=10.0.0.63 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-c72nd subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.62 d67144e9-ffa7-4a8d-92e6-bd03f970ff9a default }" containerID=12294f0571f1769f37251d1c44aeb908608ed94c220dfd4c9137e1d2f2891998 datapathConfiguration="&{false false false false false }" interface=lxc18684bc09106 k8sPodName=ingress-nginx/ingress-nginx-admission-patch-pmnrt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=12294f0571 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4051 ipv4=10.0.0.62 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-pmnrt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=12294f0571 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4051 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=684b628b-703e-475e-b99b-c88e0117c3d0,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=684b628b-703e-475e-b99b-c88e0117c3d0,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.62 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-pmnrt subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=684b628b-703e-475e-b99b-c88e0117c3d0;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch;k8s:controller-uid=684b628b-703e-475e-b99b-c88e0117c3d0;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-patch;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=12294f0571 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4051 identity=50957 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=684b628b-703e-475e-b99b-c88e0117c3d0,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=684b628b-703e-475e-b99b-c88e0117c3d0,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.62 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-pmnrt oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=12294f0571 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4051 identity=50957 ipv4=10.0.0.62 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-pmnrt subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=12294f0571 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=4051 identity=50957 ipv4=10.0.0.62 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-pmnrt subsys=endpoint level=info msg="Successful endpoint creation" containerID=12294f0571 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=4051 identity=50957 ipv4=10.0.0.62 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-pmnrt subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=12294f0571 endpointID=4051 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-patch-pmnrt subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=684b628b-703e-475e-b99b-c88e0117c3d0 k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch k8s:controller-uid=684b628b-703e-475e-b99b-c88e0117c3d0 k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-patch]" subsys=allocator level=info msg="Removed endpoint" containerID=12294f0571 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=4051 identity=50957 ipv4=10.0.0.62 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-pmnrt subsys=endpoint level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"messaging-topology-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9443 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-messaging-topology-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=e2b7a8da-124d-4bee-b174-4249b972fb92] Description:}]" policyAddRequest=7fc24159-5794-404f-97ce-333752f61ba8 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=7fc24159-5794-404f-97ce-333752f61ba8 policyRevision=2 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-messaging-topology-operator subsys=k8s-watcher level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"rabbitmq-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-cluster-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=07e06a1e-c1a1-44f3-802e-0eef12052f30] Description:}]" policyAddRequest=a89bee7c-f41e-4ab6-83f9-052068fe3130 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=a89bee7c-f41e-4ab6-83f9-052068fe3130 policyRevision=3 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-cluster-operator subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.83 49e9db34-910d-46f0-9028-3a5176dbdbfc default }" containerID=d9037f90e08942f45fdbbf6e94460a6914845d9412b13c7ee2d2596159fc82aa datapathConfiguration="&{false false false false false }" interface=lxc7d783b2b4572 k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-cntt5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d9037f90e0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1578 ipv4=10.0.0.83 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-cntt5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d9037f90e0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1578 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.16.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.83 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-cntt5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=2.16.1;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d9037f90e0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1578 identity=9138 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.16.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.83 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-cntt5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d9037f90e0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1578 identity=9138 ipv4=10.0.0.83 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-cntt5 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=d9037f90e0 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1578 identity=9138 ipv4=10.0.0.83 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-cntt5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=d9037f90e0 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1578 identity=9138 ipv4=10.0.0.83 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-cntt5 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.249 431aaed7-9b72-4eef-a3d3-fde9c5a4a942 default }" containerID=f3e9e82f422668560009baedb9f8b322002f285d5da3d845d937377df19612ab datapathConfiguration="&{false false false false false }" interface=lxc13fbecb1c583 k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-txxgc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f3e9e82f42 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1704 ipv4=10.0.0.249 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-txxgc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f3e9e82f42 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1704 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.17.4,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.249 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-txxgc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=messaging-topology-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=1.17.4;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f3e9e82f42 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1704 identity=14643 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.17.4,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.249 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-txxgc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f3e9e82f42 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1704 identity=14643 ipv4=10.0.0.249 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-txxgc subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f3e9e82f42 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1704 identity=14643 ipv4=10.0.0.249 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-txxgc subsys=endpoint level=info msg="Successful endpoint creation" containerID=f3e9e82f42 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1704 identity=14643 ipv4=10.0.0.249 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-txxgc subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.149 f35d513f-e44f-4b02-8124-705cce23df87 default }" containerID=7c32742fdf6516e13dcfa9ea2d920eba00590f7c0ed07238c2aadea92aba9078 datapathConfiguration="&{false false false false false }" interface=lxc521bcaedf43c k8sPodName=openstack/pxc-operator-69cb5bbdb9-fjxs7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7c32742fdf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=212 ipv4=10.0.0.149 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-fjxs7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7c32742fdf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=212 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.149 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-fjxs7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=7c32742fdf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=212 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.149 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-fjxs7 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=operator;k8s:app.kubernetes.io/instance=pxc-operator;k8s:app.kubernetes.io/name=pxc-operator;k8s:app.kubernetes.io/part-of=pxc-operator;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7c32742fdf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=212 identity=10369 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.149 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-fjxs7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7c32742fdf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=212 identity=10369 ipv4=10.0.0.149 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-fjxs7 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7c32742fdf datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=212 identity=10369 ipv4=10.0.0.149 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-fjxs7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=7c32742fdf datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=212 identity=10369 ipv4=10.0.0.149 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-fjxs7 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.152 28ade5b4-0dca-444d-ac1e-945ce307d39e default }" containerID=857d92ce94b755fa9eee5b3f9a1bcf7fcce2ba9391dd033f28e4d873a032df92 datapathConfiguration="&{false false false false false }" interface=lxc66b28b9708f9 k8sPodName=openstack/percona-xtradb-haproxy-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=857d92ce94 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2121 ipv4=10.0.0.152 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=857d92ce94 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2121 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.152 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=857d92ce94 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2121 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.152 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=haproxy;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=857d92ce94 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2121 identity=1660 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.152 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=857d92ce94 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2121 identity=1660 ipv4=10.0.0.152 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=857d92ce94 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=2121 identity=1660 ipv4=10.0.0.152 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=857d92ce94 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=2121 identity=1660 ipv4=10.0.0.152 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.181 b28181df-a6d2-4eb1-8253-f1a7d55aac46 default }" containerID=4c598c12a1f1781255b78659692f9126e746ccf5a0f754f02f15fa2cd6bc8be7 datapathConfiguration="&{false false false false false }" interface=lxc946f281952e9 k8sPodName=local-path-storage/helper-pod-create-pvc-dd037329-e45a-4320-9cb2-b4779a7b5d5c labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4c598c12a1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2075 ipv4=10.0.0.181 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-dd037329-e45a-4320-9cb2-b4779a7b5d5c subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4c598c12a1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2075 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.181 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-dd037329-e45a-4320-9cb2-b4779a7b5d5c subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4c598c12a1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2075 identity=7999 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.181 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-dd037329-e45a-4320-9cb2-b4779a7b5d5c oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4c598c12a1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2075 identity=7999 ipv4=10.0.0.181 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-dd037329-e45a-4320-9cb2-b4779a7b5d5c subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4c598c12a1 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=2075 identity=7999 ipv4=10.0.0.181 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-dd037329-e45a-4320-9cb2-b4779a7b5d5c subsys=endpoint level=info msg="Successful endpoint creation" containerID=4c598c12a1 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=2075 identity=7999 ipv4=10.0.0.181 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-dd037329-e45a-4320-9cb2-b4779a7b5d5c subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=4c598c12a1 endpointID=2075 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-dd037329-e45a-4320-9cb2-b4779a7b5d5c subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=4c598c12a1 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=2075 identity=7999 ipv4=10.0.0.181 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-dd037329-e45a-4320-9cb2-b4779a7b5d5c subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.12 1d275855-df52-4dfe-996c-9f3bbbd42421 default }" containerID=4826df5f2f7f8cc71fa14334d9445c375dbfdaba8fae4e74037a45efeda4257d datapathConfiguration="&{false false false false false }" interface=lxcb1846a4b4508 k8sPodName=openstack/percona-xtradb-pxc-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4826df5f2f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2423 ipv4=10.0.0.12 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4826df5f2f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2423 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.12 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=pxc;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4826df5f2f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2423 identity=57993 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.12 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4826df5f2f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2423 identity=57993 ipv4=10.0.0.12 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=4826df5f2f datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=2423 identity=57993 ipv4=10.0.0.12 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=4826df5f2f datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=2423 identity=57993 ipv4=10.0.0.12 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=daemon level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/instance\":\"valkey\",\"k8s:app.kubernetes.io/name\":\"valkey\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:6379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:26379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:} {IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9121 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=valkey k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=b42da323-c4d2-4489-83b1-80de21768ce8] Description:}]" policyAddRequest=23341c19-6b18-4c97-8355-e973d1508923 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=23341c19-6b18-4c97-8355-e973d1508923 policyRevision=4 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=valkey subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.10 8d53e131-0572-4c81-9f18-f0556fce30a8 default }" containerID=15afffe4aa01c53ad4812695cfc5887b73bd54eaf889b6432dd84f3abe4354d4 datapathConfiguration="&{false false false false false }" interface=lxca1112b8997c4 k8sPodName=local-path-storage/helper-pod-create-pvc-e2f69684-85aa-4dc2-9b11-316c176defe2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=15afffe4aa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2828 ipv4=10.0.0.10 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e2f69684-85aa-4dc2-9b11-316c176defe2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=15afffe4aa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2828 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.10 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e2f69684-85aa-4dc2-9b11-316c176defe2 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=15afffe4aa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2828 identity=7999 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.10 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e2f69684-85aa-4dc2-9b11-316c176defe2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=15afffe4aa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2828 identity=7999 ipv4=10.0.0.10 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e2f69684-85aa-4dc2-9b11-316c176defe2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=15afffe4aa datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2828 identity=7999 ipv4=10.0.0.10 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e2f69684-85aa-4dc2-9b11-316c176defe2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=15afffe4aa datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2828 identity=7999 ipv4=10.0.0.10 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e2f69684-85aa-4dc2-9b11-316c176defe2 subsys=daemon level=info msg="Delete endpoint request" containerID=15afffe4aa endpointID=2828 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-e2f69684-85aa-4dc2-9b11-316c176defe2 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=15afffe4aa datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2828 identity=7999 ipv4=10.0.0.10 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e2f69684-85aa-4dc2-9b11-316c176defe2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.56 e118a744-10c9-44f4-853d-8807679a2399 default }" containerID=a2891577119cb17fff7b4b723279c98d022d6bdeadb3053b0b134a7378ea948b datapathConfiguration="&{false false false false false }" interface=lxc283fd57d8e8d k8sPodName=openstack/valkey-node-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a289157711 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=476 ipv4=10.0.0.56 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a289157711 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=476 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.56 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=node;k8s:app.kubernetes.io/instance=valkey;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=valkey;k8s:app.kubernetes.io/version=8.0.2;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=valkey-2.4.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=valkey;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=valkey-node-0;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=a289157711 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=476 identity=52797 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.56 ipv6= k8sPodName=openstack/valkey-node-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a289157711 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=476 identity=52797 ipv4=10.0.0.56 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a289157711 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=476 identity=52797 ipv4=10.0.0.56 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=a289157711 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=476 identity=52797 ipv4=10.0.0.56 ipv6= k8sPodName=openstack/valkey-node-0 subsys=daemon level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"keycloak\",\"k8s:app.kubernetes.io/instance\":\"keycloak\",\"k8s:app.kubernetes.io/name\":\"keycloak\",\"k8s:io.kubernetes.pod.namespace\":\"auth-system\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:7800 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:8080 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=keycloak k8s:io.cilium.k8s.policy.namespace=auth-system k8s:io.cilium.k8s.policy.uid=6c985ec7-0b23-489a-91df-9e0b68aa1dd7] Description:}]" policyAddRequest=fa5cd0e3-4d80-459e-bf63-27063cf0f8e9 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=fa5cd0e3-4d80-459e-bf63-27063cf0f8e9 policyRevision=5 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=keycloak subsys=k8s-watcher level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.84 d0db3ae4-b029-4a7e-acda-b6e47a168621 default }" containerID=ede696cfe629b7de4a69d56947a9321236504557d1c3b8316aa6e4fe04689a7e datapathConfiguration="&{false false false false false }" interface=lxc1ba0a4ae1c76 k8sPodName=auth-system/keycloak-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ede696cfe6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1292 ipv4=10.0.0.84 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ede696cfe6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1292 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.84 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:auth-system k8s:io.cilium.k8s.namespace.labels.name:auth-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=keycloak;k8s:app.kubernetes.io/instance=keycloak;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=keycloak;k8s:app.kubernetes.io/version=24.0.5;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=keycloak-21.4.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system;k8s:io.cilium.k8s.namespace.labels.name=auth-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keycloak;k8s:io.kubernetes.pod.namespace=auth-system;k8s:statefulset.kubernetes.io/pod-name=keycloak-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ede696cfe6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1292 identity=46186 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.84 ipv6= k8sPodName=auth-system/keycloak-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ede696cfe6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1292 identity=46186 ipv4=10.0.0.84 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ede696cfe6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1292 identity=46186 ipv4=10.0.0.84 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=ede696cfe6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1292 identity=46186 ipv4=10.0.0.84 ipv6= k8sPodName=auth-system/keycloak-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.01045626090602892 newInterval=7m30s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.189 6826aa90-f411-4ec1-a460-bd5cc6fb8118 default }" containerID=65a5b78943fec1df8179807bb0d2a9e1e85bf8d51b5e0098ad4b84e4ec682b16 datapathConfiguration="&{false false false false false }" interface=lxcd85aa86f1448 k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-btw59 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=65a5b78943 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=882 ipv4=10.0.0.189 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-btw59 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=65a5b78943 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=882 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.189 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-btw59 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.37 c24488ab-1da3-4cd2-ad32-f5aa2f1292a0 default }" containerID=f06007ee161909185a68214f9cea8b4ac57960cce59b150d9ab59aec8a65d9d7 datapathConfiguration="&{false false false false false }" interface=lxc618e4a9b251b k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-499vz labels="[]" subsys=daemon sync-build=true level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="New endpoint" containerID=f06007ee16 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=716 ipv4=10.0.0.37 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-499vz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f06007ee16 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=716 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.37 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-499vz subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=f06007ee16 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=716 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.37 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-499vz line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=gc;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=65a5b78943 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=882 identity=18926 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.189 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-btw59 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=65a5b78943 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=882 identity=18926 ipv4=10.0.0.189 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-btw59 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=master;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f06007ee16 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=716 identity=44887 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.37 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-499vz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f06007ee16 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=716 identity=44887 ipv4=10.0.0.37 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-499vz subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.71 9e12dcf8-9481-466c-86c0-70f1a2b4579a default }" containerID=96c187cf0a41ff5539761272598a3f3e4261911f336fcf778d9496f77a94c163 datapathConfiguration="&{false false false false false }" interface=lxc86356128e59d k8sPodName=monitoring/node-feature-discovery-worker-mx559 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=96c187cf0a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=646 ipv4=10.0.0.71 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-mx559 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=96c187cf0a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=646 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.71 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-mx559 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=worker;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=96c187cf0a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=646 identity=20711 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.71 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-mx559 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=96c187cf0a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=646 identity=20711 ipv4=10.0.0.71 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-mx559 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f06007ee16 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=716 identity=44887 ipv4=10.0.0.37 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-499vz subsys=endpoint level=info msg="Successful endpoint creation" containerID=f06007ee16 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=716 identity=44887 ipv4=10.0.0.37 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-499vz subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=65a5b78943 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=882 identity=18926 ipv4=10.0.0.189 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-btw59 subsys=endpoint level=info msg="Successful endpoint creation" containerID=65a5b78943 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=882 identity=18926 ipv4=10.0.0.189 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-btw59 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=96c187cf0a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=646 identity=20711 ipv4=10.0.0.71 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-mx559 subsys=endpoint level=info msg="Successful endpoint creation" containerID=96c187cf0a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=646 identity=20711 ipv4=10.0.0.71 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-mx559 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.123 edc34c0b-2dc2-49d6-87bd-42f2998fd7ea default }" containerID=585a703cdc4b44bfe285ad20445b71cb20b59fd9bf0d5ce88d92a4e97a9d5bd6 datapathConfiguration="&{false false false false false }" interface=lxc486a2c6f4590 k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-62crs labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=585a703cdc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=606 ipv4=10.0.0.123 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-62crs subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=585a703cdc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=606 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.123 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-62crs subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:secretgen-controller]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=secretgen-controller;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa;k8s:io.kubernetes.pod.namespace=secretgen-controller;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=585a703cdc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=606 identity=39782 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.123 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-62crs oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=585a703cdc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=606 identity=39782 ipv4=10.0.0.123 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-62crs subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=585a703cdc datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=606 identity=39782 ipv4=10.0.0.123 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-62crs subsys=endpoint level=info msg="Successful endpoint creation" containerID=585a703cdc datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=606 identity=39782 ipv4=10.0.0.123 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-62crs subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=473 identity=1 identityLabels="k8s:feature.node.kubernetes.io/cpu-cpuid.ADX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AESNI=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX2=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CLZERO=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CMPXCHG8=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FMA3=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSROPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.HYPERVISOR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IA32_ARCH_CAP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBPB=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBRS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.LAHF=true,k8s:feature.node.kubernetes.io/cpu-cpuid.MOVBE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.NRIPS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.OSXSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SHA=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SPEC_CTRL_SSBD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SSE4A=true,k8s:feature.node.kubernetes.io/cpu-cpuid.STIBP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVM=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVMNP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSCALL=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSEE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.TOPEXT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.WBNOINVD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.X87=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XGETBV1=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEC=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEOPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVES=true,k8s:feature.node.kubernetes.io/cpu-hardware_multithreading=false,k8s:feature.node.kubernetes.io/cpu-model.family=23,k8s:feature.node.kubernetes.io/cpu-model.id=49,k8s:feature.node.kubernetes.io/cpu-model.vendor_id=AMD,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ=true,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ_IDLE=true,k8s:feature.node.kubernetes.io/kernel-version.full=5.15.0-190-generic,k8s:feature.node.kubernetes.io/kernel-version.major=5,k8s:feature.node.kubernetes.io/kernel-version.minor=15,k8s:feature.node.kubernetes.io/kernel-version.revision=0,k8s:feature.node.kubernetes.io/pci-0300_1af4.present=true,k8s:feature.node.kubernetes.io/system-os_release.ID=ubuntu,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.major=22,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.minor=04,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID=22.04,k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_00473 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_00473 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_00473 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_00473:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=473 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.30 bb0c35e4-708d-410b-b39d-da10d6e9b5db default }" containerID=77c79b39aac86f698888b4f0aa9b9350ed95be1f40b4b23bf48f30b0ec889467 datapathConfiguration="&{false false false false false }" interface=lxc712b52fb7c5e k8sPodName=monitoring/kube-prometheus-stack-admission-create-d84pw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=77c79b39aa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1059 ipv4=10.0.0.30 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-d84pw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=77c79b39aa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1059 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=144c5f3a-11ce-47c4-8639-6357502755ed,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=144c5f3a-11ce-47c4-8639-6357502755ed,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.30 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-d84pw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-create;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=144c5f3a-11ce-47c4-8639-6357502755ed;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=144c5f3a-11ce-47c4-8639-6357502755ed;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-create;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=77c79b39aa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1059 identity=47849 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=144c5f3a-11ce-47c4-8639-6357502755ed,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=144c5f3a-11ce-47c4-8639-6357502755ed,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.30 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-d84pw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=77c79b39aa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1059 identity=47849 ipv4=10.0.0.30 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-d84pw subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=77c79b39aa datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1059 identity=47849 ipv4=10.0.0.30 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-d84pw subsys=endpoint level=info msg="Successful endpoint creation" containerID=77c79b39aa datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1059 identity=47849 ipv4=10.0.0.30 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-d84pw subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=77c79b39aa endpointID=1059 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-create-d84pw subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-create k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=144c5f3a-11ce-47c4-8639-6357502755ed k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=144c5f3a-11ce-47c4-8639-6357502755ed k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-create k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=77c79b39aa datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1059 identity=47849 ipv4=10.0.0.30 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-d84pw subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.1 d389ec1e-576e-4245-ae75-f9ffda74a131 default }" containerID=fc754195743a94f6b17250dea62c294da94e12738e0880d37b9c59c2a8a38082 datapathConfiguration="&{false false false false false }" interface=lxc21308ec12cf9 k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-z5cms labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fc75419574 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1961 ipv4=10.0.0.1 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-z5cms subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.110 581c4cb1-0aae-4fd3-b6c1-a39a032bdd91 default }" containerID=332e8a6ced4057cb0a02797c54657bf10f7c3efb747e95ffeaf61e12a2191fa7 datapathConfiguration="&{false false false false false }" interface=lxc4869a891da95 k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-7ssxm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=332e8a6ced datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=257 ipv4=10.0.0.110 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-7ssxm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fc75419574 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1961 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.1 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-z5cms subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Resolving identity labels (blocking)" containerID=332e8a6ced datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=257 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.110 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-7ssxm subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-operator;k8s:app.kubernetes.io/component=prometheus-operator;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:chart=kube-prometheus-stack-60.2.0;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fc75419574 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1961 identity=34379 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.1 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-z5cms oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fc75419574 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1961 identity=34379 ipv4=10.0.0.1 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-z5cms subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Invalid state transition skipped" containerID=332e8a6ced datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=257 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.110 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-7ssxm line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=metrics;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-state-metrics;k8s:app.kubernetes.io/part-of=kube-state-metrics;k8s:app.kubernetes.io/version=2.12.0;k8s:helm.sh/chart=kube-state-metrics-5.20.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=332e8a6ced datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=257 identity=46001 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.110 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-7ssxm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=332e8a6ced datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=257 identity=46001 ipv4=10.0.0.110 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-7ssxm subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.120 3010da2b-553e-4fbe-8fd7-c1c2cd44ce16 default }" containerID=6750b98c09d5ece88ce4e7410c861dcd51277f254414d8856353027a2d2d7063 datapathConfiguration="&{false false false false false }" interface=lxcad1298495fe8 k8sPodName=monitoring/kube-prometheus-stack-grafana-6787594df9-r24t9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6750b98c09 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1120 ipv4=10.0.0.120 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-6787594df9-r24t9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6750b98c09 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1120 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.120 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-6787594df9-r24t9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/name=grafana;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6750b98c09 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1120 identity=39887 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.120 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-6787594df9-r24t9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6750b98c09 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1120 identity=39887 ipv4=10.0.0.120 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-6787594df9-r24t9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=fc75419574 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1961 identity=34379 ipv4=10.0.0.1 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-z5cms subsys=endpoint level=info msg="Successful endpoint creation" containerID=fc75419574 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1961 identity=34379 ipv4=10.0.0.1 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-z5cms subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=332e8a6ced datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=257 identity=46001 ipv4=10.0.0.110 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-7ssxm subsys=endpoint level=info msg="Successful endpoint creation" containerID=332e8a6ced datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=257 identity=46001 ipv4=10.0.0.110 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-7ssxm subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=6750b98c09 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1120 identity=39887 ipv4=10.0.0.120 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-6787594df9-r24t9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=6750b98c09 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1120 identity=39887 ipv4=10.0.0.120 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-6787594df9-r24t9 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.138 82601584-5454-434a-816d-e11b6104fcb2 default }" containerID=f02c8db000054aa692b3379272bbae6953de29e5b53d8c3084fb9ac512b9211f datapathConfiguration="&{false false false false false }" interface=lxc0f2b0d93f84b k8sPodName=monitoring/kube-prometheus-stack-admission-patch-rvdr2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f02c8db000 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1740 ipv4=10.0.0.138 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-rvdr2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f02c8db000 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1740 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=94e37a92-ed75-4952-a020-4160cbd23fe4,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=94e37a92-ed75-4952-a020-4160cbd23fe4,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.138 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-rvdr2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-patch;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=94e37a92-ed75-4952-a020-4160cbd23fe4;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=94e37a92-ed75-4952-a020-4160cbd23fe4;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-patch;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f02c8db000 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1740 identity=8376 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=94e37a92-ed75-4952-a020-4160cbd23fe4,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=94e37a92-ed75-4952-a020-4160cbd23fe4,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.138 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-rvdr2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f02c8db000 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1740 identity=8376 ipv4=10.0.0.138 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-rvdr2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f02c8db000 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1740 identity=8376 ipv4=10.0.0.138 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-rvdr2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f02c8db000 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1740 identity=8376 ipv4=10.0.0.138 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-rvdr2 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.199 4e48b1b5-f9c4-4e4d-8546-66483fa099ab default }" containerID=9e11a4c5f52e26ad1639562eba81537a9a762f7b60351e157e21dd03a784cce6 datapathConfiguration="&{false false false false false }" interface=lxccc82693bbe48 k8sPodName=local-path-storage/helper-pod-create-pvc-07ae88db-4223-485f-b18b-1a8a3a01be87 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9e11a4c5f5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2242 ipv4=10.0.0.199 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-07ae88db-4223-485f-b18b-1a8a3a01be87 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9e11a4c5f5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2242 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.199 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-07ae88db-4223-485f-b18b-1a8a3a01be87 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9e11a4c5f5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2242 identity=7999 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.199 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-07ae88db-4223-485f-b18b-1a8a3a01be87 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9e11a4c5f5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2242 identity=7999 ipv4=10.0.0.199 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-07ae88db-4223-485f-b18b-1a8a3a01be87 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9e11a4c5f5 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2242 identity=7999 ipv4=10.0.0.199 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-07ae88db-4223-485f-b18b-1a8a3a01be87 subsys=endpoint level=info msg="Successful endpoint creation" containerID=9e11a4c5f5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2242 identity=7999 ipv4=10.0.0.199 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-07ae88db-4223-485f-b18b-1a8a3a01be87 subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.49 77ec513a-2446-42f6-889e-9db0e0e1b985 default }" containerID=c640c6dfeec7af0160c92aa583e542c4cb383c9f282a3fbc61372a0e16fbd5b8 datapathConfiguration="&{false false false false false }" interface=lxcc24673658081 k8sPodName=local-path-storage/helper-pod-create-pvc-2671c792-490d-4393-90df-f429eeb7508d labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c640c6dfee datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2738 ipv4=10.0.0.49 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2671c792-490d-4393-90df-f429eeb7508d subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c640c6dfee datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2738 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.49 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2671c792-490d-4393-90df-f429eeb7508d subsys=endpoint level=info msg="Identity of endpoint changed" containerID=c640c6dfee datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2738 identity=7999 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.49 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2671c792-490d-4393-90df-f429eeb7508d oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c640c6dfee datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2738 identity=7999 ipv4=10.0.0.49 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2671c792-490d-4393-90df-f429eeb7508d subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c640c6dfee datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2738 identity=7999 ipv4=10.0.0.49 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2671c792-490d-4393-90df-f429eeb7508d subsys=endpoint level=info msg="Successful endpoint creation" containerID=c640c6dfee datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2738 identity=7999 ipv4=10.0.0.49 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2671c792-490d-4393-90df-f429eeb7508d subsys=daemon level=info msg="Delete endpoint request" containerID=f02c8db000 endpointID=1740 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-patch-rvdr2 subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-patch k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=94e37a92-ed75-4952-a020-4160cbd23fe4 k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=94e37a92-ed75-4952-a020-4160cbd23fe4 k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-patch k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=f02c8db000 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1740 identity=8376 ipv4=10.0.0.138 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-rvdr2 subsys=endpoint level=info msg="Delete endpoint request" containerID=9e11a4c5f5 endpointID=2242 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-07ae88db-4223-485f-b18b-1a8a3a01be87 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Delete endpoint request" containerID=c640c6dfee endpointID=2738 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-2671c792-490d-4393-90df-f429eeb7508d subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=c640c6dfee datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2738 identity=7999 ipv4=10.0.0.49 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2671c792-490d-4393-90df-f429eeb7508d subsys=endpoint level=info msg="Removed endpoint" containerID=9e11a4c5f5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2242 identity=7999 ipv4=10.0.0.199 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-07ae88db-4223-485f-b18b-1a8a3a01be87 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.153 6b237b47-db51-4f19-b736-7891d1092636 default }" containerID=4c9f2cf00373e4a9a56d6aa8068e953d8af45345e92a0558d24ab7398c935c69 datapathConfiguration="&{false false false false false }" interface=lxc8310e1bbe5f3 k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4c9f2cf003 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=23 ipv4=10.0.0.153 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4c9f2cf003 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=23 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.153 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=4c9f2cf003 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=23 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.153 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=prometheus;k8s:app.kubernetes.io/version=2.51.2;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus;k8s:io.kubernetes.pod.namespace=monitoring;k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus;k8s:operator.prometheus.io/shard=0;k8s:prometheus=kube-prometheus-stack-prometheus;k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4c9f2cf003 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=23 identity=4827 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.153 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4c9f2cf003 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=23 identity=4827 ipv4=10.0.0.153 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4c9f2cf003 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=23 identity=4827 ipv4=10.0.0.153 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=4c9f2cf003 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=23 identity=4827 ipv4=10.0.0.153 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.21 16f6b8d3-16b3-4401-8ad9-5158166eaaeb default }" containerID=b8baa3bf996f15111a9f73da8ba256dc6786a0e2ef2923023c92e474575e9787 datapathConfiguration="&{false false false false false }" interface=lxc2bf8c618a541 k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b8baa3bf99 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=836 ipv4=10.0.0.21 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b8baa3bf99 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=836 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.21 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:alertmanager=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=alertmanager;k8s:app.kubernetes.io/version=0.27.0;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b8baa3bf99 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=836 identity=54258 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.21 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b8baa3bf99 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=836 identity=54258 ipv4=10.0.0.21 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=b8baa3bf99 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=836 identity=54258 ipv4=10.0.0.21 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=b8baa3bf99 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=836 identity=54258 ipv4=10.0.0.21 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.241 dc77942f-946b-485c-b970-dc0b61eb0560 default }" containerID=a5ef28396c547f50bbaefe5623a4c8cfab6a6efa7277976961a3234c08146d98 datapathConfiguration="&{false false false false false }" interface=lxc93028d6f0e8b k8sPodName=monitoring/loki-gateway-cf54cb88c-bpl79 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a5ef28396c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3244 ipv4=10.0.0.241 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-bpl79 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a5ef28396c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3244 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.241 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-bpl79 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=gateway;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a5ef28396c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3244 identity=17776 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.241 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-bpl79 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a5ef28396c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3244 identity=17776 ipv4=10.0.0.241 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-bpl79 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.121 c505f113-1b52-4b6c-a945-ca421b2ca22f default }" containerID=cffbf511a2da0938a1cd1134fd52207aafdf88ab892a55f9a1620f3819baf444 datapathConfiguration="&{false false false false false }" interface=lxc45199455f2a8 k8sPodName=monitoring/loki-chunks-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=cffbf511a2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3916 ipv4=10.0.0.121 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=cffbf511a2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3916 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.121 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-chunks-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-chunks-cache;k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=cffbf511a2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3916 identity=22780 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.121 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=cffbf511a2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3916 identity=22780 ipv4=10.0.0.121 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.160 1b4fa9f6-4387-4fa4-a984-c67593ce6d96 default }" containerID=e6d032fc92810d7ffa0e2261d2dbc6c384803fabbe5c017f36cbd4e8280185ac datapathConfiguration="&{false false false false false }" interface=lxc74a5fc540a6b k8sPodName=monitoring/loki-results-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e6d032fc92 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=176 ipv4=10.0.0.160 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e6d032fc92 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=176 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.160 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-results-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-results-cache;k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e6d032fc92 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=176 identity=31757 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.160 ipv6= k8sPodName=monitoring/loki-results-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e6d032fc92 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=176 identity=31757 ipv4=10.0.0.160 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a5ef28396c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3244 identity=17776 ipv4=10.0.0.241 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-bpl79 subsys=endpoint level=info msg="Successful endpoint creation" containerID=a5ef28396c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3244 identity=17776 ipv4=10.0.0.241 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-bpl79 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=cffbf511a2 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3916 identity=22780 ipv4=10.0.0.121 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=cffbf511a2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3916 identity=22780 ipv4=10.0.0.121 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=e6d032fc92 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=176 identity=31757 ipv4=10.0.0.160 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=e6d032fc92 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=176 identity=31757 ipv4=10.0.0.160 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.247 c15c3ebd-c386-4a2f-a53d-9209ebaf4d69 default }" containerID=caced7278dd5191b36e0ec6e3c8bbbf7d55071ef1da453af893ed58f34939696 datapathConfiguration="&{false false false false false }" interface=lxcb93bdd16fb3a k8sPodName=local-path-storage/helper-pod-create-pvc-fa7f6603-ee4f-40a7-b8aa-dc46637a3e3c labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=caced7278d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3519 ipv4=10.0.0.247 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-fa7f6603-ee4f-40a7-b8aa-dc46637a3e3c subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=caced7278d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3519 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.247 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-fa7f6603-ee4f-40a7-b8aa-dc46637a3e3c subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=caced7278d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3519 identity=7999 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.247 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-fa7f6603-ee4f-40a7-b8aa-dc46637a3e3c oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=caced7278d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3519 identity=7999 ipv4=10.0.0.247 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-fa7f6603-ee4f-40a7-b8aa-dc46637a3e3c subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=caced7278d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3519 identity=7999 ipv4=10.0.0.247 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-fa7f6603-ee4f-40a7-b8aa-dc46637a3e3c subsys=endpoint level=info msg="Successful endpoint creation" containerID=caced7278d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3519 identity=7999 ipv4=10.0.0.247 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-fa7f6603-ee4f-40a7-b8aa-dc46637a3e3c subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.142 2edea04b-802b-4c45-a53a-896dcfb8202e default }" containerID=1ca41d4ed4fd4bc527911945db62f33cdf5dc85bd41165b6a295772f3c102c44 datapathConfiguration="&{false false false false false }" interface=lxcb80f36782b62 k8sPodName=monitoring/vector-8z9rf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1ca41d4ed4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1368 ipv4=10.0.0.142 ipv6= k8sPodName=monitoring/vector-8z9rf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1ca41d4ed4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1368 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.142 ipv6= k8sPodName=monitoring/vector-8z9rf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=Agent;k8s:app.kubernetes.io/instance=vector;k8s:app.kubernetes.io/name=vector;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=vector;k8s:io.kubernetes.pod.namespace=monitoring;k8s:vector.dev/exclude=true;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1ca41d4ed4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1368 identity=4951 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.142 ipv6= k8sPodName=monitoring/vector-8z9rf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1ca41d4ed4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1368 identity=4951 ipv4=10.0.0.142 ipv6= k8sPodName=monitoring/vector-8z9rf subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1ca41d4ed4 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1368 identity=4951 ipv4=10.0.0.142 ipv6= k8sPodName=monitoring/vector-8z9rf subsys=endpoint level=info msg="Successful endpoint creation" containerID=1ca41d4ed4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1368 identity=4951 ipv4=10.0.0.142 ipv6= k8sPodName=monitoring/vector-8z9rf subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=caced7278d endpointID=3519 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-fa7f6603-ee4f-40a7-b8aa-dc46637a3e3c subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=caced7278d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3519 identity=7999 ipv4=10.0.0.247 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-fa7f6603-ee4f-40a7-b8aa-dc46637a3e3c subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.165 1c9eb034-7284-408e-94f9-86072d48fd9f default }" containerID=8a1a806ea36dc76aa4456ab3fa13cfb19ed6bc5a0ffb40253c3901bb7ff48834 datapathConfiguration="&{false false false false false }" interface=lxc0940c2314f6a k8sPodName=monitoring/loki-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8a1a806ea3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2058 ipv4=10.0.0.165 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8a1a806ea3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2058 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.165 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=single-binary;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:app.kubernetes.io/part-of=memberlist;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=loki-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8a1a806ea3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2058 identity=34480 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.165 ipv6= k8sPodName=monitoring/loki-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8a1a806ea3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2058 identity=34480 ipv4=10.0.0.165 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8a1a806ea3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2058 identity=34480 ipv4=10.0.0.165 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=8a1a806ea3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2058 identity=34480 ipv4=10.0.0.165 ipv6= k8sPodName=monitoring/loki-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.101 1b1d17f0-1c8b-4224-b63f-41a65324d0f2 default }" containerID=9999d2279607fe99c782cb6ccf1e23b2c0dd85ee6b4cf79db5708da21ba7c815 datapathConfiguration="&{false false false false false }" interface=lxc8904e83b1420 k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-p4nk7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9999d22796 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3142 ipv4=10.0.0.101 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-p4nk7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9999d22796 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3142 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.101 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-p4nk7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=prometheus-pushgateway;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=prometheus-pushgateway;k8s:app.kubernetes.io/version=v1.8.0;k8s:helm.sh/chart=prometheus-pushgateway-2.13.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9999d22796 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3142 identity=1088 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.101 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-p4nk7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9999d22796 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3142 identity=1088 ipv4=10.0.0.101 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-p4nk7 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9999d22796 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3142 identity=1088 ipv4=10.0.0.101 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-p4nk7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=9999d22796 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3142 identity=1088 ipv4=10.0.0.101 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-p4nk7 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.221 3dee7ea4-9163-4435-bca7-0d554935f8ac default }" containerID=d2bb35feb5ea294a6d16f0247c752efab3209d5d5eb9c33beba09fc62210b76c datapathConfiguration="&{false false false false false }" interface=lxc4b27c2368585 k8sPodName=openstack/memcached-memcached-cf56b6468-h27nr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d2bb35feb5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=316 ipv4=10.0.0.221 ipv6= k8sPodName=openstack/memcached-memcached-cf56b6468-h27nr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d2bb35feb5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=316 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.221 ipv6= k8sPodName=openstack/memcached-memcached-cf56b6468-h27nr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=memcached;k8s:component=server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=memcached;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d2bb35feb5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=316 identity=63734 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.221 ipv6= k8sPodName=openstack/memcached-memcached-cf56b6468-h27nr oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=d2bb35feb5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=316 identity=63734 ipv4=10.0.0.221 ipv6= k8sPodName=openstack/memcached-memcached-cf56b6468-h27nr subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d2bb35feb5 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=316 identity=63734 ipv4=10.0.0.221 ipv6= k8sPodName=openstack/memcached-memcached-cf56b6468-h27nr subsys=endpoint level=info msg="Successful endpoint creation" containerID=d2bb35feb5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=316 identity=63734 ipv4=10.0.0.221 ipv6= k8sPodName=openstack/memcached-memcached-cf56b6468-h27nr subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.99 985a890d-98dc-47a0-a18d-b358bdfd6a59 default }" containerID=5dcfff29fa789c2ab1dec23b44784d0c71d483f14a407377b25442567de596ba datapathConfiguration="&{false false false false false }" interface=lxc6530f1eb99c1 k8sPodName=local-path-storage/helper-pod-create-pvc-43312115-f17d-4cf0-8eec-93913c2cf559 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5dcfff29fa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2532 ipv4=10.0.0.99 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-43312115-f17d-4cf0-8eec-93913c2cf559 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5dcfff29fa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2532 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.99 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-43312115-f17d-4cf0-8eec-93913c2cf559 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5dcfff29fa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2532 identity=7999 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.99 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-43312115-f17d-4cf0-8eec-93913c2cf559 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5dcfff29fa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2532 identity=7999 ipv4=10.0.0.99 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-43312115-f17d-4cf0-8eec-93913c2cf559 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5dcfff29fa datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2532 identity=7999 ipv4=10.0.0.99 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-43312115-f17d-4cf0-8eec-93913c2cf559 subsys=endpoint level=info msg="Successful endpoint creation" containerID=5dcfff29fa datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2532 identity=7999 ipv4=10.0.0.99 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-43312115-f17d-4cf0-8eec-93913c2cf559 subsys=daemon level=info msg="Delete endpoint request" containerID=5dcfff29fa endpointID=2532 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-43312115-f17d-4cf0-8eec-93913c2cf559 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=5dcfff29fa datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2532 identity=7999 ipv4=10.0.0.99 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-43312115-f17d-4cf0-8eec-93913c2cf559 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.206 dc40ac0e-83e6-489e-b3f4-073468d661d0 default }" containerID=a693868c44a7b5e3b3aec9add7af05e3145d1d03d69af7518e1c17dd1aa1610f datapathConfiguration="&{false false false false false }" interface=lxcdd6dac920256 k8sPodName=openstack/rabbitmq-keystone-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a693868c44 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2479 ipv4=10.0.0.206 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a693868c44 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2479 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.206 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-keystone;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a693868c44 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2479 identity=19830 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.206 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a693868c44 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2479 identity=19830 ipv4=10.0.0.206 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a693868c44 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2479 identity=19830 ipv4=10.0.0.206 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=a693868c44 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2479 identity=19830 ipv4=10.0.0.206 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.199 560d678f-942c-4d44-ad7d-c9ecad869260 default }" containerID=d6dbeeb4eb3a922de783d5b9e8f326ac7a09595e59c8c92f0e941e62f5c098f2 datapathConfiguration="&{false false false false false }" interface=lxcc80a74493966 k8sPodName=openstack/keystone-api-79456bd796-gd5wr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d6dbeeb4eb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=446 ipv4=10.0.0.199 ipv6= k8sPodName=openstack/keystone-api-79456bd796-gd5wr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d6dbeeb4eb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=446 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.199 ipv6= k8sPodName=openstack/keystone-api-79456bd796-gd5wr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d6dbeeb4eb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=446 identity=4341 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.199 ipv6= k8sPodName=openstack/keystone-api-79456bd796-gd5wr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d6dbeeb4eb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=446 identity=4341 ipv4=10.0.0.199 ipv6= k8sPodName=openstack/keystone-api-79456bd796-gd5wr subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.78 70d8295c-5796-446a-b2df-b58423879dbc default }" containerID=04d9af90425501e36956956d21d90e11e23139b31357dc6aa0a2ffe9183405b6 datapathConfiguration="&{false false false false false }" interface=lxcb07cac833294 k8sPodName=openstack/keystone-credential-setup-d5sts labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=04d9af9042 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2030 ipv4=10.0.0.78 ipv6= k8sPodName=openstack/keystone-credential-setup-d5sts subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=04d9af9042 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2030 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=72302f7b-3304-47d9-9c88-282ac30c6cfc,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=72302f7b-3304-47d9-9c88-282ac30c6cfc,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.78 ipv6= k8sPodName=openstack/keystone-credential-setup-d5sts subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=72302f7b-3304-47d9-9c88-282ac30c6cfc;k8s:batch.kubernetes.io/job-name=keystone-credential-setup;k8s:component=credential-setup;k8s:controller-uid=72302f7b-3304-47d9-9c88-282ac30c6cfc;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-credential-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=04d9af9042 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2030 identity=25471 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=72302f7b-3304-47d9-9c88-282ac30c6cfc,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=72302f7b-3304-47d9-9c88-282ac30c6cfc,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.78 ipv6= k8sPodName=openstack/keystone-credential-setup-d5sts oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=04d9af9042 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2030 identity=25471 ipv4=10.0.0.78 ipv6= k8sPodName=openstack/keystone-credential-setup-d5sts subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d6dbeeb4eb datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=446 identity=4341 ipv4=10.0.0.199 ipv6= k8sPodName=openstack/keystone-api-79456bd796-gd5wr subsys=endpoint level=info msg="Successful endpoint creation" containerID=d6dbeeb4eb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=446 identity=4341 ipv4=10.0.0.199 ipv6= k8sPodName=openstack/keystone-api-79456bd796-gd5wr subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=04d9af9042 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2030 identity=25471 ipv4=10.0.0.78 ipv6= k8sPodName=openstack/keystone-credential-setup-d5sts subsys=endpoint level=info msg="Successful endpoint creation" containerID=04d9af9042 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2030 identity=25471 ipv4=10.0.0.78 ipv6= k8sPodName=openstack/keystone-credential-setup-d5sts subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=04d9af9042 endpointID=2030 k8sNamespace=openstack k8sPodName=keystone-credential-setup-d5sts subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=72302f7b-3304-47d9-9c88-282ac30c6cfc k8s:batch.kubernetes.io/job-name=keystone-credential-setup k8s:component=credential-setup k8s:controller-uid=72302f7b-3304-47d9-9c88-282ac30c6cfc k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-credential-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=04d9af9042 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2030 identity=25471 ipv4=10.0.0.78 ipv6= k8sPodName=openstack/keystone-credential-setup-d5sts subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.202 bd87d889-6079-4996-bbda-0931d5df04ac default }" containerID=781e6c73016d02163f36ae7c54013916c85b058dffc93d79f4158470387ad545 datapathConfiguration="&{false false false false false }" interface=lxc21a5a4cf0ddb k8sPodName=openstack/keystone-db-init-ggjhn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=781e6c7301 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1423 ipv4=10.0.0.202 ipv6= k8sPodName=openstack/keystone-db-init-ggjhn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=781e6c7301 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1423 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=aeb12de1-6adf-4ed9-9271-248cd9473327,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=aeb12de1-6adf-4ed9-9271-248cd9473327,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.202 ipv6= k8sPodName=openstack/keystone-db-init-ggjhn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=aeb12de1-6adf-4ed9-9271-248cd9473327;k8s:batch.kubernetes.io/job-name=keystone-db-init;k8s:component=db-init;k8s:controller-uid=aeb12de1-6adf-4ed9-9271-248cd9473327;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=781e6c7301 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1423 identity=16051 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=aeb12de1-6adf-4ed9-9271-248cd9473327,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=aeb12de1-6adf-4ed9-9271-248cd9473327,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.202 ipv6= k8sPodName=openstack/keystone-db-init-ggjhn oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=781e6c7301 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1423 identity=16051 ipv4=10.0.0.202 ipv6= k8sPodName=openstack/keystone-db-init-ggjhn subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=781e6c7301 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1423 identity=16051 ipv4=10.0.0.202 ipv6= k8sPodName=openstack/keystone-db-init-ggjhn subsys=endpoint level=info msg="Successful endpoint creation" containerID=781e6c7301 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1423 identity=16051 ipv4=10.0.0.202 ipv6= k8sPodName=openstack/keystone-db-init-ggjhn subsys=daemon level=info msg="Delete endpoint request" containerID=781e6c7301 endpointID=1423 k8sNamespace=openstack k8sPodName=keystone-db-init-ggjhn subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=aeb12de1-6adf-4ed9-9271-248cd9473327 k8s:batch.kubernetes.io/job-name=keystone-db-init k8s:component=db-init k8s:controller-uid=aeb12de1-6adf-4ed9-9271-248cd9473327 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=781e6c7301 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1423 identity=16051 ipv4=10.0.0.202 ipv6= k8sPodName=openstack/keystone-db-init-ggjhn subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.136 2abaddfd-0b09-48c0-a1aa-8cfd3ad9d405 default }" containerID=57ef55d4309c1996c62d6cb539fbde6acbc0db2923d9790aeb3d0c91b6c7194f datapathConfiguration="&{false false false false false }" interface=lxc9368649537cd k8sPodName=openstack/keystone-fernet-setup-fbrq2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=57ef55d430 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1450 ipv4=10.0.0.136 ipv6= k8sPodName=openstack/keystone-fernet-setup-fbrq2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=57ef55d430 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1450 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=25fadc2c-4a96-4c22-9300-30bb7618b18f,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=25fadc2c-4a96-4c22-9300-30bb7618b18f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.136 ipv6= k8sPodName=openstack/keystone-fernet-setup-fbrq2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=25fadc2c-4a96-4c22-9300-30bb7618b18f;k8s:batch.kubernetes.io/job-name=keystone-fernet-setup;k8s:component=fernet-setup;k8s:controller-uid=25fadc2c-4a96-4c22-9300-30bb7618b18f;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-fernet-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=57ef55d430 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1450 identity=11502 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=25fadc2c-4a96-4c22-9300-30bb7618b18f,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=25fadc2c-4a96-4c22-9300-30bb7618b18f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.136 ipv6= k8sPodName=openstack/keystone-fernet-setup-fbrq2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=57ef55d430 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1450 identity=11502 ipv4=10.0.0.136 ipv6= k8sPodName=openstack/keystone-fernet-setup-fbrq2 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=57ef55d430 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1450 identity=11502 ipv4=10.0.0.136 ipv6= k8sPodName=openstack/keystone-fernet-setup-fbrq2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=57ef55d430 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1450 identity=11502 ipv4=10.0.0.136 ipv6= k8sPodName=openstack/keystone-fernet-setup-fbrq2 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=57ef55d430 endpointID=1450 k8sNamespace=openstack k8sPodName=keystone-fernet-setup-fbrq2 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=25fadc2c-4a96-4c22-9300-30bb7618b18f k8s:batch.kubernetes.io/job-name=keystone-fernet-setup k8s:component=fernet-setup k8s:controller-uid=25fadc2c-4a96-4c22-9300-30bb7618b18f k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-fernet-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=57ef55d430 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1450 identity=11502 ipv4=10.0.0.136 ipv6= k8sPodName=openstack/keystone-fernet-setup-fbrq2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.193 14d2c558-04b0-4721-b50f-eb96346e28fe default }" containerID=0ee7f20d843b40e8ccbf84499475de941ff4b55d97e22dea659ef8399438c832 datapathConfiguration="&{false false false false false }" interface=lxc37a729d0d7b2 k8sPodName=openstack/keystone-db-sync-4kqxw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0ee7f20d84 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=322 ipv4=10.0.0.193 ipv6= k8sPodName=openstack/keystone-db-sync-4kqxw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0ee7f20d84 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=322 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=853ed475-f38d-4307-8168-f8fa00c5650f,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=853ed475-f38d-4307-8168-f8fa00c5650f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.193 ipv6= k8sPodName=openstack/keystone-db-sync-4kqxw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=853ed475-f38d-4307-8168-f8fa00c5650f;k8s:batch.kubernetes.io/job-name=keystone-db-sync;k8s:component=db-sync;k8s:controller-uid=853ed475-f38d-4307-8168-f8fa00c5650f;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-sync;k8s:release_group=keystone;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=0ee7f20d84 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=322 identity=17743 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=853ed475-f38d-4307-8168-f8fa00c5650f,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=853ed475-f38d-4307-8168-f8fa00c5650f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.193 ipv6= k8sPodName=openstack/keystone-db-sync-4kqxw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0ee7f20d84 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=322 identity=17743 ipv4=10.0.0.193 ipv6= k8sPodName=openstack/keystone-db-sync-4kqxw subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0ee7f20d84 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=322 identity=17743 ipv4=10.0.0.193 ipv6= k8sPodName=openstack/keystone-db-sync-4kqxw subsys=endpoint level=info msg="Successful endpoint creation" containerID=0ee7f20d84 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=322 identity=17743 ipv4=10.0.0.193 ipv6= k8sPodName=openstack/keystone-db-sync-4kqxw subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=0ee7f20d84 endpointID=322 k8sNamespace=openstack k8sPodName=keystone-db-sync-4kqxw subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=853ed475-f38d-4307-8168-f8fa00c5650f k8s:batch.kubernetes.io/job-name=keystone-db-sync k8s:component=db-sync k8s:controller-uid=853ed475-f38d-4307-8168-f8fa00c5650f k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-sync k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=0ee7f20d84 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=322 identity=17743 ipv4=10.0.0.193 ipv6= k8sPodName=openstack/keystone-db-sync-4kqxw subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.7 57da5ad8-fbef-4ef4-91c9-cc7d65645604 default }" containerID=6725243cc37e9c9175a92ec71c1836c7dad0933aeda7ef87cd3e0ad2741e126a datapathConfiguration="&{false false false false false }" interface=lxc2b66a4d0d55b k8sPodName=openstack/keystone-rabbit-init-8wk9c labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6725243cc3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2973 ipv4=10.0.0.7 ipv6= k8sPodName=openstack/keystone-rabbit-init-8wk9c subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6725243cc3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2973 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=034f9c18-1d55-4d55-852f-3bbe71022543,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=034f9c18-1d55-4d55-852f-3bbe71022543,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.7 ipv6= k8sPodName=openstack/keystone-rabbit-init-8wk9c subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=034f9c18-1d55-4d55-852f-3bbe71022543;k8s:batch.kubernetes.io/job-name=keystone-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=034f9c18-1d55-4d55-852f-3bbe71022543;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-rabbit-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=6725243cc3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2973 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.7 ipv6= k8sPodName=openstack/keystone-rabbit-init-8wk9c line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=6725243cc3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2973 identity=54989 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=034f9c18-1d55-4d55-852f-3bbe71022543,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=034f9c18-1d55-4d55-852f-3bbe71022543,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.7 ipv6= k8sPodName=openstack/keystone-rabbit-init-8wk9c oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6725243cc3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2973 identity=54989 ipv4=10.0.0.7 ipv6= k8sPodName=openstack/keystone-rabbit-init-8wk9c subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6725243cc3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2973 identity=54989 ipv4=10.0.0.7 ipv6= k8sPodName=openstack/keystone-rabbit-init-8wk9c subsys=endpoint level=info msg="Successful endpoint creation" containerID=6725243cc3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2973 identity=54989 ipv4=10.0.0.7 ipv6= k8sPodName=openstack/keystone-rabbit-init-8wk9c subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=6725243cc3 endpointID=2973 k8sNamespace=openstack k8sPodName=keystone-rabbit-init-8wk9c subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=034f9c18-1d55-4d55-852f-3bbe71022543 k8s:batch.kubernetes.io/job-name=keystone-rabbit-init k8s:component=rabbit-init k8s:controller-uid=034f9c18-1d55-4d55-852f-3bbe71022543 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-rabbit-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=6725243cc3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2973 identity=54989 ipv4=10.0.0.7 ipv6= k8sPodName=openstack/keystone-rabbit-init-8wk9c subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.89 279b491e-f4ad-466f-b0d1-5454df4e7312 default }" containerID=8b9c9b6a75be2159dc355886fd809d894eac509ea74f62be461e3b9f831384a0 datapathConfiguration="&{false false false false false }" interface=lxc6023b642c6e2 k8sPodName=openstack/keystone-domain-manage-7g68f labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8b9c9b6a75 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1767 ipv4=10.0.0.89 ipv6= k8sPodName=openstack/keystone-domain-manage-7g68f subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8b9c9b6a75 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1767 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=f6f9bd87-6133-4392-8fd6-727b813dbf61,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=f6f9bd87-6133-4392-8fd6-727b813dbf61,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.89 ipv6= k8sPodName=openstack/keystone-domain-manage-7g68f subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=f6f9bd87-6133-4392-8fd6-727b813dbf61;k8s:batch.kubernetes.io/job-name=keystone-domain-manage;k8s:component=domain-manage;k8s:controller-uid=f6f9bd87-6133-4392-8fd6-727b813dbf61;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-domain-manage;k8s:release_group=keystone;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=8b9c9b6a75 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1767 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.89 ipv6= k8sPodName=openstack/keystone-domain-manage-7g68f line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=8b9c9b6a75 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1767 identity=24314 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=f6f9bd87-6133-4392-8fd6-727b813dbf61,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=f6f9bd87-6133-4392-8fd6-727b813dbf61,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.89 ipv6= k8sPodName=openstack/keystone-domain-manage-7g68f oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8b9c9b6a75 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1767 identity=24314 ipv4=10.0.0.89 ipv6= k8sPodName=openstack/keystone-domain-manage-7g68f subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8b9c9b6a75 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1767 identity=24314 ipv4=10.0.0.89 ipv6= k8sPodName=openstack/keystone-domain-manage-7g68f subsys=endpoint level=info msg="Successful endpoint creation" containerID=8b9c9b6a75 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1767 identity=24314 ipv4=10.0.0.89 ipv6= k8sPodName=openstack/keystone-domain-manage-7g68f subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=8b9c9b6a75 endpointID=1767 k8sNamespace=openstack k8sPodName=keystone-domain-manage-7g68f subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=f6f9bd87-6133-4392-8fd6-727b813dbf61 k8s:batch.kubernetes.io/job-name=keystone-domain-manage k8s:component=domain-manage k8s:controller-uid=f6f9bd87-6133-4392-8fd6-727b813dbf61 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-domain-manage k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=8b9c9b6a75 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1767 identity=24314 ipv4=10.0.0.89 ipv6= k8sPodName=openstack/keystone-domain-manage-7g68f subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.30 cff564f4-2b93-4093-9448-ee0574eb6891 default }" containerID=77044236e54e45895b01afd7af274ac6c2609fe455ea7fcfa6d1b846eaf18e1f datapathConfiguration="&{false false false false false }" interface=lxc1ff3a45a7551 k8sPodName=openstack/keystone-bootstrap-jzjfq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=77044236e5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2416 ipv4=10.0.0.30 ipv6= k8sPodName=openstack/keystone-bootstrap-jzjfq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=77044236e5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2416 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=4da488da-2410-45e8-a8ab-17e04859ebf5,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=4da488da-2410-45e8-a8ab-17e04859ebf5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.30 ipv6= k8sPodName=openstack/keystone-bootstrap-jzjfq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=4da488da-2410-45e8-a8ab-17e04859ebf5;k8s:batch.kubernetes.io/job-name=keystone-bootstrap;k8s:component=bootstrap;k8s:controller-uid=4da488da-2410-45e8-a8ab-17e04859ebf5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-bootstrap;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=77044236e5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2416 identity=25363 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=4da488da-2410-45e8-a8ab-17e04859ebf5,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=4da488da-2410-45e8-a8ab-17e04859ebf5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.30 ipv6= k8sPodName=openstack/keystone-bootstrap-jzjfq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=77044236e5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2416 identity=25363 ipv4=10.0.0.30 ipv6= k8sPodName=openstack/keystone-bootstrap-jzjfq subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=77044236e5 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2416 identity=25363 ipv4=10.0.0.30 ipv6= k8sPodName=openstack/keystone-bootstrap-jzjfq subsys=endpoint level=info msg="Successful endpoint creation" containerID=77044236e5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2416 identity=25363 ipv4=10.0.0.30 ipv6= k8sPodName=openstack/keystone-bootstrap-jzjfq subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=77044236e5 endpointID=2416 k8sNamespace=openstack k8sPodName=keystone-bootstrap-jzjfq subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=4da488da-2410-45e8-a8ab-17e04859ebf5 k8s:batch.kubernetes.io/job-name=keystone-bootstrap k8s:component=bootstrap k8s:controller-uid=4da488da-2410-45e8-a8ab-17e04859ebf5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-bootstrap k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=77044236e5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2416 identity=25363 ipv4=10.0.0.30 ipv6= k8sPodName=openstack/keystone-bootstrap-jzjfq subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.204 12eaf136-deba-43d5-8e8c-db6df69fffeb default }" containerID=b5794cb4a99e3038139f2138a5c21081163362ffe12b09014231f2a7f8f66da0 datapathConfiguration="&{false false false false false }" interface=lxc2cceaa92d928 k8sPodName=local-path-storage/helper-pod-create-pvc-8d3131c0-2f8f-4681-8afc-08be890f60a8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b5794cb4a9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=341 ipv4=10.0.0.204 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8d3131c0-2f8f-4681-8afc-08be890f60a8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b5794cb4a9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=341 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.204 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8d3131c0-2f8f-4681-8afc-08be890f60a8 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b5794cb4a9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=341 identity=7999 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.204 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8d3131c0-2f8f-4681-8afc-08be890f60a8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b5794cb4a9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=341 identity=7999 ipv4=10.0.0.204 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8d3131c0-2f8f-4681-8afc-08be890f60a8 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b5794cb4a9 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=341 identity=7999 ipv4=10.0.0.204 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8d3131c0-2f8f-4681-8afc-08be890f60a8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=b5794cb4a9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=341 identity=7999 ipv4=10.0.0.204 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8d3131c0-2f8f-4681-8afc-08be890f60a8 subsys=daemon level=info msg="Delete endpoint request" containerID=b5794cb4a9 endpointID=341 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-8d3131c0-2f8f-4681-8afc-08be890f60a8 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=b5794cb4a9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=341 identity=7999 ipv4=10.0.0.204 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8d3131c0-2f8f-4681-8afc-08be890f60a8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.180 c2c42a31-6944-46b7-8058-fa13578dbaca default }" containerID=212033bd1d86f5682616816d678a802a7af0563d842004cdf845d81c389050a1 datapathConfiguration="&{false false false false false }" interface=lxcb539ffc59523 k8sPodName=openstack/rabbitmq-barbican-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=212033bd1d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=267 ipv4=10.0.0.180 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=212033bd1d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=267 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.180 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-barbican;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=212033bd1d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=267 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.180 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=212033bd1d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=267 identity=33528 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.180 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=212033bd1d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=267 identity=33528 ipv4=10.0.0.180 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=212033bd1d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=267 identity=33528 ipv4=10.0.0.180 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=212033bd1d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=267 identity=33528 ipv4=10.0.0.180 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.126 ce72aa0b-5e1f-4d8d-ac80-8916dde3ff13 default }" containerID=6926d988a6597fb182162f7cc8336cbda5fc0dc97bcde8745ef71e045a934012 datapathConfiguration="&{false false false false false }" interface=lxcee9547c03b5f k8sPodName=openstack/barbican-api-64b6457889-8qdph labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6926d988a6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1268 ipv4=10.0.0.126 ipv6= k8sPodName=openstack/barbican-api-64b6457889-8qdph subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6926d988a6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1268 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.126 ipv6= k8sPodName=openstack/barbican-api-64b6457889-8qdph subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6926d988a6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1268 identity=13601 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.126 ipv6= k8sPodName=openstack/barbican-api-64b6457889-8qdph oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6926d988a6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1268 identity=13601 ipv4=10.0.0.126 ipv6= k8sPodName=openstack/barbican-api-64b6457889-8qdph subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.115 198f8769-3faa-4781-bddf-1c05b1984bbe default }" containerID=7eeed86a2dd98adc3b7a27bd3b8e25de1b0c68cae173eba2a3eac9e3dbba8c8f datapathConfiguration="&{false false false false false }" interface=lxcc93c740c1e29 k8sPodName=openstack/barbican-db-init-ldmgv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7eeed86a2d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=576 ipv4=10.0.0.115 ipv6= k8sPodName=openstack/barbican-db-init-ldmgv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7eeed86a2d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=576 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=95ae193c-248d-416e-9c01-7c29af4b0a12,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=95ae193c-248d-416e-9c01-7c29af4b0a12,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.115 ipv6= k8sPodName=openstack/barbican-db-init-ldmgv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=95ae193c-248d-416e-9c01-7c29af4b0a12;k8s:batch.kubernetes.io/job-name=barbican-db-init;k8s:component=db-init;k8s:controller-uid=95ae193c-248d-416e-9c01-7c29af4b0a12;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7eeed86a2d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=576 identity=25991 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=95ae193c-248d-416e-9c01-7c29af4b0a12,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=95ae193c-248d-416e-9c01-7c29af4b0a12,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.115 ipv6= k8sPodName=openstack/barbican-db-init-ldmgv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7eeed86a2d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=576 identity=25991 ipv4=10.0.0.115 ipv6= k8sPodName=openstack/barbican-db-init-ldmgv subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6926d988a6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1268 identity=13601 ipv4=10.0.0.126 ipv6= k8sPodName=openstack/barbican-api-64b6457889-8qdph subsys=endpoint level=info msg="Successful endpoint creation" containerID=6926d988a6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1268 identity=13601 ipv4=10.0.0.126 ipv6= k8sPodName=openstack/barbican-api-64b6457889-8qdph subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=7eeed86a2d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=576 identity=25991 ipv4=10.0.0.115 ipv6= k8sPodName=openstack/barbican-db-init-ldmgv subsys=endpoint level=info msg="Successful endpoint creation" containerID=7eeed86a2d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=576 identity=25991 ipv4=10.0.0.115 ipv6= k8sPodName=openstack/barbican-db-init-ldmgv subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=7eeed86a2d endpointID=576 k8sNamespace=openstack k8sPodName=barbican-db-init-ldmgv subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=95ae193c-248d-416e-9c01-7c29af4b0a12 k8s:batch.kubernetes.io/job-name=barbican-db-init k8s:component=db-init k8s:controller-uid=95ae193c-248d-416e-9c01-7c29af4b0a12 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=7eeed86a2d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=576 identity=25991 ipv4=10.0.0.115 ipv6= k8sPodName=openstack/barbican-db-init-ldmgv subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.42 fee8f147-c311-481e-ac13-87ab22637911 default }" containerID=4a25c64e6350394f7c52d531753ff45534c7b704c31952d9a2b08eb3debe95d6 datapathConfiguration="&{false false false false false }" interface=lxc5bcab9c5f270 k8sPodName=openstack/barbican-db-sync-c6w89 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4a25c64e63 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1270 ipv4=10.0.0.42 ipv6= k8sPodName=openstack/barbican-db-sync-c6w89 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4a25c64e63 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1270 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=9d4b6eb0-709a-4757-aa16-cca8074f1c3d,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=9d4b6eb0-709a-4757-aa16-cca8074f1c3d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.42 ipv6= k8sPodName=openstack/barbican-db-sync-c6w89 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=9d4b6eb0-709a-4757-aa16-cca8074f1c3d;k8s:batch.kubernetes.io/job-name=barbican-db-sync;k8s:component=db-sync;k8s:controller-uid=9d4b6eb0-709a-4757-aa16-cca8074f1c3d;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-sync;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4a25c64e63 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1270 identity=14249 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=9d4b6eb0-709a-4757-aa16-cca8074f1c3d,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=9d4b6eb0-709a-4757-aa16-cca8074f1c3d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.42 ipv6= k8sPodName=openstack/barbican-db-sync-c6w89 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4a25c64e63 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1270 identity=14249 ipv4=10.0.0.42 ipv6= k8sPodName=openstack/barbican-db-sync-c6w89 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=4a25c64e63 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1270 identity=14249 ipv4=10.0.0.42 ipv6= k8sPodName=openstack/barbican-db-sync-c6w89 subsys=endpoint level=info msg="Successful endpoint creation" containerID=4a25c64e63 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1270 identity=14249 ipv4=10.0.0.42 ipv6= k8sPodName=openstack/barbican-db-sync-c6w89 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=4a25c64e63 endpointID=1270 k8sNamespace=openstack k8sPodName=barbican-db-sync-c6w89 subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=9d4b6eb0-709a-4757-aa16-cca8074f1c3d k8s:batch.kubernetes.io/job-name=barbican-db-sync k8s:component=db-sync k8s:controller-uid=9d4b6eb0-709a-4757-aa16-cca8074f1c3d k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-sync k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=4a25c64e63 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1270 identity=14249 ipv4=10.0.0.42 ipv6= k8sPodName=openstack/barbican-db-sync-c6w89 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.169 0bdec9de-7425-40ca-9d28-6ca4e74d278c default }" containerID=0a50c3378337843ddacbe237461310dbfcb60dd96b5d4cfbe314b7a522c335b2 datapathConfiguration="&{false false false false false }" interface=lxc1582504a46e3 k8sPodName=openstack/barbican-rabbit-init-jgl9k labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0a50c33783 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1455 ipv4=10.0.0.169 ipv6= k8sPodName=openstack/barbican-rabbit-init-jgl9k subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0a50c33783 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1455 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=22ded250-177a-4134-8edb-cb1e5727f85d,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=22ded250-177a-4134-8edb-cb1e5727f85d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.169 ipv6= k8sPodName=openstack/barbican-rabbit-init-jgl9k subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=22ded250-177a-4134-8edb-cb1e5727f85d;k8s:batch.kubernetes.io/job-name=barbican-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=22ded250-177a-4134-8edb-cb1e5727f85d;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-rabbit-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0a50c33783 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1455 identity=7984 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=22ded250-177a-4134-8edb-cb1e5727f85d,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=22ded250-177a-4134-8edb-cb1e5727f85d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.169 ipv6= k8sPodName=openstack/barbican-rabbit-init-jgl9k oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0a50c33783 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1455 identity=7984 ipv4=10.0.0.169 ipv6= k8sPodName=openstack/barbican-rabbit-init-jgl9k subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=0a50c33783 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1455 identity=7984 ipv4=10.0.0.169 ipv6= k8sPodName=openstack/barbican-rabbit-init-jgl9k subsys=endpoint level=info msg="Successful endpoint creation" containerID=0a50c33783 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1455 identity=7984 ipv4=10.0.0.169 ipv6= k8sPodName=openstack/barbican-rabbit-init-jgl9k subsys=daemon level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.03580897371731573 newInterval=11m15s subsys=map-ct level=info msg="Delete endpoint request" containerID=0a50c33783 endpointID=1455 k8sNamespace=openstack k8sPodName=barbican-rabbit-init-jgl9k subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=22ded250-177a-4134-8edb-cb1e5727f85d k8s:batch.kubernetes.io/job-name=barbican-rabbit-init k8s:component=rabbit-init k8s:controller-uid=22ded250-177a-4134-8edb-cb1e5727f85d k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-rabbit-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=0a50c33783 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1455 identity=7984 ipv4=10.0.0.169 ipv6= k8sPodName=openstack/barbican-rabbit-init-jgl9k subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.124 eb8094e2-95e9-409c-b651-4e76da434540 default }" containerID=17799fb37fc233c202e2cd91e4d79a7c753cdd85172b0b023e0e0e1680faa4f6 datapathConfiguration="&{false false false false false }" interface=lxc6c2ad8dc35ba k8sPodName=openstack/barbican-ks-service-v2pbr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=17799fb37f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3017 ipv4=10.0.0.124 ipv6= k8sPodName=openstack/barbican-ks-service-v2pbr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=17799fb37f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3017 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=631b21f4-204a-4bdf-ac0a-9faa3daf152f,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=631b21f4-204a-4bdf-ac0a-9faa3daf152f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.124 ipv6= k8sPodName=openstack/barbican-ks-service-v2pbr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=631b21f4-204a-4bdf-ac0a-9faa3daf152f;k8s:batch.kubernetes.io/job-name=barbican-ks-service;k8s:component=ks-service;k8s:controller-uid=631b21f4-204a-4bdf-ac0a-9faa3daf152f;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-service;k8s:release_group=barbican;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=17799fb37f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3017 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.124 ipv6= k8sPodName=openstack/barbican-ks-service-v2pbr line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=17799fb37f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3017 identity=19729 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=631b21f4-204a-4bdf-ac0a-9faa3daf152f,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=631b21f4-204a-4bdf-ac0a-9faa3daf152f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.124 ipv6= k8sPodName=openstack/barbican-ks-service-v2pbr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=17799fb37f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3017 identity=19729 ipv4=10.0.0.124 ipv6= k8sPodName=openstack/barbican-ks-service-v2pbr subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=17799fb37f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3017 identity=19729 ipv4=10.0.0.124 ipv6= k8sPodName=openstack/barbican-ks-service-v2pbr subsys=endpoint level=info msg="Successful endpoint creation" containerID=17799fb37f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3017 identity=19729 ipv4=10.0.0.124 ipv6= k8sPodName=openstack/barbican-ks-service-v2pbr subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=17799fb37f endpointID=3017 k8sNamespace=openstack k8sPodName=barbican-ks-service-v2pbr subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=631b21f4-204a-4bdf-ac0a-9faa3daf152f k8s:batch.kubernetes.io/job-name=barbican-ks-service k8s:component=ks-service k8s:controller-uid=631b21f4-204a-4bdf-ac0a-9faa3daf152f k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-service k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=17799fb37f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3017 identity=19729 ipv4=10.0.0.124 ipv6= k8sPodName=openstack/barbican-ks-service-v2pbr subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.108 e7fdb244-cf92-4a08-bc32-d60e9d564fbd default }" containerID=c91b2cd5178955473e6e2cf7c8cc8b570ae91dd81d12d328273173b2f96d9488 datapathConfiguration="&{false false false false false }" interface=lxc99b116f62ad9 k8sPodName=openstack/barbican-ks-endpoints-rxth2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c91b2cd517 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=975 ipv4=10.0.0.108 ipv6= k8sPodName=openstack/barbican-ks-endpoints-rxth2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c91b2cd517 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=975 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=da5849e2-1c93-43fd-8a14-95e65dfb285b,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=da5849e2-1c93-43fd-8a14-95e65dfb285b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.108 ipv6= k8sPodName=openstack/barbican-ks-endpoints-rxth2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=da5849e2-1c93-43fd-8a14-95e65dfb285b;k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=da5849e2-1c93-43fd-8a14-95e65dfb285b;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-endpoints;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c91b2cd517 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=975 identity=21490 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=da5849e2-1c93-43fd-8a14-95e65dfb285b,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=da5849e2-1c93-43fd-8a14-95e65dfb285b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.108 ipv6= k8sPodName=openstack/barbican-ks-endpoints-rxth2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c91b2cd517 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=975 identity=21490 ipv4=10.0.0.108 ipv6= k8sPodName=openstack/barbican-ks-endpoints-rxth2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c91b2cd517 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=975 identity=21490 ipv4=10.0.0.108 ipv6= k8sPodName=openstack/barbican-ks-endpoints-rxth2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=c91b2cd517 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=975 identity=21490 ipv4=10.0.0.108 ipv6= k8sPodName=openstack/barbican-ks-endpoints-rxth2 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=c91b2cd517 endpointID=975 k8sNamespace=openstack k8sPodName=barbican-ks-endpoints-rxth2 subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=da5849e2-1c93-43fd-8a14-95e65dfb285b k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=da5849e2-1c93-43fd-8a14-95e65dfb285b k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-endpoints k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=c91b2cd517 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=975 identity=21490 ipv4=10.0.0.108 ipv6= k8sPodName=openstack/barbican-ks-endpoints-rxth2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.143 eb37edc7-df61-4f00-af6a-fb2e96286467 default }" containerID=510f4f138dbb1a08675878dedd63fdd61285a2a810dc250bcf75c95da6ad613d datapathConfiguration="&{false false false false false }" interface=lxc638b5c4676d6 k8sPodName=openstack/barbican-ks-user-qth8d labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=510f4f138d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=60 ipv4=10.0.0.143 ipv6= k8sPodName=openstack/barbican-ks-user-qth8d subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=510f4f138d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=60 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=656fb96f-a187-4ae6-b9ea-5033f682195a,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=656fb96f-a187-4ae6-b9ea-5033f682195a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.143 ipv6= k8sPodName=openstack/barbican-ks-user-qth8d subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=656fb96f-a187-4ae6-b9ea-5033f682195a;k8s:batch.kubernetes.io/job-name=barbican-ks-user;k8s:component=ks-user;k8s:controller-uid=656fb96f-a187-4ae6-b9ea-5033f682195a;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-user;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=510f4f138d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=60 identity=920 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=656fb96f-a187-4ae6-b9ea-5033f682195a,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=656fb96f-a187-4ae6-b9ea-5033f682195a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.143 ipv6= k8sPodName=openstack/barbican-ks-user-qth8d oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=510f4f138d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=60 identity=920 ipv4=10.0.0.143 ipv6= k8sPodName=openstack/barbican-ks-user-qth8d subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=510f4f138d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=60 identity=920 ipv4=10.0.0.143 ipv6= k8sPodName=openstack/barbican-ks-user-qth8d subsys=endpoint level=info msg="Successful endpoint creation" containerID=510f4f138d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=60 identity=920 ipv4=10.0.0.143 ipv6= k8sPodName=openstack/barbican-ks-user-qth8d subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=510f4f138d endpointID=60 k8sNamespace=openstack k8sPodName=barbican-ks-user-qth8d subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=656fb96f-a187-4ae6-b9ea-5033f682195a k8s:batch.kubernetes.io/job-name=barbican-ks-user k8s:component=ks-user k8s:controller-uid=656fb96f-a187-4ae6-b9ea-5033f682195a k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-user k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=510f4f138d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=60 identity=920 ipv4=10.0.0.143 ipv6= k8sPodName=openstack/barbican-ks-user-qth8d subsys=endpoint level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Create endpoint request" addressing="&{10.0.0.150 629d5cef-ab53-42b3-b60b-897c2741fa0b default }" containerID=9dd198a1425a9fa55313949aaced2c8d5d526475d3b70ae2961de876f4438944 datapathConfiguration="&{false false false false false }" interface=lxc0024a913ce38 k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-b252n labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9dd198a142 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1680 ipv4=10.0.0.150 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-b252n subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9dd198a142 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1680 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.15.9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.150 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-b252n subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:rook-ceph k8s:io.cilium.k8s.namespace.labels.name:rook-ceph]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-operator;k8s:helm.sh/chart=rook-ceph-v1.15.9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph;k8s:io.cilium.k8s.namespace.labels.name=rook-ceph;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system;k8s:io.kubernetes.pod.namespace=rook-ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9dd198a142 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1680 identity=684 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.15.9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.150 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-b252n oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9dd198a142 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1680 identity=684 ipv4=10.0.0.150 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-b252n subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=9dd198a142 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1680 identity=684 ipv4=10.0.0.150 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-b252n subsys=endpoint level=info msg="Successful endpoint creation" containerID=9dd198a142 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1680 identity=684 ipv4=10.0.0.150 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-b252n subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.168 9966a952-ded5-4062-a7a8-d05bd41b062e default }" containerID=201cb6b4a055d6c8d47b9a2a67821d6b1e2a0708eab22bababf6ccaba099d430 datapathConfiguration="&{false false false false false }" interface=lxcc2f33e581376 k8sPodName=openstack/rook-ceph-detect-version-rlmkj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=201cb6b4a0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1410 ipv4=10.0.0.168 ipv6= k8sPodName=openstack/rook-ceph-detect-version-rlmkj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=201cb6b4a0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1410 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=55e79e0a-2228-4247-838a-09380df5d6d4,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=55e79e0a-2228-4247-838a-09380df5d6d4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.168 ipv6= k8sPodName=openstack/rook-ceph-detect-version-rlmkj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-detect-version;k8s:batch.kubernetes.io/controller-uid=55e79e0a-2228-4247-838a-09380df5d6d4;k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version;k8s:controller-uid=55e79e0a-2228-4247-838a-09380df5d6d4;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=rook-ceph-detect-version;k8s:rook-version=v1.15.9;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=201cb6b4a0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1410 identity=22051 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=55e79e0a-2228-4247-838a-09380df5d6d4,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=55e79e0a-2228-4247-838a-09380df5d6d4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.168 ipv6= k8sPodName=openstack/rook-ceph-detect-version-rlmkj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=201cb6b4a0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1410 identity=22051 ipv4=10.0.0.168 ipv6= k8sPodName=openstack/rook-ceph-detect-version-rlmkj subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=201cb6b4a0 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1410 identity=22051 ipv4=10.0.0.168 ipv6= k8sPodName=openstack/rook-ceph-detect-version-rlmkj subsys=endpoint level=info msg="Successful endpoint creation" containerID=201cb6b4a0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1410 identity=22051 ipv4=10.0.0.168 ipv6= k8sPodName=openstack/rook-ceph-detect-version-rlmkj subsys=daemon level=info msg="Delete endpoint request" containerID=201cb6b4a0 endpointID=1410 k8sNamespace=openstack k8sPodName=rook-ceph-detect-version-rlmkj subsys=daemon level=info msg="Releasing key" key="[k8s:app=rook-ceph-detect-version k8s:batch.kubernetes.io/controller-uid=55e79e0a-2228-4247-838a-09380df5d6d4 k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version k8s:controller-uid=55e79e0a-2228-4247-838a-09380df5d6d4 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=rook-ceph-detect-version k8s:rook-version=v1.15.9]" subsys=allocator level=info msg="Removed endpoint" containerID=201cb6b4a0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1410 identity=22051 ipv4=10.0.0.168 ipv6= k8sPodName=openstack/rook-ceph-detect-version-rlmkj subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.144 5e308756-5c25-4176-aa56-684bbfb5b0d9 default }" containerID=6c433f061987cd9ebf76881c0457d2984955dfa888266a9166ea13a5a2841b6c datapathConfiguration="&{false false false false false }" interface=lxcc5cb6236dc99 k8sPodName=openstack/ceph-object-controller-detect-version-r4nkz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6c433f0619 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3040 ipv4=10.0.0.144 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-r4nkz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6c433f0619 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3040 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=fbd6e9f1-5e3c-404a-8123-2a464b4113e9,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=fbd6e9f1-5e3c-404a-8123-2a464b4113e9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.144 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-r4nkz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=ceph-object-controller-detect-version;k8s:batch.kubernetes.io/controller-uid=fbd6e9f1-5e3c-404a-8123-2a464b4113e9;k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version;k8s:controller-uid=fbd6e9f1-5e3c-404a-8123-2a464b4113e9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=ceph-object-controller-detect-version;k8s:rook-version=v1.15.9;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6c433f0619 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3040 identity=28786 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=fbd6e9f1-5e3c-404a-8123-2a464b4113e9,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=fbd6e9f1-5e3c-404a-8123-2a464b4113e9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.144 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-r4nkz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6c433f0619 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3040 identity=28786 ipv4=10.0.0.144 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-r4nkz subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=6c433f0619 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3040 identity=28786 ipv4=10.0.0.144 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-r4nkz subsys=endpoint level=info msg="Successful endpoint creation" containerID=6c433f0619 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3040 identity=28786 ipv4=10.0.0.144 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-r4nkz subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=6c433f0619 endpointID=3040 k8sNamespace=openstack k8sPodName=ceph-object-controller-detect-version-r4nkz subsys=daemon level=info msg="Releasing key" key="[k8s:app=ceph-object-controller-detect-version k8s:batch.kubernetes.io/controller-uid=fbd6e9f1-5e3c-404a-8123-2a464b4113e9 k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version k8s:controller-uid=fbd6e9f1-5e3c-404a-8123-2a464b4113e9 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=ceph-object-controller-detect-version k8s:rook-version=v1.15.9]" subsys=allocator level=info msg="Removed endpoint" containerID=6c433f0619 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3040 identity=28786 ipv4=10.0.0.144 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-r4nkz subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.175 d9d3db73-a63e-4536-809e-27ab349320be default }" containerID=73fd3a941a4a1f98f65d12d7f82ef9fa878befe6844b5e66c8d8a21d1c213e70 datapathConfiguration="&{false false false false false }" interface=lxc74e7beda21b7 k8sPodName=local-path-storage/helper-pod-create-pvc-91899776-84cc-4128-9691-1feb5b0006c5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=73fd3a941a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2155 ipv4=10.0.0.175 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-91899776-84cc-4128-9691-1feb5b0006c5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=73fd3a941a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2155 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.175 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-91899776-84cc-4128-9691-1feb5b0006c5 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=73fd3a941a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2155 identity=7999 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.175 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-91899776-84cc-4128-9691-1feb5b0006c5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=73fd3a941a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2155 identity=7999 ipv4=10.0.0.175 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-91899776-84cc-4128-9691-1feb5b0006c5 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=73fd3a941a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2155 identity=7999 ipv4=10.0.0.175 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-91899776-84cc-4128-9691-1feb5b0006c5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=73fd3a941a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2155 identity=7999 ipv4=10.0.0.175 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-91899776-84cc-4128-9691-1feb5b0006c5 subsys=daemon level=info msg="Delete endpoint request" containerID=73fd3a941a endpointID=2155 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-91899776-84cc-4128-9691-1feb5b0006c5 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=73fd3a941a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2155 identity=7999 ipv4=10.0.0.175 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-91899776-84cc-4128-9691-1feb5b0006c5 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.87 6b84d97c-1a2f-4cd0-9f30-95fdadcc3781 default }" containerID=ec5d786c1bad07fa884698f89d836c4754cceca5c560a5ad16c8284cc2577df3 datapathConfiguration="&{false false false false false }" interface=lxcc4592f0c4532 k8sPodName=openstack/rabbitmq-glance-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ec5d786c1b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=398 ipv4=10.0.0.87 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ec5d786c1b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=398 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.87 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=ec5d786c1b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=398 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.87 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-glance;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ec5d786c1b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=398 identity=3530 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.87 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ec5d786c1b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=398 identity=3530 ipv4=10.0.0.87 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ec5d786c1b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=398 identity=3530 ipv4=10.0.0.87 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=ec5d786c1b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=398 identity=3530 ipv4=10.0.0.87 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.45 ee1933a8-ca74-4581-ab76-a3deb71d7a10 default }" containerID=f5b1e106ff9583a4d7c04bb5d972e21e524d9a17e1dd81411c6ab43c85c26943 datapathConfiguration="&{false false false false false }" interface=lxcb9221c57a5fe k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-b7rhn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f5b1e106ff datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=193 ipv4=10.0.0.45 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-b7rhn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f5b1e106ff datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=193 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.45 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-b7rhn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-rgw;k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io;k8s:app.kubernetes.io/created-by=rook-ceph-operator;k8s:app.kubernetes.io/instance=ceph;k8s:app.kubernetes.io/managed-by=rook-ceph-operator;k8s:app.kubernetes.io/name=ceph-rgw;k8s:app.kubernetes.io/part-of=ceph;k8s:ceph_daemon_id=ceph;k8s:ceph_daemon_type=rgw;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw;k8s:io.kubernetes.pod.namespace=openstack;k8s:rgw=ceph;k8s:rook.io/operator-namespace=rook-ceph;k8s:rook_cluster=openstack;k8s:rook_object_store=ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f5b1e106ff datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=193 identity=2431 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.45 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-b7rhn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f5b1e106ff datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=193 identity=2431 ipv4=10.0.0.45 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-b7rhn subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.227 80ffd68b-4df4-41c0-bbe2-f3c361bb0830 default }" containerID=6b308eecf682ac54d30fe66b630723a70d1ea13825d8993b4a4d7fdf7a4e475b datapathConfiguration="&{false false false false false }" interface=lxcabba95555ee2 k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-kjcpm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6b308eecf6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=900 ipv4=10.0.0.227 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-kjcpm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6b308eecf6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=900 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.227 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-kjcpm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-crashcollector;k8s:ceph-version=18.2.7-0;k8s:ceph_daemon_id=crash;k8s:crashcollector=crash;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default;k8s:io.kubernetes.pod.namespace=openstack;k8s:node_name=instance;k8s:rook_cluster=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6b308eecf6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=900 identity=50467 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.227 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-kjcpm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6b308eecf6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=900 identity=50467 ipv4=10.0.0.227 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-kjcpm subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f5b1e106ff datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=193 identity=2431 ipv4=10.0.0.45 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-b7rhn subsys=endpoint level=info msg="Successful endpoint creation" containerID=f5b1e106ff datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=193 identity=2431 ipv4=10.0.0.45 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-b7rhn subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=6b308eecf6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=900 identity=50467 ipv4=10.0.0.227 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-kjcpm subsys=endpoint level=info msg="Successful endpoint creation" containerID=6b308eecf6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=900 identity=50467 ipv4=10.0.0.227 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-kjcpm subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.109 9591ca73-6f9f-4175-9fcf-f8b3b7d30fa5 default }" containerID=9211623635d27cbe447fa6eb07806a968a7e013e7274e7dfa59e9920c49ccd7c datapathConfiguration="&{false false false false false }" interface=lxcd4262bc3e3f5 k8sPodName=openstack/glance-db-init-mzzdg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9211623635 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2374 ipv4=10.0.0.109 ipv6= k8sPodName=openstack/glance-db-init-mzzdg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9211623635 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2374 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=ca272323-8f16-4801-a240-54047fde7a4e,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=ca272323-8f16-4801-a240-54047fde7a4e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.109 ipv6= k8sPodName=openstack/glance-db-init-mzzdg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=ca272323-8f16-4801-a240-54047fde7a4e;k8s:batch.kubernetes.io/job-name=glance-db-init;k8s:component=db-init;k8s:controller-uid=ca272323-8f16-4801-a240-54047fde7a4e;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9211623635 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2374 identity=32003 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=ca272323-8f16-4801-a240-54047fde7a4e,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=ca272323-8f16-4801-a240-54047fde7a4e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.109 ipv6= k8sPodName=openstack/glance-db-init-mzzdg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9211623635 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2374 identity=32003 ipv4=10.0.0.109 ipv6= k8sPodName=openstack/glance-db-init-mzzdg subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9211623635 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2374 identity=32003 ipv4=10.0.0.109 ipv6= k8sPodName=openstack/glance-db-init-mzzdg subsys=endpoint level=info msg="Successful endpoint creation" containerID=9211623635 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2374 identity=32003 ipv4=10.0.0.109 ipv6= k8sPodName=openstack/glance-db-init-mzzdg subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=9211623635 endpointID=2374 k8sNamespace=openstack k8sPodName=glance-db-init-mzzdg subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=ca272323-8f16-4801-a240-54047fde7a4e k8s:batch.kubernetes.io/job-name=glance-db-init k8s:component=db-init k8s:controller-uid=ca272323-8f16-4801-a240-54047fde7a4e k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=9211623635 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2374 identity=32003 ipv4=10.0.0.109 ipv6= k8sPodName=openstack/glance-db-init-mzzdg subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.190 eaa8b430-19cc-4003-92a4-ed2522438723 default }" containerID=4e289fca7176fc4a6bf7117daf958695d595625897561fefc73e463f2e0ed524 datapathConfiguration="&{false false false false false }" interface=lxc2de09e417aea k8sPodName=openstack/glance-db-sync-wq2h6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4e289fca71 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1026 ipv4=10.0.0.190 ipv6= k8sPodName=openstack/glance-db-sync-wq2h6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4e289fca71 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1026 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=f2898947-7a9b-41e4-9be1-94335d32c5ec,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=f2898947-7a9b-41e4-9be1-94335d32c5ec,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.190 ipv6= k8sPodName=openstack/glance-db-sync-wq2h6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=f2898947-7a9b-41e4-9be1-94335d32c5ec;k8s:batch.kubernetes.io/job-name=glance-db-sync;k8s:component=db-sync;k8s:controller-uid=f2898947-7a9b-41e4-9be1-94335d32c5ec;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-sync;k8s:release_group=glance;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=4e289fca71 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1026 identity=56406 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=f2898947-7a9b-41e4-9be1-94335d32c5ec,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=f2898947-7a9b-41e4-9be1-94335d32c5ec,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.190 ipv6= k8sPodName=openstack/glance-db-sync-wq2h6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4e289fca71 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1026 identity=56406 ipv4=10.0.0.190 ipv6= k8sPodName=openstack/glance-db-sync-wq2h6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4e289fca71 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1026 identity=56406 ipv4=10.0.0.190 ipv6= k8sPodName=openstack/glance-db-sync-wq2h6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=4e289fca71 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1026 identity=56406 ipv4=10.0.0.190 ipv6= k8sPodName=openstack/glance-db-sync-wq2h6 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=4e289fca71 endpointID=1026 k8sNamespace=openstack k8sPodName=glance-db-sync-wq2h6 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=f2898947-7a9b-41e4-9be1-94335d32c5ec k8s:batch.kubernetes.io/job-name=glance-db-sync k8s:component=db-sync k8s:controller-uid=f2898947-7a9b-41e4-9be1-94335d32c5ec k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-sync k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=4e289fca71 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1026 identity=56406 ipv4=10.0.0.190 ipv6= k8sPodName=openstack/glance-db-sync-wq2h6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.16 371000b9-4429-41e2-81e3-bdd323b0c1da default }" containerID=782a45d6092953544cc1bc4c1e57a377ba46acccf62344a912283e2803a7b9b4 datapathConfiguration="&{false false false false false }" interface=lxc15c9b20ddd46 k8sPodName=openstack/glance-rabbit-init-dhjn9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=782a45d609 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=59 ipv4=10.0.0.16 ipv6= k8sPodName=openstack/glance-rabbit-init-dhjn9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=782a45d609 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=59 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=a79a0de1-0bbe-4d3b-8ca9-603bd00508ce,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=a79a0de1-0bbe-4d3b-8ca9-603bd00508ce,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.16 ipv6= k8sPodName=openstack/glance-rabbit-init-dhjn9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=a79a0de1-0bbe-4d3b-8ca9-603bd00508ce;k8s:batch.kubernetes.io/job-name=glance-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=a79a0de1-0bbe-4d3b-8ca9-603bd00508ce;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-rabbit-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=782a45d609 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=59 identity=62003 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=a79a0de1-0bbe-4d3b-8ca9-603bd00508ce,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=a79a0de1-0bbe-4d3b-8ca9-603bd00508ce,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.16 ipv6= k8sPodName=openstack/glance-rabbit-init-dhjn9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=782a45d609 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=59 identity=62003 ipv4=10.0.0.16 ipv6= k8sPodName=openstack/glance-rabbit-init-dhjn9 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=782a45d609 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=59 identity=62003 ipv4=10.0.0.16 ipv6= k8sPodName=openstack/glance-rabbit-init-dhjn9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=782a45d609 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=59 identity=62003 ipv4=10.0.0.16 ipv6= k8sPodName=openstack/glance-rabbit-init-dhjn9 subsys=daemon level=info msg="Delete endpoint request" containerID=782a45d609 endpointID=59 k8sNamespace=openstack k8sPodName=glance-rabbit-init-dhjn9 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=a79a0de1-0bbe-4d3b-8ca9-603bd00508ce k8s:batch.kubernetes.io/job-name=glance-rabbit-init k8s:component=rabbit-init k8s:controller-uid=a79a0de1-0bbe-4d3b-8ca9-603bd00508ce k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-rabbit-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=782a45d609 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=59 identity=62003 ipv4=10.0.0.16 ipv6= k8sPodName=openstack/glance-rabbit-init-dhjn9 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.77 0e699932-3794-42ad-8ab2-de0eedb64e0d default }" containerID=37f1325ab2c443707218d89a0048316a8992ba030606faef5f5e6adb2b8b5d56 datapathConfiguration="&{false false false false false }" interface=lxc46efa839cbf7 k8sPodName=openstack/glance-ks-service-ntskd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=37f1325ab2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=881 ipv4=10.0.0.77 ipv6= k8sPodName=openstack/glance-ks-service-ntskd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=37f1325ab2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=881 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=3a8e7f0e-7d86-4987-91ff-757582ec6ac1,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=3a8e7f0e-7d86-4987-91ff-757582ec6ac1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.77 ipv6= k8sPodName=openstack/glance-ks-service-ntskd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=3a8e7f0e-7d86-4987-91ff-757582ec6ac1;k8s:batch.kubernetes.io/job-name=glance-ks-service;k8s:component=ks-service;k8s:controller-uid=3a8e7f0e-7d86-4987-91ff-757582ec6ac1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-service;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=37f1325ab2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=881 identity=50896 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=3a8e7f0e-7d86-4987-91ff-757582ec6ac1,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=3a8e7f0e-7d86-4987-91ff-757582ec6ac1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.77 ipv6= k8sPodName=openstack/glance-ks-service-ntskd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=37f1325ab2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=881 identity=50896 ipv4=10.0.0.77 ipv6= k8sPodName=openstack/glance-ks-service-ntskd subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=37f1325ab2 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=881 identity=50896 ipv4=10.0.0.77 ipv6= k8sPodName=openstack/glance-ks-service-ntskd subsys=endpoint level=info msg="Successful endpoint creation" containerID=37f1325ab2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=881 identity=50896 ipv4=10.0.0.77 ipv6= k8sPodName=openstack/glance-ks-service-ntskd subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=37f1325ab2 endpointID=881 k8sNamespace=openstack k8sPodName=glance-ks-service-ntskd subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=3a8e7f0e-7d86-4987-91ff-757582ec6ac1 k8s:batch.kubernetes.io/job-name=glance-ks-service k8s:component=ks-service k8s:controller-uid=3a8e7f0e-7d86-4987-91ff-757582ec6ac1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-service k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=37f1325ab2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=881 identity=50896 ipv4=10.0.0.77 ipv6= k8sPodName=openstack/glance-ks-service-ntskd subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.210 0bd01520-dfc2-46c3-b12d-e478e5cf59d4 default }" containerID=8ba27705ac36673ef055f2324cd97d5f3bb7245122bfcab0cf9b93414e04b4e4 datapathConfiguration="&{false false false false false }" interface=lxc9579adbbee61 k8sPodName=openstack/glance-ks-endpoints-cw4db labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8ba27705ac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1497 ipv4=10.0.0.210 ipv6= k8sPodName=openstack/glance-ks-endpoints-cw4db subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8ba27705ac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1497 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=a9730812-0b78-4d99-bb66-bf3dffcc546c,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=a9730812-0b78-4d99-bb66-bf3dffcc546c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.210 ipv6= k8sPodName=openstack/glance-ks-endpoints-cw4db subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=a9730812-0b78-4d99-bb66-bf3dffcc546c;k8s:batch.kubernetes.io/job-name=glance-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=a9730812-0b78-4d99-bb66-bf3dffcc546c;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-endpoints;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8ba27705ac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1497 identity=13784 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=a9730812-0b78-4d99-bb66-bf3dffcc546c,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=a9730812-0b78-4d99-bb66-bf3dffcc546c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.210 ipv6= k8sPodName=openstack/glance-ks-endpoints-cw4db oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8ba27705ac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1497 identity=13784 ipv4=10.0.0.210 ipv6= k8sPodName=openstack/glance-ks-endpoints-cw4db subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=8ba27705ac datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1497 identity=13784 ipv4=10.0.0.210 ipv6= k8sPodName=openstack/glance-ks-endpoints-cw4db subsys=endpoint level=info msg="Successful endpoint creation" containerID=8ba27705ac datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1497 identity=13784 ipv4=10.0.0.210 ipv6= k8sPodName=openstack/glance-ks-endpoints-cw4db subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=8ba27705ac endpointID=1497 k8sNamespace=openstack k8sPodName=glance-ks-endpoints-cw4db subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=a9730812-0b78-4d99-bb66-bf3dffcc546c k8s:batch.kubernetes.io/job-name=glance-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=a9730812-0b78-4d99-bb66-bf3dffcc546c k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-endpoints k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=8ba27705ac datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1497 identity=13784 ipv4=10.0.0.210 ipv6= k8sPodName=openstack/glance-ks-endpoints-cw4db subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.195 8c56c349-d143-47ee-a8fb-d3ed300415ab default }" containerID=c3849a9c0f958c91f3416f3dded14d7371b6b0c815d58e0fdd144da2d5383051 datapathConfiguration="&{false false false false false }" interface=lxcb1659394cc34 k8sPodName=openstack/glance-ks-user-42dl7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c3849a9c0f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1235 ipv4=10.0.0.195 ipv6= k8sPodName=openstack/glance-ks-user-42dl7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c3849a9c0f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1235 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=0b2cc10a-8ae3-432d-a9c6-2960ed7e2d60,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=0b2cc10a-8ae3-432d-a9c6-2960ed7e2d60,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.195 ipv6= k8sPodName=openstack/glance-ks-user-42dl7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=0b2cc10a-8ae3-432d-a9c6-2960ed7e2d60;k8s:batch.kubernetes.io/job-name=glance-ks-user;k8s:component=ks-user;k8s:controller-uid=0b2cc10a-8ae3-432d-a9c6-2960ed7e2d60;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-user;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c3849a9c0f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1235 identity=7626 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=0b2cc10a-8ae3-432d-a9c6-2960ed7e2d60,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=0b2cc10a-8ae3-432d-a9c6-2960ed7e2d60,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.195 ipv6= k8sPodName=openstack/glance-ks-user-42dl7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c3849a9c0f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1235 identity=7626 ipv4=10.0.0.195 ipv6= k8sPodName=openstack/glance-ks-user-42dl7 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=c3849a9c0f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1235 identity=7626 ipv4=10.0.0.195 ipv6= k8sPodName=openstack/glance-ks-user-42dl7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=c3849a9c0f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1235 identity=7626 ipv4=10.0.0.195 ipv6= k8sPodName=openstack/glance-ks-user-42dl7 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=c3849a9c0f endpointID=1235 k8sNamespace=openstack k8sPodName=glance-ks-user-42dl7 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=0b2cc10a-8ae3-432d-a9c6-2960ed7e2d60 k8s:batch.kubernetes.io/job-name=glance-ks-user k8s:component=ks-user k8s:controller-uid=0b2cc10a-8ae3-432d-a9c6-2960ed7e2d60 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-user k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=c3849a9c0f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1235 identity=7626 ipv4=10.0.0.195 ipv6= k8sPodName=openstack/glance-ks-user-42dl7 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.210 9ca0bab1-7805-43ff-b724-e1a7abe54103 default }" containerID=986f3e6716320c11b41dbe911df1c8a01cc5b0e77b363fc660e11a5c60deb0b8 datapathConfiguration="&{false false false false false }" interface=lxc77b609803bc1 k8sPodName=openstack/glance-metadefs-load-6wns6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=986f3e6716 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3349 ipv4=10.0.0.210 ipv6= k8sPodName=openstack/glance-metadefs-load-6wns6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=986f3e6716 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3349 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=61f15cde-8ca5-44a6-bf6d-db8e0c785d06,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=61f15cde-8ca5-44a6-bf6d-db8e0c785d06,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.210 ipv6= k8sPodName=openstack/glance-metadefs-load-6wns6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=986f3e6716 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3349 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.210 ipv6= k8sPodName=openstack/glance-metadefs-load-6wns6 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=61f15cde-8ca5-44a6-bf6d-db8e0c785d06;k8s:batch.kubernetes.io/job-name=glance-metadefs-load;k8s:component=metadefs_load;k8s:controller-uid=61f15cde-8ca5-44a6-bf6d-db8e0c785d06;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-metadefs-load;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=986f3e6716 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3349 identity=54375 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=61f15cde-8ca5-44a6-bf6d-db8e0c785d06,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=61f15cde-8ca5-44a6-bf6d-db8e0c785d06,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.210 ipv6= k8sPodName=openstack/glance-metadefs-load-6wns6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=986f3e6716 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3349 identity=54375 ipv4=10.0.0.210 ipv6= k8sPodName=openstack/glance-metadefs-load-6wns6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=986f3e6716 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3349 identity=54375 ipv4=10.0.0.210 ipv6= k8sPodName=openstack/glance-metadefs-load-6wns6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=986f3e6716 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3349 identity=54375 ipv4=10.0.0.210 ipv6= k8sPodName=openstack/glance-metadefs-load-6wns6 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=986f3e6716 endpointID=3349 k8sNamespace=openstack k8sPodName=glance-metadefs-load-6wns6 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=61f15cde-8ca5-44a6-bf6d-db8e0c785d06 k8s:batch.kubernetes.io/job-name=glance-metadefs-load k8s:component=metadefs_load k8s:controller-uid=61f15cde-8ca5-44a6-bf6d-db8e0c785d06 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-metadefs-load k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=986f3e6716 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3349 identity=54375 ipv4=10.0.0.210 ipv6= k8sPodName=openstack/glance-metadefs-load-6wns6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.147 d2d84c7b-76e9-4658-bb2d-db0c0da8a634 default }" containerID=b42307208444b4de74ffaed6d9d5b8e2241eb6263ddd77efcf29495598959873 datapathConfiguration="&{false false false false false }" interface=lxc40a214fa9651 k8sPodName=openstack/glance-storage-init-4cnrd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b423072084 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4092 ipv4=10.0.0.147 ipv6= k8sPodName=openstack/glance-storage-init-4cnrd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b423072084 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4092 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=3c79ce62-7d67-49c7-8a61-37d50c0c354e,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=3c79ce62-7d67-49c7-8a61-37d50c0c354e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.147 ipv6= k8sPodName=openstack/glance-storage-init-4cnrd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=3c79ce62-7d67-49c7-8a61-37d50c0c354e;k8s:batch.kubernetes.io/job-name=glance-storage-init;k8s:component=storage-init;k8s:controller-uid=3c79ce62-7d67-49c7-8a61-37d50c0c354e;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-storage-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b423072084 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4092 identity=29663 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=3c79ce62-7d67-49c7-8a61-37d50c0c354e,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=3c79ce62-7d67-49c7-8a61-37d50c0c354e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.147 ipv6= k8sPodName=openstack/glance-storage-init-4cnrd oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=b423072084 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4092 identity=29663 ipv4=10.0.0.147 ipv6= k8sPodName=openstack/glance-storage-init-4cnrd subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b423072084 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=4092 identity=29663 ipv4=10.0.0.147 ipv6= k8sPodName=openstack/glance-storage-init-4cnrd subsys=endpoint level=info msg="Successful endpoint creation" containerID=b423072084 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=4092 identity=29663 ipv4=10.0.0.147 ipv6= k8sPodName=openstack/glance-storage-init-4cnrd subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=b423072084 endpointID=4092 k8sNamespace=openstack k8sPodName=glance-storage-init-4cnrd subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=3c79ce62-7d67-49c7-8a61-37d50c0c354e k8s:batch.kubernetes.io/job-name=glance-storage-init k8s:component=storage-init k8s:controller-uid=3c79ce62-7d67-49c7-8a61-37d50c0c354e k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-storage-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=b423072084 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=4092 identity=29663 ipv4=10.0.0.147 ipv6= k8sPodName=openstack/glance-storage-init-4cnrd subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.151 695f2e11-a5c1-475f-ac4a-1489594d10f3 default }" containerID=442f7374322ecee18c3575b38c7c7a70f61d27d94064c31c2a1772c05df347e7 datapathConfiguration="&{false false false false false }" interface=lxc8d9284d462ff k8sPodName=openstack/glance-api-546f9dfd4c-bf8nk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=442f737432 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=157 ipv4=10.0.0.151 ipv6= k8sPodName=openstack/glance-api-546f9dfd4c-bf8nk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=442f737432 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=157 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.151 ipv6= k8sPodName=openstack/glance-api-546f9dfd4c-bf8nk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=442f737432 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=157 identity=473 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.151 ipv6= k8sPodName=openstack/glance-api-546f9dfd4c-bf8nk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=442f737432 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=157 identity=473 ipv4=10.0.0.151 ipv6= k8sPodName=openstack/glance-api-546f9dfd4c-bf8nk subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=442f737432 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=157 identity=473 ipv4=10.0.0.151 ipv6= k8sPodName=openstack/glance-api-546f9dfd4c-bf8nk subsys=endpoint level=info msg="Successful endpoint creation" containerID=442f737432 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=157 identity=473 ipv4=10.0.0.151 ipv6= k8sPodName=openstack/glance-api-546f9dfd4c-bf8nk subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.237 5195a983-d839-4036-971c-1e1e6284f7ff default }" containerID=8eec397f3adbb0f702915d74e3c89efbb87e461867842ea88f3a2196933e26f3 datapathConfiguration="&{false false false false false }" interface=lxcd42d809d2124 k8sPodName=openstack/staffeln-conductor-56bcd8d7fc-mdtkf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8eec397f3a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3745 ipv4=10.0.0.237 ipv6= k8sPodName=openstack/staffeln-conductor-56bcd8d7fc-mdtkf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8eec397f3a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3745 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.237 ipv6= k8sPodName=openstack/staffeln-conductor-56bcd8d7fc-mdtkf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=conductor;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=8eec397f3a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3745 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.237 ipv6= k8sPodName=openstack/staffeln-conductor-56bcd8d7fc-mdtkf line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=8eec397f3a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3745 identity=10479 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.237 ipv6= k8sPodName=openstack/staffeln-conductor-56bcd8d7fc-mdtkf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8eec397f3a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3745 identity=10479 ipv4=10.0.0.237 ipv6= k8sPodName=openstack/staffeln-conductor-56bcd8d7fc-mdtkf subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.112 f5df45ef-504e-4d35-8504-635555e7ea4b default }" containerID=5049d013c2b018a350280e144492d61d12ea2a95064cd446ab0465d54aa30019 datapathConfiguration="&{false false false false false }" interface=lxc9c1bb0d949f6 k8sPodName=openstack/staffeln-api-74c898d79b-l9p95 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5049d013c2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1802 ipv4=10.0.0.112 ipv6= k8sPodName=openstack/staffeln-api-74c898d79b-l9p95 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.250 64e338f7-4aa7-4511-bd76-c17c2870f672 default }" containerID=9a4dccca9b82f3eb547361a6a2fc986df2bd3dadb79d88af60e6b802f1a76566 datapathConfiguration="&{false false false false false }" interface=lxc2d0759fbc3ce k8sPodName=openstack/staffeln-db-init-s29d5 labels="[]" subsys=daemon sync-build=true level=info msg="Resolving identity labels (blocking)" containerID=5049d013c2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1802 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.112 ipv6= k8sPodName=openstack/staffeln-api-74c898d79b-l9p95 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="New endpoint" containerID=9a4dccca9b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2495 ipv4=10.0.0.250 ipv6= k8sPodName=openstack/staffeln-db-init-s29d5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9a4dccca9b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2495 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=b28ffec4-99ab-48d5-994e-cba59105e400,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=b28ffec4-99ab-48d5-994e-cba59105e400,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.250 ipv6= k8sPodName=openstack/staffeln-db-init-s29d5 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Identity of endpoint changed" containerID=5049d013c2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1802 identity=51775 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.112 ipv6= k8sPodName=openstack/staffeln-api-74c898d79b-l9p95 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5049d013c2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1802 identity=51775 ipv4=10.0.0.112 ipv6= k8sPodName=openstack/staffeln-api-74c898d79b-l9p95 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=b28ffec4-99ab-48d5-994e-cba59105e400;k8s:batch.kubernetes.io/job-name=staffeln-db-init;k8s:component=db-init;k8s:controller-uid=b28ffec4-99ab-48d5-994e-cba59105e400;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-init;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9a4dccca9b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2495 identity=59476 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=b28ffec4-99ab-48d5-994e-cba59105e400,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=b28ffec4-99ab-48d5-994e-cba59105e400,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.250 ipv6= k8sPodName=openstack/staffeln-db-init-s29d5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9a4dccca9b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2495 identity=59476 ipv4=10.0.0.250 ipv6= k8sPodName=openstack/staffeln-db-init-s29d5 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8eec397f3a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3745 identity=10479 ipv4=10.0.0.237 ipv6= k8sPodName=openstack/staffeln-conductor-56bcd8d7fc-mdtkf subsys=endpoint level=info msg="Successful endpoint creation" containerID=8eec397f3a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3745 identity=10479 ipv4=10.0.0.237 ipv6= k8sPodName=openstack/staffeln-conductor-56bcd8d7fc-mdtkf subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=9a4dccca9b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2495 identity=59476 ipv4=10.0.0.250 ipv6= k8sPodName=openstack/staffeln-db-init-s29d5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=9a4dccca9b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2495 identity=59476 ipv4=10.0.0.250 ipv6= k8sPodName=openstack/staffeln-db-init-s29d5 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=5049d013c2 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1802 identity=51775 ipv4=10.0.0.112 ipv6= k8sPodName=openstack/staffeln-api-74c898d79b-l9p95 subsys=endpoint level=info msg="Successful endpoint creation" containerID=5049d013c2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1802 identity=51775 ipv4=10.0.0.112 ipv6= k8sPodName=openstack/staffeln-api-74c898d79b-l9p95 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=9a4dccca9b endpointID=2495 k8sNamespace=openstack k8sPodName=staffeln-db-init-s29d5 subsys=daemon level=info msg="Releasing key" key="[k8s:application=staffeln k8s:batch.kubernetes.io/controller-uid=b28ffec4-99ab-48d5-994e-cba59105e400 k8s:batch.kubernetes.io/job-name=staffeln-db-init k8s:component=db-init k8s:controller-uid=b28ffec4-99ab-48d5-994e-cba59105e400 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=staffeln-db-init k8s:release_group=staffeln]" subsys=allocator level=info msg="Removed endpoint" containerID=9a4dccca9b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2495 identity=59476 ipv4=10.0.0.250 ipv6= k8sPodName=openstack/staffeln-db-init-s29d5 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.97 6f73401d-e1bf-4154-aee0-d9fa2d4d9eab default }" containerID=827f19f423453cd604e91f51033f79877670a186e595951944c28039f3816912 datapathConfiguration="&{false false false false false }" interface=lxc3a95f8cc14aa k8sPodName=openstack/staffeln-db-sync-j4wfv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=827f19f423 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1227 ipv4=10.0.0.97 ipv6= k8sPodName=openstack/staffeln-db-sync-j4wfv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=827f19f423 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1227 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=5d917db9-5be2-4e9f-ad5b-eb5e68c2614f,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=5d917db9-5be2-4e9f-ad5b-eb5e68c2614f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.97 ipv6= k8sPodName=openstack/staffeln-db-sync-j4wfv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=5d917db9-5be2-4e9f-ad5b-eb5e68c2614f;k8s:batch.kubernetes.io/job-name=staffeln-db-sync;k8s:component=db-sync;k8s:controller-uid=5d917db9-5be2-4e9f-ad5b-eb5e68c2614f;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-sync;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=827f19f423 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1227 identity=40358 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=5d917db9-5be2-4e9f-ad5b-eb5e68c2614f,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=5d917db9-5be2-4e9f-ad5b-eb5e68c2614f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.97 ipv6= k8sPodName=openstack/staffeln-db-sync-j4wfv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=827f19f423 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1227 identity=40358 ipv4=10.0.0.97 ipv6= k8sPodName=openstack/staffeln-db-sync-j4wfv subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=827f19f423 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1227 identity=40358 ipv4=10.0.0.97 ipv6= k8sPodName=openstack/staffeln-db-sync-j4wfv subsys=endpoint level=info msg="Successful endpoint creation" containerID=827f19f423 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1227 identity=40358 ipv4=10.0.0.97 ipv6= k8sPodName=openstack/staffeln-db-sync-j4wfv subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=827f19f423 endpointID=1227 k8sNamespace=openstack k8sPodName=staffeln-db-sync-j4wfv subsys=daemon level=info msg="Releasing key" key="[k8s:application=staffeln k8s:batch.kubernetes.io/controller-uid=5d917db9-5be2-4e9f-ad5b-eb5e68c2614f k8s:batch.kubernetes.io/job-name=staffeln-db-sync k8s:component=db-sync k8s:controller-uid=5d917db9-5be2-4e9f-ad5b-eb5e68c2614f k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=staffeln-db-sync k8s:release_group=staffeln]" subsys=allocator level=info msg="Removed endpoint" containerID=827f19f423 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1227 identity=40358 ipv4=10.0.0.97 ipv6= k8sPodName=openstack/staffeln-db-sync-j4wfv subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.148 2f621ec1-0644-41a5-95cc-3d01a113b41c default }" containerID=e02f107f5750bfce8882a75ffe030ee2ace8ae7982d786b10c5bb5bf5be5a502 datapathConfiguration="&{false false false false false }" interface=lxc4e1aa8b1fb13 k8sPodName=local-path-storage/helper-pod-create-pvc-07d7798c-ee21-48bf-ae9b-aa044d0f06e1 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e02f107f57 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3691 ipv4=10.0.0.148 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-07d7798c-ee21-48bf-ae9b-aa044d0f06e1 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e02f107f57 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3691 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.148 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-07d7798c-ee21-48bf-ae9b-aa044d0f06e1 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e02f107f57 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3691 identity=7999 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.148 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-07d7798c-ee21-48bf-ae9b-aa044d0f06e1 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e02f107f57 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3691 identity=7999 ipv4=10.0.0.148 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-07d7798c-ee21-48bf-ae9b-aa044d0f06e1 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e02f107f57 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3691 identity=7999 ipv4=10.0.0.148 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-07d7798c-ee21-48bf-ae9b-aa044d0f06e1 subsys=endpoint level=info msg="Successful endpoint creation" containerID=e02f107f57 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3691 identity=7999 ipv4=10.0.0.148 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-07d7798c-ee21-48bf-ae9b-aa044d0f06e1 subsys=daemon level=info msg="Delete endpoint request" containerID=e02f107f57 endpointID=3691 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-07d7798c-ee21-48bf-ae9b-aa044d0f06e1 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=e02f107f57 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3691 identity=7999 ipv4=10.0.0.148 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-07d7798c-ee21-48bf-ae9b-aa044d0f06e1 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.202 3b19e361-c78a-4c08-b85d-8f9bb8fe84d5 default }" containerID=43b64dbe901e4a8f75dcf9ed90ddc52b0613a055dc6ca3615375760c8d2a39d8 datapathConfiguration="&{false false false false false }" interface=lxcf895a11648fd k8sPodName=openstack/rabbitmq-cinder-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=43b64dbe90 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=946 ipv4=10.0.0.202 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=43b64dbe90 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=946 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-cinder,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cinder-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-cinder-server-0" ipv4=10.0.0.202 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-cinder;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cinder-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-cinder-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=43b64dbe90 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=946 identity=10261 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-cinder,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cinder-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-cinder-server-0" ipv4=10.0.0.202 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=43b64dbe90 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=946 identity=10261 ipv4=10.0.0.202 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=43b64dbe90 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=946 identity=10261 ipv4=10.0.0.202 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=43b64dbe90 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=946 identity=10261 ipv4=10.0.0.202 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.60 a6c78020-ab4c-45d0-a377-7ca67bf988ba default }" containerID=39c3915bc0549048c37277380fc9e5c1a0c600b50f0db5fea4930757caac7308 datapathConfiguration="&{false false false false false }" interface=lxc28c455909aef k8sPodName=openstack/cinder-scheduler-66f986c58-l6nwm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=39c3915bc0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=866 ipv4=10.0.0.60 ipv6= k8sPodName=openstack/cinder-scheduler-66f986c58-l6nwm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=39c3915bc0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=866 identityLabels="k8s:application=cinder,k8s:component=scheduler,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-scheduler,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.60 ipv6= k8sPodName=openstack/cinder-scheduler-66f986c58-l6nwm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:component=scheduler;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-scheduler;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=cinder;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=39c3915bc0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=866 identity=1739 identityLabels="k8s:application=cinder,k8s:component=scheduler,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-scheduler,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.60 ipv6= k8sPodName=openstack/cinder-scheduler-66f986c58-l6nwm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=39c3915bc0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=866 identity=1739 ipv4=10.0.0.60 ipv6= k8sPodName=openstack/cinder-scheduler-66f986c58-l6nwm subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.196 9f02162e-a8ae-4695-a4ed-be0852323e65 default }" containerID=07c2bf9481335a4a02832142bb802ee9fc57bfdbdf49bbc4639afdef1695916c datapathConfiguration="&{false false false false false }" interface=lxcb3098e0fe465 k8sPodName=openstack/cinder-api-5cfb4b78d8-zj4tv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=07c2bf9481 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=951 ipv4=10.0.0.196 ipv6= k8sPodName=openstack/cinder-api-5cfb4b78d8-zj4tv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=07c2bf9481 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=951 identityLabels="k8s:application=cinder,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.196 ipv6= k8sPodName=openstack/cinder-api-5cfb4b78d8-zj4tv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=07c2bf9481 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=951 identity=29438 identityLabels="k8s:application=cinder,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.196 ipv6= k8sPodName=openstack/cinder-api-5cfb4b78d8-zj4tv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=07c2bf9481 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=951 identity=29438 ipv4=10.0.0.196 ipv6= k8sPodName=openstack/cinder-api-5cfb4b78d8-zj4tv subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=39c3915bc0 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=866 identity=1739 ipv4=10.0.0.60 ipv6= k8sPodName=openstack/cinder-scheduler-66f986c58-l6nwm subsys=endpoint level=info msg="Successful endpoint creation" containerID=39c3915bc0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=866 identity=1739 ipv4=10.0.0.60 ipv6= k8sPodName=openstack/cinder-scheduler-66f986c58-l6nwm subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=07c2bf9481 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=951 identity=29438 ipv4=10.0.0.196 ipv6= k8sPodName=openstack/cinder-api-5cfb4b78d8-zj4tv subsys=endpoint level=info msg="Successful endpoint creation" containerID=07c2bf9481 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=951 identity=29438 ipv4=10.0.0.196 ipv6= k8sPodName=openstack/cinder-api-5cfb4b78d8-zj4tv subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.232 ed5703c8-d833-46b6-9906-e0eaf4103391 default }" containerID=5e2ab43fb981ef96f385d0d8c283bd5b6d70d055e624cb006dcbf6487ad7b1f0 datapathConfiguration="&{false false false false false }" interface=lxc3dc6d165c30f k8sPodName=openstack/cinder-db-init-bg6mk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5e2ab43fb9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3710 ipv4=10.0.0.232 ipv6= k8sPodName=openstack/cinder-db-init-bg6mk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5e2ab43fb9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3710 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=ccc84305-be81-42b8-b5db-2ac57546cba3,k8s:batch.kubernetes.io/job-name=cinder-db-init,k8s:component=db-init,k8s:controller-uid=ccc84305-be81-42b8-b5db-2ac57546cba3,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-db-init,k8s:release_group=cinder" ipv4=10.0.0.232 ipv6= k8sPodName=openstack/cinder-db-init-bg6mk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=ccc84305-be81-42b8-b5db-2ac57546cba3;k8s:batch.kubernetes.io/job-name=cinder-db-init;k8s:component=db-init;k8s:controller-uid=ccc84305-be81-42b8-b5db-2ac57546cba3;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-db-init;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5e2ab43fb9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3710 identity=45306 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=ccc84305-be81-42b8-b5db-2ac57546cba3,k8s:batch.kubernetes.io/job-name=cinder-db-init,k8s:component=db-init,k8s:controller-uid=ccc84305-be81-42b8-b5db-2ac57546cba3,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-db-init,k8s:release_group=cinder" ipv4=10.0.0.232 ipv6= k8sPodName=openstack/cinder-db-init-bg6mk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5e2ab43fb9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3710 identity=45306 ipv4=10.0.0.232 ipv6= k8sPodName=openstack/cinder-db-init-bg6mk subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5e2ab43fb9 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3710 identity=45306 ipv4=10.0.0.232 ipv6= k8sPodName=openstack/cinder-db-init-bg6mk subsys=endpoint level=info msg="Successful endpoint creation" containerID=5e2ab43fb9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3710 identity=45306 ipv4=10.0.0.232 ipv6= k8sPodName=openstack/cinder-db-init-bg6mk subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=5e2ab43fb9 endpointID=3710 k8sNamespace=openstack k8sPodName=cinder-db-init-bg6mk subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=ccc84305-be81-42b8-b5db-2ac57546cba3 k8s:batch.kubernetes.io/job-name=cinder-db-init k8s:component=db-init k8s:controller-uid=ccc84305-be81-42b8-b5db-2ac57546cba3 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-db-init k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=5e2ab43fb9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3710 identity=45306 ipv4=10.0.0.232 ipv6= k8sPodName=openstack/cinder-db-init-bg6mk subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.90 029a0353-13d4-4b15-a3d3-8bd478ef3a4f default }" containerID=cb56a4f0ca0e3f0dc0462456e33b91115e05656a376719c28d0b076f2d8cfcf3 datapathConfiguration="&{false false false false false }" interface=lxc8b49360d8892 k8sPodName=openstack/cinder-db-sync-qhx9s labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=cb56a4f0ca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2215 ipv4=10.0.0.90 ipv6= k8sPodName=openstack/cinder-db-sync-qhx9s subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=cb56a4f0ca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2215 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=84e83433-bd72-4e81-bbfd-6cac985267d9,k8s:batch.kubernetes.io/job-name=cinder-db-sync,k8s:component=db-sync,k8s:controller-uid=84e83433-bd72-4e81-bbfd-6cac985267d9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-db-sync,k8s:release_group=cinder" ipv4=10.0.0.90 ipv6= k8sPodName=openstack/cinder-db-sync-qhx9s subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=84e83433-bd72-4e81-bbfd-6cac985267d9;k8s:batch.kubernetes.io/job-name=cinder-db-sync;k8s:component=db-sync;k8s:controller-uid=84e83433-bd72-4e81-bbfd-6cac985267d9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-db-sync;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=cb56a4f0ca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2215 identity=30918 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=84e83433-bd72-4e81-bbfd-6cac985267d9,k8s:batch.kubernetes.io/job-name=cinder-db-sync,k8s:component=db-sync,k8s:controller-uid=84e83433-bd72-4e81-bbfd-6cac985267d9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-db-sync,k8s:release_group=cinder" ipv4=10.0.0.90 ipv6= k8sPodName=openstack/cinder-db-sync-qhx9s oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=cb56a4f0ca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2215 identity=30918 ipv4=10.0.0.90 ipv6= k8sPodName=openstack/cinder-db-sync-qhx9s subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=cb56a4f0ca datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2215 identity=30918 ipv4=10.0.0.90 ipv6= k8sPodName=openstack/cinder-db-sync-qhx9s subsys=endpoint level=info msg="Successful endpoint creation" containerID=cb56a4f0ca datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2215 identity=30918 ipv4=10.0.0.90 ipv6= k8sPodName=openstack/cinder-db-sync-qhx9s subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=cb56a4f0ca endpointID=2215 k8sNamespace=openstack k8sPodName=cinder-db-sync-qhx9s subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=84e83433-bd72-4e81-bbfd-6cac985267d9 k8s:batch.kubernetes.io/job-name=cinder-db-sync k8s:component=db-sync k8s:controller-uid=84e83433-bd72-4e81-bbfd-6cac985267d9 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-db-sync k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=cb56a4f0ca datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2215 identity=30918 ipv4=10.0.0.90 ipv6= k8sPodName=openstack/cinder-db-sync-qhx9s subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.116 82e7d3e9-9a09-4de8-9ea2-9e2982050f37 default }" containerID=09997334ff69693c526331a65df9e864c74c3c54837f61cda4caed038cb8e62c datapathConfiguration="&{false false false false false }" interface=lxc94217cc8275e k8sPodName=openstack/cinder-rabbit-init-fc2rk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=09997334ff datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1010 ipv4=10.0.0.116 ipv6= k8sPodName=openstack/cinder-rabbit-init-fc2rk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=09997334ff datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1010 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=a4c22694-1d97-45a5-84e1-18f97812aa94,k8s:batch.kubernetes.io/job-name=cinder-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=a4c22694-1d97-45a5-84e1-18f97812aa94,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-rabbit-init,k8s:release_group=cinder" ipv4=10.0.0.116 ipv6= k8sPodName=openstack/cinder-rabbit-init-fc2rk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=a4c22694-1d97-45a5-84e1-18f97812aa94;k8s:batch.kubernetes.io/job-name=cinder-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=a4c22694-1d97-45a5-84e1-18f97812aa94;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-rabbit-init;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=09997334ff datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1010 identity=64630 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=a4c22694-1d97-45a5-84e1-18f97812aa94,k8s:batch.kubernetes.io/job-name=cinder-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=a4c22694-1d97-45a5-84e1-18f97812aa94,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-rabbit-init,k8s:release_group=cinder" ipv4=10.0.0.116 ipv6= k8sPodName=openstack/cinder-rabbit-init-fc2rk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=09997334ff datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1010 identity=64630 ipv4=10.0.0.116 ipv6= k8sPodName=openstack/cinder-rabbit-init-fc2rk subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=09997334ff datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1010 identity=64630 ipv4=10.0.0.116 ipv6= k8sPodName=openstack/cinder-rabbit-init-fc2rk subsys=endpoint level=info msg="Successful endpoint creation" containerID=09997334ff datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1010 identity=64630 ipv4=10.0.0.116 ipv6= k8sPodName=openstack/cinder-rabbit-init-fc2rk subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=09997334ff endpointID=1010 k8sNamespace=openstack k8sPodName=cinder-rabbit-init-fc2rk subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=a4c22694-1d97-45a5-84e1-18f97812aa94 k8s:batch.kubernetes.io/job-name=cinder-rabbit-init k8s:component=rabbit-init k8s:controller-uid=a4c22694-1d97-45a5-84e1-18f97812aa94 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-rabbit-init k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=09997334ff datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1010 identity=64630 ipv4=10.0.0.116 ipv6= k8sPodName=openstack/cinder-rabbit-init-fc2rk subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.175 22e8db4f-bdda-43b0-a8d3-601f79cb246d default }" containerID=5a6f0defe46364d236db170fd401023811c7ac70a00d48764452ee0682a41b1d datapathConfiguration="&{false false false false false }" interface=lxc8aa36c9ce8ae k8sPodName=openstack/cinder-ks-service-hmnj7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5a6f0defe4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=663 ipv4=10.0.0.175 ipv6= k8sPodName=openstack/cinder-ks-service-hmnj7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5a6f0defe4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=663 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=86b45fd3-cb99-4844-a2dc-3d2385128a40,k8s:batch.kubernetes.io/job-name=cinder-ks-service,k8s:component=ks-service,k8s:controller-uid=86b45fd3-cb99-4844-a2dc-3d2385128a40,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-ks-service,k8s:release_group=cinder" ipv4=10.0.0.175 ipv6= k8sPodName=openstack/cinder-ks-service-hmnj7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=86b45fd3-cb99-4844-a2dc-3d2385128a40;k8s:batch.kubernetes.io/job-name=cinder-ks-service;k8s:component=ks-service;k8s:controller-uid=86b45fd3-cb99-4844-a2dc-3d2385128a40;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-ks-service;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5a6f0defe4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=663 identity=13713 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=86b45fd3-cb99-4844-a2dc-3d2385128a40,k8s:batch.kubernetes.io/job-name=cinder-ks-service,k8s:component=ks-service,k8s:controller-uid=86b45fd3-cb99-4844-a2dc-3d2385128a40,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-ks-service,k8s:release_group=cinder" ipv4=10.0.0.175 ipv6= k8sPodName=openstack/cinder-ks-service-hmnj7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5a6f0defe4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=663 identity=13713 ipv4=10.0.0.175 ipv6= k8sPodName=openstack/cinder-ks-service-hmnj7 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=5a6f0defe4 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=663 identity=13713 ipv4=10.0.0.175 ipv6= k8sPodName=openstack/cinder-ks-service-hmnj7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=5a6f0defe4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=663 identity=13713 ipv4=10.0.0.175 ipv6= k8sPodName=openstack/cinder-ks-service-hmnj7 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=5a6f0defe4 endpointID=663 k8sNamespace=openstack k8sPodName=cinder-ks-service-hmnj7 subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=86b45fd3-cb99-4844-a2dc-3d2385128a40 k8s:batch.kubernetes.io/job-name=cinder-ks-service k8s:component=ks-service k8s:controller-uid=86b45fd3-cb99-4844-a2dc-3d2385128a40 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-ks-service k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=5a6f0defe4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=663 identity=13713 ipv4=10.0.0.175 ipv6= k8sPodName=openstack/cinder-ks-service-hmnj7 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.203 ffa2288e-c52b-4b75-9c30-3f401ce20853 default }" containerID=7f0322d51976864445cb8f414ed1995f41c5afeadf0a41c6e0c110d4405885c6 datapathConfiguration="&{false false false false false }" interface=lxc5ec1f88b7c90 k8sPodName=openstack/cinder-ks-endpoints-9mnt6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7f0322d519 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1099 ipv4=10.0.0.203 ipv6= k8sPodName=openstack/cinder-ks-endpoints-9mnt6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7f0322d519 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1099 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=0f9ba10a-79fe-43a4-9749-020f6378b1a1,k8s:batch.kubernetes.io/job-name=cinder-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=0f9ba10a-79fe-43a4-9749-020f6378b1a1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-ks-endpoints,k8s:release_group=cinder" ipv4=10.0.0.203 ipv6= k8sPodName=openstack/cinder-ks-endpoints-9mnt6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=0f9ba10a-79fe-43a4-9749-020f6378b1a1;k8s:batch.kubernetes.io/job-name=cinder-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=0f9ba10a-79fe-43a4-9749-020f6378b1a1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-ks-endpoints;k8s:release_group=cinder;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=7f0322d519 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1099 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.203 ipv6= k8sPodName=openstack/cinder-ks-endpoints-9mnt6 line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=7f0322d519 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1099 identity=21550 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=0f9ba10a-79fe-43a4-9749-020f6378b1a1,k8s:batch.kubernetes.io/job-name=cinder-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=0f9ba10a-79fe-43a4-9749-020f6378b1a1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-ks-endpoints,k8s:release_group=cinder" ipv4=10.0.0.203 ipv6= k8sPodName=openstack/cinder-ks-endpoints-9mnt6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7f0322d519 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1099 identity=21550 ipv4=10.0.0.203 ipv6= k8sPodName=openstack/cinder-ks-endpoints-9mnt6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7f0322d519 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1099 identity=21550 ipv4=10.0.0.203 ipv6= k8sPodName=openstack/cinder-ks-endpoints-9mnt6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=7f0322d519 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1099 identity=21550 ipv4=10.0.0.203 ipv6= k8sPodName=openstack/cinder-ks-endpoints-9mnt6 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=7f0322d519 endpointID=1099 k8sNamespace=openstack k8sPodName=cinder-ks-endpoints-9mnt6 subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=0f9ba10a-79fe-43a4-9749-020f6378b1a1 k8s:batch.kubernetes.io/job-name=cinder-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=0f9ba10a-79fe-43a4-9749-020f6378b1a1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-ks-endpoints k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=7f0322d519 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1099 identity=21550 ipv4=10.0.0.203 ipv6= k8sPodName=openstack/cinder-ks-endpoints-9mnt6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.33 d073591f-822c-414d-b48a-791ea133fdc1 default }" containerID=82673d387ec43cd704c1746de0ead2e783e6eb0f1c2d26b545364b22c0476119 datapathConfiguration="&{false false false false false }" interface=lxc8b8bd6df6ce5 k8sPodName=openstack/cinder-ks-user-z9qwf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=82673d387e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=696 ipv4=10.0.0.33 ipv6= k8sPodName=openstack/cinder-ks-user-z9qwf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=82673d387e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=696 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=c87fd8fa-5702-429e-bc83-bbd6e6476d5d,k8s:batch.kubernetes.io/job-name=cinder-ks-user,k8s:component=ks-user,k8s:controller-uid=c87fd8fa-5702-429e-bc83-bbd6e6476d5d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-ks-user,k8s:release_group=cinder" ipv4=10.0.0.33 ipv6= k8sPodName=openstack/cinder-ks-user-z9qwf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=c87fd8fa-5702-429e-bc83-bbd6e6476d5d;k8s:batch.kubernetes.io/job-name=cinder-ks-user;k8s:component=ks-user;k8s:controller-uid=c87fd8fa-5702-429e-bc83-bbd6e6476d5d;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-ks-user;k8s:release_group=cinder;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=82673d387e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=696 identity=8154 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=c87fd8fa-5702-429e-bc83-bbd6e6476d5d,k8s:batch.kubernetes.io/job-name=cinder-ks-user,k8s:component=ks-user,k8s:controller-uid=c87fd8fa-5702-429e-bc83-bbd6e6476d5d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-ks-user,k8s:release_group=cinder" ipv4=10.0.0.33 ipv6= k8sPodName=openstack/cinder-ks-user-z9qwf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=82673d387e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=696 identity=8154 ipv4=10.0.0.33 ipv6= k8sPodName=openstack/cinder-ks-user-z9qwf subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=82673d387e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=696 identity=8154 ipv4=10.0.0.33 ipv6= k8sPodName=openstack/cinder-ks-user-z9qwf subsys=endpoint level=info msg="Successful endpoint creation" containerID=82673d387e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=696 identity=8154 ipv4=10.0.0.33 ipv6= k8sPodName=openstack/cinder-ks-user-z9qwf subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=82673d387e endpointID=696 k8sNamespace=openstack k8sPodName=cinder-ks-user-z9qwf subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=c87fd8fa-5702-429e-bc83-bbd6e6476d5d k8s:batch.kubernetes.io/job-name=cinder-ks-user k8s:component=ks-user k8s:controller-uid=c87fd8fa-5702-429e-bc83-bbd6e6476d5d k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-ks-user k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=82673d387e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=696 identity=8154 ipv4=10.0.0.33 ipv6= k8sPodName=openstack/cinder-ks-user-z9qwf subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.94 b9cf97cd-435d-42ac-a3d1-bb3f345de4b9 default }" containerID=dde18d0a8e8fff373e4ea55c412d20b0b7cc8851a6fd918bd507beb408541e7f datapathConfiguration="&{false false false false false }" interface=lxcc070ea37ee7f k8sPodName=openstack/cinder-backup-storage-init-rffrs labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=dde18d0a8e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3889 ipv4=10.0.0.94 ipv6= k8sPodName=openstack/cinder-backup-storage-init-rffrs subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=dde18d0a8e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3889 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=1c991138-ff2f-45b0-9e68-e6eca016f3d3,k8s:batch.kubernetes.io/job-name=cinder-backup-storage-init,k8s:component=storage-init,k8s:controller-uid=1c991138-ff2f-45b0-9e68-e6eca016f3d3,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-backup-storage-init,k8s:release_group=cinder" ipv4=10.0.0.94 ipv6= k8sPodName=openstack/cinder-backup-storage-init-rffrs subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=1c991138-ff2f-45b0-9e68-e6eca016f3d3;k8s:batch.kubernetes.io/job-name=cinder-backup-storage-init;k8s:component=storage-init;k8s:controller-uid=1c991138-ff2f-45b0-9e68-e6eca016f3d3;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup-storage-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-backup-storage-init;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=dde18d0a8e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3889 identity=7479 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=1c991138-ff2f-45b0-9e68-e6eca016f3d3,k8s:batch.kubernetes.io/job-name=cinder-backup-storage-init,k8s:component=storage-init,k8s:controller-uid=1c991138-ff2f-45b0-9e68-e6eca016f3d3,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-backup-storage-init,k8s:release_group=cinder" ipv4=10.0.0.94 ipv6= k8sPodName=openstack/cinder-backup-storage-init-rffrs oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=dde18d0a8e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3889 identity=7479 ipv4=10.0.0.94 ipv6= k8sPodName=openstack/cinder-backup-storage-init-rffrs subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=dde18d0a8e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3889 identity=7479 ipv4=10.0.0.94 ipv6= k8sPodName=openstack/cinder-backup-storage-init-rffrs subsys=endpoint level=info msg="Successful endpoint creation" containerID=dde18d0a8e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3889 identity=7479 ipv4=10.0.0.94 ipv6= k8sPodName=openstack/cinder-backup-storage-init-rffrs subsys=daemon level=info msg="Delete endpoint request" containerID=dde18d0a8e endpointID=3889 k8sNamespace=openstack k8sPodName=cinder-backup-storage-init-rffrs subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=1c991138-ff2f-45b0-9e68-e6eca016f3d3 k8s:batch.kubernetes.io/job-name=cinder-backup-storage-init k8s:component=storage-init k8s:controller-uid=1c991138-ff2f-45b0-9e68-e6eca016f3d3 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup-storage-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-backup-storage-init k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=dde18d0a8e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3889 identity=7479 ipv4=10.0.0.94 ipv6= k8sPodName=openstack/cinder-backup-storage-init-rffrs subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.85 0794963c-8efb-459b-9cb3-475acb1c035f default }" containerID=2c89afd462110b689c72839d65c64f685975fb45af3744ee24c451a69d6322d7 datapathConfiguration="&{false false false false false }" interface=lxcf4928b2f4303 k8sPodName=openstack/cinder-create-internal-tenant-gcqrc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2c89afd462 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=11 ipv4=10.0.0.85 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-gcqrc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2c89afd462 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=11 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=b8a16dbe-0631-4738-966b-479e7f9da536,k8s:batch.kubernetes.io/job-name=cinder-create-internal-tenant,k8s:component=create-internal-tenant,k8s:controller-uid=b8a16dbe-0631-4738-966b-479e7f9da536,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-create-internal-tenant,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-create-internal-tenant,k8s:release_group=cinder" ipv4=10.0.0.85 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-gcqrc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=b8a16dbe-0631-4738-966b-479e7f9da536;k8s:batch.kubernetes.io/job-name=cinder-create-internal-tenant;k8s:component=create-internal-tenant;k8s:controller-uid=b8a16dbe-0631-4738-966b-479e7f9da536;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-create-internal-tenant;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-create-internal-tenant;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2c89afd462 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=11 identity=7998 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=b8a16dbe-0631-4738-966b-479e7f9da536,k8s:batch.kubernetes.io/job-name=cinder-create-internal-tenant,k8s:component=create-internal-tenant,k8s:controller-uid=b8a16dbe-0631-4738-966b-479e7f9da536,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-create-internal-tenant,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-create-internal-tenant,k8s:release_group=cinder" ipv4=10.0.0.85 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-gcqrc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2c89afd462 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=11 identity=7998 ipv4=10.0.0.85 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-gcqrc subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2c89afd462 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=11 identity=7998 ipv4=10.0.0.85 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-gcqrc subsys=endpoint level=info msg="Successful endpoint creation" containerID=2c89afd462 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=11 identity=7998 ipv4=10.0.0.85 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-gcqrc subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=2c89afd462 endpointID=11 k8sNamespace=openstack k8sPodName=cinder-create-internal-tenant-gcqrc subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=b8a16dbe-0631-4738-966b-479e7f9da536 k8s:batch.kubernetes.io/job-name=cinder-create-internal-tenant k8s:component=create-internal-tenant k8s:controller-uid=b8a16dbe-0631-4738-966b-479e7f9da536 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-create-internal-tenant k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-create-internal-tenant k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=2c89afd462 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=11 identity=7998 ipv4=10.0.0.85 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-gcqrc subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.103 5336b18c-d401-408b-b73d-f84e5c722040 default }" containerID=f0dd23a9aabde402d9b3f7d9e229375ac9a5f0a34a750aff1afb28668fc63f71 datapathConfiguration="&{false false false false false }" interface=lxc47563b9e3da9 k8sPodName=openstack/cinder-storage-init-6kmc2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f0dd23a9aa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1158 ipv4=10.0.0.103 ipv6= k8sPodName=openstack/cinder-storage-init-6kmc2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f0dd23a9aa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1158 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=8b892c72-83f9-4fb6-82e6-bb97841914da,k8s:batch.kubernetes.io/job-name=cinder-storage-init,k8s:component=storage-init,k8s:controller-uid=8b892c72-83f9-4fb6-82e6-bb97841914da,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-storage-init,k8s:release_group=cinder" ipv4=10.0.0.103 ipv6= k8sPodName=openstack/cinder-storage-init-6kmc2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=8b892c72-83f9-4fb6-82e6-bb97841914da;k8s:batch.kubernetes.io/job-name=cinder-storage-init;k8s:component=storage-init;k8s:controller-uid=8b892c72-83f9-4fb6-82e6-bb97841914da;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-storage-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-storage-init;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f0dd23a9aa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1158 identity=6115 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=8b892c72-83f9-4fb6-82e6-bb97841914da,k8s:batch.kubernetes.io/job-name=cinder-storage-init,k8s:component=storage-init,k8s:controller-uid=8b892c72-83f9-4fb6-82e6-bb97841914da,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-storage-init,k8s:release_group=cinder" ipv4=10.0.0.103 ipv6= k8sPodName=openstack/cinder-storage-init-6kmc2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f0dd23a9aa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1158 identity=6115 ipv4=10.0.0.103 ipv6= k8sPodName=openstack/cinder-storage-init-6kmc2 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=f0dd23a9aa datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1158 identity=6115 ipv4=10.0.0.103 ipv6= k8sPodName=openstack/cinder-storage-init-6kmc2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f0dd23a9aa datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1158 identity=6115 ipv4=10.0.0.103 ipv6= k8sPodName=openstack/cinder-storage-init-6kmc2 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=f0dd23a9aa endpointID=1158 k8sNamespace=openstack k8sPodName=cinder-storage-init-6kmc2 subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=8b892c72-83f9-4fb6-82e6-bb97841914da k8s:batch.kubernetes.io/job-name=cinder-storage-init k8s:component=storage-init k8s:controller-uid=8b892c72-83f9-4fb6-82e6-bb97841914da k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-storage-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-storage-init k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=f0dd23a9aa datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1158 identity=6115 ipv4=10.0.0.103 ipv6= k8sPodName=openstack/cinder-storage-init-6kmc2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.166 d37ab9e3-3cad-4828-bfe4-08c84555c4e4 default }" containerID=712046608cca005f1908a483765493dc698dbeb8d395f4a79cf679137b33bc00 datapathConfiguration="&{false false false false false }" interface=lxc4a45b331a7c3 k8sPodName=openstack/cinder-bootstrap-l4885 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=712046608c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3787 ipv4=10.0.0.166 ipv6= k8sPodName=openstack/cinder-bootstrap-l4885 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=712046608c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3787 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=ec8126e8-19ea-4ed2-a41e-33159acdc33e,k8s:batch.kubernetes.io/job-name=cinder-bootstrap,k8s:component=bootstrap,k8s:controller-uid=ec8126e8-19ea-4ed2-a41e-33159acdc33e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-bootstrap,k8s:release_group=cinder" ipv4=10.0.0.166 ipv6= k8sPodName=openstack/cinder-bootstrap-l4885 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=ec8126e8-19ea-4ed2-a41e-33159acdc33e;k8s:batch.kubernetes.io/job-name=cinder-bootstrap;k8s:component=bootstrap;k8s:controller-uid=ec8126e8-19ea-4ed2-a41e-33159acdc33e;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-bootstrap;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=712046608c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3787 identity=19666 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=ec8126e8-19ea-4ed2-a41e-33159acdc33e,k8s:batch.kubernetes.io/job-name=cinder-bootstrap,k8s:component=bootstrap,k8s:controller-uid=ec8126e8-19ea-4ed2-a41e-33159acdc33e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-bootstrap,k8s:release_group=cinder" ipv4=10.0.0.166 ipv6= k8sPodName=openstack/cinder-bootstrap-l4885 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=712046608c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3787 identity=19666 ipv4=10.0.0.166 ipv6= k8sPodName=openstack/cinder-bootstrap-l4885 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=712046608c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3787 identity=19666 ipv4=10.0.0.166 ipv6= k8sPodName=openstack/cinder-bootstrap-l4885 subsys=endpoint level=info msg="Successful endpoint creation" containerID=712046608c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3787 identity=19666 ipv4=10.0.0.166 ipv6= k8sPodName=openstack/cinder-bootstrap-l4885 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.229 bb800aaa-617c-48ba-a623-2f3af834502c default }" containerID=bf3d612a118e00144843d33fcc54a3b709a9c7c2b9d841e9a2272d37bae6b933 datapathConfiguration="&{false false false false false }" interface=lxcce3845b91630 k8sPodName=openstack/cinder-backup-c848dc7c8-tdr69 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bf3d612a11 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3428 ipv4=10.0.0.229 ipv6= k8sPodName=openstack/cinder-backup-c848dc7c8-tdr69 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bf3d612a11 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3428 identityLabels="k8s:application=cinder,k8s:component=backup,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.229 ipv6= k8sPodName=openstack/cinder-backup-c848dc7c8-tdr69 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:component=backup;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=bf3d612a11 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3428 identity=9955 identityLabels="k8s:application=cinder,k8s:component=backup,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.229 ipv6= k8sPodName=openstack/cinder-backup-c848dc7c8-tdr69 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=bf3d612a11 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3428 identity=9955 ipv4=10.0.0.229 ipv6= k8sPodName=openstack/cinder-backup-c848dc7c8-tdr69 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.64 e2958854-55b8-41c8-82cb-4457b45f7430 default }" containerID=49ca410d5072cb39b4b3354c0a11debff61a9e23283bb685fa6a0a18ae8da5ae datapathConfiguration="&{false false false false false }" interface=lxcf8a0cb0c9f7f k8sPodName=openstack/cinder-backup-c848dc7c8-rqk22 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=49ca410d50 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2316 ipv4=10.0.0.64 ipv6= k8sPodName=openstack/cinder-backup-c848dc7c8-rqk22 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=49ca410d50 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2316 identityLabels="k8s:application=cinder,k8s:component=backup,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.64 ipv6= k8sPodName=openstack/cinder-backup-c848dc7c8-rqk22 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=49ca410d50 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2316 identity=9955 identityLabels="k8s:application=cinder,k8s:component=backup,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.64 ipv6= k8sPodName=openstack/cinder-backup-c848dc7c8-rqk22 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=49ca410d50 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2316 identity=9955 ipv4=10.0.0.64 ipv6= k8sPodName=openstack/cinder-backup-c848dc7c8-rqk22 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.190 ccf3ef69-31eb-43d6-828d-76909c9ef54a default }" containerID=f61538e2f1b81c505a8c1b9fa9a0633b17d46bf3336bc8cbf36918b754def14c datapathConfiguration="&{false false false false false }" interface=lxcaf2fcfda8dbc k8sPodName=openstack/cinder-backup-c848dc7c8-87tq9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f61538e2f1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=85 ipv4=10.0.0.190 ipv6= k8sPodName=openstack/cinder-backup-c848dc7c8-87tq9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f61538e2f1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=85 identityLabels="k8s:application=cinder,k8s:component=backup,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.190 ipv6= k8sPodName=openstack/cinder-backup-c848dc7c8-87tq9 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=f61538e2f1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=85 identity=9955 identityLabels="k8s:application=cinder,k8s:component=backup,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.190 ipv6= k8sPodName=openstack/cinder-backup-c848dc7c8-87tq9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f61538e2f1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=85 identity=9955 ipv4=10.0.0.190 ipv6= k8sPodName=openstack/cinder-backup-c848dc7c8-87tq9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=bf3d612a11 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3428 identity=9955 ipv4=10.0.0.229 ipv6= k8sPodName=openstack/cinder-backup-c848dc7c8-tdr69 subsys=endpoint level=info msg="Successful endpoint creation" containerID=bf3d612a11 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3428 identity=9955 ipv4=10.0.0.229 ipv6= k8sPodName=openstack/cinder-backup-c848dc7c8-tdr69 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=49ca410d50 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2316 identity=9955 ipv4=10.0.0.64 ipv6= k8sPodName=openstack/cinder-backup-c848dc7c8-rqk22 subsys=endpoint level=info msg="Successful endpoint creation" containerID=49ca410d50 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2316 identity=9955 ipv4=10.0.0.64 ipv6= k8sPodName=openstack/cinder-backup-c848dc7c8-rqk22 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=f61538e2f1 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=85 identity=9955 ipv4=10.0.0.190 ipv6= k8sPodName=openstack/cinder-backup-c848dc7c8-87tq9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f61538e2f1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=85 identity=9955 ipv4=10.0.0.190 ipv6= k8sPodName=openstack/cinder-backup-c848dc7c8-87tq9 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.195 cbf82dee-4b69-4873-8a4c-52e69ba8d4f8 default }" containerID=fee31ba586128b0e4fd78d81e696e69385dfa97825d7ecf2732e2de1edc00f0d datapathConfiguration="&{false false false false false }" interface=lxc21c2ad2bea88 k8sPodName=openstack/cinder-volume-6855567f8d-mfvrr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fee31ba586 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3240 ipv4=10.0.0.195 ipv6= k8sPodName=openstack/cinder-volume-6855567f8d-mfvrr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fee31ba586 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3240 identityLabels="k8s:application=cinder,k8s:component=volume,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-volume,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.195 ipv6= k8sPodName=openstack/cinder-volume-6855567f8d-mfvrr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:component=volume;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-volume;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fee31ba586 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3240 identity=24574 identityLabels="k8s:application=cinder,k8s:component=volume,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-volume,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.195 ipv6= k8sPodName=openstack/cinder-volume-6855567f8d-mfvrr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fee31ba586 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3240 identity=24574 ipv4=10.0.0.195 ipv6= k8sPodName=openstack/cinder-volume-6855567f8d-mfvrr subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=fee31ba586 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3240 identity=24574 ipv4=10.0.0.195 ipv6= k8sPodName=openstack/cinder-volume-6855567f8d-mfvrr subsys=endpoint level=info msg="Successful endpoint creation" containerID=fee31ba586 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3240 identity=24574 ipv4=10.0.0.195 ipv6= k8sPodName=openstack/cinder-volume-6855567f8d-mfvrr subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager