level=info msg="Memory available for map entries (0.003% of 67421642752B): 168554106B" subsys=config level=info msg="option bpf-ct-global-tcp-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-ct-global-any-max set by dynamic sizing to 295708" subsys=config level=info msg="option bpf-nat-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-neigh-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-sock-rev-map-max set by dynamic sizing to 295708" subsys=config level=info msg=" --agent-health-port='9879'" subsys=daemon level=info msg=" --agent-labels=''" subsys=daemon level=info msg=" --agent-liveness-update-interval='1s'" subsys=daemon level=info msg=" --agent-not-ready-taint-key='node.cilium.io/agent-not-ready'" subsys=daemon level=info msg=" --allocator-list-timeout='3m0s'" subsys=daemon level=info msg=" --allow-icmp-frag-needed='true'" subsys=daemon level=info msg=" --allow-localhost='auto'" subsys=daemon level=info msg=" --annotate-k8s-node='false'" subsys=daemon level=info msg=" --api-rate-limit=''" subsys=daemon level=info msg=" --arping-refresh-period='30s'" subsys=daemon level=info msg=" --auto-create-cilium-node-resource='true'" subsys=daemon level=info msg=" --auto-direct-node-routes='false'" subsys=daemon level=info msg=" --bgp-announce-lb-ip='false'" subsys=daemon level=info msg=" --bgp-announce-pod-cidr='false'" subsys=daemon level=info msg=" --bgp-config-path='/var/lib/cilium/bgp/config.yaml'" subsys=daemon level=info msg=" --bpf-auth-map-max='524288'" subsys=daemon level=info msg=" --bpf-ct-global-any-max='262144'" subsys=daemon level=info msg=" --bpf-ct-global-tcp-max='524288'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-fin='10s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-syn='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp-grace='1m0s'" subsys=daemon level=info msg=" --bpf-filter-priority='1'" subsys=daemon level=info msg=" --bpf-fragments-map-max='8192'" subsys=daemon level=info msg=" --bpf-lb-acceleration='disabled'" subsys=daemon level=info msg=" --bpf-lb-affinity-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-algorithm='random'" subsys=daemon level=info msg=" --bpf-lb-dev-ip-addr-inherit=''" subsys=daemon level=info msg=" --bpf-lb-dsr-dispatch='opt'" subsys=daemon level=info msg=" --bpf-lb-dsr-l4-xlate='frontend'" subsys=daemon level=info msg=" --bpf-lb-external-clusterip='false'" subsys=daemon level=info msg=" --bpf-lb-maglev-hash-seed='JLfvgnHc2kaSUFaI'" subsys=daemon level=info msg=" --bpf-lb-maglev-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-maglev-table-size='16381'" subsys=daemon level=info msg=" --bpf-lb-map-max='65536'" subsys=daemon level=info msg=" --bpf-lb-mode='snat'" subsys=daemon level=info msg=" --bpf-lb-rev-nat-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-rss-ipv4-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-rss-ipv6-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-service-backend-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-service-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-sock='false'" subsys=daemon level=info msg=" --bpf-lb-sock-hostns-only='false'" subsys=daemon level=info msg=" --bpf-lb-source-range-map-max='0'" subsys=daemon level=info msg=" --bpf-map-dynamic-size-ratio='0.0025'" subsys=daemon level=info msg=" --bpf-map-event-buffers=''" subsys=daemon level=info msg=" --bpf-nat-global-max='524288'" subsys=daemon level=info msg=" --bpf-neigh-global-max='524288'" subsys=daemon level=info msg=" --bpf-policy-map-full-reconciliation-interval='15m0s'" subsys=daemon level=info msg=" --bpf-policy-map-max='16384'" subsys=daemon level=info msg=" --bpf-root='/sys/fs/bpf'" subsys=daemon level=info msg=" --bpf-sock-rev-map-max='262144'" subsys=daemon level=info msg=" --bypass-ip-availability-upon-restore='false'" subsys=daemon level=info msg=" --certificates-directory='/var/run/cilium/certs'" subsys=daemon level=info msg=" --cflags=''" subsys=daemon level=info msg=" --cgroup-root='/run/cilium/cgroupv2'" subsys=daemon level=info msg=" --cilium-endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --cluster-health-port='4240'" subsys=daemon level=info msg=" --cluster-id='0'" subsys=daemon level=info msg=" --cluster-name='default'" subsys=daemon level=info msg=" --cluster-pool-ipv4-cidr='10.0.0.0/8'" subsys=daemon level=info msg=" --cluster-pool-ipv4-mask-size='24'" subsys=daemon level=info msg=" --clustermesh-config='/var/lib/cilium/clustermesh/'" subsys=daemon level=info msg=" --clustermesh-ip-identities-sync-timeout='1m0s'" subsys=daemon level=info msg=" --cmdref=''" subsys=daemon level=info msg=" --cni-chaining-mode='none'" subsys=daemon level=info msg=" --cni-chaining-target=''" subsys=daemon level=info msg=" --cni-exclusive='true'" subsys=daemon level=info msg=" --cni-external-routing='false'" subsys=daemon level=info msg=" --cni-log-file='/var/run/cilium/cilium-cni.log'" subsys=daemon level=info msg=" --cnp-node-status-gc-interval='0s'" subsys=daemon level=info msg=" --config=''" subsys=daemon level=info msg=" --config-dir='/tmp/cilium/config-map'" subsys=daemon level=info msg=" --config-sources='config-map:kube-system/cilium-config'" subsys=daemon level=info msg=" --conntrack-gc-interval='0s'" subsys=daemon level=info msg=" --conntrack-gc-max-interval='0s'" subsys=daemon level=info msg=" --crd-wait-timeout='5m0s'" subsys=daemon level=info msg=" --custom-cni-conf='false'" subsys=daemon level=info msg=" --datapath-mode='veth'" subsys=daemon level=info msg=" --debug='false'" subsys=daemon level=info msg=" --debug-verbose=''" subsys=daemon level=info msg=" --derive-masquerade-ip-addr-from-device=''" subsys=daemon level=info msg=" --devices=''" subsys=daemon level=info msg=" --direct-routing-device=''" subsys=daemon level=info msg=" --disable-cnp-status-updates='true'" subsys=daemon level=info msg=" --disable-endpoint-crd='false'" subsys=daemon level=info msg=" --disable-envoy-version-check='false'" subsys=daemon level=info msg=" --disable-iptables-feeder-rules=''" subsys=daemon level=info msg=" --dns-max-ips-per-restored-rule='1000'" subsys=daemon level=info msg=" --dns-policy-unload-on-shutdown='false'" subsys=daemon level=info msg=" --dnsproxy-concurrency-limit='0'" subsys=daemon level=info msg=" --dnsproxy-concurrency-processing-grace-period='0s'" subsys=daemon level=info msg=" --dnsproxy-enable-transparent-mode='true'" subsys=daemon level=info msg=" --dnsproxy-lock-count='128'" subsys=daemon level=info msg=" --dnsproxy-lock-timeout='500ms'" subsys=daemon level=info msg=" --egress-gateway-policy-map-max='16384'" subsys=daemon level=info msg=" --egress-gateway-reconciliation-trigger-interval='1s'" subsys=daemon level=info msg=" --egress-masquerade-interfaces=''" subsys=daemon level=info msg=" --egress-multi-home-ip-rule-compat='false'" subsys=daemon level=info msg=" --enable-auto-protect-node-port-range='true'" subsys=daemon level=info msg=" --enable-bandwidth-manager='false'" subsys=daemon level=info msg=" --enable-bbr='false'" subsys=daemon level=info msg=" --enable-bgp-control-plane='false'" subsys=daemon level=info msg=" --enable-bpf-clock-probe='false'" subsys=daemon level=info msg=" --enable-bpf-masquerade='false'" subsys=daemon level=info msg=" --enable-bpf-tproxy='false'" subsys=daemon level=info msg=" --enable-cilium-api-server-access='*'" subsys=daemon level=info msg=" --enable-cilium-endpoint-slice='false'" subsys=daemon level=info msg=" --enable-cilium-health-api-server-access='*'" subsys=daemon level=info msg=" --enable-custom-calls='false'" subsys=daemon level=info msg=" --enable-endpoint-health-checking='true'" subsys=daemon level=info msg=" --enable-endpoint-routes='false'" subsys=daemon level=info msg=" --enable-envoy-config='false'" subsys=daemon level=info msg=" --enable-external-ips='false'" subsys=daemon level=info msg=" --enable-health-check-nodeport='true'" subsys=daemon level=info msg=" --enable-health-checking='true'" subsys=daemon level=info msg=" --enable-high-scale-ipcache='false'" subsys=daemon level=info msg=" --enable-host-firewall='false'" subsys=daemon level=info msg=" --enable-host-legacy-routing='false'" subsys=daemon level=info msg=" --enable-host-port='false'" subsys=daemon level=info msg=" --enable-hubble='false'" subsys=daemon level=info msg=" --enable-hubble-recorder-api='true'" subsys=daemon level=info msg=" --enable-icmp-rules='true'" subsys=daemon level=info msg=" --enable-identity-mark='true'" subsys=daemon level=info msg=" --enable-ip-masq-agent='false'" subsys=daemon level=info msg=" --enable-ipsec='false'" subsys=daemon level=info msg=" --enable-ipsec-key-watcher='true'" subsys=daemon level=info msg=" --enable-ipv4='true'" subsys=daemon level=info msg=" --enable-ipv4-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv4-egress-gateway='false'" subsys=daemon level=info msg=" --enable-ipv4-fragment-tracking='true'" subsys=daemon level=info msg=" --enable-ipv4-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6='false'" subsys=daemon level=info msg=" --enable-ipv6-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv6-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6-ndp='false'" subsys=daemon level=info msg=" --enable-k8s='true'" subsys=daemon level=info msg=" --enable-k8s-api-discovery='false'" subsys=daemon level=info msg=" --enable-k8s-endpoint-slice='true'" subsys=daemon level=info msg=" --enable-k8s-event-handover='false'" subsys=daemon level=info msg=" --enable-k8s-networkpolicy='true'" subsys=daemon level=info msg=" --enable-k8s-terminating-endpoint='true'" subsys=daemon level=info msg=" --enable-l2-announcements='false'" subsys=daemon level=info msg=" --enable-l2-neigh-discovery='true'" subsys=daemon level=info msg=" --enable-l2-pod-announcements='false'" subsys=daemon level=info msg=" --enable-l7-proxy='true'" subsys=daemon level=info msg=" --enable-local-node-route='true'" subsys=daemon level=info msg=" --enable-local-redirect-policy='false'" subsys=daemon level=info msg=" --enable-mke='false'" subsys=daemon level=info msg=" --enable-monitor='true'" subsys=daemon level=info msg=" --enable-nat46x64-gateway='false'" subsys=daemon level=info msg=" --enable-node-port='false'" subsys=daemon level=info msg=" --enable-pmtu-discovery='false'" subsys=daemon level=info msg=" --enable-policy='default'" subsys=daemon level=info msg=" --enable-recorder='false'" subsys=daemon level=info msg=" --enable-remote-node-identity='true'" subsys=daemon level=info msg=" --enable-runtime-device-detection='false'" subsys=daemon level=info msg=" --enable-sctp='false'" subsys=daemon level=info msg=" --enable-service-topology='false'" subsys=daemon level=info msg=" --enable-session-affinity='false'" subsys=daemon level=info msg=" --enable-srv6='false'" subsys=daemon level=info msg=" --enable-stale-cilium-endpoint-cleanup='true'" subsys=daemon level=info msg=" --enable-svc-source-range-check='true'" subsys=daemon level=info msg=" --enable-tracing='false'" subsys=daemon level=info msg=" --enable-unreachable-routes='false'" subsys=daemon level=info msg=" --enable-vtep='false'" subsys=daemon level=info msg=" --enable-well-known-identities='false'" subsys=daemon level=info msg=" --enable-wireguard='false'" subsys=daemon level=info msg=" --enable-wireguard-userspace-fallback='false'" subsys=daemon level=info msg=" --enable-xdp-prefilter='false'" subsys=daemon level=info msg=" --enable-xt-socket-fallback='true'" subsys=daemon level=info msg=" --encrypt-interface=''" subsys=daemon level=info msg=" --encrypt-node='false'" subsys=daemon level=info msg=" --endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --endpoint-queue-size='25'" subsys=daemon level=info msg=" --endpoint-status=''" subsys=daemon level=info msg=" --envoy-config-timeout='2m0s'" subsys=daemon level=info msg=" --envoy-log=''" subsys=daemon level=info msg=" --exclude-local-address=''" subsys=daemon level=info msg=" --external-envoy-proxy='false'" subsys=daemon level=info msg=" --fixed-identity-mapping=''" subsys=daemon level=info msg=" --fqdn-regex-compile-lru-size='1024'" subsys=daemon level=info msg=" --gops-port='9890'" subsys=daemon level=info msg=" --http-403-msg=''" subsys=daemon level=info msg=" --http-idle-timeout='0'" subsys=daemon level=info msg=" --http-max-grpc-timeout='0'" subsys=daemon level=info msg=" --http-normalize-path='true'" subsys=daemon level=info msg=" --http-request-timeout='3600'" subsys=daemon level=info msg=" --http-retry-count='3'" subsys=daemon level=info msg=" --http-retry-timeout='0'" subsys=daemon level=info msg=" --hubble-disable-tls='false'" subsys=daemon level=info msg=" --hubble-event-buffer-capacity='4095'" subsys=daemon level=info msg=" --hubble-event-queue-size='0'" subsys=daemon level=info msg=" --hubble-export-file-compress='false'" subsys=daemon level=info msg=" --hubble-export-file-max-backups='5'" subsys=daemon level=info msg=" --hubble-export-file-max-size-mb='10'" subsys=daemon level=info msg=" --hubble-export-file-path=''" subsys=daemon level=info msg=" --hubble-listen-address=''" subsys=daemon level=info msg=" --hubble-metrics=''" subsys=daemon level=info msg=" --hubble-metrics-server=''" subsys=daemon level=info msg=" --hubble-monitor-events=''" subsys=daemon level=info msg=" --hubble-prefer-ipv6='false'" subsys=daemon level=info msg=" --hubble-recorder-sink-queue-size='1024'" subsys=daemon level=info msg=" --hubble-recorder-storage-path='/var/run/cilium/pcaps'" subsys=daemon level=info msg=" --hubble-skip-unknown-cgroup-ids='true'" subsys=daemon level=info msg=" --hubble-socket-path='/var/run/cilium/hubble.sock'" subsys=daemon level=info msg=" --hubble-tls-cert-file=''" subsys=daemon level=info msg=" --hubble-tls-client-ca-files=''" subsys=daemon level=info msg=" --hubble-tls-key-file=''" subsys=daemon level=info msg=" --identity-allocation-mode='crd'" subsys=daemon level=info msg=" --identity-change-grace-period='5s'" subsys=daemon level=info msg=" --identity-gc-interval='15m0s'" subsys=daemon level=info msg=" --identity-heartbeat-timeout='30m0s'" subsys=daemon level=info msg=" --identity-restore-grace-period='10m0s'" subsys=daemon level=info msg=" --install-egress-gateway-routes='false'" subsys=daemon level=info msg=" --install-iptables-rules='true'" subsys=daemon level=info msg=" --install-no-conntrack-iptables-rules='false'" subsys=daemon level=info msg=" --ip-allocation-timeout='2m0s'" subsys=daemon level=info msg=" --ip-masq-agent-config-path='/etc/config/ip-masq-agent'" subsys=daemon level=info msg=" --ipam='cluster-pool'" subsys=daemon level=info msg=" --ipam-cilium-node-update-rate='15s'" subsys=daemon level=info msg=" --ipam-multi-pool-pre-allocation='default=8'" subsys=daemon level=info msg=" --ipsec-key-file=''" subsys=daemon level=info msg=" --ipsec-key-rotation-duration='5m0s'" subsys=daemon level=info msg=" --iptables-lock-timeout='5s'" subsys=daemon level=info msg=" --iptables-random-fully='false'" subsys=daemon level=info msg=" --ipv4-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv4-node='auto'" subsys=daemon level=info msg=" --ipv4-pod-subnets=''" subsys=daemon level=info msg=" --ipv4-range='auto'" subsys=daemon level=info msg=" --ipv4-service-loopback-address='169.254.42.1'" subsys=daemon level=info msg=" --ipv4-service-range='auto'" subsys=daemon level=info msg=" --ipv6-cluster-alloc-cidr='f00d::/64'" subsys=daemon level=info msg=" --ipv6-mcast-device=''" subsys=daemon level=info msg=" --ipv6-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv6-node='auto'" subsys=daemon level=info msg=" --ipv6-pod-subnets=''" subsys=daemon level=info msg=" --ipv6-range='auto'" subsys=daemon level=info msg=" --ipv6-service-range='auto'" subsys=daemon level=info msg=" --join-cluster='false'" subsys=daemon level=info msg=" --k8s-api-server=''" subsys=daemon level=info msg=" --k8s-client-burst='10'" subsys=daemon level=info msg=" --k8s-client-qps='5'" subsys=daemon level=info msg=" --k8s-heartbeat-timeout='30s'" subsys=daemon level=info msg=" --k8s-kubeconfig-path=''" subsys=daemon level=info msg=" --k8s-namespace='kube-system'" subsys=daemon level=info msg=" --k8s-require-ipv4-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-require-ipv6-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-service-cache-size='128'" subsys=daemon level=info msg=" --k8s-service-proxy-name=''" subsys=daemon level=info msg=" --k8s-sync-timeout='3m0s'" subsys=daemon level=info msg=" --k8s-watcher-endpoint-selector='metadata.name!=kube-scheduler,metadata.name!=kube-controller-manager,metadata.name!=etcd-operator,metadata.name!=gcp-controller-manager'" subsys=daemon level=info msg=" --keep-config='false'" subsys=daemon level=info msg=" --kube-proxy-replacement='disabled'" subsys=daemon level=info msg=" --kube-proxy-replacement-healthz-bind-address=''" subsys=daemon level=info msg=" --kvstore=''" subsys=daemon level=info msg=" --kvstore-connectivity-timeout='2m0s'" subsys=daemon level=info msg=" --kvstore-lease-ttl='15m0s'" subsys=daemon level=info msg=" --kvstore-max-consecutive-quorum-errors='2'" subsys=daemon level=info msg=" --kvstore-opt=''" subsys=daemon level=info msg=" --kvstore-periodic-sync='5m0s'" subsys=daemon level=info msg=" --l2-announcements-lease-duration='15s'" subsys=daemon level=info msg=" --l2-announcements-renew-deadline='5s'" subsys=daemon level=info msg=" --l2-announcements-retry-period='2s'" subsys=daemon level=info msg=" --l2-pod-announcements-interface=''" subsys=daemon level=info msg=" --label-prefix-file=''" subsys=daemon level=info msg=" --labels=''" subsys=daemon level=info msg=" --lib-dir='/var/lib/cilium'" subsys=daemon level=info msg=" --local-max-addr-scope='252'" subsys=daemon level=info msg=" --local-router-ipv4=''" subsys=daemon level=info msg=" --local-router-ipv6=''" subsys=daemon level=info msg=" --log-driver=''" subsys=daemon level=info msg=" --log-opt=''" subsys=daemon level=info msg=" --log-system-load='false'" subsys=daemon level=info msg=" --max-controller-interval='0'" subsys=daemon level=info msg=" --mesh-auth-enabled='true'" subsys=daemon level=info msg=" --mesh-auth-gc-interval='5m0s'" subsys=daemon level=info msg=" --mesh-auth-mutual-listener-port='0'" subsys=daemon level=info msg=" --mesh-auth-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-rotated-identities-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-signal-backoff-duration='1s'" subsys=daemon level=info msg=" --mesh-auth-spiffe-trust-domain='spiffe.cilium'" subsys=daemon level=info msg=" --mesh-auth-spire-admin-socket=''" subsys=daemon level=info msg=" --metrics=''" subsys=daemon level=info msg=" --mke-cgroup-mount=''" subsys=daemon level=info msg=" --monitor-aggregation='medium'" subsys=daemon level=info msg=" --monitor-aggregation-flags='all'" subsys=daemon level=info msg=" --monitor-aggregation-interval='5s'" subsys=daemon level=info msg=" --monitor-queue-size='0'" subsys=daemon level=info msg=" --mtu='0'" subsys=daemon level=info msg=" --node-encryption-opt-out-labels='node-role.kubernetes.io/control-plane'" subsys=daemon level=info msg=" --node-port-acceleration='disabled'" subsys=daemon level=info msg=" --node-port-algorithm='random'" subsys=daemon level=info msg=" --node-port-bind-protection='true'" subsys=daemon level=info msg=" --node-port-mode='snat'" subsys=daemon level=info msg=" --node-port-range='30000,32767'" subsys=daemon level=info msg=" --nodes-gc-interval='5m0s'" subsys=daemon level=info msg=" --operator-api-serve-addr='127.0.0.1:9234'" subsys=daemon level=info msg=" --policy-audit-mode='false'" subsys=daemon level=info msg=" --policy-queue-size='100'" subsys=daemon level=info msg=" --policy-trigger-interval='1s'" subsys=daemon level=info msg=" --pprof='false'" subsys=daemon level=info msg=" --pprof-address='localhost'" subsys=daemon level=info msg=" --pprof-port='6060'" subsys=daemon level=info msg=" --preallocate-bpf-maps='false'" subsys=daemon level=info msg=" --prepend-iptables-chains='true'" subsys=daemon level=info msg=" --procfs='/host/proc'" subsys=daemon level=info msg=" --prometheus-serve-addr=':9962'" subsys=daemon level=info msg=" --proxy-connect-timeout='2'" subsys=daemon level=info msg=" --proxy-gid='1337'" subsys=daemon level=info msg=" --proxy-idle-timeout-seconds='60'" subsys=daemon level=info msg=" --proxy-max-connection-duration-seconds='0'" subsys=daemon level=info msg=" --proxy-max-requests-per-connection='0'" subsys=daemon level=info msg=" --proxy-prometheus-port='9964'" subsys=daemon level=info msg=" --read-cni-conf=''" subsys=daemon level=info msg=" --remove-cilium-node-taints='true'" subsys=daemon level=info msg=" --restore='true'" subsys=daemon level=info msg=" --route-metric='0'" subsys=daemon level=info msg=" --routing-mode='tunnel'" subsys=daemon level=info msg=" --set-cilium-is-up-condition='true'" subsys=daemon level=info msg=" --set-cilium-node-taints='true'" subsys=daemon level=info msg=" --sidecar-istio-proxy-image='cilium/istio_proxy'" subsys=daemon level=info msg=" --single-cluster-route='false'" subsys=daemon level=info msg=" --skip-cnp-status-startup-clean='false'" subsys=daemon level=info msg=" --socket-path='/var/run/cilium/cilium.sock'" subsys=daemon level=info msg=" --srv6-encap-mode='reduced'" subsys=daemon level=info msg=" --state-dir='/var/run/cilium'" subsys=daemon level=info msg=" --synchronize-k8s-nodes='true'" subsys=daemon level=info msg=" --tofqdns-dns-reject-response-code='refused'" subsys=daemon level=info msg=" --tofqdns-enable-dns-compression='true'" subsys=daemon level=info msg=" --tofqdns-endpoint-max-ip-per-hostname='50'" subsys=daemon level=info msg=" --tofqdns-idle-connection-grace-period='0s'" subsys=daemon level=info msg=" --tofqdns-max-deferred-connection-deletes='10000'" subsys=daemon level=info msg=" --tofqdns-min-ttl='0'" subsys=daemon level=info msg=" --tofqdns-pre-cache=''" subsys=daemon level=info msg=" --tofqdns-proxy-port='0'" subsys=daemon level=info msg=" --tofqdns-proxy-response-max-delay='100ms'" subsys=daemon level=info msg=" --trace-payloadlen='128'" subsys=daemon level=info msg=" --trace-sock='true'" subsys=daemon level=info msg=" --tunnel=''" subsys=daemon level=info msg=" --tunnel-port='6082'" subsys=daemon level=info msg=" --tunnel-protocol='geneve'" subsys=daemon level=info msg=" --unmanaged-pod-watcher-interval='15'" subsys=daemon level=info msg=" --use-cilium-internal-ip-for-ipsec='false'" subsys=daemon level=info msg=" --version='false'" subsys=daemon level=info msg=" --vlan-bpf-bypass=''" subsys=daemon level=info msg=" --vtep-cidr=''" subsys=daemon level=info msg=" --vtep-endpoint=''" subsys=daemon level=info msg=" --vtep-mac=''" subsys=daemon level=info msg=" --vtep-mask=''" subsys=daemon level=info msg=" --wireguard-encapsulate='false'" subsys=daemon level=info msg=" --write-cni-conf-when-ready='/host/etc/cni/net.d/05-cilium.conflist'" subsys=daemon level=info msg=" _ _ _" subsys=daemon level=info msg=" ___|_| |_|_ _ _____" subsys=daemon level=info msg="| _| | | | | | |" subsys=daemon level=info msg="|___|_|_|_|___|_|_|_|" subsys=daemon level=info msg="Cilium 1.14.8 cf6e022e 2024-03-13T12:23:35-04:00 go version go1.21.8 linux/amd64" subsys=daemon level=info msg="clang (10.0.0) and kernel (5.15.0) versions: OK!" subsys=linux-datapath level=info msg="linking environment: OK!" subsys=linux-datapath level=info msg="Kernel config file not found: if the agent fails to start, check the system requirements at https://docs.cilium.io/en/stable/operations/system_requirements" subsys=probes level=info msg="Detected mounted BPF filesystem at /sys/fs/bpf" subsys=bpf level=info msg="Mounted cgroupv2 filesystem at /run/cilium/cgroupv2" subsys=cgroups level=info msg="Parsing base label prefixes from default label list" subsys=labels-filter level=info msg="Parsing additional label prefixes from user inputs: []" subsys=labels-filter level=info msg="Final label prefixes to be used for identity evaluation:" subsys=labels-filter level=info msg=" - reserved:.*" subsys=labels-filter level=info msg=" - :io\\.kubernetes\\.pod\\.namespace" subsys=labels-filter level=info msg=" - :io\\.cilium\\.k8s\\.namespace\\.labels" subsys=labels-filter level=info msg=" - :app\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:io\\.kubernetes" subsys=labels-filter level=info msg=" - !:kubernetes\\.io" subsys=labels-filter level=info msg=" - !:.*beta\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:k8s\\.io" subsys=labels-filter level=info msg=" - !:pod-template-generation" subsys=labels-filter level=info msg=" - !:pod-template-hash" subsys=labels-filter level=info msg=" - !:controller-revision-hash" subsys=labels-filter level=info msg=" - !:annotation.*" subsys=labels-filter level=info msg=" - !:etcd_node" subsys=labels-filter level=info msg=Invoked duration="877.34µs" function="pprof.glob..func1 (cell.go:50)" subsys=hive level=info msg=Invoked duration="45.911µs" function="gops.registerGopsHooks (cell.go:38)" subsys=hive level=info msg=Invoked duration="847.26µs" function="metrics.NewRegistry (registry.go:65)" subsys=hive level=info msg=Invoked duration="5.15µs" function="metrics.glob..func1 (cell.go:12)" subsys=hive level=info msg="Spire Delegate API Client is disabled as no socket path is configured" subsys=spire-delegate level=info msg="Mutual authentication handler is disabled as no port is configured" subsys=auth level=info msg=Invoked duration=95.305597ms function="cmd.glob..func4 (daemon_main.go:1607)" subsys=hive level=info msg=Invoked duration="14.95µs" function="gc.registerSignalHandler (cell.go:47)" subsys=hive level=info msg=Invoked duration="38.011µs" function="utime.initUtimeSync (cell.go:29)" subsys=hive level=info msg=Invoked duration="79.292µs" function="agentliveness.newAgentLivenessUpdater (agent_liveness.go:43)" subsys=hive level=info msg=Invoked duration="73.422µs" function="l2responder.NewL2ResponderReconciler (l2responder.go:63)" subsys=hive level=info msg=Invoked duration="92.652µs" function="garp.newGARPProcessor (processor.go:27)" subsys=hive level=info msg=Starting subsys=hive level=info msg="Started gops server" address="127.0.0.1:9890" subsys=gops level=info msg="Start hook executed" duration="478.282µs" function="gops.registerGopsHooks.func1 (cell.go:43)" subsys=hive level=info msg="Start hook executed" duration="1.5µs" function="metrics.NewRegistry.func1 (registry.go:86)" subsys=hive level=info msg="Establishing connection to apiserver" host="https://10.96.0.1:443" subsys=k8s-client level=info msg="Serving prometheus metrics on :9962" subsys=metrics level=info msg="Connected to apiserver" subsys=k8s-client level=info msg="Start hook executed" duration=9.215122ms function="client.(*compositeClientset).onStart" subsys=hive level=info msg="Start hook executed" duration=9.077249ms function="authmap.newAuthMap.func1 (cell.go:27)" subsys=hive level=info msg="Start hook executed" duration="55.651µs" function="configmap.newMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="54.501µs" function="signalmap.newMap.func1 (cell.go:44)" subsys=hive level=info msg="Start hook executed" duration="381.499µs" function="nodemap.newNodeMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="142.194µs" function="eventsmap.newEventsMap.func1 (cell.go:35)" subsys=hive level=info msg="Start hook executed" duration="49.441µs" function="*cni.cniConfigManager.Start" subsys=hive level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Wrote CNI configuration file to /host/etc/cni/net.d/05-cilium.conflist" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Start hook executed" duration=47.73225ms function="datapath.newDatapath.func1 (cells.go:113)" subsys=hive level=info msg="Restored 0 node IDs from the BPF map" subsys=linux-datapath level=info msg="Start hook executed" duration="115.343µs" function="datapath.newDatapath.func2 (cells.go:126)" subsys=hive level=info msg="Start hook executed" duration="41.311µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Node].Start" subsys=hive level=info msg="Start hook executed" duration="2.74µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNode].Start" subsys=hive level=info msg="Using autogenerated IPv4 allocation range" subsys=node v4Prefix=10.248.0.0/16 level=info msg="no local ciliumnode found, will not restore cilium internal ips from k8s" subsys=daemon level=info msg="Start hook executed" duration=103.834614ms function="node.NewLocalNodeStore.func1 (local_node_store.go:76)" subsys=hive level=info msg="Start hook executed" duration="6.35µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration=101.252781ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration="3.4µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Using discoveryv1.EndpointSlice" subsys=k8s level=info msg="Start hook executed" duration=201.14429ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Start hook executed" duration="3.74µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Pod].Start" subsys=hive level=info msg="Start hook executed" duration="2.95µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Namespace].Start" subsys=hive level=info msg="Start hook executed" duration="1.6µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="4.17µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumClusterwideNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="2.19µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumCIDRGroup].Start" subsys=hive level=info msg="Start hook executed" duration="23.641µs" function="endpointmanager.newDefaultEndpointManager.func1 (cell.go:203)" subsys=hive level=info msg="Start hook executed" duration="41.031µs" function="cmd.newPolicyTrifecta.func1 (policy.go:135)" subsys=hive level=info msg="Start hook executed" duration="53.851µs" function="*manager.manager.Start" subsys=hive level=info msg="Serving cilium node monitor v1.2 API at unix:///var/run/cilium/monitor1_2.sock" subsys=monitor-agent level=info msg="Start hook executed" duration="638.075µs" function="agent.newMonitorAgent.func1 (cell.go:61)" subsys=hive level=info msg="Start hook executed" duration="51.781µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumL2AnnouncementPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="45.821µs" function="*job.group.Start" subsys=hive level=info msg="Envoy: Starting xDS gRPC server listening on /var/run/cilium/envoy/sockets/xds.sock" subsys=envoy-manager level=info msg="Start hook executed" duration="482.991µs" function="proxy.newProxy.func1 (cell.go:55)" subsys=hive level=info msg="Start hook executed" duration="794.609µs" function="signal.provideSignalManager.func1 (cell.go:25)" subsys=hive level=info msg="Datapath signal listener running" subsys=signal level=info msg="Start hook executed" duration=1.151137ms function="auth.registerAuthManager.func1 (cell.go:109)" subsys=hive level=info msg="Start hook executed" duration="4.22µs" function="auth.registerGCJobs.func1 (cell.go:158)" subsys=hive level=info msg="Start hook executed" duration="42.041µs" function="*job.group.Start" subsys=hive level=warning msg="Deprecated value for --kube-proxy-replacement: disabled (use either \"true\", or \"false\")" subsys=daemon level=info msg="Auto-disabling \"enable-node-port\", \"enable-external-ips\", \"bpf-lb-sock\", \"enable-host-port\" features and falling back to \"enable-host-legacy-routing\"" subsys=daemon level=info msg="Inheriting MTU from external network interface" device=ens3 ipAddr=199.204.45.248 mtu=1500 subsys=mtu level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_ipcache, recreating and re-pinning map cilium_ipcache" file-path=/sys/fs/bpf/tc/globals/cilium_ipcache name=cilium_ipcache subsys=bpf level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_tunnel_map, recreating and re-pinning map cilium_tunnel_map" file-path=/sys/fs/bpf/tc/globals/cilium_tunnel_map name=cilium_tunnel_map subsys=bpf level=info msg="Restored services from maps" failedServices=0 restoredServices=0 subsys=service level=info msg="Restored backends from maps" failedBackends=0 restoredBackends=0 skippedBackends=0 subsys=service level=info msg="Reading old endpoints..." subsys=daemon level=info msg="No old endpoints found." subsys=daemon level=info msg="Waiting until all Cilium CRDs are available" subsys=k8s level=info msg="All Cilium CRDs have been found and are available" subsys=k8s level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=info msg="Successfully created CiliumNode resource" subsys=nodediscovery level=warning msg="Unable to create CiliumNode resource, will retry" error="ciliumnodes.cilium.io \"instance\" already exists" subsys=nodediscovery level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=info msg="Received own node information from API server" ipAddr.ipv4=199.204.45.248 ipAddr.ipv6="" k8sNodeIP=199.204.45.248 labels="map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:]" nodeName=instance subsys=k8s v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="k8s mode: Allowing localhost to reach local endpoints" subsys=daemon level=info msg="Detected devices" devices="[]" subsys=linux-datapath level=info msg="Enabling k8s event listener" subsys=k8s-watcher level=info msg="Removing stale endpoint interfaces" subsys=daemon level=info msg="Skipping kvstore configuration" subsys=daemon level=info msg="Initializing node addressing" subsys=daemon level=info msg="Initializing cluster-pool IPAM" subsys=ipam v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="Waiting until local node addressing before starting watchers depending on it" subsys=k8s-watcher level=info msg="Restoring endpoints..." subsys=daemon level=info msg="Endpoints restored" failed=0 restored=0 subsys=daemon level=info msg="Addressing information:" subsys=daemon level=info msg=" Cluster-Name: default" subsys=daemon level=info msg=" Cluster-ID: 0" subsys=daemon level=info msg=" Local node-name: instance" subsys=daemon level=info msg=" Node-IPv6: " subsys=daemon level=info msg=" External-Node IPv4: 199.204.45.248" subsys=daemon level=info msg=" Internal-Node IPv4: 10.0.0.69" subsys=daemon level=info msg=" IPv4 allocation prefix: 10.0.0.0/24" subsys=daemon level=info msg=" Loopback IPv4: 169.254.42.1" subsys=daemon level=info msg=" Local IPv4 addresses:" subsys=daemon level=info msg=" - 199.204.45.248" subsys=daemon level=info msg=" - 172.17.0.100" subsys=daemon level=info msg=" - 10.96.240.200" subsys=daemon level=info msg="Node updated" clusterName=default nodeName=instance subsys=nodemanager level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Adding local node to cluster" node="{instance default [{InternalIP 199.204.45.248} {CiliumInternalIP 10.0.0.69}] 10.0.0.0/24 [] [] 10.0.0.214 0 local 0 map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:] map[] 1 }" subsys=nodediscovery level=info msg="Waiting until all pre-existing resources have been received" subsys=k8s-watcher level=info msg="Initializing identity allocator" subsys=identity-cache level=info msg="Allocating identities between range" cluster-id=0 max=65535 min=256 subsys=identity-cache level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.core.bpf_jit_enable sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.all.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.fib_multipath_use_neigh sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.unprivileged_bpf_disabled sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.timer_migration sysParamValue=0 level=info msg="Setting up BPF datapath" bpfClockSource=ktime bpfInsnSet="" subsys=datapath-loader level=info msg="Iptables rules installed" subsys=iptables level=info msg="Adding new proxy port rules for cilium-dns-egress:35303" id=cilium-dns-egress subsys=proxy level=info msg="Iptables proxy rules installed" subsys=iptables level=info msg="Start hook executed" duration=2.587372078s function="cmd.newDaemonPromise.func1 (daemon_main.go:1663)" subsys=hive level=info msg="Start hook executed" duration="10.411µs" function="utime.initUtimeSync.func1 (cell.go:33)" subsys=hive level=info msg="Start hook executed" duration="23.59µs" function="*job.group.Start" subsys=hive level=info msg="Initializing daemon" subsys=daemon level=info msg="Validating configured node address ranges" subsys=daemon level=info msg="Starting IP identity watcher" subsys=ipcache level=info msg="Start hook executed" duration="27.2µs" function="l2respondermap.newMap.func1 (l2_responder_map4.go:44)" subsys=hive level=info msg="Start hook executed" duration="16.32µs" function="*job.group.Start" subsys=hive level=info msg="Starting connection tracking garbage collector" subsys=daemon level=info msg="Initial scan of connection tracking completed" subsys=ct-gc level=info msg="Regenerating restored endpoints" numRestored=0 subsys=daemon level=info msg="Creating host endpoint" subsys=daemon level=info msg="Finished regenerating restored endpoints" regenerated=0 subsys=daemon total=0 level=info msg="Deleted orphan backends" orphanBackends=0 subsys=service level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=132 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=132 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=132 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Launching Cilium health daemon" subsys=daemon level=info msg="Launching Cilium health endpoint" subsys=daemon level=info msg="Started healthz status API server" address="127.0.0.1:9879" subsys=daemon level=info msg="Processing queued endpoint deletion requests from /var/run/cilium/deleteQueue" subsys=daemon level=info msg="processing 0 queued deletion requests" subsys=daemon level=info msg="Initializing Cilium API" subsys=daemon level=info msg="Daemon initialization completed" bootstrapTime=3.632569745s subsys=daemon level=info msg="Hubble server is disabled" subsys=hubble level=info msg="Serving cilium API at unix:///var/run/cilium/cilium.sock" subsys=daemon level=info msg="Compiled new BPF template" BPFCompilationTime=289.907559ms file-path=/var/run/cilium/state/templates/66a8749c4fe2b4c7fa63e0220d6ff924aa1f74a8c09ff6598ce88d79e88a5a7a/bpf_host.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=132 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=605 ipv4=10.0.0.214 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=605 identityLabels="reserved:health" ipv4=10.0.0.214 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=605 identity=4 identityLabels="reserved:health" ipv4=10.0.0.214 ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.17 b1f266ab-297b-414e-bcca-ae9a8f14f9d6 default }" containerID=306ac587d5fd8811b89f62abaa757712cc7205836ed471befcb219a299c3a4fd datapathConfiguration="&{false false false false false }" interface=lxc15246639df1b k8sPodName=kube-system/coredns-7c96b6546b-6vnfs labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=306ac587d5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=730 ipv4=10.0.0.17 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-6vnfs subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=306ac587d5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=730 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.17 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-6vnfs subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:kube-system]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=306ac587d5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=730 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.17 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-6vnfs line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=coredns;k8s:io.kubernetes.pod.namespace=kube-system;k8s:k8s-app=kube-dns;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=306ac587d5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=730 identity=45788 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.17 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-6vnfs oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=306ac587d5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=730 identity=45788 ipv4=10.0.0.17 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-6vnfs subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.165 b6568171-2e48-4637-8927-8513c20e46d7 default }" containerID=381083a4d688b95c06dd9655ee475a765c7c5511525f68e304198c546fb1ba1f datapathConfiguration="&{false false false false false }" interface=lxc30db4494c34e k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-ktc2q labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=381083a4d6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=345 ipv4=10.0.0.165 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-ktc2q subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=381083a4d6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=345 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=8f294e4b-c39d-4b99-80cf-4f4b2d0db652,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=8f294e4b-c39d-4b99-80cf-4f4b2d0db652,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.165 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-ktc2q subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="Serving cilium health API at unix:///var/run/cilium/health.sock" subsys=health-server level=info msg="Compiled new BPF template" BPFCompilationTime=1.049294456s file-path=/var/run/cilium/state/templates/41960037192c86715ceb5c804b116e7266d8cecb6c85df5bfdebe32e4b8a2d4a/bpf_lxc.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=605 identity=4 ipv4=10.0.0.214 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=306ac587d5 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=730 identity=45788 ipv4=10.0.0.17 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-6vnfs subsys=endpoint level=info msg="Successful endpoint creation" containerID=306ac587d5 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=730 identity=45788 ipv4=10.0.0.17 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-6vnfs subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=381083a4d6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=345 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.165 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-ktc2q line=611 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=381083a4d6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=345 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.165 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-ktc2q line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=certgen;k8s:batch.kubernetes.io/controller-uid=8f294e4b-c39d-4b99-80cf-4f4b2d0db652;k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen;k8s:controller-uid=8f294e4b-c39d-4b99-80cf-4f4b2d0db652;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;k8s:job-name=envoy-gateway-gateway-helm-certgen;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=381083a4d6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=345 identity=20486 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=8f294e4b-c39d-4b99-80cf-4f4b2d0db652,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=8f294e4b-c39d-4b99-80cf-4f4b2d0db652,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.165 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-ktc2q oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=381083a4d6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=345 identity=20486 ipv4=10.0.0.165 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-ktc2q subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=381083a4d6 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=345 identity=20486 ipv4=10.0.0.165 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-ktc2q subsys=endpoint level=info msg="Successful endpoint creation" containerID=381083a4d6 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=345 identity=20486 ipv4=10.0.0.165 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-ktc2q subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=381083a4d6 endpointID=345 k8sNamespace=envoy-gateway-system k8sPodName=envoy-gateway-gateway-helm-certgen-ktc2q subsys=daemon level=info msg="Releasing key" key="[k8s:app=certgen k8s:batch.kubernetes.io/controller-uid=8f294e4b-c39d-4b99-80cf-4f4b2d0db652 k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen k8s:controller-uid=8f294e4b-c39d-4b99-80cf-4f4b2d0db652 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen k8s:io.kubernetes.pod.namespace=envoy-gateway-system k8s:job-name=envoy-gateway-gateway-helm-certgen]" subsys=allocator level=info msg="Removed endpoint" containerID=381083a4d6 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=345 identity=20486 ipv4=10.0.0.165 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-ktc2q subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.34 9bbe2431-8eab-41bf-adf9-ba89ff08ade9 default }" containerID=5bdcfb514ac3edcf15cc418a3ade92d4a982f9d460872af1b1e51362344bc540 datapathConfiguration="&{false false false false false }" interface=lxc70fa8b2b2df4 k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-xcf62 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5bdcfb514a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2175 ipv4=10.0.0.34 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-xcf62 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5bdcfb514a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2175 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.34 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-xcf62 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=envoy-gateway;k8s:app.kubernetes.io/name=gateway-helm;k8s:control-plane=envoy-gateway;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5bdcfb514a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2175 identity=18452 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.34 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-xcf62 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=5bdcfb514a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2175 identity=18452 ipv4=10.0.0.34 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-xcf62 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5bdcfb514a datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2175 identity=18452 ipv4=10.0.0.34 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-xcf62 subsys=endpoint level=info msg="Successful endpoint creation" containerID=5bdcfb514a datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2175 identity=18452 ipv4=10.0.0.34 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-xcf62 subsys=daemon level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=132 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_00132 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_00132 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_00132 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_00132:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=132 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.111 68d608d5-6015-4b8b-95c6-068cc25135d5 default }" containerID=5d025165a0b6e49c8b9a82fa4c50508478c88dc1225fa096fcd6ce6ef86b0f65 datapathConfiguration="&{false false false false false }" interface=lxc850eefd65aba k8sPodName=kube-system/coredns-67659f764b-lj2ld labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5d025165a0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1267 ipv4=10.0.0.111 ipv6= k8sPodName=kube-system/coredns-67659f764b-lj2ld subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.70 dd0f8290-4b12-49ef-95c7-797472fc8a6b default }" containerID=0544ef764b8542f7965ef65ab8ffbe52d513880b0d538ab1bbcee43904246c7f datapathConfiguration="&{false false false false false }" interface=lxcf4d04d12d993 k8sPodName=kube-system/coredns-67659f764b-pbnhr labels="[]" subsys=daemon sync-build=true level=info msg="Resolving identity labels (blocking)" containerID=5d025165a0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1267 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.111 ipv6= k8sPodName=kube-system/coredns-67659f764b-lj2ld subsys=endpoint level=info msg="Identity of endpoint changed" containerID=5d025165a0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1267 identity=45788 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.111 ipv6= k8sPodName=kube-system/coredns-67659f764b-lj2ld oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5d025165a0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1267 identity=45788 ipv4=10.0.0.111 ipv6= k8sPodName=kube-system/coredns-67659f764b-lj2ld subsys=endpoint level=info msg="New endpoint" containerID=0544ef764b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1903 ipv4=10.0.0.70 ipv6= k8sPodName=kube-system/coredns-67659f764b-pbnhr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0544ef764b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1903 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.70 ipv6= k8sPodName=kube-system/coredns-67659f764b-pbnhr subsys=endpoint level=info msg="Identity of endpoint changed" containerID=0544ef764b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1903 identity=45788 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.70 ipv6= k8sPodName=kube-system/coredns-67659f764b-pbnhr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0544ef764b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1903 identity=45788 ipv4=10.0.0.70 ipv6= k8sPodName=kube-system/coredns-67659f764b-pbnhr subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0544ef764b datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1903 identity=45788 ipv4=10.0.0.70 ipv6= k8sPodName=kube-system/coredns-67659f764b-pbnhr subsys=endpoint level=info msg="Successful endpoint creation" containerID=0544ef764b datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1903 identity=45788 ipv4=10.0.0.70 ipv6= k8sPodName=kube-system/coredns-67659f764b-pbnhr subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=5d025165a0 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1267 identity=45788 ipv4=10.0.0.111 ipv6= k8sPodName=kube-system/coredns-67659f764b-lj2ld subsys=endpoint level=info msg="Successful endpoint creation" containerID=5d025165a0 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1267 identity=45788 ipv4=10.0.0.111 ipv6= k8sPodName=kube-system/coredns-67659f764b-lj2ld subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.235 0d662875-f027-414c-b3ef-f8ca9bdac093 default }" containerID=7d442f95eb7dad61bb932f3496eb1b2f74478a15a2fb3a3679854afe36d66561 datapathConfiguration="&{false false false false false }" interface=lxc4bd25e552f56 k8sPodName=local-path-storage/local-path-provisioner-679c578f5-t8hns labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7d442f95eb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3960 ipv4=10.0.0.235 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-t8hns subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7d442f95eb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3960 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.235 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-t8hns subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=local-path-provisioner;k8s:app.kubernetes.io/name=local-path-provisioner;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=7d442f95eb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3960 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.235 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-t8hns line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=7d442f95eb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3960 identity=56950 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.235 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-t8hns oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7d442f95eb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3960 identity=56950 ipv4=10.0.0.235 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-t8hns subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7d442f95eb datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3960 identity=56950 ipv4=10.0.0.235 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-t8hns subsys=endpoint level=info msg="Successful endpoint creation" containerID=7d442f95eb datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3960 identity=56950 ipv4=10.0.0.235 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-t8hns subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=306ac587d5 endpointID=730 k8sNamespace=kube-system k8sPodName=coredns-7c96b6546b-6vnfs subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=coredns k8s:io.kubernetes.pod.namespace=kube-system k8s:k8s-app=kube-dns]" subsys=allocator level=info msg="Removed endpoint" containerID=306ac587d5 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=730 identity=45788 ipv4=10.0.0.17 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-6vnfs subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.164 4e5bde7b-4e7a-4234-a6f3-89091b5de731 default }" containerID=ad1b20922aca1f9ce84ac02085b8e622488e6a900e96b78a5319e3943117510f datapathConfiguration="&{false false false false false }" interface=lxc51c17fb60c76 k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-vdbnk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ad1b20922a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=593 ipv4=10.0.0.164 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-vdbnk subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.165 1fe5fe81-1b4c-4e6d-90db-95c8dbcc35b6 default }" containerID=c4554baf1a249f28f3c9cf04ef4b1069a4c178c7adc1608c6448c8ceae585157 datapathConfiguration="&{false false false false false }" interface=lxc751ba500c836 k8sPodName=cert-manager/cert-manager-75c4c745bc-2dvz9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c4554baf1a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2495 ipv4=10.0.0.165 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-2dvz9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ad1b20922a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=593 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.164 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-vdbnk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Resolving identity labels (blocking)" containerID=c4554baf1a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2495 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.165 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-2dvz9 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.220 34afe7a0-b420-4f86-af9e-6030307fc679 default }" containerID=7cd75ff6298d5aa90dee6dd19837a74efd2805dede5cd8fde8edc6f676328c03 datapathConfiguration="&{false false false false false }" interface=lxc67ed7b4c83df k8sPodName=cert-manager/cert-manager-webhook-548949fc64-x2z59 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7cd75ff629 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=837 ipv4=10.0.0.220 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-x2z59 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7cd75ff629 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=837 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.220 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-x2z59 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=cainjector;k8s:app.kubernetes.io/component=cainjector;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cainjector;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ad1b20922a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=593 identity=1928 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.164 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-vdbnk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ad1b20922a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=593 identity=1928 ipv4=10.0.0.164 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-vdbnk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=7cd75ff629 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=837 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.220 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-x2z59 line=611 subsys=endpoint level=info msg="Invalid state transition skipped" containerID=c4554baf1a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2495 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.165 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-2dvz9 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=cert-manager;k8s:app.kubernetes.io/component=controller;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cert-manager;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c4554baf1a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2495 identity=17509 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.165 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-2dvz9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c4554baf1a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2495 identity=17509 ipv4=10.0.0.165 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-2dvz9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=webhook;k8s:app.kubernetes.io/component=webhook;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=webhook;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7cd75ff629 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=837 identity=27418 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.220 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-x2z59 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7cd75ff629 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=837 identity=27418 ipv4=10.0.0.220 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-x2z59 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ad1b20922a datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=593 identity=1928 ipv4=10.0.0.164 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-vdbnk subsys=endpoint level=info msg="Successful endpoint creation" containerID=ad1b20922a datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=593 identity=1928 ipv4=10.0.0.164 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-vdbnk subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=c4554baf1a datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2495 identity=17509 ipv4=10.0.0.165 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-2dvz9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=c4554baf1a datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2495 identity=17509 ipv4=10.0.0.165 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-2dvz9 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=7cd75ff629 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=837 identity=27418 ipv4=10.0.0.220 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-x2z59 subsys=endpoint level=info msg="Successful endpoint creation" containerID=7cd75ff629 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=837 identity=27418 ipv4=10.0.0.220 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-x2z59 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.145 03f6ab78-ba5e-4d93-892b-08d766c4a275 default }" containerID=66a2270f074418e1a0eba43a0f660fa9618a367499c6e31829d5464bce6dd49e datapathConfiguration="&{false false false false false }" interface=lxc65e1b3ab55dd k8sPodName=cert-manager/cert-manager-startupapicheck-s9mr6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=66a2270f07 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=352 ipv4=10.0.0.145 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-s9mr6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=66a2270f07 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=352 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=df0f1a65-c000-4e68-bdd6-c623934554a9,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=df0f1a65-c000-4e68-bdd6-c623934554a9,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.145 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-s9mr6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=startupapicheck;k8s:app.kubernetes.io/component=startupapicheck;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=startupapicheck;k8s:app.kubernetes.io/version=v1.11.5;k8s:batch.kubernetes.io/controller-uid=df0f1a65-c000-4e68-bdd6-c623934554a9;k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck;k8s:controller-uid=df0f1a65-c000-4e68-bdd6-c623934554a9;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck;k8s:io.kubernetes.pod.namespace=cert-manager;k8s:job-name=cert-manager-startupapicheck;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=66a2270f07 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=352 identity=10076 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=df0f1a65-c000-4e68-bdd6-c623934554a9,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=df0f1a65-c000-4e68-bdd6-c623934554a9,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.145 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-s9mr6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=66a2270f07 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=352 identity=10076 ipv4=10.0.0.145 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-s9mr6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=66a2270f07 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=352 identity=10076 ipv4=10.0.0.145 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-s9mr6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=66a2270f07 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=352 identity=10076 ipv4=10.0.0.145 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-s9mr6 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=66a2270f07 endpointID=352 k8sNamespace=cert-manager k8sPodName=cert-manager-startupapicheck-s9mr6 subsys=daemon level=info msg="Releasing key" key="[k8s:app=startupapicheck k8s:app.kubernetes.io/component=startupapicheck k8s:app.kubernetes.io/instance=cert-manager k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=startupapicheck k8s:app.kubernetes.io/version=v1.11.5 k8s:batch.kubernetes.io/controller-uid=df0f1a65-c000-4e68-bdd6-c623934554a9 k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck k8s:controller-uid=df0f1a65-c000-4e68-bdd6-c623934554a9 k8s:helm.sh/chart=cert-manager-v1.11.5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager k8s:io.cilium.k8s.namespace.labels.name=cert-manager k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck k8s:io.kubernetes.pod.namespace=cert-manager k8s:job-name=cert-manager-startupapicheck]" subsys=allocator level=info msg="Removed endpoint" containerID=66a2270f07 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=352 identity=10076 ipv4=10.0.0.145 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-s9mr6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.168 6a782750-241a-47cd-8cbc-78dec2547958 default }" containerID=cf03f5606c5830ee85a24de0c20a218f77a211756af964cf3a1a9fce3d626712 datapathConfiguration="&{false false false false false }" interface=lxcf542e0799208 k8sPodName=ingress-nginx/ingress-nginx-admission-create-4tlc5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=cf03f5606c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=743 ipv4=10.0.0.168 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-4tlc5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=cf03f5606c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=743 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=4bdbe24f-1103-4b2c-9d7b-6bf4941b817b,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=4bdbe24f-1103-4b2c-9d7b-6bf4941b817b,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.168 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-4tlc5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=4bdbe24f-1103-4b2c-9d7b-6bf4941b817b;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create;k8s:controller-uid=4bdbe24f-1103-4b2c-9d7b-6bf4941b817b;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-create;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=cf03f5606c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=743 identity=64459 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=4bdbe24f-1103-4b2c-9d7b-6bf4941b817b,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=4bdbe24f-1103-4b2c-9d7b-6bf4941b817b,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.168 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-4tlc5 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=cf03f5606c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=743 identity=64459 ipv4=10.0.0.168 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-4tlc5 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=cf03f5606c datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=743 identity=64459 ipv4=10.0.0.168 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-4tlc5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=cf03f5606c datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=743 identity=64459 ipv4=10.0.0.168 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-4tlc5 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=cf03f5606c endpointID=743 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-create-4tlc5 subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=4bdbe24f-1103-4b2c-9d7b-6bf4941b817b k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create k8s:controller-uid=4bdbe24f-1103-4b2c-9d7b-6bf4941b817b k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-create]" subsys=allocator level=info msg="Removed endpoint" containerID=cf03f5606c datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=743 identity=64459 ipv4=10.0.0.168 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-4tlc5 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.219 9ecf4bd2-20cc-4e95-b8c2-8ea7a72cdc0f default }" containerID=d97978f5fe6fc2971b76d313c9c3e31c2d16408e913c8043be5ed9f4271f605f datapathConfiguration="&{false false false false false }" interface=lxc02a45df0edd1 k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-8n6g9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d97978f5fe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=644 ipv4=10.0.0.219 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-8n6g9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d97978f5fe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=644 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.219 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-8n6g9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=d97978f5fe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=644 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.219 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-8n6g9 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=default-backend;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend;k8s:io.kubernetes.pod.namespace=ingress-nginx;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d97978f5fe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=644 identity=3406 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.219 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-8n6g9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d97978f5fe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=644 identity=3406 ipv4=10.0.0.219 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-8n6g9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d97978f5fe datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=644 identity=3406 ipv4=10.0.0.219 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-8n6g9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=d97978f5fe datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=644 identity=3406 ipv4=10.0.0.219 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-8n6g9 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.110 14199ae9-cb1e-47c8-a4a2-2e6bb54df707 default }" containerID=a2bf5490d0c50fbcdac0d83ad0214f89595a5c88a9e83292de3854c0ab690b52 datapathConfiguration="&{false false false false false }" interface=lxc94fcdb38f607 k8sPodName=ingress-nginx/ingress-nginx-admission-patch-hxwfp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a2bf5490d0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3342 ipv4=10.0.0.110 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-hxwfp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a2bf5490d0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3342 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=4b98245f-24f9-4671-a240-71b07f15361e,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=4b98245f-24f9-4671-a240-71b07f15361e,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.110 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-hxwfp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=4b98245f-24f9-4671-a240-71b07f15361e;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch;k8s:controller-uid=4b98245f-24f9-4671-a240-71b07f15361e;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-patch;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a2bf5490d0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3342 identity=3278 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=4b98245f-24f9-4671-a240-71b07f15361e,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=4b98245f-24f9-4671-a240-71b07f15361e,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.110 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-hxwfp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a2bf5490d0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3342 identity=3278 ipv4=10.0.0.110 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-hxwfp subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a2bf5490d0 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3342 identity=3278 ipv4=10.0.0.110 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-hxwfp subsys=endpoint level=info msg="Successful endpoint creation" containerID=a2bf5490d0 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3342 identity=3278 ipv4=10.0.0.110 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-hxwfp subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=a2bf5490d0 endpointID=3342 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-patch-hxwfp subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=4b98245f-24f9-4671-a240-71b07f15361e k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch k8s:controller-uid=4b98245f-24f9-4671-a240-71b07f15361e k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-patch]" subsys=allocator level=info msg="Removed endpoint" containerID=a2bf5490d0 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3342 identity=3278 ipv4=10.0.0.110 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-hxwfp subsys=endpoint level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"rabbitmq-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-cluster-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=0f9a08b3-00a2-43e9-8183-e94d2c9ae1f9] Description:}]" policyAddRequest=3c32dc97-a258-4508-b414-8cc1593975b5 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-cluster-operator subsys=k8s-watcher level=info msg="Policy imported via API, recalculating..." policyAddRequest=3c32dc97-a258-4508-b414-8cc1593975b5 policyRevision=2 subsys=daemon level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"messaging-topology-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9443 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-messaging-topology-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=550aa11e-9e50-4d88-afbc-e032f729726a] Description:}]" policyAddRequest=8df5bf6d-b797-4b40-8581-f3c6833cbd05 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=8df5bf6d-b797-4b40-8581-f3c6833cbd05 policyRevision=3 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-messaging-topology-operator subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.4 31808290-d198-4f3c-8898-7a71cf6071d2 default }" containerID=7a1db9915d1a384c705042e209c77cbac04c8dd62750ed0dbacb70330d99d91a datapathConfiguration="&{false false false false false }" interface=lxc4bdd3e2a00df k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-vc82n labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7a1db9915d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3444 ipv4=10.0.0.4 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-vc82n subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7a1db9915d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3444 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.16.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.4 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-vc82n subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=7a1db9915d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3444 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.4 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-vc82n line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=2.16.1;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7a1db9915d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3444 identity=23028 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.16.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.4 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-vc82n oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7a1db9915d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3444 identity=23028 ipv4=10.0.0.4 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-vc82n subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.129 bd23825e-f7d5-4532-92ac-4eae5e78423a default }" containerID=ea4bdf4f756711f6086b02ae70466c6b2dcb3678f09a35bb8df4475adf9ad568 datapathConfiguration="&{false false false false false }" interface=lxc38e3d1b91238 k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-g5jgv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ea4bdf4f75 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=599 ipv4=10.0.0.129 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-g5jgv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ea4bdf4f75 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=599 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.17.4,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.129 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-g5jgv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=messaging-topology-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=1.17.4;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ea4bdf4f75 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=599 identity=13180 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.17.4,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.129 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-g5jgv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ea4bdf4f75 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=599 identity=13180 ipv4=10.0.0.129 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-g5jgv subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7a1db9915d datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=3444 identity=23028 ipv4=10.0.0.4 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-vc82n subsys=endpoint level=info msg="Successful endpoint creation" containerID=7a1db9915d datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=3444 identity=23028 ipv4=10.0.0.4 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-vc82n subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=ea4bdf4f75 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=599 identity=13180 ipv4=10.0.0.129 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-g5jgv subsys=endpoint level=info msg="Successful endpoint creation" containerID=ea4bdf4f75 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=599 identity=13180 ipv4=10.0.0.129 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-g5jgv subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.132 0fb52bbb-e393-44ed-93e4-dd36b1f2f3a5 default }" containerID=cd95cc9f0a55145e620fd20fae25c0b58226e88d89d6c616396935ce43065a2d datapathConfiguration="&{false false false false false }" interface=lxca2399d3f66b5 k8sPodName=openstack/pxc-operator-69cb5bbdb9-2swwj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=cd95cc9f0a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=991 ipv4=10.0.0.132 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-2swwj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=cd95cc9f0a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=991 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.132 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-2swwj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=operator;k8s:app.kubernetes.io/instance=pxc-operator;k8s:app.kubernetes.io/name=pxc-operator;k8s:app.kubernetes.io/part-of=pxc-operator;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=cd95cc9f0a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=991 identity=64927 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.132 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-2swwj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=cd95cc9f0a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=991 identity=64927 ipv4=10.0.0.132 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-2swwj subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=cd95cc9f0a datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=991 identity=64927 ipv4=10.0.0.132 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-2swwj subsys=endpoint level=info msg="Successful endpoint creation" containerID=cd95cc9f0a datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=991 identity=64927 ipv4=10.0.0.132 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-2swwj subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.113 8e0096c7-b299-4be1-bd68-e184249cbb66 default }" containerID=725b91d1dbb9cbc3a8459eb4078bae5cec2f1fe9dddfd05703822166e7f6dfde datapathConfiguration="&{false false false false false }" interface=lxcd572eddf7aad k8sPodName=openstack/percona-xtradb-haproxy-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=725b91d1db datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2903 ipv4=10.0.0.113 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=725b91d1db datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2903 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.113 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=haproxy;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=725b91d1db datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2903 identity=1330 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.113 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=725b91d1db datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2903 identity=1330 ipv4=10.0.0.113 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.90 d4026da8-725d-4941-aaa3-8b10c227ec54 default }" containerID=1af561bf8bf4bb329b0bf822d49662f1528eb0fab9fa5a6b7aae8a3523669800 datapathConfiguration="&{false false false false false }" interface=lxccdb0025b3414 k8sPodName=local-path-storage/helper-pod-create-pvc-0b5ba35d-52ed-4848-bca4-7529644fcde1 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1af561bf8b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1329 ipv4=10.0.0.90 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0b5ba35d-52ed-4848-bca4-7529644fcde1 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1af561bf8b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1329 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.90 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0b5ba35d-52ed-4848-bca4-7529644fcde1 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1af561bf8b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1329 identity=30414 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.90 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0b5ba35d-52ed-4848-bca4-7529644fcde1 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1af561bf8b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1329 identity=30414 ipv4=10.0.0.90 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0b5ba35d-52ed-4848-bca4-7529644fcde1 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=725b91d1db datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=2903 identity=1330 ipv4=10.0.0.113 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=725b91d1db datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=2903 identity=1330 ipv4=10.0.0.113 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=1af561bf8b datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1329 identity=30414 ipv4=10.0.0.90 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0b5ba35d-52ed-4848-bca4-7529644fcde1 subsys=endpoint level=info msg="Successful endpoint creation" containerID=1af561bf8b datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1329 identity=30414 ipv4=10.0.0.90 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0b5ba35d-52ed-4848-bca4-7529644fcde1 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=1af561bf8b endpointID=1329 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-0b5ba35d-52ed-4848-bca4-7529644fcde1 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=1af561bf8b datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1329 identity=30414 ipv4=10.0.0.90 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0b5ba35d-52ed-4848-bca4-7529644fcde1 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.115 d4839a75-1ff0-4fa5-89e2-b29871b2ba0a default }" containerID=495b404c1b1d0ef1a3296f2a3ed43c26ff174f756dc5c66a24711f860ff45083 datapathConfiguration="&{false false false false false }" interface=lxcec74931ca549 k8sPodName=openstack/percona-xtradb-pxc-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=495b404c1b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=465 ipv4=10.0.0.115 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=495b404c1b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=465 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.115 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=495b404c1b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=465 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.115 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=pxc;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=495b404c1b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=465 identity=1711 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.115 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=495b404c1b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=465 identity=1711 ipv4=10.0.0.115 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=495b404c1b datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=465 identity=1711 ipv4=10.0.0.115 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=495b404c1b datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=465 identity=1711 ipv4=10.0.0.115 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/instance\":\"valkey\",\"k8s:app.kubernetes.io/name\":\"valkey\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:6379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:26379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:} {IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9121 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=valkey k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=fcc0e660-bbd0-4603-a099-53145a45d1d9] Description:}]" policyAddRequest=0d4d8568-445d-44e1-8765-c6dd52aa787a subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=0d4d8568-445d-44e1-8765-c6dd52aa787a policyRevision=4 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=valkey subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.142 49ff9f49-4ae9-4cf5-9e9d-3a31d82b9054 default }" containerID=4df8eded7df7cb4ccc5f4f034fdf1725472d15dfa3fcead6f46c26c37206df2a datapathConfiguration="&{false false false false false }" interface=lxc55897b1fa0ab k8sPodName=local-path-storage/helper-pod-create-pvc-79247579-570a-43b4-8043-75c3ba220f21 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4df8eded7d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=736 ipv4=10.0.0.142 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-79247579-570a-43b4-8043-75c3ba220f21 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4df8eded7d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=736 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.142 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-79247579-570a-43b4-8043-75c3ba220f21 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4df8eded7d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=736 identity=30414 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.142 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-79247579-570a-43b4-8043-75c3ba220f21 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4df8eded7d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=736 identity=30414 ipv4=10.0.0.142 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-79247579-570a-43b4-8043-75c3ba220f21 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4df8eded7d datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=736 identity=30414 ipv4=10.0.0.142 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-79247579-570a-43b4-8043-75c3ba220f21 subsys=endpoint level=info msg="Successful endpoint creation" containerID=4df8eded7d datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=736 identity=30414 ipv4=10.0.0.142 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-79247579-570a-43b4-8043-75c3ba220f21 subsys=daemon level=info msg="Delete endpoint request" containerID=4df8eded7d endpointID=736 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-79247579-570a-43b4-8043-75c3ba220f21 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=4df8eded7d datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=736 identity=30414 ipv4=10.0.0.142 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-79247579-570a-43b4-8043-75c3ba220f21 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.18 5227a918-6826-4de0-972f-a98101cea63e default }" containerID=0d93a10bfd45fbfdbc279457d0016adcb478dee658e6e852747ed8f36f8786b4 datapathConfiguration="&{false false false false false }" interface=lxcf9dbc334a69e k8sPodName=openstack/valkey-node-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0d93a10bfd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1045 ipv4=10.0.0.18 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0d93a10bfd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1045 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.18 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=0d93a10bfd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1045 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.18 ipv6= k8sPodName=openstack/valkey-node-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=node;k8s:app.kubernetes.io/instance=valkey;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=valkey;k8s:app.kubernetes.io/version=8.0.2;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=valkey-2.4.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=valkey;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=valkey-node-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0d93a10bfd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1045 identity=46333 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.18 ipv6= k8sPodName=openstack/valkey-node-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0d93a10bfd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1045 identity=46333 ipv4=10.0.0.18 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0d93a10bfd datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1045 identity=46333 ipv4=10.0.0.18 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=0d93a10bfd datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1045 identity=46333 ipv4=10.0.0.18 ipv6= k8sPodName=openstack/valkey-node-0 subsys=daemon level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"keycloak\",\"k8s:app.kubernetes.io/instance\":\"keycloak\",\"k8s:app.kubernetes.io/name\":\"keycloak\",\"k8s:io.kubernetes.pod.namespace\":\"auth-system\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:7800 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:8080 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=keycloak k8s:io.cilium.k8s.policy.namespace=auth-system k8s:io.cilium.k8s.policy.uid=7b5a3848-f98f-4713-8bce-526179468419] Description:}]" policyAddRequest=ac8c945b-f4a0-43ae-a47b-c0074aabcbc7 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=ac8c945b-f4a0-43ae-a47b-c0074aabcbc7 policyRevision=5 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=keycloak subsys=k8s-watcher level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.52 7a671086-daa5-477a-a956-7abd4e41c955 default }" containerID=1d6a1ddfd5e69cf2758a2cc5310a8c670822c649174621635b6d560cf4028834 datapathConfiguration="&{false false false false false }" interface=lxc4fbf1145980d k8sPodName=auth-system/keycloak-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1d6a1ddfd5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1663 ipv4=10.0.0.52 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1d6a1ddfd5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1663 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.52 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:auth-system k8s:io.cilium.k8s.namespace.labels.name:auth-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=keycloak;k8s:app.kubernetes.io/instance=keycloak;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=keycloak;k8s:app.kubernetes.io/version=24.0.5;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=keycloak-21.4.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system;k8s:io.cilium.k8s.namespace.labels.name=auth-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keycloak;k8s:io.kubernetes.pod.namespace=auth-system;k8s:statefulset.kubernetes.io/pod-name=keycloak-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1d6a1ddfd5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1663 identity=42850 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.52 ipv6= k8sPodName=auth-system/keycloak-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1d6a1ddfd5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1663 identity=42850 ipv4=10.0.0.52 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1d6a1ddfd5 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1663 identity=42850 ipv4=10.0.0.52 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=1d6a1ddfd5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1663 identity=42850 ipv4=10.0.0.52 ipv6= k8sPodName=auth-system/keycloak-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.009516144304516617 newInterval=7m30s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.138 6cd08436-aaf1-4556-b158-e7bcac24eafa default }" containerID=c0313d48d6ee7385ff41b6fdd5dd4d5532ea730659ac44e476bcdc1dc3524ef5 datapathConfiguration="&{false false false false false }" interface=lxcdb9f3e8a19a8 k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-jjw74 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c0313d48d6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2963 ipv4=10.0.0.138 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-jjw74 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c0313d48d6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2963 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.138 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-jjw74 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.88 aa916706-3cb3-4b46-85dd-2d51bbf5ac91 default }" containerID=1b36181087cd1aed06c7d62700834b1a6b8532003d9f2e286b723e5bc9a87150 datapathConfiguration="&{false false false false false }" interface=lxc44d4bb249bc4 k8sPodName=monitoring/node-feature-discovery-worker-b7cmh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1b36181087 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1353 ipv4=10.0.0.88 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-b7cmh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1b36181087 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1353 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.88 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-b7cmh subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=gc;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c0313d48d6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2963 identity=8513 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.138 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-jjw74 oldIdentity="no identity" subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=c0313d48d6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2963 identity=8513 ipv4=10.0.0.138 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-jjw74 subsys=endpoint level=info msg="Invalid state transition skipped" containerID=1b36181087 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1353 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.88 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-b7cmh line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=worker;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1b36181087 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1353 identity=40022 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.88 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-b7cmh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1b36181087 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1353 identity=40022 ipv4=10.0.0.88 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-b7cmh subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.230 cda77d57-8629-4e25-b2ce-feeaf49c3418 default }" containerID=16f0b90b69247f27fa458bd2088c5d47e84009355cc691d87ce7ae527e9ce02d datapathConfiguration="&{false false false false false }" interface=lxc352b06dcfbab k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-thp8x labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=16f0b90b69 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1889 ipv4=10.0.0.230 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-thp8x subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=16f0b90b69 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1889 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.230 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-thp8x subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=master;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=16f0b90b69 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1889 identity=63043 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.230 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-thp8x oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=16f0b90b69 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1889 identity=63043 ipv4=10.0.0.230 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-thp8x subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1b36181087 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1353 identity=40022 ipv4=10.0.0.88 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-b7cmh subsys=endpoint level=info msg="Successful endpoint creation" containerID=1b36181087 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1353 identity=40022 ipv4=10.0.0.88 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-b7cmh subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=c0313d48d6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2963 identity=8513 ipv4=10.0.0.138 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-jjw74 subsys=endpoint level=info msg="Successful endpoint creation" containerID=c0313d48d6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2963 identity=8513 ipv4=10.0.0.138 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-jjw74 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=16f0b90b69 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1889 identity=63043 ipv4=10.0.0.230 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-thp8x subsys=endpoint level=info msg="Successful endpoint creation" containerID=16f0b90b69 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1889 identity=63043 ipv4=10.0.0.230 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-thp8x subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.149 60ed7a1d-aa4e-41a5-8992-b4cf7c984635 default }" containerID=6295dea445515372cc635f30143ae2db7c7bb68bd8f7c1b44239b122e2f21871 datapathConfiguration="&{false false false false false }" interface=lxc77a3c603c6da k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-5csbp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6295dea445 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3837 ipv4=10.0.0.149 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-5csbp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6295dea445 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3837 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.149 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-5csbp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:secretgen-controller]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=secretgen-controller;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa;k8s:io.kubernetes.pod.namespace=secretgen-controller;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6295dea445 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3837 identity=16634 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.149 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-5csbp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6295dea445 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3837 identity=16634 ipv4=10.0.0.149 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-5csbp subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6295dea445 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3837 identity=16634 ipv4=10.0.0.149 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-5csbp subsys=endpoint level=info msg="Successful endpoint creation" containerID=6295dea445 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3837 identity=16634 ipv4=10.0.0.149 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-5csbp subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=132 identity=1 identityLabels="k8s:feature.node.kubernetes.io/cpu-cpuid.ADX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AESNI=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX2=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CLZERO=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CMPXCHG8=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FMA3=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSROPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.HYPERVISOR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IA32_ARCH_CAP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBPB=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBRS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.LAHF=true,k8s:feature.node.kubernetes.io/cpu-cpuid.MOVBE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.NRIPS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.OSXSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SHA=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SPEC_CTRL_SSBD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SSE4A=true,k8s:feature.node.kubernetes.io/cpu-cpuid.STIBP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVM=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVMNP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSCALL=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSEE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.TOPEXT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.WBNOINVD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.X87=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XGETBV1=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEC=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEOPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVES=true,k8s:feature.node.kubernetes.io/cpu-hardware_multithreading=false,k8s:feature.node.kubernetes.io/cpu-model.family=23,k8s:feature.node.kubernetes.io/cpu-model.id=49,k8s:feature.node.kubernetes.io/cpu-model.vendor_id=AMD,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ=true,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ_IDLE=true,k8s:feature.node.kubernetes.io/kernel-version.full=5.15.0-176-generic,k8s:feature.node.kubernetes.io/kernel-version.major=5,k8s:feature.node.kubernetes.io/kernel-version.minor=15,k8s:feature.node.kubernetes.io/kernel-version.revision=0,k8s:feature.node.kubernetes.io/pci-0300_1af4.present=true,k8s:feature.node.kubernetes.io/system-os_release.ID=ubuntu,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.major=22,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.minor=04,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID=22.04,k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_00132 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_00132 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_00132 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_00132:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=132 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.153 7abb3d60-ada8-4093-81ba-b6c46e6303ed default }" containerID=1ab93b37b864d15eabc6aa480b6a08c76bbe33f2cf685b2d5f39ed347a746d44 datapathConfiguration="&{false false false false false }" interface=lxca8c77fd59e65 k8sPodName=monitoring/kube-prometheus-stack-admission-create-fltbn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1ab93b37b8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1142 ipv4=10.0.0.153 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-fltbn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1ab93b37b8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1142 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=cc251d5b-f6fb-4259-9d5b-199f1681be3d,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=cc251d5b-f6fb-4259-9d5b-199f1681be3d,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.153 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-fltbn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=1ab93b37b8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1142 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.153 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-fltbn line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-create;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=cc251d5b-f6fb-4259-9d5b-199f1681be3d;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=cc251d5b-f6fb-4259-9d5b-199f1681be3d;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-create;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1ab93b37b8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1142 identity=2629 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=cc251d5b-f6fb-4259-9d5b-199f1681be3d,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=cc251d5b-f6fb-4259-9d5b-199f1681be3d,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.153 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-fltbn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1ab93b37b8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1142 identity=2629 ipv4=10.0.0.153 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-fltbn subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1ab93b37b8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1142 identity=2629 ipv4=10.0.0.153 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-fltbn subsys=endpoint level=info msg="Successful endpoint creation" containerID=1ab93b37b8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1142 identity=2629 ipv4=10.0.0.153 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-fltbn subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=1ab93b37b8 endpointID=1142 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-create-fltbn subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-create k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=cc251d5b-f6fb-4259-9d5b-199f1681be3d k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=cc251d5b-f6fb-4259-9d5b-199f1681be3d k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-create k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=1ab93b37b8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1142 identity=2629 ipv4=10.0.0.153 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-fltbn subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.73 678fbd15-8859-4ebe-8c7f-51fa098eb48c default }" containerID=c65e96f971336e4549e263af6c674498db3548991c1846f0c0185787e2714eac datapathConfiguration="&{false false false false false }" interface=lxc25e4024b5297 k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-dvs86 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c65e96f971 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1278 ipv4=10.0.0.73 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-dvs86 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c65e96f971 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1278 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.73 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-dvs86 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-operator;k8s:app.kubernetes.io/component=prometheus-operator;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:chart=kube-prometheus-stack-60.2.0;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c65e96f971 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1278 identity=8312 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.73 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-dvs86 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c65e96f971 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1278 identity=8312 ipv4=10.0.0.73 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-dvs86 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.47 835f41fb-5ab7-442b-a167-2aaba8f4f9bd default }" containerID=cdce28beca9c2629f3e682266ca21eeadaad0d1cda621557215b5e8887449894 datapathConfiguration="&{false false false false false }" interface=lxc8fca5fe188ad k8sPodName=monitoring/kube-prometheus-stack-grafana-b955497f5-bl6g4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=cdce28beca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3004 ipv4=10.0.0.47 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-b955497f5-bl6g4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=cdce28beca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3004 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.47 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-b955497f5-bl6g4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.207 d5c5dcd9-fc3d-48d3-8bb4-6ff1bc7188ed default }" containerID=2df91a1b6c663337bd2239165e204cec187fcc15549b34ec6260c0fdbd493c4f datapathConfiguration="&{false false false false false }" interface=lxc189c1f6f3b3c k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-nnk5l labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2df91a1b6c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2152 ipv4=10.0.0.207 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-nnk5l subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2df91a1b6c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2152 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.207 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-nnk5l subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/name=grafana;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=cdce28beca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3004 identity=22007 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.47 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-b955497f5-bl6g4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=cdce28beca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3004 identity=22007 ipv4=10.0.0.47 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-b955497f5-bl6g4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=metrics;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-state-metrics;k8s:app.kubernetes.io/part-of=kube-state-metrics;k8s:app.kubernetes.io/version=2.12.0;k8s:helm.sh/chart=kube-state-metrics-5.20.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2df91a1b6c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2152 identity=10461 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.207 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-nnk5l oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2df91a1b6c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2152 identity=10461 ipv4=10.0.0.207 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-nnk5l subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c65e96f971 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1278 identity=8312 ipv4=10.0.0.73 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-dvs86 subsys=endpoint level=info msg="Successful endpoint creation" containerID=c65e96f971 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1278 identity=8312 ipv4=10.0.0.73 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-dvs86 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=cdce28beca datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3004 identity=22007 ipv4=10.0.0.47 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-b955497f5-bl6g4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=cdce28beca datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3004 identity=22007 ipv4=10.0.0.47 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-b955497f5-bl6g4 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=2df91a1b6c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2152 identity=10461 ipv4=10.0.0.207 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-nnk5l subsys=endpoint level=info msg="Successful endpoint creation" containerID=2df91a1b6c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2152 identity=10461 ipv4=10.0.0.207 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-nnk5l subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.8 4d691d9e-31b9-4c67-ba4e-f69135673747 default }" containerID=54a8496d42c26264e3a312c97d34be1547d9e1444a1d4332d7e0ae17a551711f datapathConfiguration="&{false false false false false }" interface=lxcf75e3762783c k8sPodName=monitoring/kube-prometheus-stack-admission-patch-dng96 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=54a8496d42 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1173 ipv4=10.0.0.8 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-dng96 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=54a8496d42 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1173 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=e1959a2e-d659-4548-ac62-313582ab650e,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=e1959a2e-d659-4548-ac62-313582ab650e,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.8 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-dng96 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-patch;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=e1959a2e-d659-4548-ac62-313582ab650e;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=e1959a2e-d659-4548-ac62-313582ab650e;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-patch;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=54a8496d42 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1173 identity=19596 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=e1959a2e-d659-4548-ac62-313582ab650e,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=e1959a2e-d659-4548-ac62-313582ab650e,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.8 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-dng96 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=54a8496d42 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1173 identity=19596 ipv4=10.0.0.8 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-dng96 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=54a8496d42 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1173 identity=19596 ipv4=10.0.0.8 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-dng96 subsys=endpoint level=info msg="Successful endpoint creation" containerID=54a8496d42 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1173 identity=19596 ipv4=10.0.0.8 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-dng96 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.221 947016c5-d4e4-4b5d-95bd-165aaa6a3bd0 default }" containerID=03e5b4c253ad2268d58d14afb315d05897efbd3a401df958fd9cd2ce0d49ec61 datapathConfiguration="&{false false false false false }" interface=lxc8621d96344bb k8sPodName=local-path-storage/helper-pod-create-pvc-fdf1de60-656e-4189-bd83-1b27b60d8beb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=03e5b4c253 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1186 ipv4=10.0.0.221 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-fdf1de60-656e-4189-bd83-1b27b60d8beb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=03e5b4c253 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1186 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.221 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-fdf1de60-656e-4189-bd83-1b27b60d8beb subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=03e5b4c253 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1186 identity=30414 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.221 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-fdf1de60-656e-4189-bd83-1b27b60d8beb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=03e5b4c253 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1186 identity=30414 ipv4=10.0.0.221 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-fdf1de60-656e-4189-bd83-1b27b60d8beb subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=03e5b4c253 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1186 identity=30414 ipv4=10.0.0.221 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-fdf1de60-656e-4189-bd83-1b27b60d8beb subsys=endpoint level=info msg="Successful endpoint creation" containerID=03e5b4c253 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1186 identity=30414 ipv4=10.0.0.221 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-fdf1de60-656e-4189-bd83-1b27b60d8beb subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.249 d92d5422-81d1-47f5-9ff6-703de38c491a default }" containerID=d85af1a0f3ce7dbd1cbfdc2dbb56fd4513e0bdb4d9a9f8f7fc58fd545bc18f72 datapathConfiguration="&{false false false false false }" interface=lxcca6b17832bd5 k8sPodName=local-path-storage/helper-pod-create-pvc-98bbd117-2a41-4818-9539-3ef755e34e09 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d85af1a0f3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1241 ipv4=10.0.0.249 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-98bbd117-2a41-4818-9539-3ef755e34e09 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d85af1a0f3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1241 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.249 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-98bbd117-2a41-4818-9539-3ef755e34e09 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=d85af1a0f3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1241 identity=30414 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.249 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-98bbd117-2a41-4818-9539-3ef755e34e09 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d85af1a0f3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1241 identity=30414 ipv4=10.0.0.249 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-98bbd117-2a41-4818-9539-3ef755e34e09 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d85af1a0f3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1241 identity=30414 ipv4=10.0.0.249 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-98bbd117-2a41-4818-9539-3ef755e34e09 subsys=endpoint level=info msg="Successful endpoint creation" containerID=d85af1a0f3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1241 identity=30414 ipv4=10.0.0.249 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-98bbd117-2a41-4818-9539-3ef755e34e09 subsys=daemon level=info msg="Delete endpoint request" containerID=54a8496d42 endpointID=1173 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-patch-dng96 subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-patch k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=e1959a2e-d659-4548-ac62-313582ab650e k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=e1959a2e-d659-4548-ac62-313582ab650e k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-patch k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=54a8496d42 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1173 identity=19596 ipv4=10.0.0.8 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-dng96 subsys=endpoint level=info msg="Delete endpoint request" containerID=03e5b4c253 endpointID=1186 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-fdf1de60-656e-4189-bd83-1b27b60d8beb subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=03e5b4c253 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1186 identity=30414 ipv4=10.0.0.221 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-fdf1de60-656e-4189-bd83-1b27b60d8beb subsys=endpoint level=info msg="Delete endpoint request" containerID=d85af1a0f3 endpointID=1241 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-98bbd117-2a41-4818-9539-3ef755e34e09 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=d85af1a0f3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1241 identity=30414 ipv4=10.0.0.249 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-98bbd117-2a41-4818-9539-3ef755e34e09 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.20 6f1f2cd2-605f-4360-8c7d-80275a775bdf default }" containerID=2e84d6bd2648ad9bf0d36003bd58f85baf80c9d61a961de6329f1b13ff434a45 datapathConfiguration="&{false false false false false }" interface=lxcda94cae46b11 k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2e84d6bd26 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3056 ipv4=10.0.0.20 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2e84d6bd26 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3056 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.20 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=prometheus;k8s:app.kubernetes.io/version=2.51.2;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus;k8s:io.kubernetes.pod.namespace=monitoring;k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus;k8s:operator.prometheus.io/shard=0;k8s:prometheus=kube-prometheus-stack-prometheus;k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=2e84d6bd26 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3056 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.20 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=2e84d6bd26 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3056 identity=46045 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.20 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2e84d6bd26 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3056 identity=46045 ipv4=10.0.0.20 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2e84d6bd26 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3056 identity=46045 ipv4=10.0.0.20 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=2e84d6bd26 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3056 identity=46045 ipv4=10.0.0.20 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.197 dbeb685c-59a2-46d2-b41b-3dffc3d08230 default }" containerID=c259acfec622c36cee1ab797618c13e8f5197331ea53c3b9beffc83d45064110 datapathConfiguration="&{false false false false false }" interface=lxc1df3299fc731 k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c259acfec6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1099 ipv4=10.0.0.197 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c259acfec6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1099 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.197 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:alertmanager=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=alertmanager;k8s:app.kubernetes.io/version=0.27.0;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c259acfec6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1099 identity=56858 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.197 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c259acfec6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1099 identity=56858 ipv4=10.0.0.197 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c259acfec6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1099 identity=56858 ipv4=10.0.0.197 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=c259acfec6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1099 identity=56858 ipv4=10.0.0.197 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.142 f5eb9dc5-f1fa-4738-b736-eb10c485d49a default }" containerID=c8dc32a7b6194464e11027c5daa1a3e1cfc76f428a20596a22ece256faea95e9 datapathConfiguration="&{false false false false false }" interface=lxc7cd2f00cd47d k8sPodName=monitoring/loki-chunks-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c8dc32a7b6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=838 ipv4=10.0.0.142 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c8dc32a7b6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=838 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.142 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-chunks-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-chunks-cache;k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c8dc32a7b6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=838 identity=1780 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.142 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c8dc32a7b6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=838 identity=1780 ipv4=10.0.0.142 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.192 8b2b5462-05f5-414c-ad6f-ba40b2de7743 default }" containerID=6cdc19c3a3bb160c07aa6665119e300352285b9e147be4cd495d17ccdcab41cf datapathConfiguration="&{false false false false false }" interface=lxc2589e841938a k8sPodName=monitoring/loki-results-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6cdc19c3a3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1581 ipv4=10.0.0.192 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6cdc19c3a3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1581 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.192 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-results-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-results-cache;k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6cdc19c3a3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1581 identity=61355 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.192 ipv6= k8sPodName=monitoring/loki-results-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6cdc19c3a3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1581 identity=61355 ipv4=10.0.0.192 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.89 40c1f2db-d4e2-42b4-a4a1-302d633c0846 default }" containerID=e1bae010b7b70f832bff02e5189499dcc4dbdfa5a3ee12449cfd2e2ec7e6b649 datapathConfiguration="&{false false false false false }" interface=lxc0c9ea59c5200 k8sPodName=monitoring/loki-gateway-cf54cb88c-hdj59 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e1bae010b7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2154 ipv4=10.0.0.89 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-hdj59 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e1bae010b7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2154 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.89 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-hdj59 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=gateway;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e1bae010b7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2154 identity=53995 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.89 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-hdj59 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e1bae010b7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2154 identity=53995 ipv4=10.0.0.89 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-hdj59 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c8dc32a7b6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=838 identity=1780 ipv4=10.0.0.142 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=c8dc32a7b6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=838 identity=1780 ipv4=10.0.0.142 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=6cdc19c3a3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1581 identity=61355 ipv4=10.0.0.192 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=6cdc19c3a3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1581 identity=61355 ipv4=10.0.0.192 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=e1bae010b7 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2154 identity=53995 ipv4=10.0.0.89 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-hdj59 subsys=endpoint level=info msg="Successful endpoint creation" containerID=e1bae010b7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2154 identity=53995 ipv4=10.0.0.89 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-hdj59 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.223 fe4838f8-73fb-475f-bb2e-c9d231b2008b default }" containerID=e07a772204fb8dca1ca3eb8b42c9d4dbbd4868230fdb780122166b87bd18d668 datapathConfiguration="&{false false false false false }" interface=lxc06e36d4d960a k8sPodName=local-path-storage/helper-pod-create-pvc-8a988bee-30cc-4347-a77b-c694880ee5e4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e07a772204 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=564 ipv4=10.0.0.223 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8a988bee-30cc-4347-a77b-c694880ee5e4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e07a772204 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=564 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.223 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8a988bee-30cc-4347-a77b-c694880ee5e4 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e07a772204 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=564 identity=30414 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.223 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8a988bee-30cc-4347-a77b-c694880ee5e4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e07a772204 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=564 identity=30414 ipv4=10.0.0.223 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8a988bee-30cc-4347-a77b-c694880ee5e4 subsys=endpoint level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=e07a772204 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=564 identity=30414 ipv4=10.0.0.223 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8a988bee-30cc-4347-a77b-c694880ee5e4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=e07a772204 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=564 identity=30414 ipv4=10.0.0.223 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8a988bee-30cc-4347-a77b-c694880ee5e4 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.37 fddd4ecc-caf3-4b7e-a93a-ed87d469ccf1 default }" containerID=cb73d1a6a02bb312eb5fcebd3be2b56953f5ac3910b1e2381ab952e9c853b304 datapathConfiguration="&{false false false false false }" interface=lxc9972df4305c3 k8sPodName=monitoring/vector-k6d86 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=cb73d1a6a0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=568 ipv4=10.0.0.37 ipv6= k8sPodName=monitoring/vector-k6d86 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=cb73d1a6a0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=568 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.37 ipv6= k8sPodName=monitoring/vector-k6d86 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=Agent;k8s:app.kubernetes.io/instance=vector;k8s:app.kubernetes.io/name=vector;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=vector;k8s:io.kubernetes.pod.namespace=monitoring;k8s:vector.dev/exclude=true;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=cb73d1a6a0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=568 identity=9737 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.37 ipv6= k8sPodName=monitoring/vector-k6d86 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=cb73d1a6a0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=568 identity=9737 ipv4=10.0.0.37 ipv6= k8sPodName=monitoring/vector-k6d86 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=cb73d1a6a0 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=568 identity=9737 ipv4=10.0.0.37 ipv6= k8sPodName=monitoring/vector-k6d86 subsys=endpoint level=info msg="Successful endpoint creation" containerID=cb73d1a6a0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=568 identity=9737 ipv4=10.0.0.37 ipv6= k8sPodName=monitoring/vector-k6d86 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=e07a772204 endpointID=564 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-8a988bee-30cc-4347-a77b-c694880ee5e4 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=e07a772204 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=564 identity=30414 ipv4=10.0.0.223 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8a988bee-30cc-4347-a77b-c694880ee5e4 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.17 f7ed1a20-cb9b-4844-beab-12590596c999 default }" containerID=d85cbdb4fb9abfdc640331137a1c023a29fb35d8c2f74b3004b976d42696b8f5 datapathConfiguration="&{false false false false false }" interface=lxc140cb37ffc87 k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-lhvsk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d85cbdb4fb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=10 ipv4=10.0.0.17 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-lhvsk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d85cbdb4fb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=10 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.17 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-lhvsk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=prometheus-pushgateway;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=prometheus-pushgateway;k8s:app.kubernetes.io/version=v1.8.0;k8s:helm.sh/chart=prometheus-pushgateway-2.13.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d85cbdb4fb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=10 identity=2989 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.17 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-lhvsk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d85cbdb4fb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=10 identity=2989 ipv4=10.0.0.17 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-lhvsk subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d85cbdb4fb datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=10 identity=2989 ipv4=10.0.0.17 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-lhvsk subsys=endpoint level=info msg="Successful endpoint creation" containerID=d85cbdb4fb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=10 identity=2989 ipv4=10.0.0.17 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-lhvsk subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.233 ccf1f169-9c20-4b06-977a-519646d4eacc default }" containerID=7f1401c8eda3231d54513737166ef8cfad14ed6b22124cba9eb29732baa3bf0b datapathConfiguration="&{false false false false false }" interface=lxcceec1641339b k8sPodName=monitoring/loki-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7f1401c8ed datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=743 ipv4=10.0.0.233 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7f1401c8ed datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=743 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.233 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=single-binary;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:app.kubernetes.io/part-of=memberlist;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=loki-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7f1401c8ed datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=743 identity=703 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.233 ipv6= k8sPodName=monitoring/loki-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7f1401c8ed datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=743 identity=703 ipv4=10.0.0.233 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7f1401c8ed datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=743 identity=703 ipv4=10.0.0.233 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=7f1401c8ed datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=743 identity=703 ipv4=10.0.0.233 ipv6= k8sPodName=monitoring/loki-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.168 b33df6b6-4975-47d3-8ef1-f1a5ef1d36c8 default }" containerID=a715f3918d30d0661da1d18d65b6404de66381142fb837747835536c02dc0755 datapathConfiguration="&{false false false false false }" interface=lxc1d95a8ff02fb k8sPodName=openstack/memcached-memcached-6479589586-hm7pd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a715f3918d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=893 ipv4=10.0.0.168 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-hm7pd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a715f3918d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=893 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.168 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-hm7pd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=memcached;k8s:component=server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=memcached;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=a715f3918d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=893 identity=4728 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.168 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-hm7pd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a715f3918d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=893 identity=4728 ipv4=10.0.0.168 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-hm7pd subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a715f3918d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=893 identity=4728 ipv4=10.0.0.168 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-hm7pd subsys=endpoint level=info msg="Successful endpoint creation" containerID=a715f3918d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=893 identity=4728 ipv4=10.0.0.168 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-hm7pd subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.114 16481ab8-5ce7-457c-8782-968b256aa3fa default }" containerID=e839f527b7ed121b48e6e1e430a8f58e12c7f0110b601baacc7cfc92b698ea89 datapathConfiguration="&{false false false false false }" interface=lxc38a072afbffd k8sPodName=local-path-storage/helper-pod-create-pvc-46f3bcfb-3c7f-4f9d-9f91-cfbbbd5f3f2b labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e839f527b7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=584 ipv4=10.0.0.114 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-46f3bcfb-3c7f-4f9d-9f91-cfbbbd5f3f2b subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e839f527b7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=584 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.114 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-46f3bcfb-3c7f-4f9d-9f91-cfbbbd5f3f2b subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e839f527b7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=584 identity=30414 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.114 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-46f3bcfb-3c7f-4f9d-9f91-cfbbbd5f3f2b oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e839f527b7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=584 identity=30414 ipv4=10.0.0.114 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-46f3bcfb-3c7f-4f9d-9f91-cfbbbd5f3f2b subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e839f527b7 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=584 identity=30414 ipv4=10.0.0.114 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-46f3bcfb-3c7f-4f9d-9f91-cfbbbd5f3f2b subsys=endpoint level=info msg="Successful endpoint creation" containerID=e839f527b7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=584 identity=30414 ipv4=10.0.0.114 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-46f3bcfb-3c7f-4f9d-9f91-cfbbbd5f3f2b subsys=daemon level=info msg="Delete endpoint request" containerID=e839f527b7 endpointID=584 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-46f3bcfb-3c7f-4f9d-9f91-cfbbbd5f3f2b subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=e839f527b7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=584 identity=30414 ipv4=10.0.0.114 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-46f3bcfb-3c7f-4f9d-9f91-cfbbbd5f3f2b subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.112 5f4758fd-ec93-4f6c-9a51-28bebd33d577 default }" containerID=121af9a0b6e429f37315276fa79727e08572a658249d6cf294c715c33ffdbd56 datapathConfiguration="&{false false false false false }" interface=lxc8db484b4b548 k8sPodName=openstack/rabbitmq-keystone-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=121af9a0b6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1502 ipv4=10.0.0.112 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=121af9a0b6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1502 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.112 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-keystone;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=121af9a0b6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1502 identity=15050 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.112 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=121af9a0b6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1502 identity=15050 ipv4=10.0.0.112 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=121af9a0b6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1502 identity=15050 ipv4=10.0.0.112 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=121af9a0b6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1502 identity=15050 ipv4=10.0.0.112 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.234 8915efef-13b0-48ac-8523-262f99e29339 default }" containerID=ab1114254c098ed9bbf0dd5bb8c13ec45b0d463e6b8a09e4caf3ad301f3fb634 datapathConfiguration="&{false false false false false }" interface=lxcbe1e35dec449 k8sPodName=openstack/keystone-api-78f87d9796-7dc2x labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ab1114254c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1268 ipv4=10.0.0.234 ipv6= k8sPodName=openstack/keystone-api-78f87d9796-7dc2x subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ab1114254c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1268 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.234 ipv6= k8sPodName=openstack/keystone-api-78f87d9796-7dc2x subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ab1114254c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1268 identity=32976 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.234 ipv6= k8sPodName=openstack/keystone-api-78f87d9796-7dc2x oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ab1114254c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1268 identity=32976 ipv4=10.0.0.234 ipv6= k8sPodName=openstack/keystone-api-78f87d9796-7dc2x subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.221 9c30fe97-100e-4b4b-9d81-9010e40ccb50 default }" containerID=7221a8615f116bb5a3a6786bfe8d6506c1a90ecdf311514491ee0979be134d13 datapathConfiguration="&{false false false false false }" interface=lxc926d9d73c198 k8sPodName=openstack/keystone-credential-setup-fmkcz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7221a8615f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=281 ipv4=10.0.0.221 ipv6= k8sPodName=openstack/keystone-credential-setup-fmkcz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7221a8615f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=281 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=b7ff324d-c474-4099-afb7-180c125680f0,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=b7ff324d-c474-4099-afb7-180c125680f0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.221 ipv6= k8sPodName=openstack/keystone-credential-setup-fmkcz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=b7ff324d-c474-4099-afb7-180c125680f0;k8s:batch.kubernetes.io/job-name=keystone-credential-setup;k8s:component=credential-setup;k8s:controller-uid=b7ff324d-c474-4099-afb7-180c125680f0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-credential-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7221a8615f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=281 identity=24680 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=b7ff324d-c474-4099-afb7-180c125680f0,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=b7ff324d-c474-4099-afb7-180c125680f0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.221 ipv6= k8sPodName=openstack/keystone-credential-setup-fmkcz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7221a8615f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=281 identity=24680 ipv4=10.0.0.221 ipv6= k8sPodName=openstack/keystone-credential-setup-fmkcz subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ab1114254c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1268 identity=32976 ipv4=10.0.0.234 ipv6= k8sPodName=openstack/keystone-api-78f87d9796-7dc2x subsys=endpoint level=info msg="Successful endpoint creation" containerID=ab1114254c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1268 identity=32976 ipv4=10.0.0.234 ipv6= k8sPodName=openstack/keystone-api-78f87d9796-7dc2x subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=7221a8615f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=281 identity=24680 ipv4=10.0.0.221 ipv6= k8sPodName=openstack/keystone-credential-setup-fmkcz subsys=endpoint level=info msg="Successful endpoint creation" containerID=7221a8615f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=281 identity=24680 ipv4=10.0.0.221 ipv6= k8sPodName=openstack/keystone-credential-setup-fmkcz subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=7221a8615f endpointID=281 k8sNamespace=openstack k8sPodName=keystone-credential-setup-fmkcz subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=b7ff324d-c474-4099-afb7-180c125680f0 k8s:batch.kubernetes.io/job-name=keystone-credential-setup k8s:component=credential-setup k8s:controller-uid=b7ff324d-c474-4099-afb7-180c125680f0 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-credential-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=7221a8615f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=281 identity=24680 ipv4=10.0.0.221 ipv6= k8sPodName=openstack/keystone-credential-setup-fmkcz subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.150 284273ca-4ca6-406e-a61e-fa190e3fa2a6 default }" containerID=a2292f62f086cebeef412bd4a2f38878232edc9f36ddecc2325d85e1f4ab808e datapathConfiguration="&{false false false false false }" interface=lxc22a0b4717b3e k8sPodName=openstack/keystone-db-init-bwdg2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a2292f62f0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1365 ipv4=10.0.0.150 ipv6= k8sPodName=openstack/keystone-db-init-bwdg2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a2292f62f0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1365 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=cce26b41-1c1f-4b50-bdab-406d1798067c,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=cce26b41-1c1f-4b50-bdab-406d1798067c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.150 ipv6= k8sPodName=openstack/keystone-db-init-bwdg2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=cce26b41-1c1f-4b50-bdab-406d1798067c;k8s:batch.kubernetes.io/job-name=keystone-db-init;k8s:component=db-init;k8s:controller-uid=cce26b41-1c1f-4b50-bdab-406d1798067c;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-init;k8s:release_group=keystone;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=a2292f62f0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1365 identity=49711 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=cce26b41-1c1f-4b50-bdab-406d1798067c,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=cce26b41-1c1f-4b50-bdab-406d1798067c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.150 ipv6= k8sPodName=openstack/keystone-db-init-bwdg2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a2292f62f0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1365 identity=49711 ipv4=10.0.0.150 ipv6= k8sPodName=openstack/keystone-db-init-bwdg2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a2292f62f0 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1365 identity=49711 ipv4=10.0.0.150 ipv6= k8sPodName=openstack/keystone-db-init-bwdg2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=a2292f62f0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1365 identity=49711 ipv4=10.0.0.150 ipv6= k8sPodName=openstack/keystone-db-init-bwdg2 subsys=daemon level=info msg="Delete endpoint request" containerID=a2292f62f0 endpointID=1365 k8sNamespace=openstack k8sPodName=keystone-db-init-bwdg2 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=cce26b41-1c1f-4b50-bdab-406d1798067c k8s:batch.kubernetes.io/job-name=keystone-db-init k8s:component=db-init k8s:controller-uid=cce26b41-1c1f-4b50-bdab-406d1798067c k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=a2292f62f0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1365 identity=49711 ipv4=10.0.0.150 ipv6= k8sPodName=openstack/keystone-db-init-bwdg2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.90 d738946c-a0cf-43eb-8504-cca4637658f8 default }" containerID=339fc4aeb1e3f5a8b0e37a8a833e6336d7e174704a99e50dd3d13f071f92a99b datapathConfiguration="&{false false false false false }" interface=lxc4a8ef53923f0 k8sPodName=openstack/keystone-fernet-setup-hnfhw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=339fc4aeb1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4095 ipv4=10.0.0.90 ipv6= k8sPodName=openstack/keystone-fernet-setup-hnfhw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=339fc4aeb1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4095 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=877142f9-f987-49e1-858c-f38683a4fe5a,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=877142f9-f987-49e1-858c-f38683a4fe5a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.90 ipv6= k8sPodName=openstack/keystone-fernet-setup-hnfhw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=339fc4aeb1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4095 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.90 ipv6= k8sPodName=openstack/keystone-fernet-setup-hnfhw line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=877142f9-f987-49e1-858c-f38683a4fe5a;k8s:batch.kubernetes.io/job-name=keystone-fernet-setup;k8s:component=fernet-setup;k8s:controller-uid=877142f9-f987-49e1-858c-f38683a4fe5a;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-fernet-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=339fc4aeb1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4095 identity=62726 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=877142f9-f987-49e1-858c-f38683a4fe5a,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=877142f9-f987-49e1-858c-f38683a4fe5a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.90 ipv6= k8sPodName=openstack/keystone-fernet-setup-hnfhw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=339fc4aeb1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4095 identity=62726 ipv4=10.0.0.90 ipv6= k8sPodName=openstack/keystone-fernet-setup-hnfhw subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=339fc4aeb1 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=4095 identity=62726 ipv4=10.0.0.90 ipv6= k8sPodName=openstack/keystone-fernet-setup-hnfhw subsys=endpoint level=info msg="Successful endpoint creation" containerID=339fc4aeb1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=4095 identity=62726 ipv4=10.0.0.90 ipv6= k8sPodName=openstack/keystone-fernet-setup-hnfhw subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=339fc4aeb1 endpointID=4095 k8sNamespace=openstack k8sPodName=keystone-fernet-setup-hnfhw subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=877142f9-f987-49e1-858c-f38683a4fe5a k8s:batch.kubernetes.io/job-name=keystone-fernet-setup k8s:component=fernet-setup k8s:controller-uid=877142f9-f987-49e1-858c-f38683a4fe5a k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-fernet-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=339fc4aeb1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=4095 identity=62726 ipv4=10.0.0.90 ipv6= k8sPodName=openstack/keystone-fernet-setup-hnfhw subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.12 8b8c067a-57f6-414d-a5e3-e70be6acc7fd default }" containerID=0b00eda4f7a662a594633baf02d507164626fe24a41c467623a8db785ea4bf90 datapathConfiguration="&{false false false false false }" interface=lxcaacfc40a17c3 k8sPodName=openstack/keystone-db-sync-8xcfl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0b00eda4f7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2226 ipv4=10.0.0.12 ipv6= k8sPodName=openstack/keystone-db-sync-8xcfl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0b00eda4f7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2226 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=53f93cd2-0bee-49eb-ab16-d3000056ec81,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=53f93cd2-0bee-49eb-ab16-d3000056ec81,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.12 ipv6= k8sPodName=openstack/keystone-db-sync-8xcfl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=0b00eda4f7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2226 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.12 ipv6= k8sPodName=openstack/keystone-db-sync-8xcfl line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=53f93cd2-0bee-49eb-ab16-d3000056ec81;k8s:batch.kubernetes.io/job-name=keystone-db-sync;k8s:component=db-sync;k8s:controller-uid=53f93cd2-0bee-49eb-ab16-d3000056ec81;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-sync;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0b00eda4f7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2226 identity=336 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=53f93cd2-0bee-49eb-ab16-d3000056ec81,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=53f93cd2-0bee-49eb-ab16-d3000056ec81,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.12 ipv6= k8sPodName=openstack/keystone-db-sync-8xcfl oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0b00eda4f7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2226 identity=336 ipv4=10.0.0.12 ipv6= k8sPodName=openstack/keystone-db-sync-8xcfl subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0b00eda4f7 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2226 identity=336 ipv4=10.0.0.12 ipv6= k8sPodName=openstack/keystone-db-sync-8xcfl subsys=endpoint level=info msg="Successful endpoint creation" containerID=0b00eda4f7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2226 identity=336 ipv4=10.0.0.12 ipv6= k8sPodName=openstack/keystone-db-sync-8xcfl subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=0b00eda4f7 endpointID=2226 k8sNamespace=openstack k8sPodName=keystone-db-sync-8xcfl subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=53f93cd2-0bee-49eb-ab16-d3000056ec81 k8s:batch.kubernetes.io/job-name=keystone-db-sync k8s:component=db-sync k8s:controller-uid=53f93cd2-0bee-49eb-ab16-d3000056ec81 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-sync k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=0b00eda4f7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2226 identity=336 ipv4=10.0.0.12 ipv6= k8sPodName=openstack/keystone-db-sync-8xcfl subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.104 3e6c4c7e-7ae1-41d7-93a1-78b639a974db default }" containerID=58bff2dacd79d3a96bbf478dba561bf54a5f75f4b67c072ea003e3f82d8b662b datapathConfiguration="&{false false false false false }" interface=lxcc4636c1b54fd k8sPodName=openstack/keystone-rabbit-init-k797z labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=58bff2dacd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=166 ipv4=10.0.0.104 ipv6= k8sPodName=openstack/keystone-rabbit-init-k797z subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=58bff2dacd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=166 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=0f141c18-40eb-4335-9ffa-907965f0ce84,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=0f141c18-40eb-4335-9ffa-907965f0ce84,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.104 ipv6= k8sPodName=openstack/keystone-rabbit-init-k797z subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=0f141c18-40eb-4335-9ffa-907965f0ce84;k8s:batch.kubernetes.io/job-name=keystone-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=0f141c18-40eb-4335-9ffa-907965f0ce84;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-rabbit-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=58bff2dacd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=166 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.104 ipv6= k8sPodName=openstack/keystone-rabbit-init-k797z line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=58bff2dacd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=166 identity=9337 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=0f141c18-40eb-4335-9ffa-907965f0ce84,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=0f141c18-40eb-4335-9ffa-907965f0ce84,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.104 ipv6= k8sPodName=openstack/keystone-rabbit-init-k797z oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=58bff2dacd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=166 identity=9337 ipv4=10.0.0.104 ipv6= k8sPodName=openstack/keystone-rabbit-init-k797z subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=58bff2dacd datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=166 identity=9337 ipv4=10.0.0.104 ipv6= k8sPodName=openstack/keystone-rabbit-init-k797z subsys=endpoint level=info msg="Successful endpoint creation" containerID=58bff2dacd datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=166 identity=9337 ipv4=10.0.0.104 ipv6= k8sPodName=openstack/keystone-rabbit-init-k797z subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=58bff2dacd endpointID=166 k8sNamespace=openstack k8sPodName=keystone-rabbit-init-k797z subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=0f141c18-40eb-4335-9ffa-907965f0ce84 k8s:batch.kubernetes.io/job-name=keystone-rabbit-init k8s:component=rabbit-init k8s:controller-uid=0f141c18-40eb-4335-9ffa-907965f0ce84 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-rabbit-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=58bff2dacd datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=166 identity=9337 ipv4=10.0.0.104 ipv6= k8sPodName=openstack/keystone-rabbit-init-k797z subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.122 d46e427b-958c-43b9-9643-ae93ec4138a4 default }" containerID=55ae2d016b182bd6eca1abd16bd255b69a2d7162dd43da7f0bfe57218a7069a8 datapathConfiguration="&{false false false false false }" interface=lxc9659176468c9 k8sPodName=openstack/keystone-domain-manage-c7wj8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=55ae2d016b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=386 ipv4=10.0.0.122 ipv6= k8sPodName=openstack/keystone-domain-manage-c7wj8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=55ae2d016b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=386 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=8253b71c-e158-4a24-a4f5-df61efbe88a5,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=8253b71c-e158-4a24-a4f5-df61efbe88a5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.122 ipv6= k8sPodName=openstack/keystone-domain-manage-c7wj8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=8253b71c-e158-4a24-a4f5-df61efbe88a5;k8s:batch.kubernetes.io/job-name=keystone-domain-manage;k8s:component=domain-manage;k8s:controller-uid=8253b71c-e158-4a24-a4f5-df61efbe88a5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-domain-manage;k8s:release_group=keystone;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=55ae2d016b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=386 identity=9157 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=8253b71c-e158-4a24-a4f5-df61efbe88a5,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=8253b71c-e158-4a24-a4f5-df61efbe88a5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.122 ipv6= k8sPodName=openstack/keystone-domain-manage-c7wj8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=55ae2d016b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=386 identity=9157 ipv4=10.0.0.122 ipv6= k8sPodName=openstack/keystone-domain-manage-c7wj8 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=55ae2d016b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=386 identity=9157 ipv4=10.0.0.122 ipv6= k8sPodName=openstack/keystone-domain-manage-c7wj8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=55ae2d016b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=386 identity=9157 ipv4=10.0.0.122 ipv6= k8sPodName=openstack/keystone-domain-manage-c7wj8 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=55ae2d016b endpointID=386 k8sNamespace=openstack k8sPodName=keystone-domain-manage-c7wj8 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=8253b71c-e158-4a24-a4f5-df61efbe88a5 k8s:batch.kubernetes.io/job-name=keystone-domain-manage k8s:component=domain-manage k8s:controller-uid=8253b71c-e158-4a24-a4f5-df61efbe88a5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-domain-manage k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=55ae2d016b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=386 identity=9157 ipv4=10.0.0.122 ipv6= k8sPodName=openstack/keystone-domain-manage-c7wj8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.65 8791a85a-3fae-4850-9f23-62a640727db6 default }" containerID=8de2c1ae0433c30a003e3d18cf54a10f8f04ecca46f37fd912b74330291779f9 datapathConfiguration="&{false false false false false }" interface=lxc20b5c73e8e0e k8sPodName=openstack/keystone-bootstrap-ljmb4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8de2c1ae04 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1836 ipv4=10.0.0.65 ipv6= k8sPodName=openstack/keystone-bootstrap-ljmb4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8de2c1ae04 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1836 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=d842395a-3bbf-4213-aa81-c25348730674,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=d842395a-3bbf-4213-aa81-c25348730674,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.65 ipv6= k8sPodName=openstack/keystone-bootstrap-ljmb4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=d842395a-3bbf-4213-aa81-c25348730674;k8s:batch.kubernetes.io/job-name=keystone-bootstrap;k8s:component=bootstrap;k8s:controller-uid=d842395a-3bbf-4213-aa81-c25348730674;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-bootstrap;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8de2c1ae04 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1836 identity=25390 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=d842395a-3bbf-4213-aa81-c25348730674,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=d842395a-3bbf-4213-aa81-c25348730674,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.65 ipv6= k8sPodName=openstack/keystone-bootstrap-ljmb4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8de2c1ae04 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1836 identity=25390 ipv4=10.0.0.65 ipv6= k8sPodName=openstack/keystone-bootstrap-ljmb4 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=8de2c1ae04 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1836 identity=25390 ipv4=10.0.0.65 ipv6= k8sPodName=openstack/keystone-bootstrap-ljmb4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=8de2c1ae04 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1836 identity=25390 ipv4=10.0.0.65 ipv6= k8sPodName=openstack/keystone-bootstrap-ljmb4 subsys=daemon level=info msg="Delete endpoint request" containerID=8de2c1ae04 endpointID=1836 k8sNamespace=openstack k8sPodName=keystone-bootstrap-ljmb4 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=d842395a-3bbf-4213-aa81-c25348730674 k8s:batch.kubernetes.io/job-name=keystone-bootstrap k8s:component=bootstrap k8s:controller-uid=d842395a-3bbf-4213-aa81-c25348730674 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-bootstrap k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=8de2c1ae04 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1836 identity=25390 ipv4=10.0.0.65 ipv6= k8sPodName=openstack/keystone-bootstrap-ljmb4 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.227 121259e1-0711-4160-9db1-2b33ad05d0d6 default }" containerID=ccf395a570080e079bd4a38f950b20b01fd12bf5003e73dd15ca799d55b1e7be datapathConfiguration="&{false false false false false }" interface=lxcbdf6433c05fb k8sPodName=local-path-storage/helper-pod-create-pvc-4b474a64-339d-418e-af7f-79013414ee03 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ccf395a570 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4013 ipv4=10.0.0.227 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4b474a64-339d-418e-af7f-79013414ee03 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ccf395a570 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4013 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.227 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4b474a64-339d-418e-af7f-79013414ee03 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ccf395a570 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4013 identity=30414 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.227 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4b474a64-339d-418e-af7f-79013414ee03 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ccf395a570 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4013 identity=30414 ipv4=10.0.0.227 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4b474a64-339d-418e-af7f-79013414ee03 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ccf395a570 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=4013 identity=30414 ipv4=10.0.0.227 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4b474a64-339d-418e-af7f-79013414ee03 subsys=endpoint level=info msg="Successful endpoint creation" containerID=ccf395a570 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=4013 identity=30414 ipv4=10.0.0.227 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4b474a64-339d-418e-af7f-79013414ee03 subsys=daemon level=info msg="Delete endpoint request" containerID=ccf395a570 endpointID=4013 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-4b474a64-339d-418e-af7f-79013414ee03 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=ccf395a570 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=4013 identity=30414 ipv4=10.0.0.227 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4b474a64-339d-418e-af7f-79013414ee03 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.213 24129584-cb27-45dd-85c3-e4c5c7c7fb57 default }" containerID=d558a35949b120940dcaed741b4425f011740225c9be7c5ef5035d1e9710402d datapathConfiguration="&{false false false false false }" interface=lxca2b4e47be383 k8sPodName=openstack/rabbitmq-barbican-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d558a35949 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2092 ipv4=10.0.0.213 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d558a35949 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2092 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.213 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-barbican;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=d558a35949 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2092 identity=63376 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.213 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d558a35949 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2092 identity=63376 ipv4=10.0.0.213 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d558a35949 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2092 identity=63376 ipv4=10.0.0.213 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=d558a35949 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2092 identity=63376 ipv4=10.0.0.213 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.184 ef84fb86-ab7b-4f03-8247-0348b6d34104 default }" containerID=9bc4ec6280636a57d1ebbef6cc95b1edd5d1b94d5577af6bf20ac856a115b8a5 datapathConfiguration="&{false false false false false }" interface=lxc71f75d6fd587 k8sPodName=openstack/barbican-api-776f645f89-lhwts labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9bc4ec6280 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3502 ipv4=10.0.0.184 ipv6= k8sPodName=openstack/barbican-api-776f645f89-lhwts subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9bc4ec6280 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3502 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.184 ipv6= k8sPodName=openstack/barbican-api-776f645f89-lhwts subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9bc4ec6280 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3502 identity=9333 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.184 ipv6= k8sPodName=openstack/barbican-api-776f645f89-lhwts oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9bc4ec6280 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3502 identity=9333 ipv4=10.0.0.184 ipv6= k8sPodName=openstack/barbican-api-776f645f89-lhwts subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.178 c5899a52-3993-4b66-bdc0-59e54a2fe5b4 default }" containerID=1248052a4be930099f7d42eadd86413b03f34fe1e1a4bb2ff7852bf4101b8cb2 datapathConfiguration="&{false false false false false }" interface=lxc5773ea0bbace k8sPodName=openstack/barbican-db-init-4495z labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1248052a4b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1034 ipv4=10.0.0.178 ipv6= k8sPodName=openstack/barbican-db-init-4495z subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1248052a4b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1034 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=871ab789-ee0b-42cb-a04c-edb40c38b759,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=871ab789-ee0b-42cb-a04c-edb40c38b759,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.178 ipv6= k8sPodName=openstack/barbican-db-init-4495z subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=871ab789-ee0b-42cb-a04c-edb40c38b759;k8s:batch.kubernetes.io/job-name=barbican-db-init;k8s:component=db-init;k8s:controller-uid=871ab789-ee0b-42cb-a04c-edb40c38b759;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1248052a4b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1034 identity=14185 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=871ab789-ee0b-42cb-a04c-edb40c38b759,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=871ab789-ee0b-42cb-a04c-edb40c38b759,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.178 ipv6= k8sPodName=openstack/barbican-db-init-4495z oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1248052a4b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1034 identity=14185 ipv4=10.0.0.178 ipv6= k8sPodName=openstack/barbican-db-init-4495z subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9bc4ec6280 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3502 identity=9333 ipv4=10.0.0.184 ipv6= k8sPodName=openstack/barbican-api-776f645f89-lhwts subsys=endpoint level=info msg="Successful endpoint creation" containerID=9bc4ec6280 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3502 identity=9333 ipv4=10.0.0.184 ipv6= k8sPodName=openstack/barbican-api-776f645f89-lhwts subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=1248052a4b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1034 identity=14185 ipv4=10.0.0.178 ipv6= k8sPodName=openstack/barbican-db-init-4495z subsys=endpoint level=info msg="Successful endpoint creation" containerID=1248052a4b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1034 identity=14185 ipv4=10.0.0.178 ipv6= k8sPodName=openstack/barbican-db-init-4495z subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.03647517145291977 newInterval=11m15s subsys=map-ct level=info msg="Delete endpoint request" containerID=1248052a4b endpointID=1034 k8sNamespace=openstack k8sPodName=barbican-db-init-4495z subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=871ab789-ee0b-42cb-a04c-edb40c38b759 k8s:batch.kubernetes.io/job-name=barbican-db-init k8s:component=db-init k8s:controller-uid=871ab789-ee0b-42cb-a04c-edb40c38b759 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=1248052a4b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1034 identity=14185 ipv4=10.0.0.178 ipv6= k8sPodName=openstack/barbican-db-init-4495z subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.86 319b297a-7fee-44aa-803e-f6a32212f591 default }" containerID=df95aa62a31590e51b2242640662599e5eca9bb98f2d663dc7568b607052a83e datapathConfiguration="&{false false false false false }" interface=lxc6156ad462881 k8sPodName=openstack/barbican-db-sync-5ds6v labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=df95aa62a3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=118 ipv4=10.0.0.86 ipv6= k8sPodName=openstack/barbican-db-sync-5ds6v subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=df95aa62a3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=118 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=1e6a31af-c56a-418d-a270-4037f8661060,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=1e6a31af-c56a-418d-a270-4037f8661060,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.86 ipv6= k8sPodName=openstack/barbican-db-sync-5ds6v subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=1e6a31af-c56a-418d-a270-4037f8661060;k8s:batch.kubernetes.io/job-name=barbican-db-sync;k8s:component=db-sync;k8s:controller-uid=1e6a31af-c56a-418d-a270-4037f8661060;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-sync;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=df95aa62a3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=118 identity=6693 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=1e6a31af-c56a-418d-a270-4037f8661060,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=1e6a31af-c56a-418d-a270-4037f8661060,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.86 ipv6= k8sPodName=openstack/barbican-db-sync-5ds6v oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=df95aa62a3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=118 identity=6693 ipv4=10.0.0.86 ipv6= k8sPodName=openstack/barbican-db-sync-5ds6v subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=df95aa62a3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=118 identity=6693 ipv4=10.0.0.86 ipv6= k8sPodName=openstack/barbican-db-sync-5ds6v subsys=endpoint level=info msg="Successful endpoint creation" containerID=df95aa62a3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=118 identity=6693 ipv4=10.0.0.86 ipv6= k8sPodName=openstack/barbican-db-sync-5ds6v subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=df95aa62a3 endpointID=118 k8sNamespace=openstack k8sPodName=barbican-db-sync-5ds6v subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=1e6a31af-c56a-418d-a270-4037f8661060 k8s:batch.kubernetes.io/job-name=barbican-db-sync k8s:component=db-sync k8s:controller-uid=1e6a31af-c56a-418d-a270-4037f8661060 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-sync k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=df95aa62a3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=118 identity=6693 ipv4=10.0.0.86 ipv6= k8sPodName=openstack/barbican-db-sync-5ds6v subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.185 d3c14f8d-6202-48f2-aa68-ef181fc11be2 default }" containerID=99e9e26e4c0132829b17358ffae9216327fa57511b6c4de097256accf6e72410 datapathConfiguration="&{false false false false false }" interface=lxc247b4af620f0 k8sPodName=openstack/barbican-rabbit-init-z7gqt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=99e9e26e4c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=843 ipv4=10.0.0.185 ipv6= k8sPodName=openstack/barbican-rabbit-init-z7gqt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=99e9e26e4c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=843 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=e24e4251-523d-47dd-9cd0-db842061c55b,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=e24e4251-523d-47dd-9cd0-db842061c55b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.185 ipv6= k8sPodName=openstack/barbican-rabbit-init-z7gqt subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=e24e4251-523d-47dd-9cd0-db842061c55b;k8s:batch.kubernetes.io/job-name=barbican-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=e24e4251-523d-47dd-9cd0-db842061c55b;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-rabbit-init;k8s:release_group=barbican;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=99e9e26e4c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=843 identity=49631 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=e24e4251-523d-47dd-9cd0-db842061c55b,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=e24e4251-523d-47dd-9cd0-db842061c55b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.185 ipv6= k8sPodName=openstack/barbican-rabbit-init-z7gqt oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=99e9e26e4c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=843 identity=49631 ipv4=10.0.0.185 ipv6= k8sPodName=openstack/barbican-rabbit-init-z7gqt subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=99e9e26e4c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=843 identity=49631 ipv4=10.0.0.185 ipv6= k8sPodName=openstack/barbican-rabbit-init-z7gqt subsys=endpoint level=info msg="Successful endpoint creation" containerID=99e9e26e4c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=843 identity=49631 ipv4=10.0.0.185 ipv6= k8sPodName=openstack/barbican-rabbit-init-z7gqt subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=99e9e26e4c endpointID=843 k8sNamespace=openstack k8sPodName=barbican-rabbit-init-z7gqt subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=e24e4251-523d-47dd-9cd0-db842061c55b k8s:batch.kubernetes.io/job-name=barbican-rabbit-init k8s:component=rabbit-init k8s:controller-uid=e24e4251-523d-47dd-9cd0-db842061c55b k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-rabbit-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=99e9e26e4c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=843 identity=49631 ipv4=10.0.0.185 ipv6= k8sPodName=openstack/barbican-rabbit-init-z7gqt subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.57 a4df7a41-295d-4edc-81f3-812131e0d57a default }" containerID=ff033a0163136f02a576772405215cd4d84f92a67b708c8661cd0e35a2708d0e datapathConfiguration="&{false false false false false }" interface=lxc98d8251377fb k8sPodName=openstack/barbican-ks-service-9rcq5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ff033a0163 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=320 ipv4=10.0.0.57 ipv6= k8sPodName=openstack/barbican-ks-service-9rcq5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ff033a0163 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=320 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=619316bb-c16b-4ed3-ae32-421a7064b198,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=619316bb-c16b-4ed3-ae32-421a7064b198,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.57 ipv6= k8sPodName=openstack/barbican-ks-service-9rcq5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=619316bb-c16b-4ed3-ae32-421a7064b198;k8s:batch.kubernetes.io/job-name=barbican-ks-service;k8s:component=ks-service;k8s:controller-uid=619316bb-c16b-4ed3-ae32-421a7064b198;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-service;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ff033a0163 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=320 identity=48929 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=619316bb-c16b-4ed3-ae32-421a7064b198,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=619316bb-c16b-4ed3-ae32-421a7064b198,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.57 ipv6= k8sPodName=openstack/barbican-ks-service-9rcq5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ff033a0163 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=320 identity=48929 ipv4=10.0.0.57 ipv6= k8sPodName=openstack/barbican-ks-service-9rcq5 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ff033a0163 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=320 identity=48929 ipv4=10.0.0.57 ipv6= k8sPodName=openstack/barbican-ks-service-9rcq5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=ff033a0163 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=320 identity=48929 ipv4=10.0.0.57 ipv6= k8sPodName=openstack/barbican-ks-service-9rcq5 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=ff033a0163 endpointID=320 k8sNamespace=openstack k8sPodName=barbican-ks-service-9rcq5 subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=619316bb-c16b-4ed3-ae32-421a7064b198 k8s:batch.kubernetes.io/job-name=barbican-ks-service k8s:component=ks-service k8s:controller-uid=619316bb-c16b-4ed3-ae32-421a7064b198 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-service k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=ff033a0163 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=320 identity=48929 ipv4=10.0.0.57 ipv6= k8sPodName=openstack/barbican-ks-service-9rcq5 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.114 86565189-edc9-4312-a7ff-d67b14ee9a5b default }" containerID=39dfbf9e48b4c5da25b4753b020afbe0d867d3866ea8e08fb504dbdf0c615832 datapathConfiguration="&{false false false false false }" interface=lxc05623ee3ca61 k8sPodName=openstack/barbican-ks-endpoints-njm57 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=39dfbf9e48 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2742 ipv4=10.0.0.114 ipv6= k8sPodName=openstack/barbican-ks-endpoints-njm57 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=39dfbf9e48 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2742 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=f61639a2-b4b7-4c1f-b8d8-45743942d025,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=f61639a2-b4b7-4c1f-b8d8-45743942d025,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.114 ipv6= k8sPodName=openstack/barbican-ks-endpoints-njm57 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=f61639a2-b4b7-4c1f-b8d8-45743942d025;k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=f61639a2-b4b7-4c1f-b8d8-45743942d025;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-endpoints;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=39dfbf9e48 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2742 identity=3548 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=f61639a2-b4b7-4c1f-b8d8-45743942d025,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=f61639a2-b4b7-4c1f-b8d8-45743942d025,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.114 ipv6= k8sPodName=openstack/barbican-ks-endpoints-njm57 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=39dfbf9e48 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2742 identity=3548 ipv4=10.0.0.114 ipv6= k8sPodName=openstack/barbican-ks-endpoints-njm57 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=39dfbf9e48 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2742 identity=3548 ipv4=10.0.0.114 ipv6= k8sPodName=openstack/barbican-ks-endpoints-njm57 subsys=endpoint level=info msg="Successful endpoint creation" containerID=39dfbf9e48 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2742 identity=3548 ipv4=10.0.0.114 ipv6= k8sPodName=openstack/barbican-ks-endpoints-njm57 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=39dfbf9e48 endpointID=2742 k8sNamespace=openstack k8sPodName=barbican-ks-endpoints-njm57 subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=f61639a2-b4b7-4c1f-b8d8-45743942d025 k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=f61639a2-b4b7-4c1f-b8d8-45743942d025 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-endpoints k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=39dfbf9e48 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2742 identity=3548 ipv4=10.0.0.114 ipv6= k8sPodName=openstack/barbican-ks-endpoints-njm57 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.169 5c732f44-cde3-4ddc-9006-93677372eb26 default }" containerID=e90a423e26f9d69f78753d5ee251456ca3f3aaa964efbae93b0234c2b088a3c0 datapathConfiguration="&{false false false false false }" interface=lxc3d80b3cbca80 k8sPodName=openstack/barbican-ks-user-njvqx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e90a423e26 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2975 ipv4=10.0.0.169 ipv6= k8sPodName=openstack/barbican-ks-user-njvqx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e90a423e26 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2975 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=2f388a7f-0b4e-4939-8ce2-286dc54a3a5a,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=2f388a7f-0b4e-4939-8ce2-286dc54a3a5a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.169 ipv6= k8sPodName=openstack/barbican-ks-user-njvqx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=2f388a7f-0b4e-4939-8ce2-286dc54a3a5a;k8s:batch.kubernetes.io/job-name=barbican-ks-user;k8s:component=ks-user;k8s:controller-uid=2f388a7f-0b4e-4939-8ce2-286dc54a3a5a;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-user;k8s:release_group=barbican;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=e90a423e26 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2975 identity=17939 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=2f388a7f-0b4e-4939-8ce2-286dc54a3a5a,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=2f388a7f-0b4e-4939-8ce2-286dc54a3a5a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.169 ipv6= k8sPodName=openstack/barbican-ks-user-njvqx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e90a423e26 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2975 identity=17939 ipv4=10.0.0.169 ipv6= k8sPodName=openstack/barbican-ks-user-njvqx subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e90a423e26 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2975 identity=17939 ipv4=10.0.0.169 ipv6= k8sPodName=openstack/barbican-ks-user-njvqx subsys=endpoint level=info msg="Successful endpoint creation" containerID=e90a423e26 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2975 identity=17939 ipv4=10.0.0.169 ipv6= k8sPodName=openstack/barbican-ks-user-njvqx subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=e90a423e26 endpointID=2975 k8sNamespace=openstack k8sPodName=barbican-ks-user-njvqx subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=2f388a7f-0b4e-4939-8ce2-286dc54a3a5a k8s:batch.kubernetes.io/job-name=barbican-ks-user k8s:component=ks-user k8s:controller-uid=2f388a7f-0b4e-4939-8ce2-286dc54a3a5a k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-user k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=e90a423e26 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2975 identity=17939 ipv4=10.0.0.169 ipv6= k8sPodName=openstack/barbican-ks-user-njvqx subsys=endpoint level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Create endpoint request" addressing="&{10.0.0.41 131a13df-4c51-46dd-8539-8a640c0c3834 default }" containerID=b383514498e3cc4c255945988d8ac9dccceaa447032b2823e093bf9a7ff5242f datapathConfiguration="&{false false false false false }" interface=lxc4aed5c8eb012 k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-dbpnv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b383514498 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3386 ipv4=10.0.0.41 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-dbpnv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b383514498 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3386 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.15.9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.41 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-dbpnv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:rook-ceph k8s:io.cilium.k8s.namespace.labels.name:rook-ceph]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-operator;k8s:helm.sh/chart=rook-ceph-v1.15.9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph;k8s:io.cilium.k8s.namespace.labels.name=rook-ceph;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system;k8s:io.kubernetes.pod.namespace=rook-ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b383514498 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3386 identity=4824 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.15.9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.41 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-dbpnv oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=b383514498 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3386 identity=4824 ipv4=10.0.0.41 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-dbpnv subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b383514498 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3386 identity=4824 ipv4=10.0.0.41 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-dbpnv subsys=endpoint level=info msg="Successful endpoint creation" containerID=b383514498 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3386 identity=4824 ipv4=10.0.0.41 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-dbpnv subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.82 e08270c3-e94f-42b4-ae70-7fbe258f0ded default }" containerID=b798522150337ed81ee59ed5be4548414edb12617100547ed2aa046317b6b28f datapathConfiguration="&{false false false false false }" interface=lxc5abfc3fb1990 k8sPodName=openstack/rook-ceph-detect-version-mhggd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b798522150 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2090 ipv4=10.0.0.82 ipv6= k8sPodName=openstack/rook-ceph-detect-version-mhggd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b798522150 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2090 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=30c01222-8cde-43c4-ba6a-0e1251b6f3f5,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=30c01222-8cde-43c4-ba6a-0e1251b6f3f5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.82 ipv6= k8sPodName=openstack/rook-ceph-detect-version-mhggd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=b798522150 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2090 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.82 ipv6= k8sPodName=openstack/rook-ceph-detect-version-mhggd line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=rook-ceph-detect-version;k8s:batch.kubernetes.io/controller-uid=30c01222-8cde-43c4-ba6a-0e1251b6f3f5;k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version;k8s:controller-uid=30c01222-8cde-43c4-ba6a-0e1251b6f3f5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=rook-ceph-detect-version;k8s:rook-version=v1.15.9;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b798522150 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2090 identity=4428 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=30c01222-8cde-43c4-ba6a-0e1251b6f3f5,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=30c01222-8cde-43c4-ba6a-0e1251b6f3f5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.82 ipv6= k8sPodName=openstack/rook-ceph-detect-version-mhggd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b798522150 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2090 identity=4428 ipv4=10.0.0.82 ipv6= k8sPodName=openstack/rook-ceph-detect-version-mhggd subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b798522150 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2090 identity=4428 ipv4=10.0.0.82 ipv6= k8sPodName=openstack/rook-ceph-detect-version-mhggd subsys=endpoint level=info msg="Successful endpoint creation" containerID=b798522150 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2090 identity=4428 ipv4=10.0.0.82 ipv6= k8sPodName=openstack/rook-ceph-detect-version-mhggd subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=b798522150 endpointID=2090 k8sNamespace=openstack k8sPodName=rook-ceph-detect-version-mhggd subsys=daemon level=info msg="Releasing key" key="[k8s:app=rook-ceph-detect-version k8s:batch.kubernetes.io/controller-uid=30c01222-8cde-43c4-ba6a-0e1251b6f3f5 k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version k8s:controller-uid=30c01222-8cde-43c4-ba6a-0e1251b6f3f5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=rook-ceph-detect-version k8s:rook-version=v1.15.9]" subsys=allocator level=info msg="Removed endpoint" containerID=b798522150 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2090 identity=4428 ipv4=10.0.0.82 ipv6= k8sPodName=openstack/rook-ceph-detect-version-mhggd subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.44 4bd0c5a9-7e00-4b22-8c57-e9d2e727a4da default }" containerID=bbd7d823d6f1fc3536531832118c39c535771f372f8877bcb17a98ee4a6f87db datapathConfiguration="&{false false false false false }" interface=lxc116ce3d139dc k8sPodName=openstack/ceph-object-controller-detect-version-rv2fm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bbd7d823d6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=571 ipv4=10.0.0.44 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-rv2fm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bbd7d823d6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=571 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=13fe1af7-30cb-4082-a00f-d77e484cbdff,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=13fe1af7-30cb-4082-a00f-d77e484cbdff,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.44 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-rv2fm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app=ceph-object-controller-detect-version;k8s:batch.kubernetes.io/controller-uid=13fe1af7-30cb-4082-a00f-d77e484cbdff;k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version;k8s:controller-uid=13fe1af7-30cb-4082-a00f-d77e484cbdff;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=ceph-object-controller-detect-version;k8s:rook-version=v1.15.9;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=bbd7d823d6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=571 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.44 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-rv2fm line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=bbd7d823d6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=571 identity=17799 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=13fe1af7-30cb-4082-a00f-d77e484cbdff,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=13fe1af7-30cb-4082-a00f-d77e484cbdff,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.44 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-rv2fm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=bbd7d823d6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=571 identity=17799 ipv4=10.0.0.44 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-rv2fm subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=bbd7d823d6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=571 identity=17799 ipv4=10.0.0.44 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-rv2fm subsys=endpoint level=info msg="Successful endpoint creation" containerID=bbd7d823d6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=571 identity=17799 ipv4=10.0.0.44 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-rv2fm subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=bbd7d823d6 endpointID=571 k8sNamespace=openstack k8sPodName=ceph-object-controller-detect-version-rv2fm subsys=daemon level=info msg="Releasing key" key="[k8s:app=ceph-object-controller-detect-version k8s:batch.kubernetes.io/controller-uid=13fe1af7-30cb-4082-a00f-d77e484cbdff k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version k8s:controller-uid=13fe1af7-30cb-4082-a00f-d77e484cbdff k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=ceph-object-controller-detect-version k8s:rook-version=v1.15.9]" subsys=allocator level=info msg="Removed endpoint" containerID=bbd7d823d6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=571 identity=17799 ipv4=10.0.0.44 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-rv2fm subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.16 5ad506da-485b-42fb-8825-c9fc87cfd5f5 default }" containerID=5de9800954cbbb7d7c1f5247bb9e462d08885d37d4bb83106ad1a5bd8753cdfa datapathConfiguration="&{false false false false false }" interface=lxca08567326adc k8sPodName=local-path-storage/helper-pod-create-pvc-4c71c043-28af-4d56-a6e2-ad4f8caf36a3 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5de9800954 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=663 ipv4=10.0.0.16 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4c71c043-28af-4d56-a6e2-ad4f8caf36a3 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5de9800954 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=663 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.16 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4c71c043-28af-4d56-a6e2-ad4f8caf36a3 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5de9800954 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=663 identity=30414 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.16 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4c71c043-28af-4d56-a6e2-ad4f8caf36a3 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5de9800954 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=663 identity=30414 ipv4=10.0.0.16 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4c71c043-28af-4d56-a6e2-ad4f8caf36a3 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5de9800954 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=663 identity=30414 ipv4=10.0.0.16 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4c71c043-28af-4d56-a6e2-ad4f8caf36a3 subsys=endpoint level=info msg="Successful endpoint creation" containerID=5de9800954 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=663 identity=30414 ipv4=10.0.0.16 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4c71c043-28af-4d56-a6e2-ad4f8caf36a3 subsys=daemon level=info msg="Delete endpoint request" containerID=5de9800954 endpointID=663 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-4c71c043-28af-4d56-a6e2-ad4f8caf36a3 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=5de9800954 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=663 identity=30414 ipv4=10.0.0.16 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4c71c043-28af-4d56-a6e2-ad4f8caf36a3 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.201 d2613d27-ea78-403c-a5a0-f1a6326f65a9 default }" containerID=7a82b3b546db1d7b6596b8f07fe7162187963fd56eaf46a5b2d785414697ae36 datapathConfiguration="&{false false false false false }" interface=lxc87f74ec2a810 k8sPodName=openstack/rabbitmq-glance-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7a82b3b546 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2221 ipv4=10.0.0.201 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7a82b3b546 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2221 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.201 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=7a82b3b546 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2221 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.201 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-glance;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7a82b3b546 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2221 identity=5263 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.201 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7a82b3b546 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2221 identity=5263 ipv4=10.0.0.201 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7a82b3b546 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2221 identity=5263 ipv4=10.0.0.201 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=7a82b3b546 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2221 identity=5263 ipv4=10.0.0.201 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.152 c8e4bfc5-a247-4273-a41e-84c562f772c5 default }" containerID=78e0ed37473da85cc9bb58f15e2ecbf3464382256350353a8457151b4ded9c74 datapathConfiguration="&{false false false false false }" interface=lxcb9c99a72933f k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-xdvmg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=78e0ed3747 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3342 ipv4=10.0.0.152 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-xdvmg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=78e0ed3747 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3342 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.152 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-xdvmg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app=rook-ceph-rgw;k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io;k8s:app.kubernetes.io/created-by=rook-ceph-operator;k8s:app.kubernetes.io/instance=ceph;k8s:app.kubernetes.io/managed-by=rook-ceph-operator;k8s:app.kubernetes.io/name=ceph-rgw;k8s:app.kubernetes.io/part-of=ceph;k8s:ceph_daemon_id=ceph;k8s:ceph_daemon_type=rgw;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw;k8s:io.kubernetes.pod.namespace=openstack;k8s:rgw=ceph;k8s:rook.io/operator-namespace=rook-ceph;k8s:rook_cluster=openstack;k8s:rook_object_store=ceph;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=78e0ed3747 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3342 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.152 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-xdvmg line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=78e0ed3747 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3342 identity=36856 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.152 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-xdvmg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=78e0ed3747 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3342 identity=36856 ipv4=10.0.0.152 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-xdvmg subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.120 3a35d291-1683-4a03-9601-4b9118c557e8 default }" containerID=5a5a0aee769a4aa4ccf2ddf7d125e324c96e8bb8185c74e411863f23fe2978bb datapathConfiguration="&{false false false false false }" interface=lxcdd1fbcaf49b9 k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-lnnpp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5a5a0aee76 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=95 ipv4=10.0.0.120 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-lnnpp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5a5a0aee76 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=95 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.120 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-lnnpp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-crashcollector;k8s:ceph-version=18.2.7-0;k8s:ceph_daemon_id=crash;k8s:crashcollector=crash;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default;k8s:io.kubernetes.pod.namespace=openstack;k8s:node_name=instance;k8s:rook_cluster=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5a5a0aee76 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=95 identity=4237 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.120 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-lnnpp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5a5a0aee76 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=95 identity=4237 ipv4=10.0.0.120 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-lnnpp subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=78e0ed3747 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3342 identity=36856 ipv4=10.0.0.152 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-xdvmg subsys=endpoint level=info msg="Successful endpoint creation" containerID=78e0ed3747 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3342 identity=36856 ipv4=10.0.0.152 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-xdvmg subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=5a5a0aee76 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=95 identity=4237 ipv4=10.0.0.120 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-lnnpp subsys=endpoint level=info msg="Successful endpoint creation" containerID=5a5a0aee76 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=95 identity=4237 ipv4=10.0.0.120 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-lnnpp subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.160 77926d49-65f9-4187-bb90-c7c25fa5d515 default }" containerID=80608701144afc9ab2004752dae656520ba50dfb87f8d8d4a67905e2fdff6adf datapathConfiguration="&{false false false false false }" interface=lxcfddcdca6a4a5 k8sPodName=openstack/glance-db-init-9qmh4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8060870114 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2488 ipv4=10.0.0.160 ipv6= k8sPodName=openstack/glance-db-init-9qmh4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8060870114 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2488 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=46cdac2d-3673-4663-a7ff-b9e627ad3609,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=46cdac2d-3673-4663-a7ff-b9e627ad3609,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.160 ipv6= k8sPodName=openstack/glance-db-init-9qmh4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=46cdac2d-3673-4663-a7ff-b9e627ad3609;k8s:batch.kubernetes.io/job-name=glance-db-init;k8s:component=db-init;k8s:controller-uid=46cdac2d-3673-4663-a7ff-b9e627ad3609;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8060870114 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2488 identity=35656 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=46cdac2d-3673-4663-a7ff-b9e627ad3609,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=46cdac2d-3673-4663-a7ff-b9e627ad3609,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.160 ipv6= k8sPodName=openstack/glance-db-init-9qmh4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8060870114 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2488 identity=35656 ipv4=10.0.0.160 ipv6= k8sPodName=openstack/glance-db-init-9qmh4 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=8060870114 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2488 identity=35656 ipv4=10.0.0.160 ipv6= k8sPodName=openstack/glance-db-init-9qmh4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=8060870114 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2488 identity=35656 ipv4=10.0.0.160 ipv6= k8sPodName=openstack/glance-db-init-9qmh4 subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=8060870114 endpointID=2488 k8sNamespace=openstack k8sPodName=glance-db-init-9qmh4 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=46cdac2d-3673-4663-a7ff-b9e627ad3609 k8s:batch.kubernetes.io/job-name=glance-db-init k8s:component=db-init k8s:controller-uid=46cdac2d-3673-4663-a7ff-b9e627ad3609 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=8060870114 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2488 identity=35656 ipv4=10.0.0.160 ipv6= k8sPodName=openstack/glance-db-init-9qmh4 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.188 9075ad8c-bf35-4438-8f68-20276bd3262f default }" containerID=41a98791774af31d5507cbe54298a81ebe90862ff4b160393a4a6e0f455b9928 datapathConfiguration="&{false false false false false }" interface=lxccd1922c9fa50 k8sPodName=openstack/glance-db-sync-lf6r8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=41a9879177 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=187 ipv4=10.0.0.188 ipv6= k8sPodName=openstack/glance-db-sync-lf6r8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=41a9879177 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=187 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=598b02bf-0cfb-423e-b6a9-ec8e7adf5d06,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=598b02bf-0cfb-423e-b6a9-ec8e7adf5d06,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.188 ipv6= k8sPodName=openstack/glance-db-sync-lf6r8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=598b02bf-0cfb-423e-b6a9-ec8e7adf5d06;k8s:batch.kubernetes.io/job-name=glance-db-sync;k8s:component=db-sync;k8s:controller-uid=598b02bf-0cfb-423e-b6a9-ec8e7adf5d06;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-sync;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=41a9879177 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=187 identity=27563 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=598b02bf-0cfb-423e-b6a9-ec8e7adf5d06,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=598b02bf-0cfb-423e-b6a9-ec8e7adf5d06,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.188 ipv6= k8sPodName=openstack/glance-db-sync-lf6r8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=41a9879177 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=187 identity=27563 ipv4=10.0.0.188 ipv6= k8sPodName=openstack/glance-db-sync-lf6r8 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=41a9879177 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=187 identity=27563 ipv4=10.0.0.188 ipv6= k8sPodName=openstack/glance-db-sync-lf6r8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=41a9879177 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=187 identity=27563 ipv4=10.0.0.188 ipv6= k8sPodName=openstack/glance-db-sync-lf6r8 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=41a9879177 endpointID=187 k8sNamespace=openstack k8sPodName=glance-db-sync-lf6r8 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=598b02bf-0cfb-423e-b6a9-ec8e7adf5d06 k8s:batch.kubernetes.io/job-name=glance-db-sync k8s:component=db-sync k8s:controller-uid=598b02bf-0cfb-423e-b6a9-ec8e7adf5d06 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-sync k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=41a9879177 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=187 identity=27563 ipv4=10.0.0.188 ipv6= k8sPodName=openstack/glance-db-sync-lf6r8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.215 ff50acbe-3e37-4e4d-945a-fadc8e273eb9 default }" containerID=d8ca025b9677fa149e8bcb7a3a3b83690f9485309c0963ab529fe91973274efe datapathConfiguration="&{false false false false false }" interface=lxcc521dd6cd533 k8sPodName=openstack/glance-rabbit-init-nwtdh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d8ca025b96 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4021 ipv4=10.0.0.215 ipv6= k8sPodName=openstack/glance-rabbit-init-nwtdh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d8ca025b96 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4021 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=be632e69-cba1-48d5-bcc1-3b39d1791481,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=be632e69-cba1-48d5-bcc1-3b39d1791481,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.215 ipv6= k8sPodName=openstack/glance-rabbit-init-nwtdh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=be632e69-cba1-48d5-bcc1-3b39d1791481;k8s:batch.kubernetes.io/job-name=glance-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=be632e69-cba1-48d5-bcc1-3b39d1791481;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-rabbit-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d8ca025b96 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4021 identity=51874 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=be632e69-cba1-48d5-bcc1-3b39d1791481,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=be632e69-cba1-48d5-bcc1-3b39d1791481,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.215 ipv6= k8sPodName=openstack/glance-rabbit-init-nwtdh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d8ca025b96 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4021 identity=51874 ipv4=10.0.0.215 ipv6= k8sPodName=openstack/glance-rabbit-init-nwtdh subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=d8ca025b96 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=4021 identity=51874 ipv4=10.0.0.215 ipv6= k8sPodName=openstack/glance-rabbit-init-nwtdh subsys=endpoint level=info msg="Successful endpoint creation" containerID=d8ca025b96 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=4021 identity=51874 ipv4=10.0.0.215 ipv6= k8sPodName=openstack/glance-rabbit-init-nwtdh subsys=daemon level=info msg="Delete endpoint request" containerID=d8ca025b96 endpointID=4021 k8sNamespace=openstack k8sPodName=glance-rabbit-init-nwtdh subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=be632e69-cba1-48d5-bcc1-3b39d1791481 k8s:batch.kubernetes.io/job-name=glance-rabbit-init k8s:component=rabbit-init k8s:controller-uid=be632e69-cba1-48d5-bcc1-3b39d1791481 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-rabbit-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=d8ca025b96 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=4021 identity=51874 ipv4=10.0.0.215 ipv6= k8sPodName=openstack/glance-rabbit-init-nwtdh subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.222 e233d396-4c54-4c7c-bb52-97d85f7cca7b default }" containerID=bda4b9ee2016846f49caa2a5b3353eacbf601ebac2a19b6895f5db82425b8f1f datapathConfiguration="&{false false false false false }" interface=lxc2555bba6d98f k8sPodName=openstack/glance-ks-service-mmcct labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bda4b9ee20 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1851 ipv4=10.0.0.222 ipv6= k8sPodName=openstack/glance-ks-service-mmcct subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bda4b9ee20 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1851 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=b15e6f67-a2c7-4c93-99b6-9c87ac0fc3ba,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=b15e6f67-a2c7-4c93-99b6-9c87ac0fc3ba,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.222 ipv6= k8sPodName=openstack/glance-ks-service-mmcct subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=bda4b9ee20 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1851 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.222 ipv6= k8sPodName=openstack/glance-ks-service-mmcct line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=b15e6f67-a2c7-4c93-99b6-9c87ac0fc3ba;k8s:batch.kubernetes.io/job-name=glance-ks-service;k8s:component=ks-service;k8s:controller-uid=b15e6f67-a2c7-4c93-99b6-9c87ac0fc3ba;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-service;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=bda4b9ee20 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1851 identity=35864 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=b15e6f67-a2c7-4c93-99b6-9c87ac0fc3ba,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=b15e6f67-a2c7-4c93-99b6-9c87ac0fc3ba,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.222 ipv6= k8sPodName=openstack/glance-ks-service-mmcct oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=bda4b9ee20 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1851 identity=35864 ipv4=10.0.0.222 ipv6= k8sPodName=openstack/glance-ks-service-mmcct subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=bda4b9ee20 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1851 identity=35864 ipv4=10.0.0.222 ipv6= k8sPodName=openstack/glance-ks-service-mmcct subsys=endpoint level=info msg="Successful endpoint creation" containerID=bda4b9ee20 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1851 identity=35864 ipv4=10.0.0.222 ipv6= k8sPodName=openstack/glance-ks-service-mmcct subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=bda4b9ee20 endpointID=1851 k8sNamespace=openstack k8sPodName=glance-ks-service-mmcct subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=b15e6f67-a2c7-4c93-99b6-9c87ac0fc3ba k8s:batch.kubernetes.io/job-name=glance-ks-service k8s:component=ks-service k8s:controller-uid=b15e6f67-a2c7-4c93-99b6-9c87ac0fc3ba k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-service k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=bda4b9ee20 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1851 identity=35864 ipv4=10.0.0.222 ipv6= k8sPodName=openstack/glance-ks-service-mmcct subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.209 7d01a50b-6827-408e-a0a4-74312676da04 default }" containerID=71005a7a5ecdac8259c1afd2edf28a3fcefccb402f9b30333f7b55b6634646e8 datapathConfiguration="&{false false false false false }" interface=lxcf59b0a1a5626 k8sPodName=openstack/glance-ks-endpoints-mhqjd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=71005a7a5e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2846 ipv4=10.0.0.209 ipv6= k8sPodName=openstack/glance-ks-endpoints-mhqjd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=71005a7a5e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2846 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=58507855-33fb-4cc7-8c69-627894e0f546,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=58507855-33fb-4cc7-8c69-627894e0f546,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.209 ipv6= k8sPodName=openstack/glance-ks-endpoints-mhqjd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=58507855-33fb-4cc7-8c69-627894e0f546;k8s:batch.kubernetes.io/job-name=glance-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=58507855-33fb-4cc7-8c69-627894e0f546;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-endpoints;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=71005a7a5e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2846 identity=358 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=58507855-33fb-4cc7-8c69-627894e0f546,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=58507855-33fb-4cc7-8c69-627894e0f546,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.209 ipv6= k8sPodName=openstack/glance-ks-endpoints-mhqjd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=71005a7a5e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2846 identity=358 ipv4=10.0.0.209 ipv6= k8sPodName=openstack/glance-ks-endpoints-mhqjd subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=71005a7a5e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2846 identity=358 ipv4=10.0.0.209 ipv6= k8sPodName=openstack/glance-ks-endpoints-mhqjd subsys=endpoint level=info msg="Successful endpoint creation" containerID=71005a7a5e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2846 identity=358 ipv4=10.0.0.209 ipv6= k8sPodName=openstack/glance-ks-endpoints-mhqjd subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=71005a7a5e endpointID=2846 k8sNamespace=openstack k8sPodName=glance-ks-endpoints-mhqjd subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=58507855-33fb-4cc7-8c69-627894e0f546 k8s:batch.kubernetes.io/job-name=glance-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=58507855-33fb-4cc7-8c69-627894e0f546 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-endpoints k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=71005a7a5e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2846 identity=358 ipv4=10.0.0.209 ipv6= k8sPodName=openstack/glance-ks-endpoints-mhqjd subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.91 24693df5-40b8-4612-b75d-25f6f2f01611 default }" containerID=8cd9da63435e720736abdad5fc063bc8ce938dfa11cd75ea726940a8562a0cfe datapathConfiguration="&{false false false false false }" interface=lxc6134a61170a3 k8sPodName=openstack/glance-ks-user-kwkdp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8cd9da6343 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2741 ipv4=10.0.0.91 ipv6= k8sPodName=openstack/glance-ks-user-kwkdp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8cd9da6343 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2741 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=bc402dd8-9687-4ee9-80e5-0467b32fe9ae,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=bc402dd8-9687-4ee9-80e5-0467b32fe9ae,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.91 ipv6= k8sPodName=openstack/glance-ks-user-kwkdp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=bc402dd8-9687-4ee9-80e5-0467b32fe9ae;k8s:batch.kubernetes.io/job-name=glance-ks-user;k8s:component=ks-user;k8s:controller-uid=bc402dd8-9687-4ee9-80e5-0467b32fe9ae;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-user;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8cd9da6343 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2741 identity=25367 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=bc402dd8-9687-4ee9-80e5-0467b32fe9ae,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=bc402dd8-9687-4ee9-80e5-0467b32fe9ae,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.91 ipv6= k8sPodName=openstack/glance-ks-user-kwkdp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8cd9da6343 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2741 identity=25367 ipv4=10.0.0.91 ipv6= k8sPodName=openstack/glance-ks-user-kwkdp subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8cd9da6343 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2741 identity=25367 ipv4=10.0.0.91 ipv6= k8sPodName=openstack/glance-ks-user-kwkdp subsys=endpoint level=info msg="Successful endpoint creation" containerID=8cd9da6343 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2741 identity=25367 ipv4=10.0.0.91 ipv6= k8sPodName=openstack/glance-ks-user-kwkdp subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=8cd9da6343 endpointID=2741 k8sNamespace=openstack k8sPodName=glance-ks-user-kwkdp subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=bc402dd8-9687-4ee9-80e5-0467b32fe9ae k8s:batch.kubernetes.io/job-name=glance-ks-user k8s:component=ks-user k8s:controller-uid=bc402dd8-9687-4ee9-80e5-0467b32fe9ae k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-user k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=8cd9da6343 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2741 identity=25367 ipv4=10.0.0.91 ipv6= k8sPodName=openstack/glance-ks-user-kwkdp subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.209 debde90a-35ab-41c3-bca4-22e24bc9eeb4 default }" containerID=c7b84b93d140a3f92abeecb1381e49d8c7ceb3ba98988ad7aa80bd83676a5326 datapathConfiguration="&{false false false false false }" interface=lxc980d92c7f2b0 k8sPodName=openstack/glance-metadefs-load-9q6r5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c7b84b93d1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1632 ipv4=10.0.0.209 ipv6= k8sPodName=openstack/glance-metadefs-load-9q6r5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c7b84b93d1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1632 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=92111bfe-cc85-4dfb-9e6a-9bc1e62d22ed,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=92111bfe-cc85-4dfb-9e6a-9bc1e62d22ed,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.209 ipv6= k8sPodName=openstack/glance-metadefs-load-9q6r5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=c7b84b93d1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1632 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.209 ipv6= k8sPodName=openstack/glance-metadefs-load-9q6r5 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=92111bfe-cc85-4dfb-9e6a-9bc1e62d22ed;k8s:batch.kubernetes.io/job-name=glance-metadefs-load;k8s:component=metadefs_load;k8s:controller-uid=92111bfe-cc85-4dfb-9e6a-9bc1e62d22ed;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-metadefs-load;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c7b84b93d1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1632 identity=29383 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=92111bfe-cc85-4dfb-9e6a-9bc1e62d22ed,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=92111bfe-cc85-4dfb-9e6a-9bc1e62d22ed,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.209 ipv6= k8sPodName=openstack/glance-metadefs-load-9q6r5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c7b84b93d1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1632 identity=29383 ipv4=10.0.0.209 ipv6= k8sPodName=openstack/glance-metadefs-load-9q6r5 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c7b84b93d1 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1632 identity=29383 ipv4=10.0.0.209 ipv6= k8sPodName=openstack/glance-metadefs-load-9q6r5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=c7b84b93d1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1632 identity=29383 ipv4=10.0.0.209 ipv6= k8sPodName=openstack/glance-metadefs-load-9q6r5 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=c7b84b93d1 endpointID=1632 k8sNamespace=openstack k8sPodName=glance-metadefs-load-9q6r5 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=92111bfe-cc85-4dfb-9e6a-9bc1e62d22ed k8s:batch.kubernetes.io/job-name=glance-metadefs-load k8s:component=metadefs_load k8s:controller-uid=92111bfe-cc85-4dfb-9e6a-9bc1e62d22ed k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-metadefs-load k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=c7b84b93d1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1632 identity=29383 ipv4=10.0.0.209 ipv6= k8sPodName=openstack/glance-metadefs-load-9q6r5 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.204 4de6357e-d753-4464-a3f8-9323c99a823b default }" containerID=9676448f2466490d1bb18b962c7c81be5611565fceb21a69a2d8b440a3e5bc99 datapathConfiguration="&{false false false false false }" interface=lxc9cd5ed0e2a04 k8sPodName=openstack/glance-storage-init-x95sz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9676448f24 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1499 ipv4=10.0.0.204 ipv6= k8sPodName=openstack/glance-storage-init-x95sz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9676448f24 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1499 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=5abc071a-1958-4105-8886-3ad55c07f4db,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=5abc071a-1958-4105-8886-3ad55c07f4db,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.204 ipv6= k8sPodName=openstack/glance-storage-init-x95sz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=5abc071a-1958-4105-8886-3ad55c07f4db;k8s:batch.kubernetes.io/job-name=glance-storage-init;k8s:component=storage-init;k8s:controller-uid=5abc071a-1958-4105-8886-3ad55c07f4db;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-storage-init;k8s:release_group=glance;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=9676448f24 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1499 identity=19278 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=5abc071a-1958-4105-8886-3ad55c07f4db,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=5abc071a-1958-4105-8886-3ad55c07f4db,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.204 ipv6= k8sPodName=openstack/glance-storage-init-x95sz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9676448f24 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1499 identity=19278 ipv4=10.0.0.204 ipv6= k8sPodName=openstack/glance-storage-init-x95sz subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9676448f24 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1499 identity=19278 ipv4=10.0.0.204 ipv6= k8sPodName=openstack/glance-storage-init-x95sz subsys=endpoint level=info msg="Successful endpoint creation" containerID=9676448f24 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1499 identity=19278 ipv4=10.0.0.204 ipv6= k8sPodName=openstack/glance-storage-init-x95sz subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=9676448f24 endpointID=1499 k8sNamespace=openstack k8sPodName=glance-storage-init-x95sz subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=5abc071a-1958-4105-8886-3ad55c07f4db k8s:batch.kubernetes.io/job-name=glance-storage-init k8s:component=storage-init k8s:controller-uid=5abc071a-1958-4105-8886-3ad55c07f4db k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-storage-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=9676448f24 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1499 identity=19278 ipv4=10.0.0.204 ipv6= k8sPodName=openstack/glance-storage-init-x95sz subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.95 4e0393b9-b3df-408c-9327-bdf2170c5d66 default }" containerID=2ecac2bd3d72ef5e0e66ddd28f5366dc207031f63bf49848d545a721cca04e39 datapathConfiguration="&{false false false false false }" interface=lxc4da85f83cec2 k8sPodName=openstack/glance-api-54f674c498-28dc2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2ecac2bd3d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1684 ipv4=10.0.0.95 ipv6= k8sPodName=openstack/glance-api-54f674c498-28dc2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2ecac2bd3d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1684 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.95 ipv6= k8sPodName=openstack/glance-api-54f674c498-28dc2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2ecac2bd3d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1684 identity=32210 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.95 ipv6= k8sPodName=openstack/glance-api-54f674c498-28dc2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2ecac2bd3d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1684 identity=32210 ipv4=10.0.0.95 ipv6= k8sPodName=openstack/glance-api-54f674c498-28dc2 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=2ecac2bd3d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1684 identity=32210 ipv4=10.0.0.95 ipv6= k8sPodName=openstack/glance-api-54f674c498-28dc2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=2ecac2bd3d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1684 identity=32210 ipv4=10.0.0.95 ipv6= k8sPodName=openstack/glance-api-54f674c498-28dc2 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.3 7450464f-154a-4372-9bea-57c8e93bf8f2 default }" containerID=29eb03c7e8ebbc3f9fe4e4aabba041f82c663726b581e91fbe69bf0fe1288ab2 datapathConfiguration="&{false false false false false }" interface=lxce58ce740797a k8sPodName=openstack/staffeln-api-5765776f8c-ckffk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=29eb03c7e8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3776 ipv4=10.0.0.3 ipv6= k8sPodName=openstack/staffeln-api-5765776f8c-ckffk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=29eb03c7e8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3776 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.3 ipv6= k8sPodName=openstack/staffeln-api-5765776f8c-ckffk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=29eb03c7e8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3776 identity=24264 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.3 ipv6= k8sPodName=openstack/staffeln-api-5765776f8c-ckffk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=29eb03c7e8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3776 identity=24264 ipv4=10.0.0.3 ipv6= k8sPodName=openstack/staffeln-api-5765776f8c-ckffk subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.208 6e331f42-56fe-43bb-b49b-289f477b150b default }" containerID=403678c26b15e8dc19a49fa03a7a8b3c9cebdeedf4a7cd1d82300bb12412768a datapathConfiguration="&{false false false false false }" interface=lxc934223c3b4a2 k8sPodName=openstack/staffeln-conductor-85cb4648dd-9n7dq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=403678c26b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3535 ipv4=10.0.0.208 ipv6= k8sPodName=openstack/staffeln-conductor-85cb4648dd-9n7dq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=403678c26b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3535 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.208 ipv6= k8sPodName=openstack/staffeln-conductor-85cb4648dd-9n7dq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=conductor;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=403678c26b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3535 identity=1965 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.208 ipv6= k8sPodName=openstack/staffeln-conductor-85cb4648dd-9n7dq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=403678c26b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3535 identity=1965 ipv4=10.0.0.208 ipv6= k8sPodName=openstack/staffeln-conductor-85cb4648dd-9n7dq subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.221 f2ad4a41-9799-45f4-a507-b6e3ea633401 default }" containerID=2e2c2658f3b387b1893d16fc0789648116d745f8115967789c6b64885d7ca469 datapathConfiguration="&{false false false false false }" interface=lxcbe8f4c76278c k8sPodName=openstack/staffeln-db-init-2jvng labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2e2c2658f3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=99 ipv4=10.0.0.221 ipv6= k8sPodName=openstack/staffeln-db-init-2jvng subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2e2c2658f3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=99 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=1d4ee7dd-56f5-47ab-b387-fcb86628fbbc,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=1d4ee7dd-56f5-47ab-b387-fcb86628fbbc,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.221 ipv6= k8sPodName=openstack/staffeln-db-init-2jvng subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=1d4ee7dd-56f5-47ab-b387-fcb86628fbbc;k8s:batch.kubernetes.io/job-name=staffeln-db-init;k8s:component=db-init;k8s:controller-uid=1d4ee7dd-56f5-47ab-b387-fcb86628fbbc;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-init;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2e2c2658f3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=99 identity=17664 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=1d4ee7dd-56f5-47ab-b387-fcb86628fbbc,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=1d4ee7dd-56f5-47ab-b387-fcb86628fbbc,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.221 ipv6= k8sPodName=openstack/staffeln-db-init-2jvng oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2e2c2658f3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=99 identity=17664 ipv4=10.0.0.221 ipv6= k8sPodName=openstack/staffeln-db-init-2jvng subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=403678c26b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3535 identity=1965 ipv4=10.0.0.208 ipv6= k8sPodName=openstack/staffeln-conductor-85cb4648dd-9n7dq subsys=endpoint level=info msg="Successful endpoint creation" containerID=403678c26b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3535 identity=1965 ipv4=10.0.0.208 ipv6= k8sPodName=openstack/staffeln-conductor-85cb4648dd-9n7dq subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=29eb03c7e8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3776 identity=24264 ipv4=10.0.0.3 ipv6= k8sPodName=openstack/staffeln-api-5765776f8c-ckffk subsys=endpoint level=info msg="Successful endpoint creation" containerID=29eb03c7e8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3776 identity=24264 ipv4=10.0.0.3 ipv6= k8sPodName=openstack/staffeln-api-5765776f8c-ckffk subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=2e2c2658f3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=99 identity=17664 ipv4=10.0.0.221 ipv6= k8sPodName=openstack/staffeln-db-init-2jvng subsys=endpoint level=info msg="Successful endpoint creation" containerID=2e2c2658f3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=99 identity=17664 ipv4=10.0.0.221 ipv6= k8sPodName=openstack/staffeln-db-init-2jvng subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=2e2c2658f3 endpointID=99 k8sNamespace=openstack k8sPodName=staffeln-db-init-2jvng subsys=daemon level=info msg="Releasing key" key="[k8s:application=staffeln k8s:batch.kubernetes.io/controller-uid=1d4ee7dd-56f5-47ab-b387-fcb86628fbbc k8s:batch.kubernetes.io/job-name=staffeln-db-init k8s:component=db-init k8s:controller-uid=1d4ee7dd-56f5-47ab-b387-fcb86628fbbc k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=staffeln-db-init k8s:release_group=staffeln]" subsys=allocator level=info msg="Removed endpoint" containerID=2e2c2658f3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=99 identity=17664 ipv4=10.0.0.221 ipv6= k8sPodName=openstack/staffeln-db-init-2jvng subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.39 c52dfa80-2e40-4c03-ad52-52cb6218835c default }" containerID=e9ae0ff9a2f6583f8095e2670022eec243ebd266aaa511cdf477f30e1feed38d datapathConfiguration="&{false false false false false }" interface=lxc1901f2ade462 k8sPodName=openstack/staffeln-db-sync-bsqzz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e9ae0ff9a2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=864 ipv4=10.0.0.39 ipv6= k8sPodName=openstack/staffeln-db-sync-bsqzz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e9ae0ff9a2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=864 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=f91d932a-1394-4dec-97f2-f960983e7234,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=f91d932a-1394-4dec-97f2-f960983e7234,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.39 ipv6= k8sPodName=openstack/staffeln-db-sync-bsqzz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=f91d932a-1394-4dec-97f2-f960983e7234;k8s:batch.kubernetes.io/job-name=staffeln-db-sync;k8s:component=db-sync;k8s:controller-uid=f91d932a-1394-4dec-97f2-f960983e7234;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-sync;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e9ae0ff9a2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=864 identity=47922 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=f91d932a-1394-4dec-97f2-f960983e7234,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=f91d932a-1394-4dec-97f2-f960983e7234,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.39 ipv6= k8sPodName=openstack/staffeln-db-sync-bsqzz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e9ae0ff9a2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=864 identity=47922 ipv4=10.0.0.39 ipv6= k8sPodName=openstack/staffeln-db-sync-bsqzz subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e9ae0ff9a2 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=864 identity=47922 ipv4=10.0.0.39 ipv6= k8sPodName=openstack/staffeln-db-sync-bsqzz subsys=endpoint level=info msg="Successful endpoint creation" containerID=e9ae0ff9a2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=864 identity=47922 ipv4=10.0.0.39 ipv6= k8sPodName=openstack/staffeln-db-sync-bsqzz subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager