level=info msg="Memory available for map entries (0.003% of 67421642752B): 168554106B" subsys=config level=info msg="option bpf-ct-global-tcp-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-ct-global-any-max set by dynamic sizing to 295708" subsys=config level=info msg="option bpf-nat-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-neigh-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-sock-rev-map-max set by dynamic sizing to 295708" subsys=config level=info msg=" --agent-health-port='9879'" subsys=daemon level=info msg=" --agent-labels=''" subsys=daemon level=info msg=" --agent-liveness-update-interval='1s'" subsys=daemon level=info msg=" --agent-not-ready-taint-key='node.cilium.io/agent-not-ready'" subsys=daemon level=info msg=" --allocator-list-timeout='3m0s'" subsys=daemon level=info msg=" --allow-icmp-frag-needed='true'" subsys=daemon level=info msg=" --allow-localhost='auto'" subsys=daemon level=info msg=" --annotate-k8s-node='false'" subsys=daemon level=info msg=" --api-rate-limit=''" subsys=daemon level=info msg=" --arping-refresh-period='30s'" subsys=daemon level=info msg=" --auto-create-cilium-node-resource='true'" subsys=daemon level=info msg=" --auto-direct-node-routes='false'" subsys=daemon level=info msg=" --bgp-announce-lb-ip='false'" subsys=daemon level=info msg=" --bgp-announce-pod-cidr='false'" subsys=daemon level=info msg=" --bgp-config-path='/var/lib/cilium/bgp/config.yaml'" subsys=daemon level=info msg=" --bpf-auth-map-max='524288'" subsys=daemon level=info msg=" --bpf-ct-global-any-max='262144'" subsys=daemon level=info msg=" --bpf-ct-global-tcp-max='524288'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-fin='10s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-syn='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp-grace='1m0s'" subsys=daemon level=info msg=" --bpf-filter-priority='1'" subsys=daemon level=info msg=" --bpf-fragments-map-max='8192'" subsys=daemon level=info msg=" --bpf-lb-acceleration='disabled'" subsys=daemon level=info msg=" --bpf-lb-affinity-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-algorithm='random'" subsys=daemon level=info msg=" --bpf-lb-dev-ip-addr-inherit=''" subsys=daemon level=info msg=" --bpf-lb-dsr-dispatch='opt'" subsys=daemon level=info msg=" --bpf-lb-dsr-l4-xlate='frontend'" subsys=daemon level=info msg=" --bpf-lb-external-clusterip='false'" subsys=daemon level=info msg=" --bpf-lb-maglev-hash-seed='JLfvgnHc2kaSUFaI'" subsys=daemon level=info msg=" --bpf-lb-maglev-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-maglev-table-size='16381'" subsys=daemon level=info msg=" --bpf-lb-map-max='65536'" subsys=daemon level=info msg=" --bpf-lb-mode='snat'" subsys=daemon level=info msg=" --bpf-lb-rev-nat-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-rss-ipv4-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-rss-ipv6-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-service-backend-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-service-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-sock='false'" subsys=daemon level=info msg=" --bpf-lb-sock-hostns-only='false'" subsys=daemon level=info msg=" --bpf-lb-source-range-map-max='0'" subsys=daemon level=info msg=" --bpf-map-dynamic-size-ratio='0.0025'" subsys=daemon level=info msg=" --bpf-map-event-buffers=''" subsys=daemon level=info msg=" --bpf-nat-global-max='524288'" subsys=daemon level=info msg=" --bpf-neigh-global-max='524288'" subsys=daemon level=info msg=" --bpf-policy-map-full-reconciliation-interval='15m0s'" subsys=daemon level=info msg=" --bpf-policy-map-max='16384'" subsys=daemon level=info msg=" --bpf-root='/sys/fs/bpf'" subsys=daemon level=info msg=" --bpf-sock-rev-map-max='262144'" subsys=daemon level=info msg=" --bypass-ip-availability-upon-restore='false'" subsys=daemon level=info msg=" --certificates-directory='/var/run/cilium/certs'" subsys=daemon level=info msg=" --cflags=''" subsys=daemon level=info msg=" --cgroup-root='/run/cilium/cgroupv2'" subsys=daemon level=info msg=" --cilium-endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --cluster-health-port='4240'" subsys=daemon level=info msg=" --cluster-id='0'" subsys=daemon level=info msg=" --cluster-name='default'" subsys=daemon level=info msg=" --cluster-pool-ipv4-cidr='10.0.0.0/8'" subsys=daemon level=info msg=" --cluster-pool-ipv4-mask-size='24'" subsys=daemon level=info msg=" --clustermesh-config='/var/lib/cilium/clustermesh/'" subsys=daemon level=info msg=" --clustermesh-ip-identities-sync-timeout='1m0s'" subsys=daemon level=info msg=" --cmdref=''" subsys=daemon level=info msg=" --cni-chaining-mode='none'" subsys=daemon level=info msg=" --cni-chaining-target=''" subsys=daemon level=info msg=" --cni-exclusive='true'" subsys=daemon level=info msg=" --cni-external-routing='false'" subsys=daemon level=info msg=" --cni-log-file='/var/run/cilium/cilium-cni.log'" subsys=daemon level=info msg=" --cnp-node-status-gc-interval='0s'" subsys=daemon level=info msg=" --config=''" subsys=daemon level=info msg=" --config-dir='/tmp/cilium/config-map'" subsys=daemon level=info msg=" --config-sources='config-map:kube-system/cilium-config'" subsys=daemon level=info msg=" --conntrack-gc-interval='0s'" subsys=daemon level=info msg=" --conntrack-gc-max-interval='0s'" subsys=daemon level=info msg=" --crd-wait-timeout='5m0s'" subsys=daemon level=info msg=" --custom-cni-conf='false'" subsys=daemon level=info msg=" --datapath-mode='veth'" subsys=daemon level=info msg=" --debug='false'" subsys=daemon level=info msg=" --debug-verbose=''" subsys=daemon level=info msg=" --derive-masquerade-ip-addr-from-device=''" subsys=daemon level=info msg=" --devices=''" subsys=daemon level=info msg=" --direct-routing-device=''" subsys=daemon level=info msg=" --disable-cnp-status-updates='true'" subsys=daemon level=info msg=" --disable-endpoint-crd='false'" subsys=daemon level=info msg=" --disable-envoy-version-check='false'" subsys=daemon level=info msg=" --disable-iptables-feeder-rules=''" subsys=daemon level=info msg=" --dns-max-ips-per-restored-rule='1000'" subsys=daemon level=info msg=" --dns-policy-unload-on-shutdown='false'" subsys=daemon level=info msg=" --dnsproxy-concurrency-limit='0'" subsys=daemon level=info msg=" --dnsproxy-concurrency-processing-grace-period='0s'" subsys=daemon level=info msg=" --dnsproxy-enable-transparent-mode='true'" subsys=daemon level=info msg=" --dnsproxy-lock-count='128'" subsys=daemon level=info msg=" --dnsproxy-lock-timeout='500ms'" subsys=daemon level=info msg=" --egress-gateway-policy-map-max='16384'" subsys=daemon level=info msg=" --egress-gateway-reconciliation-trigger-interval='1s'" subsys=daemon level=info msg=" --egress-masquerade-interfaces=''" subsys=daemon level=info msg=" --egress-multi-home-ip-rule-compat='false'" subsys=daemon level=info msg=" --enable-auto-protect-node-port-range='true'" subsys=daemon level=info msg=" --enable-bandwidth-manager='false'" subsys=daemon level=info msg=" --enable-bbr='false'" subsys=daemon level=info msg=" --enable-bgp-control-plane='false'" subsys=daemon level=info msg=" --enable-bpf-clock-probe='false'" subsys=daemon level=info msg=" --enable-bpf-masquerade='false'" subsys=daemon level=info msg=" --enable-bpf-tproxy='false'" subsys=daemon level=info msg=" --enable-cilium-api-server-access='*'" subsys=daemon level=info msg=" --enable-cilium-endpoint-slice='false'" subsys=daemon level=info msg=" --enable-cilium-health-api-server-access='*'" subsys=daemon level=info msg=" --enable-custom-calls='false'" subsys=daemon level=info msg=" --enable-endpoint-health-checking='true'" subsys=daemon level=info msg=" --enable-endpoint-routes='false'" subsys=daemon level=info msg=" --enable-envoy-config='false'" subsys=daemon level=info msg=" --enable-external-ips='false'" subsys=daemon level=info msg=" --enable-health-check-nodeport='true'" subsys=daemon level=info msg=" --enable-health-checking='true'" subsys=daemon level=info msg=" --enable-high-scale-ipcache='false'" subsys=daemon level=info msg=" --enable-host-firewall='false'" subsys=daemon level=info msg=" --enable-host-legacy-routing='false'" subsys=daemon level=info msg=" --enable-host-port='false'" subsys=daemon level=info msg=" --enable-hubble='false'" subsys=daemon level=info msg=" --enable-hubble-recorder-api='true'" subsys=daemon level=info msg=" --enable-icmp-rules='true'" subsys=daemon level=info msg=" --enable-identity-mark='true'" subsys=daemon level=info msg=" --enable-ip-masq-agent='false'" subsys=daemon level=info msg=" --enable-ipsec='false'" subsys=daemon level=info msg=" --enable-ipsec-key-watcher='true'" subsys=daemon level=info msg=" --enable-ipv4='true'" subsys=daemon level=info msg=" --enable-ipv4-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv4-egress-gateway='false'" subsys=daemon level=info msg=" --enable-ipv4-fragment-tracking='true'" subsys=daemon level=info msg=" --enable-ipv4-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6='false'" subsys=daemon level=info msg=" --enable-ipv6-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv6-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6-ndp='false'" subsys=daemon level=info msg=" --enable-k8s='true'" subsys=daemon level=info msg=" --enable-k8s-api-discovery='false'" subsys=daemon level=info msg=" --enable-k8s-endpoint-slice='true'" subsys=daemon level=info msg=" --enable-k8s-event-handover='false'" subsys=daemon level=info msg=" --enable-k8s-networkpolicy='true'" subsys=daemon level=info msg=" --enable-k8s-terminating-endpoint='true'" subsys=daemon level=info msg=" --enable-l2-announcements='false'" subsys=daemon level=info msg=" --enable-l2-neigh-discovery='true'" subsys=daemon level=info msg=" --enable-l2-pod-announcements='false'" subsys=daemon level=info msg=" --enable-l7-proxy='true'" subsys=daemon level=info msg=" --enable-local-node-route='true'" subsys=daemon level=info msg=" --enable-local-redirect-policy='false'" subsys=daemon level=info msg=" --enable-mke='false'" subsys=daemon level=info msg=" --enable-monitor='true'" subsys=daemon level=info msg=" --enable-nat46x64-gateway='false'" subsys=daemon level=info msg=" --enable-node-port='false'" subsys=daemon level=info msg=" --enable-pmtu-discovery='false'" subsys=daemon level=info msg=" --enable-policy='default'" subsys=daemon level=info msg=" --enable-recorder='false'" subsys=daemon level=info msg=" --enable-remote-node-identity='true'" subsys=daemon level=info msg=" --enable-runtime-device-detection='false'" subsys=daemon level=info msg=" --enable-sctp='false'" subsys=daemon level=info msg=" --enable-service-topology='false'" subsys=daemon level=info msg=" --enable-session-affinity='false'" subsys=daemon level=info msg=" --enable-srv6='false'" subsys=daemon level=info msg=" --enable-stale-cilium-endpoint-cleanup='true'" subsys=daemon level=info msg=" --enable-svc-source-range-check='true'" subsys=daemon level=info msg=" --enable-tracing='false'" subsys=daemon level=info msg=" --enable-unreachable-routes='false'" subsys=daemon level=info msg=" --enable-vtep='false'" subsys=daemon level=info msg=" --enable-well-known-identities='false'" subsys=daemon level=info msg=" --enable-wireguard='false'" subsys=daemon level=info msg=" --enable-wireguard-userspace-fallback='false'" subsys=daemon level=info msg=" --enable-xdp-prefilter='false'" subsys=daemon level=info msg=" --enable-xt-socket-fallback='true'" subsys=daemon level=info msg=" --encrypt-interface=''" subsys=daemon level=info msg=" --encrypt-node='false'" subsys=daemon level=info msg=" --endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --endpoint-queue-size='25'" subsys=daemon level=info msg=" --endpoint-status=''" subsys=daemon level=info msg=" --envoy-config-timeout='2m0s'" subsys=daemon level=info msg=" --envoy-log=''" subsys=daemon level=info msg=" --exclude-local-address=''" subsys=daemon level=info msg=" --external-envoy-proxy='false'" subsys=daemon level=info msg=" --fixed-identity-mapping=''" subsys=daemon level=info msg=" --fqdn-regex-compile-lru-size='1024'" subsys=daemon level=info msg=" --gops-port='9890'" subsys=daemon level=info msg=" --http-403-msg=''" subsys=daemon level=info msg=" --http-idle-timeout='0'" subsys=daemon level=info msg=" --http-max-grpc-timeout='0'" subsys=daemon level=info msg=" --http-normalize-path='true'" subsys=daemon level=info msg=" --http-request-timeout='3600'" subsys=daemon level=info msg=" --http-retry-count='3'" subsys=daemon level=info msg=" --http-retry-timeout='0'" subsys=daemon level=info msg=" --hubble-disable-tls='false'" subsys=daemon level=info msg=" --hubble-event-buffer-capacity='4095'" subsys=daemon level=info msg=" --hubble-event-queue-size='0'" subsys=daemon level=info msg=" --hubble-export-file-compress='false'" subsys=daemon level=info msg=" --hubble-export-file-max-backups='5'" subsys=daemon level=info msg=" --hubble-export-file-max-size-mb='10'" subsys=daemon level=info msg=" --hubble-export-file-path=''" subsys=daemon level=info msg=" --hubble-listen-address=''" subsys=daemon level=info msg=" --hubble-metrics=''" subsys=daemon level=info msg=" --hubble-metrics-server=''" subsys=daemon level=info msg=" --hubble-monitor-events=''" subsys=daemon level=info msg=" --hubble-prefer-ipv6='false'" subsys=daemon level=info msg=" --hubble-recorder-sink-queue-size='1024'" subsys=daemon level=info msg=" --hubble-recorder-storage-path='/var/run/cilium/pcaps'" subsys=daemon level=info msg=" --hubble-skip-unknown-cgroup-ids='true'" subsys=daemon level=info msg=" --hubble-socket-path='/var/run/cilium/hubble.sock'" subsys=daemon level=info msg=" --hubble-tls-cert-file=''" subsys=daemon level=info msg=" --hubble-tls-client-ca-files=''" subsys=daemon level=info msg=" --hubble-tls-key-file=''" subsys=daemon level=info msg=" --identity-allocation-mode='crd'" subsys=daemon level=info msg=" --identity-change-grace-period='5s'" subsys=daemon level=info msg=" --identity-gc-interval='15m0s'" subsys=daemon level=info msg=" --identity-heartbeat-timeout='30m0s'" subsys=daemon level=info msg=" --identity-restore-grace-period='10m0s'" subsys=daemon level=info msg=" --install-egress-gateway-routes='false'" subsys=daemon level=info msg=" --install-iptables-rules='true'" subsys=daemon level=info msg=" --install-no-conntrack-iptables-rules='false'" subsys=daemon level=info msg=" --ip-allocation-timeout='2m0s'" subsys=daemon level=info msg=" --ip-masq-agent-config-path='/etc/config/ip-masq-agent'" subsys=daemon level=info msg=" --ipam='cluster-pool'" subsys=daemon level=info msg=" --ipam-cilium-node-update-rate='15s'" subsys=daemon level=info msg=" --ipam-multi-pool-pre-allocation='default=8'" subsys=daemon level=info msg=" --ipsec-key-file=''" subsys=daemon level=info msg=" --ipsec-key-rotation-duration='5m0s'" subsys=daemon level=info msg=" --iptables-lock-timeout='5s'" subsys=daemon level=info msg=" --iptables-random-fully='false'" subsys=daemon level=info msg=" --ipv4-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv4-node='auto'" subsys=daemon level=info msg=" --ipv4-pod-subnets=''" subsys=daemon level=info msg=" --ipv4-range='auto'" subsys=daemon level=info msg=" --ipv4-service-loopback-address='169.254.42.1'" subsys=daemon level=info msg=" --ipv4-service-range='auto'" subsys=daemon level=info msg=" --ipv6-cluster-alloc-cidr='f00d::/64'" subsys=daemon level=info msg=" --ipv6-mcast-device=''" subsys=daemon level=info msg=" --ipv6-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv6-node='auto'" subsys=daemon level=info msg=" --ipv6-pod-subnets=''" subsys=daemon level=info msg=" --ipv6-range='auto'" subsys=daemon level=info msg=" --ipv6-service-range='auto'" subsys=daemon level=info msg=" --join-cluster='false'" subsys=daemon level=info msg=" --k8s-api-server=''" subsys=daemon level=info msg=" --k8s-client-burst='10'" subsys=daemon level=info msg=" --k8s-client-qps='5'" subsys=daemon level=info msg=" --k8s-heartbeat-timeout='30s'" subsys=daemon level=info msg=" --k8s-kubeconfig-path=''" subsys=daemon level=info msg=" --k8s-namespace='kube-system'" subsys=daemon level=info msg=" --k8s-require-ipv4-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-require-ipv6-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-service-cache-size='128'" subsys=daemon level=info msg=" --k8s-service-proxy-name=''" subsys=daemon level=info msg=" --k8s-sync-timeout='3m0s'" subsys=daemon level=info msg=" --k8s-watcher-endpoint-selector='metadata.name!=kube-scheduler,metadata.name!=kube-controller-manager,metadata.name!=etcd-operator,metadata.name!=gcp-controller-manager'" subsys=daemon level=info msg=" --keep-config='false'" subsys=daemon level=info msg=" --kube-proxy-replacement='disabled'" subsys=daemon level=info msg=" --kube-proxy-replacement-healthz-bind-address=''" subsys=daemon level=info msg=" --kvstore=''" subsys=daemon level=info msg=" --kvstore-connectivity-timeout='2m0s'" subsys=daemon level=info msg=" --kvstore-lease-ttl='15m0s'" subsys=daemon level=info msg=" --kvstore-max-consecutive-quorum-errors='2'" subsys=daemon level=info msg=" --kvstore-opt=''" subsys=daemon level=info msg=" --kvstore-periodic-sync='5m0s'" subsys=daemon level=info msg=" --l2-announcements-lease-duration='15s'" subsys=daemon level=info msg=" --l2-announcements-renew-deadline='5s'" subsys=daemon level=info msg=" --l2-announcements-retry-period='2s'" subsys=daemon level=info msg=" --l2-pod-announcements-interface=''" subsys=daemon level=info msg=" --label-prefix-file=''" subsys=daemon level=info msg=" --labels=''" subsys=daemon level=info msg=" --lib-dir='/var/lib/cilium'" subsys=daemon level=info msg=" --local-max-addr-scope='252'" subsys=daemon level=info msg=" --local-router-ipv4=''" subsys=daemon level=info msg=" --local-router-ipv6=''" subsys=daemon level=info msg=" --log-driver=''" subsys=daemon level=info msg=" --log-opt=''" subsys=daemon level=info msg=" --log-system-load='false'" subsys=daemon level=info msg=" --max-controller-interval='0'" subsys=daemon level=info msg=" --mesh-auth-enabled='true'" subsys=daemon level=info msg=" --mesh-auth-gc-interval='5m0s'" subsys=daemon level=info msg=" --mesh-auth-mutual-listener-port='0'" subsys=daemon level=info msg=" --mesh-auth-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-rotated-identities-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-signal-backoff-duration='1s'" subsys=daemon level=info msg=" --mesh-auth-spiffe-trust-domain='spiffe.cilium'" subsys=daemon level=info msg=" --mesh-auth-spire-admin-socket=''" subsys=daemon level=info msg=" --metrics=''" subsys=daemon level=info msg=" --mke-cgroup-mount=''" subsys=daemon level=info msg=" --monitor-aggregation='medium'" subsys=daemon level=info msg=" --monitor-aggregation-flags='all'" subsys=daemon level=info msg=" --monitor-aggregation-interval='5s'" subsys=daemon level=info msg=" --monitor-queue-size='0'" subsys=daemon level=info msg=" --mtu='0'" subsys=daemon level=info msg=" --node-encryption-opt-out-labels='node-role.kubernetes.io/control-plane'" subsys=daemon level=info msg=" --node-port-acceleration='disabled'" subsys=daemon level=info msg=" --node-port-algorithm='random'" subsys=daemon level=info msg=" --node-port-bind-protection='true'" subsys=daemon level=info msg=" --node-port-mode='snat'" subsys=daemon level=info msg=" --node-port-range='30000,32767'" subsys=daemon level=info msg=" --nodes-gc-interval='5m0s'" subsys=daemon level=info msg=" --operator-api-serve-addr='127.0.0.1:9234'" subsys=daemon level=info msg=" --policy-audit-mode='false'" subsys=daemon level=info msg=" --policy-queue-size='100'" subsys=daemon level=info msg=" --policy-trigger-interval='1s'" subsys=daemon level=info msg=" --pprof='false'" subsys=daemon level=info msg=" --pprof-address='localhost'" subsys=daemon level=info msg=" --pprof-port='6060'" subsys=daemon level=info msg=" --preallocate-bpf-maps='false'" subsys=daemon level=info msg=" --prepend-iptables-chains='true'" subsys=daemon level=info msg=" --procfs='/host/proc'" subsys=daemon level=info msg=" --prometheus-serve-addr=':9962'" subsys=daemon level=info msg=" --proxy-connect-timeout='2'" subsys=daemon level=info msg=" --proxy-gid='1337'" subsys=daemon level=info msg=" --proxy-idle-timeout-seconds='60'" subsys=daemon level=info msg=" --proxy-max-connection-duration-seconds='0'" subsys=daemon level=info msg=" --proxy-max-requests-per-connection='0'" subsys=daemon level=info msg=" --proxy-prometheus-port='9964'" subsys=daemon level=info msg=" --read-cni-conf=''" subsys=daemon level=info msg=" --remove-cilium-node-taints='true'" subsys=daemon level=info msg=" --restore='true'" subsys=daemon level=info msg=" --route-metric='0'" subsys=daemon level=info msg=" --routing-mode='tunnel'" subsys=daemon level=info msg=" --set-cilium-is-up-condition='true'" subsys=daemon level=info msg=" --set-cilium-node-taints='true'" subsys=daemon level=info msg=" --sidecar-istio-proxy-image='cilium/istio_proxy'" subsys=daemon level=info msg=" --single-cluster-route='false'" subsys=daemon level=info msg=" --skip-cnp-status-startup-clean='false'" subsys=daemon level=info msg=" --socket-path='/var/run/cilium/cilium.sock'" subsys=daemon level=info msg=" --srv6-encap-mode='reduced'" subsys=daemon level=info msg=" --state-dir='/var/run/cilium'" subsys=daemon level=info msg=" --synchronize-k8s-nodes='true'" subsys=daemon level=info msg=" --tofqdns-dns-reject-response-code='refused'" subsys=daemon level=info msg=" --tofqdns-enable-dns-compression='true'" subsys=daemon level=info msg=" --tofqdns-endpoint-max-ip-per-hostname='50'" subsys=daemon level=info msg=" --tofqdns-idle-connection-grace-period='0s'" subsys=daemon level=info msg=" --tofqdns-max-deferred-connection-deletes='10000'" subsys=daemon level=info msg=" --tofqdns-min-ttl='0'" subsys=daemon level=info msg=" --tofqdns-pre-cache=''" subsys=daemon level=info msg=" --tofqdns-proxy-port='0'" subsys=daemon level=info msg=" --tofqdns-proxy-response-max-delay='100ms'" subsys=daemon level=info msg=" --trace-payloadlen='128'" subsys=daemon level=info msg=" --trace-sock='true'" subsys=daemon level=info msg=" --tunnel=''" subsys=daemon level=info msg=" --tunnel-port='6082'" subsys=daemon level=info msg=" --tunnel-protocol='geneve'" subsys=daemon level=info msg=" --unmanaged-pod-watcher-interval='15'" subsys=daemon level=info msg=" --use-cilium-internal-ip-for-ipsec='false'" subsys=daemon level=info msg=" --version='false'" subsys=daemon level=info msg=" --vlan-bpf-bypass=''" subsys=daemon level=info msg=" --vtep-cidr=''" subsys=daemon level=info msg=" --vtep-endpoint=''" subsys=daemon level=info msg=" --vtep-mac=''" subsys=daemon level=info msg=" --vtep-mask=''" subsys=daemon level=info msg=" --wireguard-encapsulate='false'" subsys=daemon level=info msg=" --write-cni-conf-when-ready='/host/etc/cni/net.d/05-cilium.conflist'" subsys=daemon level=info msg=" _ _ _" subsys=daemon level=info msg=" ___|_| |_|_ _ _____" subsys=daemon level=info msg="| _| | | | | | |" subsys=daemon level=info msg="|___|_|_|_|___|_|_|_|" subsys=daemon level=info msg="Cilium 1.14.8 cf6e022e 2024-03-13T12:23:35-04:00 go version go1.21.8 linux/amd64" subsys=daemon level=info msg="clang (10.0.0) and kernel (5.15.0) versions: OK!" subsys=linux-datapath level=info msg="linking environment: OK!" subsys=linux-datapath level=info msg="Kernel config file not found: if the agent fails to start, check the system requirements at https://docs.cilium.io/en/stable/operations/system_requirements" subsys=probes level=info msg="Detected mounted BPF filesystem at /sys/fs/bpf" subsys=bpf level=info msg="Mounted cgroupv2 filesystem at /run/cilium/cgroupv2" subsys=cgroups level=info msg="Parsing base label prefixes from default label list" subsys=labels-filter level=info msg="Parsing additional label prefixes from user inputs: []" subsys=labels-filter level=info msg="Final label prefixes to be used for identity evaluation:" subsys=labels-filter level=info msg=" - reserved:.*" subsys=labels-filter level=info msg=" - :io\\.kubernetes\\.pod\\.namespace" subsys=labels-filter level=info msg=" - :io\\.cilium\\.k8s\\.namespace\\.labels" subsys=labels-filter level=info msg=" - :app\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:io\\.kubernetes" subsys=labels-filter level=info msg=" - !:kubernetes\\.io" subsys=labels-filter level=info msg=" - !:.*beta\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:k8s\\.io" subsys=labels-filter level=info msg=" - !:pod-template-generation" subsys=labels-filter level=info msg=" - !:pod-template-hash" subsys=labels-filter level=info msg=" - !:controller-revision-hash" subsys=labels-filter level=info msg=" - !:annotation.*" subsys=labels-filter level=info msg=" - !:etcd_node" subsys=labels-filter level=info msg=Invoked duration="819.011µs" function="pprof.glob..func1 (cell.go:50)" subsys=hive level=info msg=Invoked duration="51.511µs" function="gops.registerGopsHooks (cell.go:38)" subsys=hive level=info msg=Invoked duration="827.47µs" function="metrics.NewRegistry (registry.go:65)" subsys=hive level=info msg=Invoked duration="12.121µs" function="metrics.glob..func1 (cell.go:12)" subsys=hive level=info msg="Spire Delegate API Client is disabled as no socket path is configured" subsys=spire-delegate level=info msg="Mutual authentication handler is disabled as no port is configured" subsys=auth level=info msg=Invoked duration=96.648679ms function="cmd.glob..func4 (daemon_main.go:1607)" subsys=hive level=info msg=Invoked duration="11.45µs" function="gc.registerSignalHandler (cell.go:47)" subsys=hive level=info msg=Invoked duration="14.36µs" function="utime.initUtimeSync (cell.go:29)" subsys=hive level=info msg=Invoked duration="113.252µs" function="agentliveness.newAgentLivenessUpdater (agent_liveness.go:43)" subsys=hive level=info msg=Invoked duration="58.531µs" function="l2responder.NewL2ResponderReconciler (l2responder.go:63)" subsys=hive level=info msg=Invoked duration="156.994µs" function="garp.newGARPProcessor (processor.go:27)" subsys=hive level=info msg=Starting subsys=hive level=info msg="Started gops server" address="127.0.0.1:9890" subsys=gops level=info msg="Start hook executed" duration="473.902µs" function="gops.registerGopsHooks.func1 (cell.go:43)" subsys=hive level=info msg="Start hook executed" duration="1.98µs" function="metrics.NewRegistry.func1 (registry.go:86)" subsys=hive level=info msg="Establishing connection to apiserver" host="https://10.96.0.1:443" subsys=k8s-client level=info msg="Serving prometheus metrics on :9962" subsys=metrics level=info msg="Connected to apiserver" subsys=k8s-client level=info msg="Start hook executed" duration=10.887153ms function="client.(*compositeClientset).onStart" subsys=hive level=info msg="Start hook executed" duration=9.222073ms function="authmap.newAuthMap.func1 (cell.go:27)" subsys=hive level=info msg="Start hook executed" duration="146.373µs" function="configmap.newMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="165.894µs" function="signalmap.newMap.func1 (cell.go:44)" subsys=hive level=info msg="Start hook executed" duration="300.507µs" function="nodemap.newNodeMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="136.653µs" function="eventsmap.newEventsMap.func1 (cell.go:35)" subsys=hive level=info msg="Start hook executed" duration="110.443µs" function="*cni.cniConfigManager.Start" subsys=hive level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Wrote CNI configuration file to /host/etc/cni/net.d/05-cilium.conflist" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Start hook executed" duration=46.481966ms function="datapath.newDatapath.func1 (cells.go:113)" subsys=hive level=info msg="Restored 0 node IDs from the BPF map" subsys=linux-datapath level=info msg="Start hook executed" duration="99.562µs" function="datapath.newDatapath.func2 (cells.go:126)" subsys=hive level=info msg="Start hook executed" duration="16.01µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Node].Start" subsys=hive level=info msg="Start hook executed" duration="3µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNode].Start" subsys=hive level=info msg="Using autogenerated IPv4 allocation range" subsys=node v4Prefix=10.95.0.0/16 level=info msg="no local ciliumnode found, will not restore cilium internal ips from k8s" subsys=daemon level=info msg="Start hook executed" duration=103.931295ms function="node.NewLocalNodeStore.func1 (local_node_store.go:76)" subsys=hive level=info msg="Start hook executed" duration="11.931µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration=200.708439ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration="5.691µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Using discoveryv1.EndpointSlice" subsys=k8s level=info msg="Start hook executed" duration=101.009815ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Start hook executed" duration="12.73µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Pod].Start" subsys=hive level=info msg="Start hook executed" duration="3.31µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Namespace].Start" subsys=hive level=info msg="Start hook executed" duration="6.03µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="1.8µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumClusterwideNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="21.45µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumCIDRGroup].Start" subsys=hive level=info msg="Start hook executed" duration="46.351µs" function="endpointmanager.newDefaultEndpointManager.func1 (cell.go:203)" subsys=hive level=info msg="Start hook executed" duration="11.73µs" function="cmd.newPolicyTrifecta.func1 (policy.go:135)" subsys=hive level=info msg="Start hook executed" duration="68.281µs" function="*manager.manager.Start" subsys=hive level=info msg="Serving cilium node monitor v1.2 API at unix:///var/run/cilium/monitor1_2.sock" subsys=monitor-agent level=info msg="Start hook executed" duration="327.508µs" function="agent.newMonitorAgent.func1 (cell.go:61)" subsys=hive level=info msg="Start hook executed" duration="2.47µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumL2AnnouncementPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="8.4µs" function="*job.group.Start" subsys=hive level=info msg="Envoy: Starting xDS gRPC server listening on /var/run/cilium/envoy/sockets/xds.sock" subsys=envoy-manager level=info msg="Start hook executed" duration="228.615µs" function="proxy.newProxy.func1 (cell.go:55)" subsys=hive level=info msg="Start hook executed" duration="917.822µs" function="signal.provideSignalManager.func1 (cell.go:25)" subsys=hive level=info msg="Datapath signal listener running" subsys=signal level=info msg="Start hook executed" duration=1.466785ms function="auth.registerAuthManager.func1 (cell.go:109)" subsys=hive level=info msg="Start hook executed" duration="5.731µs" function="auth.registerGCJobs.func1 (cell.go:158)" subsys=hive level=info msg="Start hook executed" duration="20.43µs" function="*job.group.Start" subsys=hive level=warning msg="Deprecated value for --kube-proxy-replacement: disabled (use either \"true\", or \"false\")" subsys=daemon level=info msg="Auto-disabling \"enable-node-port\", \"enable-external-ips\", \"bpf-lb-sock\", \"enable-host-port\" features and falling back to \"enable-host-legacy-routing\"" subsys=daemon level=info msg="Inheriting MTU from external network interface" device=ens3 ipAddr=199.204.45.95 mtu=1500 subsys=mtu level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_ipcache, recreating and re-pinning map cilium_ipcache" file-path=/sys/fs/bpf/tc/globals/cilium_ipcache name=cilium_ipcache subsys=bpf level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_tunnel_map, recreating and re-pinning map cilium_tunnel_map" file-path=/sys/fs/bpf/tc/globals/cilium_tunnel_map name=cilium_tunnel_map subsys=bpf level=info msg="Restored services from maps" failedServices=0 restoredServices=0 subsys=service level=info msg="Restored backends from maps" failedBackends=0 restoredBackends=0 skippedBackends=0 subsys=service level=info msg="Reading old endpoints..." subsys=daemon level=info msg="No old endpoints found." subsys=daemon level=info msg="Waiting until all Cilium CRDs are available" subsys=k8s level=info msg="All Cilium CRDs have been found and are available" subsys=k8s level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=warning msg="Unable to create CiliumNode resource, will retry" error="ciliumnodes.cilium.io \"instance\" already exists" subsys=nodediscovery level=info msg="Successfully created CiliumNode resource" subsys=nodediscovery level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=info msg="Received own node information from API server" ipAddr.ipv4=199.204.45.95 ipAddr.ipv6="" k8sNodeIP=199.204.45.95 labels="map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:]" nodeName=instance subsys=k8s v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="k8s mode: Allowing localhost to reach local endpoints" subsys=daemon level=info msg="Detected devices" devices="[]" subsys=linux-datapath level=info msg="Enabling k8s event listener" subsys=k8s-watcher level=info msg="Removing stale endpoint interfaces" subsys=daemon level=info msg="Skipping kvstore configuration" subsys=daemon level=info msg="Waiting until local node addressing before starting watchers depending on it" subsys=k8s-watcher level=info msg="Initializing node addressing" subsys=daemon level=info msg="Initializing cluster-pool IPAM" subsys=ipam v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="Restoring endpoints..." subsys=daemon level=info msg="Endpoints restored" failed=0 restored=0 subsys=daemon level=info msg="Addressing information:" subsys=daemon level=info msg=" Cluster-Name: default" subsys=daemon level=info msg=" Cluster-ID: 0" subsys=daemon level=info msg=" Local node-name: instance" subsys=daemon level=info msg=" Node-IPv6: " subsys=daemon level=info msg=" External-Node IPv4: 199.204.45.95" subsys=daemon level=info msg=" Internal-Node IPv4: 10.0.0.77" subsys=daemon level=info msg=" IPv4 allocation prefix: 10.0.0.0/24" subsys=daemon level=info msg=" Loopback IPv4: 169.254.42.1" subsys=daemon level=info msg=" Local IPv4 addresses:" subsys=daemon level=info msg=" - 199.204.45.95" subsys=daemon level=info msg=" - 172.17.0.100" subsys=daemon level=info msg=" - 10.96.240.200" subsys=daemon level=info msg="Node updated" clusterName=default nodeName=instance subsys=nodemanager level=info msg="Adding local node to cluster" node="{instance default [{InternalIP 199.204.45.95} {CiliumInternalIP 10.0.0.77}] 10.0.0.0/24 [] [] 10.0.0.56 0 local 0 map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:] map[] 1 }" subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Waiting until all pre-existing resources have been received" subsys=k8s-watcher level=info msg="Initializing identity allocator" subsys=identity-cache level=info msg="Allocating identities between range" cluster-id=0 max=65535 min=256 subsys=identity-cache level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.core.bpf_jit_enable sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.all.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.fib_multipath_use_neigh sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.unprivileged_bpf_disabled sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.timer_migration sysParamValue=0 level=info msg="Setting up BPF datapath" bpfClockSource=ktime bpfInsnSet="" subsys=datapath-loader level=info msg="Iptables rules installed" subsys=iptables level=info msg="Adding new proxy port rules for cilium-dns-egress:44689" id=cilium-dns-egress subsys=proxy level=info msg="Iptables proxy rules installed" subsys=iptables level=info msg="Start hook executed" duration=2.476207197s function="cmd.newDaemonPromise.func1 (daemon_main.go:1663)" subsys=hive level=info msg="Starting IP identity watcher" subsys=ipcache level=info msg="Start hook executed" duration="20.6µs" function="utime.initUtimeSync.func1 (cell.go:33)" subsys=hive level=info msg="Start hook executed" duration="6.59µs" function="*job.group.Start" subsys=hive level=info msg="Initializing daemon" subsys=daemon level=info msg="Validating configured node address ranges" subsys=daemon level=info msg="Start hook executed" duration="42.671µs" function="l2respondermap.newMap.func1 (l2_responder_map4.go:44)" subsys=hive level=info msg="Start hook executed" duration="11.42µs" function="*job.group.Start" subsys=hive level=info msg="Starting connection tracking garbage collector" subsys=daemon level=info msg="Initial scan of connection tracking completed" subsys=ct-gc level=info msg="Regenerating restored endpoints" numRestored=0 subsys=daemon level=info msg="Creating host endpoint" subsys=daemon level=info msg="Finished regenerating restored endpoints" regenerated=0 subsys=daemon total=0 level=info msg="Deleted orphan backends" orphanBackends=0 subsys=service level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4094 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4094 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4094 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Launching Cilium health daemon" subsys=daemon level=info msg="Launching Cilium health endpoint" subsys=daemon level=info msg="Started healthz status API server" address="127.0.0.1:9879" subsys=daemon level=info msg="Processing queued endpoint deletion requests from /var/run/cilium/deleteQueue" subsys=daemon level=info msg="processing 0 queued deletion requests" subsys=daemon level=info msg="Initializing Cilium API" subsys=daemon level=info msg="Daemon initialization completed" bootstrapTime=3.523968258s subsys=daemon level=info msg="Hubble server is disabled" subsys=hubble level=info msg="Serving cilium API at unix:///var/run/cilium/cilium.sock" subsys=daemon level=info msg="Compiled new BPF template" BPFCompilationTime=297.87412ms file-path=/var/run/cilium/state/templates/6598630224755584daa51a043fab3a39b275ea30f64f36ab214d1979c426e6f0/bpf_host.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=4094 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.101 708bbcf0-9cec-4c10-9d8c-82b9c0eca007 default }" containerID=71199fb02ee2568b343929b222d344fd91d40a9e242828db5bb6d81f0cdaabed datapathConfiguration="&{false false false false false }" interface=lxc1f2dc1a0e2e3 k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-tx2fk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=71199fb02e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=10 ipv4=10.0.0.101 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-tx2fk subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.83 355a1566-761f-4595-9c66-66797b973601 default }" containerID=75f0ea0e77af952f278c597a5be7d39499cfae6906b247fe61e38318d4ba8af5 datapathConfiguration="&{false false false false false }" interface=lxcc79e6e593423 k8sPodName=kube-system/coredns-7c96b6546b-sd8m8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=75f0ea0e77 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1923 ipv4=10.0.0.83 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-sd8m8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=71199fb02e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=10 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=71153955-8fcd-4f49-80bb-3354dcdefda5,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=71153955-8fcd-4f49-80bb-3354dcdefda5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.101 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-tx2fk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="Resolving identity labels (blocking)" containerID=75f0ea0e77 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1923 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.83 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-sd8m8 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=75f0ea0e77 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1923 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.83 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-sd8m8 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=certgen;k8s:batch.kubernetes.io/controller-uid=71153955-8fcd-4f49-80bb-3354dcdefda5;k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen;k8s:controller-uid=71153955-8fcd-4f49-80bb-3354dcdefda5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;k8s:job-name=envoy-gateway-gateway-helm-certgen;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=71199fb02e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=10 identity=50542 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=71153955-8fcd-4f49-80bb-3354dcdefda5,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=71153955-8fcd-4f49-80bb-3354dcdefda5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.101 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-tx2fk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=71199fb02e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=10 identity=50542 ipv4=10.0.0.101 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-tx2fk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:kube-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=coredns;k8s:io.kubernetes.pod.namespace=kube-system;k8s:k8s-app=kube-dns;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=75f0ea0e77 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1923 identity=16173 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.83 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-sd8m8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=75f0ea0e77 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1923 identity=16173 ipv4=10.0.0.83 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-sd8m8 subsys=endpoint level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3368 ipv4=10.0.0.56 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3368 identityLabels="reserved:health" ipv4=10.0.0.56 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3368 identity=4 identityLabels="reserved:health" ipv4=10.0.0.56 ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Compiled new BPF template" BPFCompilationTime=1.070607423s file-path=/var/run/cilium/state/templates/d2169422d9c12457bcfffcc20915fb1f7e2cef2ca482a3f0e5aef05f9ab25606/bpf_lxc.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID=71199fb02e datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=10 identity=50542 ipv4=10.0.0.101 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-tx2fk subsys=endpoint level=info msg="Successful endpoint creation" containerID=71199fb02e datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=10 identity=50542 ipv4=10.0.0.101 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-tx2fk subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3368 identity=4 ipv4=10.0.0.56 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=75f0ea0e77 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1923 identity=16173 ipv4=10.0.0.83 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-sd8m8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=75f0ea0e77 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1923 identity=16173 ipv4=10.0.0.83 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-sd8m8 subsys=daemon level=info msg="Serving cilium health API at unix:///var/run/cilium/health.sock" subsys=health-server level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=71199fb02e endpointID=10 k8sNamespace=envoy-gateway-system k8sPodName=envoy-gateway-gateway-helm-certgen-tx2fk subsys=daemon level=info msg="Releasing key" key="[k8s:app=certgen k8s:batch.kubernetes.io/controller-uid=71153955-8fcd-4f49-80bb-3354dcdefda5 k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen k8s:controller-uid=71153955-8fcd-4f49-80bb-3354dcdefda5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen k8s:io.kubernetes.pod.namespace=envoy-gateway-system k8s:job-name=envoy-gateway-gateway-helm-certgen]" subsys=allocator level=info msg="Removed endpoint" containerID=71199fb02e datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=10 identity=50542 ipv4=10.0.0.101 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-tx2fk subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.54 0e9ece86-1b44-419f-8c42-a71acc29d450 default }" containerID=2b25918bc4a795a70b225d6ffebd19c73b8e0292c02c29727558d217c1e52d59 datapathConfiguration="&{false false false false false }" interface=lxc334a2c04ab80 k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-cjp84 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2b25918bc4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=548 ipv4=10.0.0.54 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-cjp84 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2b25918bc4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=548 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.54 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-cjp84 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=2b25918bc4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=548 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.54 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-cjp84 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=envoy-gateway;k8s:app.kubernetes.io/name=gateway-helm;k8s:control-plane=envoy-gateway;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2b25918bc4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=548 identity=56443 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.54 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-cjp84 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2b25918bc4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=548 identity=56443 ipv4=10.0.0.54 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-cjp84 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2b25918bc4 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=548 identity=56443 ipv4=10.0.0.54 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-cjp84 subsys=endpoint level=info msg="Successful endpoint creation" containerID=2b25918bc4 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=548 identity=56443 ipv4=10.0.0.54 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-cjp84 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=4094 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_04094 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_04094 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_04094 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_04094:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=4094 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.47 1a76a992-9a3e-4137-af70-56cdb10c3f81 default }" containerID=4bbc4edc791f13ee7a7b964d40cd0005bcf6a87f33078391a52b5cd5e643c4df datapathConfiguration="&{false false false false false }" interface=lxc45b84495ac6c k8sPodName=kube-system/coredns-67659f764b-dx47z labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4bbc4edc79 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=74 ipv4=10.0.0.47 ipv6= k8sPodName=kube-system/coredns-67659f764b-dx47z subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4bbc4edc79 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=74 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.47 ipv6= k8sPodName=kube-system/coredns-67659f764b-dx47z subsys=endpoint level=info msg="Identity of endpoint changed" containerID=4bbc4edc79 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=74 identity=16173 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.47 ipv6= k8sPodName=kube-system/coredns-67659f764b-dx47z oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4bbc4edc79 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=74 identity=16173 ipv4=10.0.0.47 ipv6= k8sPodName=kube-system/coredns-67659f764b-dx47z subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.228 34a9b308-f0c8-46e6-b760-00abbcf7339f default }" containerID=f0e4dc9757444927542f33066c7ff7e165c6b432e3a39363b1a4643f2fb092af datapathConfiguration="&{false false false false false }" interface=lxcb13d880274bf k8sPodName=kube-system/coredns-67659f764b-8rgbd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f0e4dc9757 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2342 ipv4=10.0.0.228 ipv6= k8sPodName=kube-system/coredns-67659f764b-8rgbd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f0e4dc9757 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2342 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.228 ipv6= k8sPodName=kube-system/coredns-67659f764b-8rgbd subsys=endpoint level=info msg="Identity of endpoint changed" containerID=f0e4dc9757 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2342 identity=16173 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.228 ipv6= k8sPodName=kube-system/coredns-67659f764b-8rgbd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f0e4dc9757 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2342 identity=16173 ipv4=10.0.0.228 ipv6= k8sPodName=kube-system/coredns-67659f764b-8rgbd subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4bbc4edc79 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=74 identity=16173 ipv4=10.0.0.47 ipv6= k8sPodName=kube-system/coredns-67659f764b-dx47z subsys=endpoint level=info msg="Successful endpoint creation" containerID=4bbc4edc79 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=74 identity=16173 ipv4=10.0.0.47 ipv6= k8sPodName=kube-system/coredns-67659f764b-dx47z subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=f0e4dc9757 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2342 identity=16173 ipv4=10.0.0.228 ipv6= k8sPodName=kube-system/coredns-67659f764b-8rgbd subsys=endpoint level=info msg="Successful endpoint creation" containerID=f0e4dc9757 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2342 identity=16173 ipv4=10.0.0.228 ipv6= k8sPodName=kube-system/coredns-67659f764b-8rgbd subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.177 23b773a3-fb86-42fb-adfe-3af8b13f0c1d default }" containerID=6954a7c8caa51c0a7dc7fbf45b060817aef2cc87a05655117c584b11707e0d7e datapathConfiguration="&{false false false false false }" interface=lxc5392b0a70a09 k8sPodName=local-path-storage/local-path-provisioner-679c578f5-7mlhr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6954a7c8ca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=785 ipv4=10.0.0.177 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-7mlhr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6954a7c8ca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=785 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.177 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-7mlhr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=6954a7c8ca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=785 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.177 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-7mlhr line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=local-path-provisioner;k8s:app.kubernetes.io/name=local-path-provisioner;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6954a7c8ca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=785 identity=17995 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.177 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-7mlhr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6954a7c8ca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=785 identity=17995 ipv4=10.0.0.177 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-7mlhr subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6954a7c8ca datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=785 identity=17995 ipv4=10.0.0.177 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-7mlhr subsys=endpoint level=info msg="Successful endpoint creation" containerID=6954a7c8ca datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=785 identity=17995 ipv4=10.0.0.177 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-7mlhr subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=75f0ea0e77 endpointID=1923 k8sNamespace=kube-system k8sPodName=coredns-7c96b6546b-sd8m8 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=coredns k8s:io.kubernetes.pod.namespace=kube-system k8s:k8s-app=kube-dns]" subsys=allocator level=info msg="Removed endpoint" containerID=75f0ea0e77 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1923 identity=16173 ipv4=10.0.0.83 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-sd8m8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.209 9a4a9808-6a1c-44de-8a3d-c38e4bc9434a default }" containerID=09959670c6298bf47fbf0fac0c63a09129e86f4405163e155dfb9552b18c4410 datapathConfiguration="&{false false false false false }" interface=lxc9597470c3fdc k8sPodName=cert-manager/cert-manager-webhook-548949fc64-x29pv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=09959670c6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2540 ipv4=10.0.0.209 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-x29pv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=09959670c6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2540 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.209 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-x29pv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.24 0ac03439-9457-4128-85b6-3360ac40a7c1 default }" containerID=624faf4a7e31e086ebff8c581d4fabd96994dca445750b69ee2043ab50eb6df3 datapathConfiguration="&{false false false false false }" interface=lxc3a4a417e3ac7 k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-7r5xj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=624faf4a7e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2498 ipv4=10.0.0.24 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-7r5xj subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.151 a474acc5-2bbb-4ddf-baa4-f4fb0f42767d default }" containerID=494d1bd2f2a69f8cf33862f38b43b6bf6e2d19b9d56049d4552ed0cd91214368 datapathConfiguration="&{false false false false false }" interface=lxca7a73f697ff3 k8sPodName=cert-manager/cert-manager-75c4c745bc-6cj2h labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=494d1bd2f2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1172 ipv4=10.0.0.151 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-6cj2h subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=624faf4a7e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2498 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.24 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-7r5xj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=494d1bd2f2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1172 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.151 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-6cj2h subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=webhook;k8s:app.kubernetes.io/component=webhook;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=webhook;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=09959670c6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2540 identity=38958 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.209 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-x29pv oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=09959670c6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2540 identity=38958 ipv4=10.0.0.209 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-x29pv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Invalid state transition skipped" containerID=624faf4a7e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2498 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.24 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-7r5xj line=611 subsys=endpoint level=info msg="Invalid state transition skipped" containerID=494d1bd2f2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1172 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.151 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-6cj2h line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=cainjector;k8s:app.kubernetes.io/component=cainjector;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cainjector;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=624faf4a7e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2498 identity=24876 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.24 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-7r5xj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=624faf4a7e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2498 identity=24876 ipv4=10.0.0.24 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-7r5xj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=cert-manager;k8s:app.kubernetes.io/component=controller;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cert-manager;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=494d1bd2f2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1172 identity=805 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.151 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-6cj2h oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=494d1bd2f2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1172 identity=805 ipv4=10.0.0.151 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-6cj2h subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=09959670c6 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2540 identity=38958 ipv4=10.0.0.209 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-x29pv subsys=endpoint level=info msg="Successful endpoint creation" containerID=09959670c6 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2540 identity=38958 ipv4=10.0.0.209 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-x29pv subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=624faf4a7e datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2498 identity=24876 ipv4=10.0.0.24 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-7r5xj subsys=endpoint level=info msg="Successful endpoint creation" containerID=624faf4a7e datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2498 identity=24876 ipv4=10.0.0.24 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-7r5xj subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=494d1bd2f2 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1172 identity=805 ipv4=10.0.0.151 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-6cj2h subsys=endpoint level=info msg="Successful endpoint creation" containerID=494d1bd2f2 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1172 identity=805 ipv4=10.0.0.151 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-6cj2h subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.138 225d2d1d-0e9d-4331-931c-93451aa173aa default }" containerID=1b30ecea74b788cf8b2aaf517f250fa64ebdcc45d3547688cbda73486b5c0235 datapathConfiguration="&{false false false false false }" interface=lxc9b5fc90c9eba k8sPodName=cert-manager/cert-manager-startupapicheck-4dxc6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1b30ecea74 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2903 ipv4=10.0.0.138 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-4dxc6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1b30ecea74 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2903 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=4d7525fb-7088-4d79-ab46-24294411e0f8,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=4d7525fb-7088-4d79-ab46-24294411e0f8,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.138 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-4dxc6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=startupapicheck;k8s:app.kubernetes.io/component=startupapicheck;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=startupapicheck;k8s:app.kubernetes.io/version=v1.11.5;k8s:batch.kubernetes.io/controller-uid=4d7525fb-7088-4d79-ab46-24294411e0f8;k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck;k8s:controller-uid=4d7525fb-7088-4d79-ab46-24294411e0f8;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck;k8s:io.kubernetes.pod.namespace=cert-manager;k8s:job-name=cert-manager-startupapicheck;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1b30ecea74 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2903 identity=4592 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=4d7525fb-7088-4d79-ab46-24294411e0f8,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=4d7525fb-7088-4d79-ab46-24294411e0f8,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.138 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-4dxc6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1b30ecea74 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2903 identity=4592 ipv4=10.0.0.138 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-4dxc6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1b30ecea74 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2903 identity=4592 ipv4=10.0.0.138 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-4dxc6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=1b30ecea74 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2903 identity=4592 ipv4=10.0.0.138 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-4dxc6 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=1b30ecea74 endpointID=2903 k8sNamespace=cert-manager k8sPodName=cert-manager-startupapicheck-4dxc6 subsys=daemon level=info msg="Releasing key" key="[k8s:app=startupapicheck k8s:app.kubernetes.io/component=startupapicheck k8s:app.kubernetes.io/instance=cert-manager k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=startupapicheck k8s:app.kubernetes.io/version=v1.11.5 k8s:batch.kubernetes.io/controller-uid=4d7525fb-7088-4d79-ab46-24294411e0f8 k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck k8s:controller-uid=4d7525fb-7088-4d79-ab46-24294411e0f8 k8s:helm.sh/chart=cert-manager-v1.11.5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager k8s:io.cilium.k8s.namespace.labels.name=cert-manager k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck k8s:io.kubernetes.pod.namespace=cert-manager k8s:job-name=cert-manager-startupapicheck]" subsys=allocator level=info msg="Removed endpoint" containerID=1b30ecea74 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2903 identity=4592 ipv4=10.0.0.138 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-4dxc6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.124 e304f3e5-ba59-491c-a647-9209430c2280 default }" containerID=3e6d3369e87eb3ea2893f1084fec58d4bc12c57a1a9715b1c65738ea5491ad89 datapathConfiguration="&{false false false false false }" interface=lxcd517a025dd8e k8sPodName=ingress-nginx/ingress-nginx-admission-create-qchrw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3e6d3369e8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=742 ipv4=10.0.0.124 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-qchrw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3e6d3369e8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=742 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=b84d06f2-554f-485e-bb61-9ae7f5a596a9,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=b84d06f2-554f-485e-bb61-9ae7f5a596a9,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.124 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-qchrw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=b84d06f2-554f-485e-bb61-9ae7f5a596a9;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create;k8s:controller-uid=b84d06f2-554f-485e-bb61-9ae7f5a596a9;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-create;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3e6d3369e8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=742 identity=31847 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=b84d06f2-554f-485e-bb61-9ae7f5a596a9,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=b84d06f2-554f-485e-bb61-9ae7f5a596a9,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.124 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-qchrw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3e6d3369e8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=742 identity=31847 ipv4=10.0.0.124 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-qchrw subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=3e6d3369e8 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=742 identity=31847 ipv4=10.0.0.124 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-qchrw subsys=endpoint level=info msg="Successful endpoint creation" containerID=3e6d3369e8 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=742 identity=31847 ipv4=10.0.0.124 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-qchrw subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=3e6d3369e8 endpointID=742 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-create-qchrw subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=b84d06f2-554f-485e-bb61-9ae7f5a596a9 k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create k8s:controller-uid=b84d06f2-554f-485e-bb61-9ae7f5a596a9 k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-create]" subsys=allocator level=info msg="Removed endpoint" containerID=3e6d3369e8 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=742 identity=31847 ipv4=10.0.0.124 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-qchrw subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.180 17a78142-f7b3-4494-879b-fe5aedbaeaa6 default }" containerID=3e5efb43c99f277eefcf5c59b16b5016d263fdb8024f62af262f7cb7bb42f2fe datapathConfiguration="&{false false false false false }" interface=lxc536c3b752d75 k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-zc4k7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3e5efb43c9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1782 ipv4=10.0.0.180 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-zc4k7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3e5efb43c9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1782 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.180 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-zc4k7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=default-backend;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend;k8s:io.kubernetes.pod.namespace=ingress-nginx;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=3e5efb43c9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1782 identity=40924 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.180 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-zc4k7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3e5efb43c9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1782 identity=40924 ipv4=10.0.0.180 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-zc4k7 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3e5efb43c9 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1782 identity=40924 ipv4=10.0.0.180 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-zc4k7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=3e5efb43c9 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1782 identity=40924 ipv4=10.0.0.180 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-zc4k7 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.76 b0462efc-e71c-4346-9959-f483817c4bf7 default }" containerID=5de62781c9365f369941a4c3ae20eb64998d6d36615eed6ecb86c6073ae36670 datapathConfiguration="&{false false false false false }" interface=lxc6d2346567b44 k8sPodName=ingress-nginx/ingress-nginx-admission-patch-jpkg4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5de62781c9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2168 ipv4=10.0.0.76 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-jpkg4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5de62781c9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2168 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=bd39fc3c-d5bb-47e0-8c02-ba0292020344,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=bd39fc3c-d5bb-47e0-8c02-ba0292020344,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.76 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-jpkg4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=bd39fc3c-d5bb-47e0-8c02-ba0292020344;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch;k8s:controller-uid=bd39fc3c-d5bb-47e0-8c02-ba0292020344;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-patch;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5de62781c9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2168 identity=45284 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=bd39fc3c-d5bb-47e0-8c02-ba0292020344,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=bd39fc3c-d5bb-47e0-8c02-ba0292020344,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.76 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-jpkg4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5de62781c9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2168 identity=45284 ipv4=10.0.0.76 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-jpkg4 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5de62781c9 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2168 identity=45284 ipv4=10.0.0.76 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-jpkg4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=5de62781c9 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2168 identity=45284 ipv4=10.0.0.76 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-jpkg4 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=5de62781c9 endpointID=2168 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-patch-jpkg4 subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=bd39fc3c-d5bb-47e0-8c02-ba0292020344 k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch k8s:controller-uid=bd39fc3c-d5bb-47e0-8c02-ba0292020344 k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-patch]" subsys=allocator level=info msg="Removed endpoint" containerID=5de62781c9 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2168 identity=45284 ipv4=10.0.0.76 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-jpkg4 subsys=endpoint level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"rabbitmq-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-cluster-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=f7065b03-a67b-4bba-8d0c-97ce53051a88] Description:}]" policyAddRequest=6b6b25c0-9093-484a-ba72-d7c832d8c42f subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-cluster-operator subsys=k8s-watcher level=info msg="Policy imported via API, recalculating..." policyAddRequest=6b6b25c0-9093-484a-ba72-d7c832d8c42f policyRevision=2 subsys=daemon level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"messaging-topology-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9443 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-messaging-topology-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=cb9e2cc4-8117-4793-a237-438e7a471844] Description:}]" policyAddRequest=67a0779b-3e1b-4a5a-9174-b4ed3327e992 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=67a0779b-3e1b-4a5a-9174-b4ed3327e992 policyRevision=3 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-messaging-topology-operator subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.218 48038d04-d7b6-4572-b60a-a1b2de89b95b default }" containerID=fcb9f6621c5528f945585e95084ac8fbfdac899d7541c352b04042d510194ee5 datapathConfiguration="&{false false false false false }" interface=lxc247f8e9d719e k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-q8vt5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fcb9f6621c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1433 ipv4=10.0.0.218 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-q8vt5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fcb9f6621c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1433 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.9.0,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.218 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-q8vt5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=2.9.0;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fcb9f6621c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1433 identity=20631 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.9.0,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.218 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-q8vt5 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=fcb9f6621c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1433 identity=20631 ipv4=10.0.0.218 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-q8vt5 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=fcb9f6621c datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1433 identity=20631 ipv4=10.0.0.218 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-q8vt5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=fcb9f6621c datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1433 identity=20631 ipv4=10.0.0.218 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-q8vt5 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.110 58ba4358-3202-4c59-9dc9-06bbb034df47 default }" containerID=cb44f15df07e61941607ce73a2f6a951909ae5cf44a2a3ffe4fa850326b2c379 datapathConfiguration="&{false false false false false }" interface=lxc9ce4ca1b399c k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-8qmnw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=cb44f15df0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2340 ipv4=10.0.0.110 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-8qmnw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=cb44f15df0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2340 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.14.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.110 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-8qmnw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=messaging-topology-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=1.14.1;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=cb44f15df0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2340 identity=59016 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.14.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.110 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-8qmnw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=cb44f15df0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2340 identity=59016 ipv4=10.0.0.110 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-8qmnw subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=cb44f15df0 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=2340 identity=59016 ipv4=10.0.0.110 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-8qmnw subsys=endpoint level=info msg="Successful endpoint creation" containerID=cb44f15df0 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=2340 identity=59016 ipv4=10.0.0.110 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-8qmnw subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.133 9b1c032f-7624-4f5a-b328-226e53dadb77 default }" containerID=33d68bbbf7d60221bfafd7668f81819721d28ff8da107be4d868460333925aeb datapathConfiguration="&{false false false false false }" interface=lxc688cacafa18a k8sPodName=openstack/pxc-operator-7cff949c8b-n7kxq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=33d68bbbf7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=167 ipv4=10.0.0.133 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-n7kxq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=33d68bbbf7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=167 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.133 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-n7kxq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=33d68bbbf7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=167 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.133 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-n7kxq line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=operator;k8s:app.kubernetes.io/instance=pxc-operator;k8s:app.kubernetes.io/name=pxc-operator;k8s:app.kubernetes.io/part-of=pxc-operator;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=33d68bbbf7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=167 identity=9488 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.133 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-n7kxq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=33d68bbbf7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=167 identity=9488 ipv4=10.0.0.133 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-n7kxq subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=33d68bbbf7 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=167 identity=9488 ipv4=10.0.0.133 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-n7kxq subsys=endpoint level=info msg="Successful endpoint creation" containerID=33d68bbbf7 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=167 identity=9488 ipv4=10.0.0.133 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-n7kxq subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.219 6ccf573c-decf-4dde-8471-4ea4a5b1fae1 default }" containerID=118e5dde2072f21aea768da3ca1ec0f7ddb05e19dbb620e82e1097fcffe4588f datapathConfiguration="&{false false false false false }" interface=lxc4ac3ac58b245 k8sPodName=openstack/percona-xtradb-haproxy-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=118e5dde20 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=765 ipv4=10.0.0.219 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=118e5dde20 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=765 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.219 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=haproxy;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=118e5dde20 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=765 identity=4566 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.219 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=118e5dde20 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=765 identity=4566 ipv4=10.0.0.219 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.196 cfc64e80-25c9-4e7a-a4e2-e323c6cbf3d9 default }" containerID=264c4e68c035192e047296e4e651aae57cd57fbd9e84a6207561b62d32fdbaac datapathConfiguration="&{false false false false false }" interface=lxcc81e80dc10b0 k8sPodName=local-path-storage/helper-pod-create-pvc-5f0bb67c-39de-4e04-a372-ac54b6ecf649 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=264c4e68c0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=87 ipv4=10.0.0.196 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5f0bb67c-39de-4e04-a372-ac54b6ecf649 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=264c4e68c0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=87 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.196 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5f0bb67c-39de-4e04-a372-ac54b6ecf649 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=264c4e68c0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=87 identity=6703 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.196 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5f0bb67c-39de-4e04-a372-ac54b6ecf649 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=264c4e68c0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=87 identity=6703 ipv4=10.0.0.196 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5f0bb67c-39de-4e04-a372-ac54b6ecf649 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=118e5dde20 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=765 identity=4566 ipv4=10.0.0.219 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=118e5dde20 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=765 identity=4566 ipv4=10.0.0.219 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=264c4e68c0 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=87 identity=6703 ipv4=10.0.0.196 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5f0bb67c-39de-4e04-a372-ac54b6ecf649 subsys=endpoint level=info msg="Successful endpoint creation" containerID=264c4e68c0 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=87 identity=6703 ipv4=10.0.0.196 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5f0bb67c-39de-4e04-a372-ac54b6ecf649 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=264c4e68c0 endpointID=87 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-5f0bb67c-39de-4e04-a372-ac54b6ecf649 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=264c4e68c0 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=87 identity=6703 ipv4=10.0.0.196 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5f0bb67c-39de-4e04-a372-ac54b6ecf649 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.11 e9d6c8ce-d751-423c-9868-2799b556c81f default }" containerID=4c8d46d51cf0655a2308de787abe3975d1acef488957523b8442c9a5fd5b2722 datapathConfiguration="&{false false false false false }" interface=lxca5982cef6395 k8sPodName=openstack/percona-xtradb-pxc-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4c8d46d51c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3914 ipv4=10.0.0.11 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4c8d46d51c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3914 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.11 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=pxc;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4c8d46d51c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3914 identity=8391 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.11 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4c8d46d51c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3914 identity=8391 ipv4=10.0.0.11 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=4c8d46d51c datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=3914 identity=8391 ipv4=10.0.0.11 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=4c8d46d51c datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=3914 identity=8391 ipv4=10.0.0.11 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/instance\":\"valkey\",\"k8s:app.kubernetes.io/name\":\"valkey\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:6379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:26379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:} {IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9121 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=valkey k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=8f9b40dc-49bb-438b-b697-76961af40a07] Description:}]" policyAddRequest=5d31f21c-4627-4ab5-8d0d-11e29c5e1440 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=5d31f21c-4627-4ab5-8d0d-11e29c5e1440 policyRevision=4 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=valkey subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.40 01255097-ea96-42c5-92cc-4836be6fd006 default }" containerID=127fddb68881f2f3709b1ee36f68daf6d52585914ff3fe8b8f6c9d67d3e42f19 datapathConfiguration="&{false false false false false }" interface=lxc82225007b24d k8sPodName=local-path-storage/helper-pod-create-pvc-35f6cda2-751e-4eda-ba36-ee889f6f95c1 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=127fddb688 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2466 ipv4=10.0.0.40 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-35f6cda2-751e-4eda-ba36-ee889f6f95c1 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=127fddb688 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2466 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.40 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-35f6cda2-751e-4eda-ba36-ee889f6f95c1 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=127fddb688 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2466 identity=6703 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.40 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-35f6cda2-751e-4eda-ba36-ee889f6f95c1 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=127fddb688 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2466 identity=6703 ipv4=10.0.0.40 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-35f6cda2-751e-4eda-ba36-ee889f6f95c1 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=127fddb688 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2466 identity=6703 ipv4=10.0.0.40 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-35f6cda2-751e-4eda-ba36-ee889f6f95c1 subsys=endpoint level=info msg="Successful endpoint creation" containerID=127fddb688 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2466 identity=6703 ipv4=10.0.0.40 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-35f6cda2-751e-4eda-ba36-ee889f6f95c1 subsys=daemon level=info msg="Delete endpoint request" containerID=127fddb688 endpointID=2466 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-35f6cda2-751e-4eda-ba36-ee889f6f95c1 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=127fddb688 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2466 identity=6703 ipv4=10.0.0.40 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-35f6cda2-751e-4eda-ba36-ee889f6f95c1 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.136 04d13b07-694e-41b9-a1b5-b4744afa20f6 default }" containerID=51999792c29c3be6c1b4b014335754474faf2e997314defbf16a0386b2794768 datapathConfiguration="&{false false false false false }" interface=lxcc946d06aed83 k8sPodName=openstack/valkey-node-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=51999792c2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2391 ipv4=10.0.0.136 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=51999792c2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2391 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.136 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=node;k8s:app.kubernetes.io/instance=valkey;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=valkey;k8s:app.kubernetes.io/version=8.0.2;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=valkey-2.4.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=valkey;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=valkey-node-0;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=51999792c2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2391 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.136 ipv6= k8sPodName=openstack/valkey-node-0 line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=51999792c2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2391 identity=3990 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.136 ipv6= k8sPodName=openstack/valkey-node-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=51999792c2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2391 identity=3990 ipv4=10.0.0.136 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=51999792c2 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2391 identity=3990 ipv4=10.0.0.136 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=51999792c2 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2391 identity=3990 ipv4=10.0.0.136 ipv6= k8sPodName=openstack/valkey-node-0 subsys=daemon level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"keycloak\",\"k8s:app.kubernetes.io/instance\":\"keycloak\",\"k8s:app.kubernetes.io/name\":\"keycloak\",\"k8s:io.kubernetes.pod.namespace\":\"auth-system\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:7800 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:8080 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=keycloak k8s:io.cilium.k8s.policy.namespace=auth-system k8s:io.cilium.k8s.policy.uid=0f895dbe-2023-4c0d-a558-be5e38c6080d] Description:}]" policyAddRequest=fbe132e2-99e5-487e-8595-8bb8b46e0009 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=fbe132e2-99e5-487e-8595-8bb8b46e0009 policyRevision=5 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=keycloak subsys=k8s-watcher level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.5 ca7483c2-f693-44c5-a922-18019f6ff995 default }" containerID=1ee06789e3856f606367618c04e0e0465767bd7b4e263afaf44f073e19eda565 datapathConfiguration="&{false false false false false }" interface=lxc7af32c52f0de k8sPodName=auth-system/keycloak-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1ee06789e3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2116 ipv4=10.0.0.5 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1ee06789e3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2116 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.5 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:auth-system k8s:io.cilium.k8s.namespace.labels.name:auth-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=keycloak;k8s:app.kubernetes.io/instance=keycloak;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=keycloak;k8s:app.kubernetes.io/version=24.0.5;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=keycloak-21.4.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system;k8s:io.cilium.k8s.namespace.labels.name=auth-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keycloak;k8s:io.kubernetes.pod.namespace=auth-system;k8s:statefulset.kubernetes.io/pod-name=keycloak-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1ee06789e3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2116 identity=428 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.5 ipv6= k8sPodName=auth-system/keycloak-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1ee06789e3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2116 identity=428 ipv4=10.0.0.5 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1ee06789e3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2116 identity=428 ipv4=10.0.0.5 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=1ee06789e3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2116 identity=428 ipv4=10.0.0.5 ipv6= k8sPodName=auth-system/keycloak-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.00939102087194124 newInterval=7m30s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.126 efb6cff1-05e4-4cb0-9c21-168064cca2a3 default }" containerID=9a0fe46124091fe17e9dd5bbc82b6368124adef9d9a7e9d0e34b201d9e59024a datapathConfiguration="&{false false false false false }" interface=lxc112cd26e3192 k8sPodName=monitoring/node-feature-discovery-worker-9d722 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9a0fe46124 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1882 ipv4=10.0.0.126 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-9d722 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9a0fe46124 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1882 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.126 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-9d722 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=worker;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9a0fe46124 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1882 identity=7512 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.126 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-9d722 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9a0fe46124 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1882 identity=7512 ipv4=10.0.0.126 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-9d722 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=9a0fe46124 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1882 identity=7512 ipv4=10.0.0.126 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-9d722 subsys=endpoint level=info msg="Successful endpoint creation" containerID=9a0fe46124 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1882 identity=7512 ipv4=10.0.0.126 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-9d722 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.245 823db45a-98bb-498b-8418-7c42979d4201 default }" containerID=5c9e288ea44e1bc6229356a750708039d113fd4f51f46692912c3b67db3e437a datapathConfiguration="&{false false false false false }" interface=lxc4efd2ba24c72 k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-4bk2k labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5c9e288ea4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1168 ipv4=10.0.0.245 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-4bk2k subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.207 3c053da7-d351-4b89-a522-6672d4ae3019 default }" containerID=dd57742d8c526358726d1e8c41865258db576197ffb66a4a9a26e36abea7f2f1 datapathConfiguration="&{false false false false false }" interface=lxceafad3eb0ed1 k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-564zr labels="[]" subsys=daemon sync-build=true level=info msg="Resolving identity labels (blocking)" containerID=5c9e288ea4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1168 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.245 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-4bk2k subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="New endpoint" containerID=dd57742d8c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1922 ipv4=10.0.0.207 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-564zr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=dd57742d8c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1922 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.207 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-564zr subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=gc;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5c9e288ea4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1168 identity=20431 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.245 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-4bk2k oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5c9e288ea4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1168 identity=20431 ipv4=10.0.0.245 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-4bk2k subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=master;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=dd57742d8c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1922 identity=11239 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.207 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-564zr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=dd57742d8c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1922 identity=11239 ipv4=10.0.0.207 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-564zr subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5c9e288ea4 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1168 identity=20431 ipv4=10.0.0.245 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-4bk2k subsys=endpoint level=info msg="Successful endpoint creation" containerID=5c9e288ea4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1168 identity=20431 ipv4=10.0.0.245 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-4bk2k subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=dd57742d8c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1922 identity=11239 ipv4=10.0.0.207 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-564zr subsys=endpoint level=info msg="Successful endpoint creation" containerID=dd57742d8c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1922 identity=11239 ipv4=10.0.0.207 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-564zr subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.244 fc5e4250-48c0-4ff2-a7a1-a06abb729443 default }" containerID=984394bab213872208ed155380a9a9c9ef1684f0008b70d862c320a55be764bd datapathConfiguration="&{false false false false false }" interface=lxc40d22a710a63 k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-nllcb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=984394bab2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=253 ipv4=10.0.0.244 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-nllcb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=984394bab2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=253 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.244 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-nllcb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:secretgen-controller]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=secretgen-controller;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa;k8s:io.kubernetes.pod.namespace=secretgen-controller;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=984394bab2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=253 identity=46965 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.244 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-nllcb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=984394bab2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=253 identity=46965 ipv4=10.0.0.244 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-nllcb subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=984394bab2 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=253 identity=46965 ipv4=10.0.0.244 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-nllcb subsys=endpoint level=info msg="Successful endpoint creation" containerID=984394bab2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=253 identity=46965 ipv4=10.0.0.244 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-nllcb subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=4094 identity=1 identityLabels="k8s:feature.node.kubernetes.io/cpu-cpuid.ADX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AESNI=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX2=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CLZERO=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CMPXCHG8=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FMA3=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSROPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.HYPERVISOR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IA32_ARCH_CAP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBPB=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBRS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.LAHF=true,k8s:feature.node.kubernetes.io/cpu-cpuid.MOVBE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.NRIPS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.OSXSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SHA=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SPEC_CTRL_SSBD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SSE4A=true,k8s:feature.node.kubernetes.io/cpu-cpuid.STIBP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVM=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVMNP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSCALL=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSEE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.TOPEXT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.WBNOINVD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.X87=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XGETBV1=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEC=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEOPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVES=true,k8s:feature.node.kubernetes.io/cpu-hardware_multithreading=false,k8s:feature.node.kubernetes.io/cpu-model.family=23,k8s:feature.node.kubernetes.io/cpu-model.id=49,k8s:feature.node.kubernetes.io/cpu-model.vendor_id=AMD,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ=true,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ_IDLE=true,k8s:feature.node.kubernetes.io/kernel-version.full=5.15.0-173-generic,k8s:feature.node.kubernetes.io/kernel-version.major=5,k8s:feature.node.kubernetes.io/kernel-version.minor=15,k8s:feature.node.kubernetes.io/kernel-version.revision=0,k8s:feature.node.kubernetes.io/pci-0300_1af4.present=true,k8s:feature.node.kubernetes.io/system-os_release.ID=ubuntu,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.major=22,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.minor=04,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID=22.04,k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_04094 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_04094 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_04094 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_04094:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=4094 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.220 63fd185d-5617-499c-b055-ccf44f24cc5a default }" containerID=e68605908263111c7ef9c92a90855612397011ccc8a9d939aeedbb696c576be8 datapathConfiguration="&{false false false false false }" interface=lxc670cb3c1f534 k8sPodName=monitoring/kube-prometheus-stack-admission-create-4868m labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e686059082 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1652 ipv4=10.0.0.220 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-4868m subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e686059082 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1652 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=8c179237-c11c-49df-8216-c1ee2aaa6035,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=8c179237-c11c-49df-8216-c1ee2aaa6035,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.220 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-4868m subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=e686059082 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1652 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.220 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-4868m line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-create;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=8c179237-c11c-49df-8216-c1ee2aaa6035;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=8c179237-c11c-49df-8216-c1ee2aaa6035;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-create;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e686059082 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1652 identity=38418 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=8c179237-c11c-49df-8216-c1ee2aaa6035,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=8c179237-c11c-49df-8216-c1ee2aaa6035,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.220 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-4868m oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e686059082 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1652 identity=38418 ipv4=10.0.0.220 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-4868m subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e686059082 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1652 identity=38418 ipv4=10.0.0.220 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-4868m subsys=endpoint level=info msg="Successful endpoint creation" containerID=e686059082 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1652 identity=38418 ipv4=10.0.0.220 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-4868m subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=e686059082 endpointID=1652 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-create-4868m subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-create k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=8c179237-c11c-49df-8216-c1ee2aaa6035 k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=8c179237-c11c-49df-8216-c1ee2aaa6035 k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-create k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=e686059082 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1652 identity=38418 ipv4=10.0.0.220 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-4868m subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.39 aef7d879-e63a-464a-899a-b1ad191c2307 default }" containerID=7c7c0d85839003af9f73da4d51430459d6246c1d141e3c8a4a984ebf9626aeac datapathConfiguration="&{false false false false false }" interface=lxc36650bce02fd k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-nzpwr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7c7c0d8583 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2504 ipv4=10.0.0.39 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-nzpwr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7c7c0d8583 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2504 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.39 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-nzpwr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.57 95fb469a-7c5f-432c-8277-387e4a264120 default }" containerID=22a11c72d3449e6ffcdec1039c276fcba540b7ad5ac7d12637da1bccaea22aba datapathConfiguration="&{false false false false false }" interface=lxc2b74a44bbe94 k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-h9bzs labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=22a11c72d3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2359 ipv4=10.0.0.57 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-h9bzs subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.254 13593b14-cdba-4529-b7e6-98d93dfacc39 default }" containerID=a63d285629e10f628c6cbaf9d6e514e3c71fe3a2e10da0c91a9eadac5e0ec1b7 datapathConfiguration="&{false false false false false }" interface=lxc9632aa5c3ed4 k8sPodName=monitoring/kube-prometheus-stack-grafana-84f9d94fd5-xplxj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a63d285629 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1764 ipv4=10.0.0.254 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-84f9d94fd5-xplxj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a63d285629 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1764 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.254 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-84f9d94fd5-xplxj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=22a11c72d3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2359 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.57 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-h9bzs subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=7c7c0d8583 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2504 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.39 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-nzpwr line=611 subsys=endpoint level=info msg="Invalid state transition skipped" containerID=22a11c72d3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2359 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.57 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-h9bzs line=611 subsys=endpoint level=info msg="Invalid state transition skipped" containerID=a63d285629 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1764 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.254 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-84f9d94fd5-xplxj line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=metrics;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-state-metrics;k8s:app.kubernetes.io/part-of=kube-state-metrics;k8s:app.kubernetes.io/version=2.12.0;k8s:helm.sh/chart=kube-state-metrics-5.20.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7c7c0d8583 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2504 identity=37699 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.39 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-nzpwr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7c7c0d8583 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2504 identity=37699 ipv4=10.0.0.39 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-nzpwr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/name=grafana;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a63d285629 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1764 identity=11236 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.254 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-84f9d94fd5-xplxj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a63d285629 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1764 identity=11236 ipv4=10.0.0.254 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-84f9d94fd5-xplxj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-operator;k8s:app.kubernetes.io/component=prometheus-operator;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:chart=kube-prometheus-stack-60.2.0;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=22a11c72d3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2359 identity=15653 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.57 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-h9bzs oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=22a11c72d3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2359 identity=15653 ipv4=10.0.0.57 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-h9bzs subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7c7c0d8583 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2504 identity=37699 ipv4=10.0.0.39 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-nzpwr subsys=endpoint level=info msg="Successful endpoint creation" containerID=7c7c0d8583 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2504 identity=37699 ipv4=10.0.0.39 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-nzpwr subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=a63d285629 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1764 identity=11236 ipv4=10.0.0.254 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-84f9d94fd5-xplxj subsys=endpoint level=info msg="Successful endpoint creation" containerID=a63d285629 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1764 identity=11236 ipv4=10.0.0.254 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-84f9d94fd5-xplxj subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=22a11c72d3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2359 identity=15653 ipv4=10.0.0.57 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-h9bzs subsys=endpoint level=info msg="Successful endpoint creation" containerID=22a11c72d3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2359 identity=15653 ipv4=10.0.0.57 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-h9bzs subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.195 bc4616bf-daf1-43cb-be97-9760e8a7b30c default }" containerID=af127f4066510ad6acce46711cbfec922a5efda8d3dece2104e26e055693d179 datapathConfiguration="&{false false false false false }" interface=lxc74d47e3b568f k8sPodName=monitoring/kube-prometheus-stack-admission-patch-wnbkx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=af127f4066 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2640 ipv4=10.0.0.195 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-wnbkx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=af127f4066 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2640 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=53cdeb40-147f-4d56-af57-3ef9d01f57c9,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=53cdeb40-147f-4d56-af57-3ef9d01f57c9,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.195 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-wnbkx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-patch;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=53cdeb40-147f-4d56-af57-3ef9d01f57c9;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=53cdeb40-147f-4d56-af57-3ef9d01f57c9;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-patch;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=af127f4066 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2640 identity=32975 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=53cdeb40-147f-4d56-af57-3ef9d01f57c9,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=53cdeb40-147f-4d56-af57-3ef9d01f57c9,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.195 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-wnbkx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=af127f4066 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2640 identity=32975 ipv4=10.0.0.195 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-wnbkx subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=af127f4066 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2640 identity=32975 ipv4=10.0.0.195 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-wnbkx subsys=endpoint level=info msg="Successful endpoint creation" containerID=af127f4066 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2640 identity=32975 ipv4=10.0.0.195 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-wnbkx subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=af127f4066 endpointID=2640 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-patch-wnbkx subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-patch k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=53cdeb40-147f-4d56-af57-3ef9d01f57c9 k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=53cdeb40-147f-4d56-af57-3ef9d01f57c9 k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-patch k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=af127f4066 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2640 identity=32975 ipv4=10.0.0.195 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-wnbkx subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.86 163563e1-be85-481e-ab20-12d585d65dc4 default }" containerID=d525eecc6774b915fa40c5a47b62624150ca709881fe23610d5efd2053ccfc22 datapathConfiguration="&{false false false false false }" interface=lxc20d836cbffbf k8sPodName=local-path-storage/helper-pod-create-pvc-d4fe44b9-d410-4285-ad49-0208633950a1 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d525eecc67 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=44 ipv4=10.0.0.86 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d4fe44b9-d410-4285-ad49-0208633950a1 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d525eecc67 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=44 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.86 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d4fe44b9-d410-4285-ad49-0208633950a1 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d525eecc67 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=44 identity=6703 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.86 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d4fe44b9-d410-4285-ad49-0208633950a1 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d525eecc67 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=44 identity=6703 ipv4=10.0.0.86 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d4fe44b9-d410-4285-ad49-0208633950a1 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.92 9aa8d991-a941-4da9-a971-3fb75d7dfde9 default }" containerID=37e24ec0b567a995a6700a123ede6aa16ac4d2feecb8f862b37cc5c8d3086838 datapathConfiguration="&{false false false false false }" interface=lxc42dc9c25681c k8sPodName=local-path-storage/helper-pod-create-pvc-bf0956b1-ce4c-4d4f-aa37-6425a6f3b41d labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=37e24ec0b5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=366 ipv4=10.0.0.92 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-bf0956b1-ce4c-4d4f-aa37-6425a6f3b41d subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=37e24ec0b5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=366 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.92 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-bf0956b1-ce4c-4d4f-aa37-6425a6f3b41d subsys=endpoint level=info msg="Identity of endpoint changed" containerID=37e24ec0b5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=366 identity=6703 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.92 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-bf0956b1-ce4c-4d4f-aa37-6425a6f3b41d oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=37e24ec0b5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=366 identity=6703 ipv4=10.0.0.92 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-bf0956b1-ce4c-4d4f-aa37-6425a6f3b41d subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d525eecc67 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=44 identity=6703 ipv4=10.0.0.86 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d4fe44b9-d410-4285-ad49-0208633950a1 subsys=endpoint level=info msg="Successful endpoint creation" containerID=d525eecc67 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=44 identity=6703 ipv4=10.0.0.86 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d4fe44b9-d410-4285-ad49-0208633950a1 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=37e24ec0b5 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=366 identity=6703 ipv4=10.0.0.92 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-bf0956b1-ce4c-4d4f-aa37-6425a6f3b41d subsys=endpoint level=info msg="Successful endpoint creation" containerID=37e24ec0b5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=366 identity=6703 ipv4=10.0.0.92 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-bf0956b1-ce4c-4d4f-aa37-6425a6f3b41d subsys=daemon level=info msg="Delete endpoint request" containerID=37e24ec0b5 endpointID=366 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-bf0956b1-ce4c-4d4f-aa37-6425a6f3b41d subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Delete endpoint request" containerID=d525eecc67 endpointID=44 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-d4fe44b9-d410-4285-ad49-0208633950a1 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=37e24ec0b5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=366 identity=6703 ipv4=10.0.0.92 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-bf0956b1-ce4c-4d4f-aa37-6425a6f3b41d subsys=endpoint level=info msg="Removed endpoint" containerID=d525eecc67 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=44 identity=6703 ipv4=10.0.0.86 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d4fe44b9-d410-4285-ad49-0208633950a1 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.119 c5ec5a77-32b2-4367-92bd-572ecaba513b default }" containerID=fb26c75d11cfafff543fbd20fdebdb5bc4cfa8e02aaca7b5165043038fb05221 datapathConfiguration="&{false false false false false }" interface=lxc4f64ff9c9184 k8sPodName=monitoring/loki-gateway-cf54cb88c-vpt5m labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fb26c75d11 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2864 ipv4=10.0.0.119 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-vpt5m subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fb26c75d11 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2864 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.119 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-vpt5m subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.128 1c6aea47-0daa-4c71-864e-8a2fd15f60b9 default }" containerID=ec6c45926722007a1d4036286b1dc856ba8ada973c01bb80ecb4b2215f084ae5 datapathConfiguration="&{false false false false false }" interface=lxc2ab8dfb98304 k8sPodName=monitoring/loki-chunks-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ec6c459267 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=13 ipv4=10.0.0.128 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ec6c459267 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=13 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.128 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=gateway;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Identity of endpoint changed" containerID=fb26c75d11 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2864 identity=9512 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.119 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-vpt5m oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fb26c75d11 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2864 identity=9512 ipv4=10.0.0.119 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-vpt5m subsys=endpoint level=info msg="Invalid state transition skipped" containerID=ec6c459267 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=13 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.128 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-chunks-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-chunks-cache;k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ec6c459267 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=13 identity=16127 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.128 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ec6c459267 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=13 identity=16127 ipv4=10.0.0.128 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.134 8998739b-80fb-4ab9-b5f4-1b0a4113480a default }" containerID=0d7adfe0ae5976b9c799270b4ad4a11e54a68919f3f7f7506ca567eb254b7dbc datapathConfiguration="&{false false false false false }" interface=lxce1f7b7b48b47 k8sPodName=monitoring/loki-results-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0d7adfe0ae datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1452 ipv4=10.0.0.134 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0d7adfe0ae datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1452 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.134 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-results-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-results-cache;k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0d7adfe0ae datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1452 identity=46393 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.134 ipv6= k8sPodName=monitoring/loki-results-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0d7adfe0ae datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1452 identity=46393 ipv4=10.0.0.134 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=fb26c75d11 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2864 identity=9512 ipv4=10.0.0.119 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-vpt5m subsys=endpoint level=info msg="Successful endpoint creation" containerID=fb26c75d11 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2864 identity=9512 ipv4=10.0.0.119 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-vpt5m subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=ec6c459267 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=13 identity=16127 ipv4=10.0.0.128 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=ec6c459267 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=13 identity=16127 ipv4=10.0.0.128 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=0d7adfe0ae datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1452 identity=46393 ipv4=10.0.0.134 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=0d7adfe0ae datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1452 identity=46393 ipv4=10.0.0.134 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.150 50859b6e-065d-49e8-8305-1f0dcb3a9bad default }" containerID=d8eccccfce92d5db99068af57e9910132ccc124b8636019c413d8523023e4348 datapathConfiguration="&{false false false false false }" interface=lxcd047cf31f9a1 k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d8eccccfce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=549 ipv4=10.0.0.150 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d8eccccfce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=549 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.150 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=prometheus;k8s:app.kubernetes.io/version=2.51.2;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus;k8s:io.kubernetes.pod.namespace=monitoring;k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus;k8s:operator.prometheus.io/shard=0;k8s:prometheus=kube-prometheus-stack-prometheus;k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d8eccccfce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=549 identity=12010 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.150 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d8eccccfce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=549 identity=12010 ipv4=10.0.0.150 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=d8eccccfce datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=549 identity=12010 ipv4=10.0.0.150 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=d8eccccfce datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=549 identity=12010 ipv4=10.0.0.150 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.135 74620e38-7fda-4338-95d9-a069a8b35e93 default }" containerID=6a1cebf826520df6c1b81cb4fd5be015d1e4aca0b9d685a6c2633503c9724e12 datapathConfiguration="&{false false false false false }" interface=lxcaf4984edd3f8 k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6a1cebf826 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1102 ipv4=10.0.0.135 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6a1cebf826 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1102 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.135 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:alertmanager=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=alertmanager;k8s:app.kubernetes.io/version=0.27.0;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6a1cebf826 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1102 identity=723 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.135 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6a1cebf826 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1102 identity=723 ipv4=10.0.0.135 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6a1cebf826 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1102 identity=723 ipv4=10.0.0.135 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=6a1cebf826 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1102 identity=723 ipv4=10.0.0.135 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.222 f6eed74e-46b5-4f77-9ea3-4547e74f033a default }" containerID=0816510913fd6c446a1a33e58c13a812184e73760e8a69f8196dd2689c54df14 datapathConfiguration="&{false false false false false }" interface=lxc94d52e27d871 k8sPodName=local-path-storage/helper-pod-create-pvc-6c06dbf1-fec5-4fed-9bd1-997e444279eb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0816510913 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=155 ipv4=10.0.0.222 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6c06dbf1-fec5-4fed-9bd1-997e444279eb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0816510913 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=155 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.222 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6c06dbf1-fec5-4fed-9bd1-997e444279eb subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0816510913 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=155 identity=6703 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.222 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6c06dbf1-fec5-4fed-9bd1-997e444279eb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0816510913 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=155 identity=6703 ipv4=10.0.0.222 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6c06dbf1-fec5-4fed-9bd1-997e444279eb subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=0816510913 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=155 identity=6703 ipv4=10.0.0.222 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6c06dbf1-fec5-4fed-9bd1-997e444279eb subsys=endpoint level=info msg="Successful endpoint creation" containerID=0816510913 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=155 identity=6703 ipv4=10.0.0.222 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6c06dbf1-fec5-4fed-9bd1-997e444279eb subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.141 b0bf3d43-fa3f-46f3-877b-923f0f588af3 default }" containerID=6a6b13ef9fb3b1fb54d009284a093977d6915226572be542876fc61659bc5764 datapathConfiguration="&{false false false false false }" interface=lxc321b9ec67f38 k8sPodName=monitoring/vector-2xkhq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6a6b13ef9f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3054 ipv4=10.0.0.141 ipv6= k8sPodName=monitoring/vector-2xkhq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6a6b13ef9f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3054 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.141 ipv6= k8sPodName=monitoring/vector-2xkhq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=Agent;k8s:app.kubernetes.io/instance=vector;k8s:app.kubernetes.io/name=vector;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=vector;k8s:io.kubernetes.pod.namespace=monitoring;k8s:vector.dev/exclude=true;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6a6b13ef9f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3054 identity=58071 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.141 ipv6= k8sPodName=monitoring/vector-2xkhq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6a6b13ef9f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3054 identity=58071 ipv4=10.0.0.141 ipv6= k8sPodName=monitoring/vector-2xkhq subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6a6b13ef9f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3054 identity=58071 ipv4=10.0.0.141 ipv6= k8sPodName=monitoring/vector-2xkhq subsys=endpoint level=info msg="Successful endpoint creation" containerID=6a6b13ef9f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3054 identity=58071 ipv4=10.0.0.141 ipv6= k8sPodName=monitoring/vector-2xkhq subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=0816510913 endpointID=155 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-6c06dbf1-fec5-4fed-9bd1-997e444279eb subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=0816510913 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=155 identity=6703 ipv4=10.0.0.222 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6c06dbf1-fec5-4fed-9bd1-997e444279eb subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.188 a138690a-b952-4461-8439-a504a21ae3f6 default }" containerID=143f2d1cdbd5f46a43814ccab01cb9b76f138ea12ff75dbb7b02a33409fbed1a datapathConfiguration="&{false false false false false }" interface=lxc4702a1b27a1c k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-7fjln labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=143f2d1cdb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1748 ipv4=10.0.0.188 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-7fjln subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=143f2d1cdb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1748 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.188 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-7fjln subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=143f2d1cdb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1748 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.188 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-7fjln line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=prometheus-pushgateway;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=prometheus-pushgateway;k8s:app.kubernetes.io/version=v1.8.0;k8s:helm.sh/chart=prometheus-pushgateway-2.13.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=143f2d1cdb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1748 identity=57368 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.188 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-7fjln oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=143f2d1cdb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1748 identity=57368 ipv4=10.0.0.188 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-7fjln subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=143f2d1cdb datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1748 identity=57368 ipv4=10.0.0.188 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-7fjln subsys=endpoint level=info msg="Successful endpoint creation" containerID=143f2d1cdb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1748 identity=57368 ipv4=10.0.0.188 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-7fjln subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.73 532a3767-5cc1-4134-9123-e73bbac9116e default }" containerID=9331887567f8e964fddaddcb595c77da661264d90ef8e7369eaff1ec7fded549 datapathConfiguration="&{false false false false false }" interface=lxcea99853f1cba k8sPodName=monitoring/loki-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9331887567 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1079 ipv4=10.0.0.73 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9331887567 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1079 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.73 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=single-binary;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:app.kubernetes.io/part-of=memberlist;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=loki-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9331887567 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1079 identity=23429 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.73 ipv6= k8sPodName=monitoring/loki-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9331887567 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1079 identity=23429 ipv4=10.0.0.73 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=9331887567 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1079 identity=23429 ipv4=10.0.0.73 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=9331887567 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1079 identity=23429 ipv4=10.0.0.73 ipv6= k8sPodName=monitoring/loki-0 subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.199 9a08e095-9e4d-4f15-a5bb-3286fe27e771 default }" containerID=e764a66b6e47bffd0f61aa412ec885a50d173644de6f245505acf611c9e9b8f5 datapathConfiguration="&{false false false false false }" interface=lxcf134006ea11b k8sPodName=openstack/memcached-memcached-6479589586-sgbpg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e764a66b6e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3835 ipv4=10.0.0.199 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-sgbpg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e764a66b6e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3835 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.199 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-sgbpg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=memcached;k8s:component=server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=memcached;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e764a66b6e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3835 identity=39463 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.199 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-sgbpg oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=e764a66b6e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3835 identity=39463 ipv4=10.0.0.199 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-sgbpg subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e764a66b6e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3835 identity=39463 ipv4=10.0.0.199 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-sgbpg subsys=endpoint level=info msg="Successful endpoint creation" containerID=e764a66b6e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3835 identity=39463 ipv4=10.0.0.199 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-sgbpg subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.14 de5628a6-854e-471a-8413-bc15a5e36064 default }" containerID=5ae0b28dad7ae5677b3e3624f8c9cf17e5316a31b71f22f5d7f266841120c128 datapathConfiguration="&{false false false false false }" interface=lxc8f56e855492d k8sPodName=local-path-storage/helper-pod-create-pvc-fd088cc5-d1c0-45c0-93cc-d80587fc9cb6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5ae0b28dad datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=770 ipv4=10.0.0.14 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-fd088cc5-d1c0-45c0-93cc-d80587fc9cb6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5ae0b28dad datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=770 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.14 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-fd088cc5-d1c0-45c0-93cc-d80587fc9cb6 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5ae0b28dad datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=770 identity=6703 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.14 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-fd088cc5-d1c0-45c0-93cc-d80587fc9cb6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5ae0b28dad datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=770 identity=6703 ipv4=10.0.0.14 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-fd088cc5-d1c0-45c0-93cc-d80587fc9cb6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5ae0b28dad datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=770 identity=6703 ipv4=10.0.0.14 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-fd088cc5-d1c0-45c0-93cc-d80587fc9cb6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=5ae0b28dad datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=770 identity=6703 ipv4=10.0.0.14 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-fd088cc5-d1c0-45c0-93cc-d80587fc9cb6 subsys=daemon level=info msg="Delete endpoint request" containerID=5ae0b28dad endpointID=770 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-fd088cc5-d1c0-45c0-93cc-d80587fc9cb6 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=5ae0b28dad datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=770 identity=6703 ipv4=10.0.0.14 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-fd088cc5-d1c0-45c0-93cc-d80587fc9cb6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.53 12290cd4-f365-4184-9390-3b31889fa418 default }" containerID=900ea14f40bfe7b18c84eb500ebd81cd6a8caf98e785d2981b1b2ff1313fcc67 datapathConfiguration="&{false false false false false }" interface=lxc5595b08c2d4a k8sPodName=openstack/rabbitmq-keystone-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=900ea14f40 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2570 ipv4=10.0.0.53 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=900ea14f40 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2570 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.53 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-keystone;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=900ea14f40 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2570 identity=10554 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.53 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=900ea14f40 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2570 identity=10554 ipv4=10.0.0.53 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=900ea14f40 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2570 identity=10554 ipv4=10.0.0.53 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=900ea14f40 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2570 identity=10554 ipv4=10.0.0.53 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.220 88b17c6a-c155-4933-b8a4-1bc3d624dbab default }" containerID=50d627bec3c3056d5eea0087f8d4d9367f3a4d349a728155e827ad0cf4fe481b datapathConfiguration="&{false false false false false }" interface=lxc537916db1e68 k8sPodName=openstack/keystone-api-7c9587cdf6-rg8vn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=50d627bec3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3237 ipv4=10.0.0.220 ipv6= k8sPodName=openstack/keystone-api-7c9587cdf6-rg8vn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=50d627bec3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3237 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.220 ipv6= k8sPodName=openstack/keystone-api-7c9587cdf6-rg8vn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=50d627bec3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3237 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.220 ipv6= k8sPodName=openstack/keystone-api-7c9587cdf6-rg8vn line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=50d627bec3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3237 identity=62956 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.220 ipv6= k8sPodName=openstack/keystone-api-7c9587cdf6-rg8vn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=50d627bec3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3237 identity=62956 ipv4=10.0.0.220 ipv6= k8sPodName=openstack/keystone-api-7c9587cdf6-rg8vn subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.197 499b5315-2a8a-473a-8963-84b79b6d1d14 default }" containerID=c9d4b8c5b420d53298ababc1b287dbf7f71cd635c807a8374f8c9d6eb8dbd92b datapathConfiguration="&{false false false false false }" interface=lxca4ab6d5e6117 k8sPodName=openstack/keystone-credential-setup-6bhwv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c9d4b8c5b4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=540 ipv4=10.0.0.197 ipv6= k8sPodName=openstack/keystone-credential-setup-6bhwv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c9d4b8c5b4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=540 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=adba2718-55e7-4e69-bc11-24a75b07ec84,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=adba2718-55e7-4e69-bc11-24a75b07ec84,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.197 ipv6= k8sPodName=openstack/keystone-credential-setup-6bhwv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=adba2718-55e7-4e69-bc11-24a75b07ec84;k8s:batch.kubernetes.io/job-name=keystone-credential-setup;k8s:component=credential-setup;k8s:controller-uid=adba2718-55e7-4e69-bc11-24a75b07ec84;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-credential-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c9d4b8c5b4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=540 identity=52811 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=adba2718-55e7-4e69-bc11-24a75b07ec84,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=adba2718-55e7-4e69-bc11-24a75b07ec84,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.197 ipv6= k8sPodName=openstack/keystone-credential-setup-6bhwv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c9d4b8c5b4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=540 identity=52811 ipv4=10.0.0.197 ipv6= k8sPodName=openstack/keystone-credential-setup-6bhwv subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=50d627bec3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3237 identity=62956 ipv4=10.0.0.220 ipv6= k8sPodName=openstack/keystone-api-7c9587cdf6-rg8vn subsys=endpoint level=info msg="Successful endpoint creation" containerID=50d627bec3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3237 identity=62956 ipv4=10.0.0.220 ipv6= k8sPodName=openstack/keystone-api-7c9587cdf6-rg8vn subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=c9d4b8c5b4 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=540 identity=52811 ipv4=10.0.0.197 ipv6= k8sPodName=openstack/keystone-credential-setup-6bhwv subsys=endpoint level=info msg="Successful endpoint creation" containerID=c9d4b8c5b4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=540 identity=52811 ipv4=10.0.0.197 ipv6= k8sPodName=openstack/keystone-credential-setup-6bhwv subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=c9d4b8c5b4 endpointID=540 k8sNamespace=openstack k8sPodName=keystone-credential-setup-6bhwv subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=adba2718-55e7-4e69-bc11-24a75b07ec84 k8s:batch.kubernetes.io/job-name=keystone-credential-setup k8s:component=credential-setup k8s:controller-uid=adba2718-55e7-4e69-bc11-24a75b07ec84 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-credential-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=c9d4b8c5b4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=540 identity=52811 ipv4=10.0.0.197 ipv6= k8sPodName=openstack/keystone-credential-setup-6bhwv subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.107 7b5a9bf3-5433-425f-b418-e97540774364 default }" containerID=908a76cefc78876fb61677c109d6843c65404a84dfc5dbcbb1bf345fed6d9fce datapathConfiguration="&{false false false false false }" interface=lxc32e3dad7d1dd k8sPodName=openstack/keystone-db-init-mp46v labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=908a76cefc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=227 ipv4=10.0.0.107 ipv6= k8sPodName=openstack/keystone-db-init-mp46v subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=908a76cefc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=227 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=7f4505d9-289b-4da4-86d0-03937301bd3d,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=7f4505d9-289b-4da4-86d0-03937301bd3d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.107 ipv6= k8sPodName=openstack/keystone-db-init-mp46v subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=7f4505d9-289b-4da4-86d0-03937301bd3d;k8s:batch.kubernetes.io/job-name=keystone-db-init;k8s:component=db-init;k8s:controller-uid=7f4505d9-289b-4da4-86d0-03937301bd3d;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=908a76cefc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=227 identity=25343 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=7f4505d9-289b-4da4-86d0-03937301bd3d,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=7f4505d9-289b-4da4-86d0-03937301bd3d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.107 ipv6= k8sPodName=openstack/keystone-db-init-mp46v oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=908a76cefc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=227 identity=25343 ipv4=10.0.0.107 ipv6= k8sPodName=openstack/keystone-db-init-mp46v subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=908a76cefc datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=227 identity=25343 ipv4=10.0.0.107 ipv6= k8sPodName=openstack/keystone-db-init-mp46v subsys=endpoint level=info msg="Successful endpoint creation" containerID=908a76cefc datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=227 identity=25343 ipv4=10.0.0.107 ipv6= k8sPodName=openstack/keystone-db-init-mp46v subsys=daemon level=info msg="Delete endpoint request" containerID=908a76cefc endpointID=227 k8sNamespace=openstack k8sPodName=keystone-db-init-mp46v subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=7f4505d9-289b-4da4-86d0-03937301bd3d k8s:batch.kubernetes.io/job-name=keystone-db-init k8s:component=db-init k8s:controller-uid=7f4505d9-289b-4da4-86d0-03937301bd3d k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=908a76cefc datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=227 identity=25343 ipv4=10.0.0.107 ipv6= k8sPodName=openstack/keystone-db-init-mp46v subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.67 13c813f5-a5f4-4e0f-b859-3249217b8398 default }" containerID=3456333fbfaebcaf2920a1319b998fda53ad7ca8fab9f8405b2f3861ee045c31 datapathConfiguration="&{false false false false false }" interface=lxc246a6c56f8a7 k8sPodName=openstack/keystone-fernet-setup-mb9lk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3456333fbf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=347 ipv4=10.0.0.67 ipv6= k8sPodName=openstack/keystone-fernet-setup-mb9lk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3456333fbf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=347 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=a9338e36-d7f5-4856-8009-50d655d7676e,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=a9338e36-d7f5-4856-8009-50d655d7676e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.67 ipv6= k8sPodName=openstack/keystone-fernet-setup-mb9lk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=a9338e36-d7f5-4856-8009-50d655d7676e;k8s:batch.kubernetes.io/job-name=keystone-fernet-setup;k8s:component=fernet-setup;k8s:controller-uid=a9338e36-d7f5-4856-8009-50d655d7676e;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-fernet-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3456333fbf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=347 identity=29358 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=a9338e36-d7f5-4856-8009-50d655d7676e,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=a9338e36-d7f5-4856-8009-50d655d7676e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.67 ipv6= k8sPodName=openstack/keystone-fernet-setup-mb9lk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3456333fbf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=347 identity=29358 ipv4=10.0.0.67 ipv6= k8sPodName=openstack/keystone-fernet-setup-mb9lk subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3456333fbf datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=347 identity=29358 ipv4=10.0.0.67 ipv6= k8sPodName=openstack/keystone-fernet-setup-mb9lk subsys=endpoint level=info msg="Successful endpoint creation" containerID=3456333fbf datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=347 identity=29358 ipv4=10.0.0.67 ipv6= k8sPodName=openstack/keystone-fernet-setup-mb9lk subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=3456333fbf endpointID=347 k8sNamespace=openstack k8sPodName=keystone-fernet-setup-mb9lk subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=a9338e36-d7f5-4856-8009-50d655d7676e k8s:batch.kubernetes.io/job-name=keystone-fernet-setup k8s:component=fernet-setup k8s:controller-uid=a9338e36-d7f5-4856-8009-50d655d7676e k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-fernet-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=3456333fbf datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=347 identity=29358 ipv4=10.0.0.67 ipv6= k8sPodName=openstack/keystone-fernet-setup-mb9lk subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.122 03a4951c-7b91-47f2-b7d7-fe9f577468b2 default }" containerID=14a948a62fc6495189d53d0897d18f794226e8f38a4298fc0878a2db0bfbc8d8 datapathConfiguration="&{false false false false false }" interface=lxcbc493798af0c k8sPodName=openstack/keystone-db-sync-mkfbh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=14a948a62f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=292 ipv4=10.0.0.122 ipv6= k8sPodName=openstack/keystone-db-sync-mkfbh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=14a948a62f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=292 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=1777e632-2d99-44b1-8e5a-85d8e6981f6d,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=1777e632-2d99-44b1-8e5a-85d8e6981f6d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.122 ipv6= k8sPodName=openstack/keystone-db-sync-mkfbh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=1777e632-2d99-44b1-8e5a-85d8e6981f6d;k8s:batch.kubernetes.io/job-name=keystone-db-sync;k8s:component=db-sync;k8s:controller-uid=1777e632-2d99-44b1-8e5a-85d8e6981f6d;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-sync;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=14a948a62f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=292 identity=17748 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=1777e632-2d99-44b1-8e5a-85d8e6981f6d,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=1777e632-2d99-44b1-8e5a-85d8e6981f6d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.122 ipv6= k8sPodName=openstack/keystone-db-sync-mkfbh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=14a948a62f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=292 identity=17748 ipv4=10.0.0.122 ipv6= k8sPodName=openstack/keystone-db-sync-mkfbh subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=14a948a62f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=292 identity=17748 ipv4=10.0.0.122 ipv6= k8sPodName=openstack/keystone-db-sync-mkfbh subsys=endpoint level=info msg="Successful endpoint creation" containerID=14a948a62f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=292 identity=17748 ipv4=10.0.0.122 ipv6= k8sPodName=openstack/keystone-db-sync-mkfbh subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=14a948a62f endpointID=292 k8sNamespace=openstack k8sPodName=keystone-db-sync-mkfbh subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=1777e632-2d99-44b1-8e5a-85d8e6981f6d k8s:batch.kubernetes.io/job-name=keystone-db-sync k8s:component=db-sync k8s:controller-uid=1777e632-2d99-44b1-8e5a-85d8e6981f6d k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-sync k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=14a948a62f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=292 identity=17748 ipv4=10.0.0.122 ipv6= k8sPodName=openstack/keystone-db-sync-mkfbh subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.118 d55becb7-264e-4a2c-b853-b746eace8041 default }" containerID=7a79730cb4e2f5bf7661c90401b9cf83bccf9cbcc3964d15eafeea81a247c24d datapathConfiguration="&{false false false false false }" interface=lxc764b0a2cd870 k8sPodName=openstack/keystone-rabbit-init-rrrnm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7a79730cb4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2162 ipv4=10.0.0.118 ipv6= k8sPodName=openstack/keystone-rabbit-init-rrrnm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7a79730cb4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2162 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=c95efb91-be9f-4aa9-b96e-977154e87289,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=c95efb91-be9f-4aa9-b96e-977154e87289,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.118 ipv6= k8sPodName=openstack/keystone-rabbit-init-rrrnm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=c95efb91-be9f-4aa9-b96e-977154e87289;k8s:batch.kubernetes.io/job-name=keystone-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=c95efb91-be9f-4aa9-b96e-977154e87289;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-rabbit-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7a79730cb4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2162 identity=49249 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=c95efb91-be9f-4aa9-b96e-977154e87289,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=c95efb91-be9f-4aa9-b96e-977154e87289,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.118 ipv6= k8sPodName=openstack/keystone-rabbit-init-rrrnm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7a79730cb4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2162 identity=49249 ipv4=10.0.0.118 ipv6= k8sPodName=openstack/keystone-rabbit-init-rrrnm subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=7a79730cb4 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2162 identity=49249 ipv4=10.0.0.118 ipv6= k8sPodName=openstack/keystone-rabbit-init-rrrnm subsys=endpoint level=info msg="Successful endpoint creation" containerID=7a79730cb4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2162 identity=49249 ipv4=10.0.0.118 ipv6= k8sPodName=openstack/keystone-rabbit-init-rrrnm subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=7a79730cb4 endpointID=2162 k8sNamespace=openstack k8sPodName=keystone-rabbit-init-rrrnm subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=c95efb91-be9f-4aa9-b96e-977154e87289 k8s:batch.kubernetes.io/job-name=keystone-rabbit-init k8s:component=rabbit-init k8s:controller-uid=c95efb91-be9f-4aa9-b96e-977154e87289 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-rabbit-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=7a79730cb4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2162 identity=49249 ipv4=10.0.0.118 ipv6= k8sPodName=openstack/keystone-rabbit-init-rrrnm subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.129 8a4eb477-d7c0-4818-b2a5-97a831a098cd default }" containerID=0d96c367139b2b499f6a31554f812e15e0848a5bf0ed657707094029730c305c datapathConfiguration="&{false false false false false }" interface=lxccd9973141b9a k8sPodName=openstack/keystone-domain-manage-kw4p8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0d96c36713 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2457 ipv4=10.0.0.129 ipv6= k8sPodName=openstack/keystone-domain-manage-kw4p8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0d96c36713 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2457 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=0cf39b2d-e21e-4c8e-8cf3-d2b3e25b74e0,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=0cf39b2d-e21e-4c8e-8cf3-d2b3e25b74e0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.129 ipv6= k8sPodName=openstack/keystone-domain-manage-kw4p8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=0cf39b2d-e21e-4c8e-8cf3-d2b3e25b74e0;k8s:batch.kubernetes.io/job-name=keystone-domain-manage;k8s:component=domain-manage;k8s:controller-uid=0cf39b2d-e21e-4c8e-8cf3-d2b3e25b74e0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-domain-manage;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0d96c36713 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2457 identity=2800 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=0cf39b2d-e21e-4c8e-8cf3-d2b3e25b74e0,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=0cf39b2d-e21e-4c8e-8cf3-d2b3e25b74e0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.129 ipv6= k8sPodName=openstack/keystone-domain-manage-kw4p8 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=0d96c36713 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2457 identity=2800 ipv4=10.0.0.129 ipv6= k8sPodName=openstack/keystone-domain-manage-kw4p8 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0d96c36713 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2457 identity=2800 ipv4=10.0.0.129 ipv6= k8sPodName=openstack/keystone-domain-manage-kw4p8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=0d96c36713 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2457 identity=2800 ipv4=10.0.0.129 ipv6= k8sPodName=openstack/keystone-domain-manage-kw4p8 subsys=daemon level=info msg="Delete endpoint request" containerID=0d96c36713 endpointID=2457 k8sNamespace=openstack k8sPodName=keystone-domain-manage-kw4p8 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=0cf39b2d-e21e-4c8e-8cf3-d2b3e25b74e0 k8s:batch.kubernetes.io/job-name=keystone-domain-manage k8s:component=domain-manage k8s:controller-uid=0cf39b2d-e21e-4c8e-8cf3-d2b3e25b74e0 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-domain-manage k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=0d96c36713 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2457 identity=2800 ipv4=10.0.0.129 ipv6= k8sPodName=openstack/keystone-domain-manage-kw4p8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.33 248ca186-e374-46f0-97e8-243288f2d275 default }" containerID=ee48cf0ca92662553634200bd46ca36aef253cb219d9d48e06171d756bba511f datapathConfiguration="&{false false false false false }" interface=lxcfc81b9519847 k8sPodName=openstack/keystone-bootstrap-nz2f8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ee48cf0ca9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1857 ipv4=10.0.0.33 ipv6= k8sPodName=openstack/keystone-bootstrap-nz2f8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ee48cf0ca9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1857 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=020e6af6-b3f0-4e4a-9e12-ba2508665238,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=020e6af6-b3f0-4e4a-9e12-ba2508665238,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.33 ipv6= k8sPodName=openstack/keystone-bootstrap-nz2f8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=020e6af6-b3f0-4e4a-9e12-ba2508665238;k8s:batch.kubernetes.io/job-name=keystone-bootstrap;k8s:component=bootstrap;k8s:controller-uid=020e6af6-b3f0-4e4a-9e12-ba2508665238;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-bootstrap;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ee48cf0ca9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1857 identity=39234 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=020e6af6-b3f0-4e4a-9e12-ba2508665238,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=020e6af6-b3f0-4e4a-9e12-ba2508665238,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.33 ipv6= k8sPodName=openstack/keystone-bootstrap-nz2f8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ee48cf0ca9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1857 identity=39234 ipv4=10.0.0.33 ipv6= k8sPodName=openstack/keystone-bootstrap-nz2f8 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=ee48cf0ca9 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1857 identity=39234 ipv4=10.0.0.33 ipv6= k8sPodName=openstack/keystone-bootstrap-nz2f8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=ee48cf0ca9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1857 identity=39234 ipv4=10.0.0.33 ipv6= k8sPodName=openstack/keystone-bootstrap-nz2f8 subsys=daemon level=info msg="Delete endpoint request" containerID=ee48cf0ca9 endpointID=1857 k8sNamespace=openstack k8sPodName=keystone-bootstrap-nz2f8 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=020e6af6-b3f0-4e4a-9e12-ba2508665238 k8s:batch.kubernetes.io/job-name=keystone-bootstrap k8s:component=bootstrap k8s:controller-uid=020e6af6-b3f0-4e4a-9e12-ba2508665238 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-bootstrap k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=ee48cf0ca9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1857 identity=39234 ipv4=10.0.0.33 ipv6= k8sPodName=openstack/keystone-bootstrap-nz2f8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.227 16205dbd-3360-42a3-9d7c-b983f62d1e7e default }" containerID=aa7f27e656326a6df2d2248504663c0efc79bd7765670f31fba85252e14958c8 datapathConfiguration="&{false false false false false }" interface=lxc3eaa01561951 k8sPodName=local-path-storage/helper-pod-create-pvc-f8ff9897-6dd7-4423-ab3a-bd010e14be4e labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=aa7f27e656 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3252 ipv4=10.0.0.227 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f8ff9897-6dd7-4423-ab3a-bd010e14be4e subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=aa7f27e656 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3252 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.227 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f8ff9897-6dd7-4423-ab3a-bd010e14be4e subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=aa7f27e656 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3252 identity=6703 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.227 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f8ff9897-6dd7-4423-ab3a-bd010e14be4e oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=aa7f27e656 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3252 identity=6703 ipv4=10.0.0.227 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f8ff9897-6dd7-4423-ab3a-bd010e14be4e subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=aa7f27e656 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3252 identity=6703 ipv4=10.0.0.227 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f8ff9897-6dd7-4423-ab3a-bd010e14be4e subsys=endpoint level=info msg="Successful endpoint creation" containerID=aa7f27e656 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3252 identity=6703 ipv4=10.0.0.227 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f8ff9897-6dd7-4423-ab3a-bd010e14be4e subsys=daemon level=info msg="Delete endpoint request" containerID=aa7f27e656 endpointID=3252 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-f8ff9897-6dd7-4423-ab3a-bd010e14be4e subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=aa7f27e656 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3252 identity=6703 ipv4=10.0.0.227 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f8ff9897-6dd7-4423-ab3a-bd010e14be4e subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.216 6b85b0ab-8077-41eb-9e4b-458ae9aba7d3 default }" containerID=b1c56dadf42422bd858b748d9082b24fe2c11a5b1ce6c785b6fafd03a45c9496 datapathConfiguration="&{false false false false false }" interface=lxcaa1efe5bb3f4 k8sPodName=openstack/rabbitmq-barbican-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b1c56dadf4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2089 ipv4=10.0.0.216 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b1c56dadf4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2089 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.216 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-barbican;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=b1c56dadf4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2089 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.216 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=b1c56dadf4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2089 identity=60738 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.216 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b1c56dadf4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2089 identity=60738 ipv4=10.0.0.216 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b1c56dadf4 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2089 identity=60738 ipv4=10.0.0.216 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=b1c56dadf4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2089 identity=60738 ipv4=10.0.0.216 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.93 7be1a99c-4e29-48bb-bdfa-b3a9e35ecf8c default }" containerID=d5e31de244e98f3a2c94571036b329aa57a6a626d5e9e9d0ee36ce91f89d4c5b datapathConfiguration="&{false false false false false }" interface=lxce59d08fe6930 k8sPodName=openstack/barbican-api-7b688cdfd7-nfxgz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d5e31de244 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1804 ipv4=10.0.0.93 ipv6= k8sPodName=openstack/barbican-api-7b688cdfd7-nfxgz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d5e31de244 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1804 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.93 ipv6= k8sPodName=openstack/barbican-api-7b688cdfd7-nfxgz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=d5e31de244 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1804 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.93 ipv6= k8sPodName=openstack/barbican-api-7b688cdfd7-nfxgz line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d5e31de244 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1804 identity=1303 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.93 ipv6= k8sPodName=openstack/barbican-api-7b688cdfd7-nfxgz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d5e31de244 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1804 identity=1303 ipv4=10.0.0.93 ipv6= k8sPodName=openstack/barbican-api-7b688cdfd7-nfxgz subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.108 0e575015-4191-418d-a078-23b7bfb09396 default }" containerID=b482b006a7b1f2eaf652b41acaf433467947946258e2e6222f5b519cd2bc9b76 datapathConfiguration="&{false false false false false }" interface=lxc5642da30835f k8sPodName=openstack/barbican-db-init-n99md labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b482b006a7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=294 ipv4=10.0.0.108 ipv6= k8sPodName=openstack/barbican-db-init-n99md subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b482b006a7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=294 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=da328e37-cbce-410e-b548-03eb240bf610,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=da328e37-cbce-410e-b548-03eb240bf610,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.108 ipv6= k8sPodName=openstack/barbican-db-init-n99md subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=da328e37-cbce-410e-b548-03eb240bf610;k8s:batch.kubernetes.io/job-name=barbican-db-init;k8s:component=db-init;k8s:controller-uid=da328e37-cbce-410e-b548-03eb240bf610;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b482b006a7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=294 identity=5339 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=da328e37-cbce-410e-b548-03eb240bf610,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=da328e37-cbce-410e-b548-03eb240bf610,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.108 ipv6= k8sPodName=openstack/barbican-db-init-n99md oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b482b006a7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=294 identity=5339 ipv4=10.0.0.108 ipv6= k8sPodName=openstack/barbican-db-init-n99md subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d5e31de244 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1804 identity=1303 ipv4=10.0.0.93 ipv6= k8sPodName=openstack/barbican-api-7b688cdfd7-nfxgz subsys=endpoint level=info msg="Successful endpoint creation" containerID=d5e31de244 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1804 identity=1303 ipv4=10.0.0.93 ipv6= k8sPodName=openstack/barbican-api-7b688cdfd7-nfxgz subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=b482b006a7 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=294 identity=5339 ipv4=10.0.0.108 ipv6= k8sPodName=openstack/barbican-db-init-n99md subsys=endpoint level=info msg="Successful endpoint creation" containerID=b482b006a7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=294 identity=5339 ipv4=10.0.0.108 ipv6= k8sPodName=openstack/barbican-db-init-n99md subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=b482b006a7 endpointID=294 k8sNamespace=openstack k8sPodName=barbican-db-init-n99md subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=da328e37-cbce-410e-b548-03eb240bf610 k8s:batch.kubernetes.io/job-name=barbican-db-init k8s:component=db-init k8s:controller-uid=da328e37-cbce-410e-b548-03eb240bf610 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=b482b006a7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=294 identity=5339 ipv4=10.0.0.108 ipv6= k8sPodName=openstack/barbican-db-init-n99md subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.120 be3eb138-eb03-450d-861f-47a07307e077 default }" containerID=8ab49dbcc70eb309e7deb65c84b1b875efe63f34ba03cfe8a139983dc40a877a datapathConfiguration="&{false false false false false }" interface=lxc88d22c23672f k8sPodName=openstack/barbican-db-sync-h8fqh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8ab49dbcc7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=509 ipv4=10.0.0.120 ipv6= k8sPodName=openstack/barbican-db-sync-h8fqh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8ab49dbcc7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=509 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=67328623-23ab-443e-aff7-d1fed24e0d71,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=67328623-23ab-443e-aff7-d1fed24e0d71,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.120 ipv6= k8sPodName=openstack/barbican-db-sync-h8fqh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=67328623-23ab-443e-aff7-d1fed24e0d71;k8s:batch.kubernetes.io/job-name=barbican-db-sync;k8s:component=db-sync;k8s:controller-uid=67328623-23ab-443e-aff7-d1fed24e0d71;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-sync;k8s:release_group=barbican;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=8ab49dbcc7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=509 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.120 ipv6= k8sPodName=openstack/barbican-db-sync-h8fqh line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=8ab49dbcc7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=509 identity=10391 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=67328623-23ab-443e-aff7-d1fed24e0d71,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=67328623-23ab-443e-aff7-d1fed24e0d71,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.120 ipv6= k8sPodName=openstack/barbican-db-sync-h8fqh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8ab49dbcc7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=509 identity=10391 ipv4=10.0.0.120 ipv6= k8sPodName=openstack/barbican-db-sync-h8fqh subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8ab49dbcc7 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=509 identity=10391 ipv4=10.0.0.120 ipv6= k8sPodName=openstack/barbican-db-sync-h8fqh subsys=endpoint level=info msg="Successful endpoint creation" containerID=8ab49dbcc7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=509 identity=10391 ipv4=10.0.0.120 ipv6= k8sPodName=openstack/barbican-db-sync-h8fqh subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=8ab49dbcc7 endpointID=509 k8sNamespace=openstack k8sPodName=barbican-db-sync-h8fqh subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=67328623-23ab-443e-aff7-d1fed24e0d71 k8s:batch.kubernetes.io/job-name=barbican-db-sync k8s:component=db-sync k8s:controller-uid=67328623-23ab-443e-aff7-d1fed24e0d71 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-sync k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=8ab49dbcc7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=509 identity=10391 ipv4=10.0.0.120 ipv6= k8sPodName=openstack/barbican-db-sync-h8fqh subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.74 9f80cb4d-fae4-46dc-b81c-5d0fcab465b5 default }" containerID=fb1f98b097994c8ce896b998a1258cc231015c64e3a4b8d472fda208486243e4 datapathConfiguration="&{false false false false false }" interface=lxcd13ce4dd5d8b k8sPodName=openstack/barbican-rabbit-init-f9fmp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fb1f98b097 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2669 ipv4=10.0.0.74 ipv6= k8sPodName=openstack/barbican-rabbit-init-f9fmp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fb1f98b097 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2669 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=ab28e7e9-f4e2-4981-8de4-84c790e4a1cd,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=ab28e7e9-f4e2-4981-8de4-84c790e4a1cd,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.74 ipv6= k8sPodName=openstack/barbican-rabbit-init-f9fmp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=ab28e7e9-f4e2-4981-8de4-84c790e4a1cd;k8s:batch.kubernetes.io/job-name=barbican-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=ab28e7e9-f4e2-4981-8de4-84c790e4a1cd;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-rabbit-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fb1f98b097 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2669 identity=27722 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=ab28e7e9-f4e2-4981-8de4-84c790e4a1cd,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=ab28e7e9-f4e2-4981-8de4-84c790e4a1cd,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.74 ipv6= k8sPodName=openstack/barbican-rabbit-init-f9fmp oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=fb1f98b097 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2669 identity=27722 ipv4=10.0.0.74 ipv6= k8sPodName=openstack/barbican-rabbit-init-f9fmp subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=fb1f98b097 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2669 identity=27722 ipv4=10.0.0.74 ipv6= k8sPodName=openstack/barbican-rabbit-init-f9fmp subsys=endpoint level=info msg="Successful endpoint creation" containerID=fb1f98b097 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2669 identity=27722 ipv4=10.0.0.74 ipv6= k8sPodName=openstack/barbican-rabbit-init-f9fmp subsys=daemon level=info msg="Delete endpoint request" containerID=fb1f98b097 endpointID=2669 k8sNamespace=openstack k8sPodName=barbican-rabbit-init-f9fmp subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=ab28e7e9-f4e2-4981-8de4-84c790e4a1cd k8s:batch.kubernetes.io/job-name=barbican-rabbit-init k8s:component=rabbit-init k8s:controller-uid=ab28e7e9-f4e2-4981-8de4-84c790e4a1cd k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-rabbit-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=fb1f98b097 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2669 identity=27722 ipv4=10.0.0.74 ipv6= k8sPodName=openstack/barbican-rabbit-init-f9fmp subsys=endpoint level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.036076129154436136 newInterval=11m15s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.186 4e13def4-f1eb-4938-a9ba-29931fc5d4fa default }" containerID=b4674822938aa99e8e1a5b2227633965eeb7e3cbc3dc289dca5b3add1fb56c0b datapathConfiguration="&{false false false false false }" interface=lxce4efefbd4719 k8sPodName=openstack/barbican-ks-service-v8dgt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b467482293 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=124 ipv4=10.0.0.186 ipv6= k8sPodName=openstack/barbican-ks-service-v8dgt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b467482293 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=124 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=ff3b4dba-fd64-4000-98ac-95cf198a5310,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=ff3b4dba-fd64-4000-98ac-95cf198a5310,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.186 ipv6= k8sPodName=openstack/barbican-ks-service-v8dgt subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=ff3b4dba-fd64-4000-98ac-95cf198a5310;k8s:batch.kubernetes.io/job-name=barbican-ks-service;k8s:component=ks-service;k8s:controller-uid=ff3b4dba-fd64-4000-98ac-95cf198a5310;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-service;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b467482293 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=124 identity=49057 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=ff3b4dba-fd64-4000-98ac-95cf198a5310,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=ff3b4dba-fd64-4000-98ac-95cf198a5310,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.186 ipv6= k8sPodName=openstack/barbican-ks-service-v8dgt oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b467482293 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=124 identity=49057 ipv4=10.0.0.186 ipv6= k8sPodName=openstack/barbican-ks-service-v8dgt subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=b467482293 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=124 identity=49057 ipv4=10.0.0.186 ipv6= k8sPodName=openstack/barbican-ks-service-v8dgt subsys=endpoint level=info msg="Successful endpoint creation" containerID=b467482293 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=124 identity=49057 ipv4=10.0.0.186 ipv6= k8sPodName=openstack/barbican-ks-service-v8dgt subsys=daemon level=info msg="Delete endpoint request" containerID=b467482293 endpointID=124 k8sNamespace=openstack k8sPodName=barbican-ks-service-v8dgt subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=ff3b4dba-fd64-4000-98ac-95cf198a5310 k8s:batch.kubernetes.io/job-name=barbican-ks-service k8s:component=ks-service k8s:controller-uid=ff3b4dba-fd64-4000-98ac-95cf198a5310 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-service k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=b467482293 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=124 identity=49057 ipv4=10.0.0.186 ipv6= k8sPodName=openstack/barbican-ks-service-v8dgt subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.156 425e67d1-d49a-4785-a669-991899a5c815 default }" containerID=bde1407b77f021dac604e756cb9e6249257d4bbec2d8eadc293fb476016b0897 datapathConfiguration="&{false false false false false }" interface=lxc3e8647fc4504 k8sPodName=openstack/barbican-ks-endpoints-cnbdv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bde1407b77 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1565 ipv4=10.0.0.156 ipv6= k8sPodName=openstack/barbican-ks-endpoints-cnbdv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bde1407b77 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1565 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=5eb3a666-ec23-4011-83d7-72ce63e1f228,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=5eb3a666-ec23-4011-83d7-72ce63e1f228,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.156 ipv6= k8sPodName=openstack/barbican-ks-endpoints-cnbdv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=5eb3a666-ec23-4011-83d7-72ce63e1f228;k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=5eb3a666-ec23-4011-83d7-72ce63e1f228;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-endpoints;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=bde1407b77 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1565 identity=55649 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=5eb3a666-ec23-4011-83d7-72ce63e1f228,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=5eb3a666-ec23-4011-83d7-72ce63e1f228,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.156 ipv6= k8sPodName=openstack/barbican-ks-endpoints-cnbdv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=bde1407b77 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1565 identity=55649 ipv4=10.0.0.156 ipv6= k8sPodName=openstack/barbican-ks-endpoints-cnbdv subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=bde1407b77 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1565 identity=55649 ipv4=10.0.0.156 ipv6= k8sPodName=openstack/barbican-ks-endpoints-cnbdv subsys=endpoint level=info msg="Successful endpoint creation" containerID=bde1407b77 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1565 identity=55649 ipv4=10.0.0.156 ipv6= k8sPodName=openstack/barbican-ks-endpoints-cnbdv subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=bde1407b77 endpointID=1565 k8sNamespace=openstack k8sPodName=barbican-ks-endpoints-cnbdv subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=5eb3a666-ec23-4011-83d7-72ce63e1f228 k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=5eb3a666-ec23-4011-83d7-72ce63e1f228 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-endpoints k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=bde1407b77 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1565 identity=55649 ipv4=10.0.0.156 ipv6= k8sPodName=openstack/barbican-ks-endpoints-cnbdv subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.239 6a426fa6-e004-4d09-9a17-e248473b0f44 default }" containerID=c5bdaff1d3ad087e583c096415340ea1762795cf8fbb46ed6881281d94502c64 datapathConfiguration="&{false false false false false }" interface=lxc1d849a4e38bf k8sPodName=openstack/barbican-ks-user-xdbjr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c5bdaff1d3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1130 ipv4=10.0.0.239 ipv6= k8sPodName=openstack/barbican-ks-user-xdbjr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c5bdaff1d3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1130 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=d305aabb-acca-4101-9336-baed8b237850,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=d305aabb-acca-4101-9336-baed8b237850,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.239 ipv6= k8sPodName=openstack/barbican-ks-user-xdbjr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=d305aabb-acca-4101-9336-baed8b237850;k8s:batch.kubernetes.io/job-name=barbican-ks-user;k8s:component=ks-user;k8s:controller-uid=d305aabb-acca-4101-9336-baed8b237850;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-user;k8s:release_group=barbican;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=c5bdaff1d3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1130 identity=23933 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=d305aabb-acca-4101-9336-baed8b237850,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=d305aabb-acca-4101-9336-baed8b237850,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.239 ipv6= k8sPodName=openstack/barbican-ks-user-xdbjr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c5bdaff1d3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1130 identity=23933 ipv4=10.0.0.239 ipv6= k8sPodName=openstack/barbican-ks-user-xdbjr subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c5bdaff1d3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1130 identity=23933 ipv4=10.0.0.239 ipv6= k8sPodName=openstack/barbican-ks-user-xdbjr subsys=endpoint level=info msg="Successful endpoint creation" containerID=c5bdaff1d3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1130 identity=23933 ipv4=10.0.0.239 ipv6= k8sPodName=openstack/barbican-ks-user-xdbjr subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=c5bdaff1d3 endpointID=1130 k8sNamespace=openstack k8sPodName=barbican-ks-user-xdbjr subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=d305aabb-acca-4101-9336-baed8b237850 k8s:batch.kubernetes.io/job-name=barbican-ks-user k8s:component=ks-user k8s:controller-uid=d305aabb-acca-4101-9336-baed8b237850 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-user k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=c5bdaff1d3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1130 identity=23933 ipv4=10.0.0.239 ipv6= k8sPodName=openstack/barbican-ks-user-xdbjr subsys=endpoint level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Create endpoint request" addressing="&{10.0.0.153 62b680ce-7d93-493e-bcfa-b521379677fa default }" containerID=9b0d340637450708cc8afbdc33b3cb4b137c9f4407a539261502fb70537160e4 datapathConfiguration="&{false false false false false }" interface=lxc26a4527d53c5 k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-fpfwh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9b0d340637 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3963 ipv4=10.0.0.153 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-fpfwh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9b0d340637 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3963 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.15.9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.153 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-fpfwh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:rook-ceph k8s:io.cilium.k8s.namespace.labels.name:rook-ceph]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-operator;k8s:helm.sh/chart=rook-ceph-v1.15.9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph;k8s:io.cilium.k8s.namespace.labels.name=rook-ceph;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system;k8s:io.kubernetes.pod.namespace=rook-ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9b0d340637 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3963 identity=46144 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.15.9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.153 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-fpfwh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9b0d340637 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3963 identity=46144 ipv4=10.0.0.153 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-fpfwh subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=9b0d340637 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3963 identity=46144 ipv4=10.0.0.153 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-fpfwh subsys=endpoint level=info msg="Successful endpoint creation" containerID=9b0d340637 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3963 identity=46144 ipv4=10.0.0.153 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-fpfwh subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.75 438d7d96-d18f-4a54-9dee-b86b17c43583 default }" containerID=0cb8975ea0d536fe90d70b88036fb400a2aa8c165c7e8584ccc8e2585fd7ad05 datapathConfiguration="&{false false false false false }" interface=lxcff4cdecbdfbf k8sPodName=openstack/rook-ceph-detect-version-d79nl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0cb8975ea0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2865 ipv4=10.0.0.75 ipv6= k8sPodName=openstack/rook-ceph-detect-version-d79nl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0cb8975ea0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2865 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=4653ed06-8491-432f-ae07-bdab4ba2ff2e,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=4653ed06-8491-432f-ae07-bdab4ba2ff2e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.75 ipv6= k8sPodName=openstack/rook-ceph-detect-version-d79nl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-detect-version;k8s:batch.kubernetes.io/controller-uid=4653ed06-8491-432f-ae07-bdab4ba2ff2e;k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version;k8s:controller-uid=4653ed06-8491-432f-ae07-bdab4ba2ff2e;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=rook-ceph-detect-version;k8s:rook-version=v1.15.9;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0cb8975ea0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2865 identity=9915 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=4653ed06-8491-432f-ae07-bdab4ba2ff2e,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=4653ed06-8491-432f-ae07-bdab4ba2ff2e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.75 ipv6= k8sPodName=openstack/rook-ceph-detect-version-d79nl oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0cb8975ea0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2865 identity=9915 ipv4=10.0.0.75 ipv6= k8sPodName=openstack/rook-ceph-detect-version-d79nl subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=0cb8975ea0 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2865 identity=9915 ipv4=10.0.0.75 ipv6= k8sPodName=openstack/rook-ceph-detect-version-d79nl subsys=endpoint level=info msg="Successful endpoint creation" containerID=0cb8975ea0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2865 identity=9915 ipv4=10.0.0.75 ipv6= k8sPodName=openstack/rook-ceph-detect-version-d79nl subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=0cb8975ea0 endpointID=2865 k8sNamespace=openstack k8sPodName=rook-ceph-detect-version-d79nl subsys=daemon level=info msg="Releasing key" key="[k8s:app=rook-ceph-detect-version k8s:batch.kubernetes.io/controller-uid=4653ed06-8491-432f-ae07-bdab4ba2ff2e k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version k8s:controller-uid=4653ed06-8491-432f-ae07-bdab4ba2ff2e k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=rook-ceph-detect-version k8s:rook-version=v1.15.9]" subsys=allocator level=info msg="Removed endpoint" containerID=0cb8975ea0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2865 identity=9915 ipv4=10.0.0.75 ipv6= k8sPodName=openstack/rook-ceph-detect-version-d79nl subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.224 ebcc6e95-4831-4b94-92f1-8fdf27f1119d default }" containerID=c073b2b532df5a66fe3696a9dc45aeb1db68aa810e769af78cd4e0ed8a05b5d7 datapathConfiguration="&{false false false false false }" interface=lxc73a7a25c1fbc k8sPodName=openstack/ceph-object-controller-detect-version-t6wds labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c073b2b532 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1658 ipv4=10.0.0.224 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-t6wds subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c073b2b532 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1658 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=34b403cd-6a7b-4e3b-9b32-da58f8b0328a,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=34b403cd-6a7b-4e3b-9b32-da58f8b0328a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.224 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-t6wds subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=ceph-object-controller-detect-version;k8s:batch.kubernetes.io/controller-uid=34b403cd-6a7b-4e3b-9b32-da58f8b0328a;k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version;k8s:controller-uid=34b403cd-6a7b-4e3b-9b32-da58f8b0328a;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=ceph-object-controller-detect-version;k8s:rook-version=v1.15.9;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=c073b2b532 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1658 identity=16887 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=34b403cd-6a7b-4e3b-9b32-da58f8b0328a,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=34b403cd-6a7b-4e3b-9b32-da58f8b0328a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.224 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-t6wds oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c073b2b532 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1658 identity=16887 ipv4=10.0.0.224 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-t6wds subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c073b2b532 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1658 identity=16887 ipv4=10.0.0.224 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-t6wds subsys=endpoint level=info msg="Successful endpoint creation" containerID=c073b2b532 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1658 identity=16887 ipv4=10.0.0.224 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-t6wds subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.124 39ac6876-3562-4d1d-a51a-ae402d048875 default }" containerID=6e08f2bd99c818c35085376b2d53259f9fe80cb2e0fbbed5ea3451f3da46ad81 datapathConfiguration="&{false false false false false }" interface=lxc083ad74190a0 k8sPodName=local-path-storage/helper-pod-create-pvc-90d79808-0aee-4268-b15d-33ca1c85bec8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6e08f2bd99 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=848 ipv4=10.0.0.124 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-90d79808-0aee-4268-b15d-33ca1c85bec8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6e08f2bd99 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=848 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.124 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-90d79808-0aee-4268-b15d-33ca1c85bec8 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6e08f2bd99 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=848 identity=6703 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.124 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-90d79808-0aee-4268-b15d-33ca1c85bec8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6e08f2bd99 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=848 identity=6703 ipv4=10.0.0.124 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-90d79808-0aee-4268-b15d-33ca1c85bec8 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6e08f2bd99 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=848 identity=6703 ipv4=10.0.0.124 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-90d79808-0aee-4268-b15d-33ca1c85bec8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=6e08f2bd99 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=848 identity=6703 ipv4=10.0.0.124 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-90d79808-0aee-4268-b15d-33ca1c85bec8 subsys=daemon level=info msg="Delete endpoint request" containerID=c073b2b532 endpointID=1658 k8sNamespace=openstack k8sPodName=ceph-object-controller-detect-version-t6wds subsys=daemon level=info msg="Releasing key" key="[k8s:app=ceph-object-controller-detect-version k8s:batch.kubernetes.io/controller-uid=34b403cd-6a7b-4e3b-9b32-da58f8b0328a k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version k8s:controller-uid=34b403cd-6a7b-4e3b-9b32-da58f8b0328a k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=ceph-object-controller-detect-version k8s:rook-version=v1.15.9]" subsys=allocator level=info msg="Removed endpoint" containerID=c073b2b532 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1658 identity=16887 ipv4=10.0.0.224 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-t6wds subsys=endpoint level=info msg="Delete endpoint request" containerID=6e08f2bd99 endpointID=848 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-90d79808-0aee-4268-b15d-33ca1c85bec8 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=6e08f2bd99 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=848 identity=6703 ipv4=10.0.0.124 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-90d79808-0aee-4268-b15d-33ca1c85bec8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.211 eb3a26db-53b1-488a-ad5d-0ae279abe8ba default }" containerID=43ca89790e25efd867da7040ce056166a4e11a9e6c6d0fde98a8a319dccf8429 datapathConfiguration="&{false false false false false }" interface=lxc7dca37382b99 k8sPodName=openstack/rabbitmq-glance-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=43ca89790e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=464 ipv4=10.0.0.211 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=43ca89790e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=464 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.211 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-glance;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=43ca89790e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=464 identity=24551 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.211 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=43ca89790e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=464 identity=24551 ipv4=10.0.0.211 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=43ca89790e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=464 identity=24551 ipv4=10.0.0.211 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=43ca89790e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=464 identity=24551 ipv4=10.0.0.211 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.100 b19dc067-4d5d-49e1-9f7a-3bc9ed6e0dc8 default }" containerID=6a11a7121aa30ece316a469244d20c5916cf25a1f1713f7a8a0fe1be06cc2b69 datapathConfiguration="&{false false false false false }" interface=lxce7ae795382a1 k8sPodName=openstack/glance-db-init-mxtw9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6a11a7121a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1928 ipv4=10.0.0.100 ipv6= k8sPodName=openstack/glance-db-init-mxtw9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6a11a7121a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1928 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=00d2b343-33d8-4fae-b7ff-b7f859a84848,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=00d2b343-33d8-4fae-b7ff-b7f859a84848,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.100 ipv6= k8sPodName=openstack/glance-db-init-mxtw9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=00d2b343-33d8-4fae-b7ff-b7f859a84848;k8s:batch.kubernetes.io/job-name=glance-db-init;k8s:component=db-init;k8s:controller-uid=00d2b343-33d8-4fae-b7ff-b7f859a84848;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-init;k8s:release_group=glance;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=6a11a7121a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1928 identity=23502 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=00d2b343-33d8-4fae-b7ff-b7f859a84848,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=00d2b343-33d8-4fae-b7ff-b7f859a84848,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.100 ipv6= k8sPodName=openstack/glance-db-init-mxtw9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6a11a7121a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1928 identity=23502 ipv4=10.0.0.100 ipv6= k8sPodName=openstack/glance-db-init-mxtw9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6a11a7121a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1928 identity=23502 ipv4=10.0.0.100 ipv6= k8sPodName=openstack/glance-db-init-mxtw9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=6a11a7121a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1928 identity=23502 ipv4=10.0.0.100 ipv6= k8sPodName=openstack/glance-db-init-mxtw9 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=6a11a7121a endpointID=1928 k8sNamespace=openstack k8sPodName=glance-db-init-mxtw9 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=00d2b343-33d8-4fae-b7ff-b7f859a84848 k8s:batch.kubernetes.io/job-name=glance-db-init k8s:component=db-init k8s:controller-uid=00d2b343-33d8-4fae-b7ff-b7f859a84848 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=6a11a7121a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1928 identity=23502 ipv4=10.0.0.100 ipv6= k8sPodName=openstack/glance-db-init-mxtw9 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.203 d4253d47-9330-4899-91b8-2a1fb6118998 default }" containerID=042b60e4dd3c82f5f445411539f9b59e2d517ffd0a0fb063913ec91a28583792 datapathConfiguration="&{false false false false false }" interface=lxcc263d3fefe69 k8sPodName=openstack/glance-db-sync-ng5g6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=042b60e4dd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=680 ipv4=10.0.0.203 ipv6= k8sPodName=openstack/glance-db-sync-ng5g6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=042b60e4dd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=680 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=c0c50595-5deb-42ce-8528-d259f6c3e8a9,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=c0c50595-5deb-42ce-8528-d259f6c3e8a9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.203 ipv6= k8sPodName=openstack/glance-db-sync-ng5g6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=042b60e4dd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=680 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.203 ipv6= k8sPodName=openstack/glance-db-sync-ng5g6 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=c0c50595-5deb-42ce-8528-d259f6c3e8a9;k8s:batch.kubernetes.io/job-name=glance-db-sync;k8s:component=db-sync;k8s:controller-uid=c0c50595-5deb-42ce-8528-d259f6c3e8a9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-sync;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=042b60e4dd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=680 identity=3016 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=c0c50595-5deb-42ce-8528-d259f6c3e8a9,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=c0c50595-5deb-42ce-8528-d259f6c3e8a9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.203 ipv6= k8sPodName=openstack/glance-db-sync-ng5g6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=042b60e4dd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=680 identity=3016 ipv4=10.0.0.203 ipv6= k8sPodName=openstack/glance-db-sync-ng5g6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=042b60e4dd datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=680 identity=3016 ipv4=10.0.0.203 ipv6= k8sPodName=openstack/glance-db-sync-ng5g6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=042b60e4dd datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=680 identity=3016 ipv4=10.0.0.203 ipv6= k8sPodName=openstack/glance-db-sync-ng5g6 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.248 d6d6db33-0055-4238-a1a1-16cf964c9983 default }" containerID=b9e4389c3b8a1843cd821fc39d778e1ed58aefb306dcfdc67ec90e88cc27c2e4 datapathConfiguration="&{false false false false false }" interface=lxc7f7576d868da k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-h8fjs labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b9e4389c3b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3821 ipv4=10.0.0.248 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-h8fjs subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b9e4389c3b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3821 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.248 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-h8fjs subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-rgw;k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io;k8s:app.kubernetes.io/created-by=rook-ceph-operator;k8s:app.kubernetes.io/instance=ceph;k8s:app.kubernetes.io/managed-by=rook-ceph-operator;k8s:app.kubernetes.io/name=ceph-rgw;k8s:app.kubernetes.io/part-of=ceph;k8s:ceph_daemon_id=ceph;k8s:ceph_daemon_type=rgw;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw;k8s:io.kubernetes.pod.namespace=openstack;k8s:rgw=ceph;k8s:rook.io/operator-namespace=rook-ceph;k8s:rook_cluster=openstack;k8s:rook_object_store=ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b9e4389c3b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3821 identity=2539 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.248 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-h8fjs oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b9e4389c3b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3821 identity=2539 ipv4=10.0.0.248 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-h8fjs subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.55 e3bdc865-d875-436e-adbe-e6668af28b31 default }" containerID=f0ff7ce8572bca3b0b9e5d6adaa1ee03973db5ed2077ead06c14d3d010d6604c datapathConfiguration="&{false false false false false }" interface=lxcb5b0f2a2ad33 k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-sk545 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f0ff7ce857 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=784 ipv4=10.0.0.55 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-sk545 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f0ff7ce857 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=784 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.55 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-sk545 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-crashcollector;k8s:ceph-version=18.2.7-0;k8s:ceph_daemon_id=crash;k8s:crashcollector=crash;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default;k8s:io.kubernetes.pod.namespace=openstack;k8s:node_name=instance;k8s:rook_cluster=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f0ff7ce857 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=784 identity=18144 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.55 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-sk545 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f0ff7ce857 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=784 identity=18144 ipv4=10.0.0.55 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-sk545 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b9e4389c3b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3821 identity=2539 ipv4=10.0.0.248 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-h8fjs subsys=endpoint level=info msg="Successful endpoint creation" containerID=b9e4389c3b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3821 identity=2539 ipv4=10.0.0.248 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-h8fjs subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=f0ff7ce857 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=784 identity=18144 ipv4=10.0.0.55 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-sk545 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f0ff7ce857 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=784 identity=18144 ipv4=10.0.0.55 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-sk545 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=042b60e4dd endpointID=680 k8sNamespace=openstack k8sPodName=glance-db-sync-ng5g6 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=c0c50595-5deb-42ce-8528-d259f6c3e8a9 k8s:batch.kubernetes.io/job-name=glance-db-sync k8s:component=db-sync k8s:controller-uid=c0c50595-5deb-42ce-8528-d259f6c3e8a9 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-sync k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=042b60e4dd datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=680 identity=3016 ipv4=10.0.0.203 ipv6= k8sPodName=openstack/glance-db-sync-ng5g6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.107 9dc9a963-4377-4d86-8004-50cec3dd49a7 default }" containerID=9fb2d5bc15ab0bbb01e722f21c262fc82869823a2c104a18a3ee58679b850fd6 datapathConfiguration="&{false false false false false }" interface=lxc40aee9f9b18c k8sPodName=openstack/glance-rabbit-init-8wvnf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9fb2d5bc15 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1462 ipv4=10.0.0.107 ipv6= k8sPodName=openstack/glance-rabbit-init-8wvnf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9fb2d5bc15 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1462 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=f2d8381f-0697-4f84-9a58-11d0e32f8592,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=f2d8381f-0697-4f84-9a58-11d0e32f8592,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.107 ipv6= k8sPodName=openstack/glance-rabbit-init-8wvnf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=f2d8381f-0697-4f84-9a58-11d0e32f8592;k8s:batch.kubernetes.io/job-name=glance-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=f2d8381f-0697-4f84-9a58-11d0e32f8592;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-rabbit-init;k8s:release_group=glance;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=9fb2d5bc15 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1462 identity=59257 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=f2d8381f-0697-4f84-9a58-11d0e32f8592,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=f2d8381f-0697-4f84-9a58-11d0e32f8592,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.107 ipv6= k8sPodName=openstack/glance-rabbit-init-8wvnf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9fb2d5bc15 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1462 identity=59257 ipv4=10.0.0.107 ipv6= k8sPodName=openstack/glance-rabbit-init-8wvnf subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9fb2d5bc15 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1462 identity=59257 ipv4=10.0.0.107 ipv6= k8sPodName=openstack/glance-rabbit-init-8wvnf subsys=endpoint level=info msg="Successful endpoint creation" containerID=9fb2d5bc15 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1462 identity=59257 ipv4=10.0.0.107 ipv6= k8sPodName=openstack/glance-rabbit-init-8wvnf subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=9fb2d5bc15 endpointID=1462 k8sNamespace=openstack k8sPodName=glance-rabbit-init-8wvnf subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=f2d8381f-0697-4f84-9a58-11d0e32f8592 k8s:batch.kubernetes.io/job-name=glance-rabbit-init k8s:component=rabbit-init k8s:controller-uid=f2d8381f-0697-4f84-9a58-11d0e32f8592 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-rabbit-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=9fb2d5bc15 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1462 identity=59257 ipv4=10.0.0.107 ipv6= k8sPodName=openstack/glance-rabbit-init-8wvnf subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.171 1d6c8f2d-6bc5-4f52-b2d4-04519107dba5 default }" containerID=08337f86ae330cba4815776c6daf4c7982534b711e0f3c0c169c3b2bef136a51 datapathConfiguration="&{false false false false false }" interface=lxc102a2b744e65 k8sPodName=openstack/glance-ks-service-w9fcr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=08337f86ae datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=88 ipv4=10.0.0.171 ipv6= k8sPodName=openstack/glance-ks-service-w9fcr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=08337f86ae datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=88 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=b38a7574-210d-4f5a-82db-13683eec0b82,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=b38a7574-210d-4f5a-82db-13683eec0b82,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.171 ipv6= k8sPodName=openstack/glance-ks-service-w9fcr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=b38a7574-210d-4f5a-82db-13683eec0b82;k8s:batch.kubernetes.io/job-name=glance-ks-service;k8s:component=ks-service;k8s:controller-uid=b38a7574-210d-4f5a-82db-13683eec0b82;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-service;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=08337f86ae datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=88 identity=18012 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=b38a7574-210d-4f5a-82db-13683eec0b82,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=b38a7574-210d-4f5a-82db-13683eec0b82,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.171 ipv6= k8sPodName=openstack/glance-ks-service-w9fcr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=08337f86ae datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=88 identity=18012 ipv4=10.0.0.171 ipv6= k8sPodName=openstack/glance-ks-service-w9fcr subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=08337f86ae datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=88 identity=18012 ipv4=10.0.0.171 ipv6= k8sPodName=openstack/glance-ks-service-w9fcr subsys=endpoint level=info msg="Successful endpoint creation" containerID=08337f86ae datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=88 identity=18012 ipv4=10.0.0.171 ipv6= k8sPodName=openstack/glance-ks-service-w9fcr subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=08337f86ae endpointID=88 k8sNamespace=openstack k8sPodName=glance-ks-service-w9fcr subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=b38a7574-210d-4f5a-82db-13683eec0b82 k8s:batch.kubernetes.io/job-name=glance-ks-service k8s:component=ks-service k8s:controller-uid=b38a7574-210d-4f5a-82db-13683eec0b82 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-service k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=08337f86ae datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=88 identity=18012 ipv4=10.0.0.171 ipv6= k8sPodName=openstack/glance-ks-service-w9fcr subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.30 31d52e02-6a8b-40c4-bf4b-04fb3d279096 default }" containerID=e1a534456833be5d4a1e758722716a60aca6c5a9cc094a080314035e50595b38 datapathConfiguration="&{false false false false false }" interface=lxc1a6a5fdd96c6 k8sPodName=openstack/glance-ks-endpoints-rrhg8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e1a5344568 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3899 ipv4=10.0.0.30 ipv6= k8sPodName=openstack/glance-ks-endpoints-rrhg8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e1a5344568 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3899 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=a1c79d15-59f0-422b-a882-af10625d868d,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=a1c79d15-59f0-422b-a882-af10625d868d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.30 ipv6= k8sPodName=openstack/glance-ks-endpoints-rrhg8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=a1c79d15-59f0-422b-a882-af10625d868d;k8s:batch.kubernetes.io/job-name=glance-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=a1c79d15-59f0-422b-a882-af10625d868d;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-endpoints;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e1a5344568 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3899 identity=22829 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=a1c79d15-59f0-422b-a882-af10625d868d,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=a1c79d15-59f0-422b-a882-af10625d868d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.30 ipv6= k8sPodName=openstack/glance-ks-endpoints-rrhg8 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=e1a5344568 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3899 identity=22829 ipv4=10.0.0.30 ipv6= k8sPodName=openstack/glance-ks-endpoints-rrhg8 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e1a5344568 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3899 identity=22829 ipv4=10.0.0.30 ipv6= k8sPodName=openstack/glance-ks-endpoints-rrhg8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=e1a5344568 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3899 identity=22829 ipv4=10.0.0.30 ipv6= k8sPodName=openstack/glance-ks-endpoints-rrhg8 subsys=daemon level=info msg="Delete endpoint request" containerID=e1a5344568 endpointID=3899 k8sNamespace=openstack k8sPodName=glance-ks-endpoints-rrhg8 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=a1c79d15-59f0-422b-a882-af10625d868d k8s:batch.kubernetes.io/job-name=glance-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=a1c79d15-59f0-422b-a882-af10625d868d k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-endpoints k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=e1a5344568 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3899 identity=22829 ipv4=10.0.0.30 ipv6= k8sPodName=openstack/glance-ks-endpoints-rrhg8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.103 ef156081-949b-44ff-8262-cf4efc95b58e default }" containerID=f781da532589b2388d94ce417fd515adb682ef1a6ac266c8300d698340e5a039 datapathConfiguration="&{false false false false false }" interface=lxcb2d91e322da7 k8sPodName=openstack/glance-ks-user-4lfjr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f781da5325 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1466 ipv4=10.0.0.103 ipv6= k8sPodName=openstack/glance-ks-user-4lfjr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f781da5325 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1466 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=c3931927-6415-4ee2-982c-85a44d0db23e,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=c3931927-6415-4ee2-982c-85a44d0db23e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.103 ipv6= k8sPodName=openstack/glance-ks-user-4lfjr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=c3931927-6415-4ee2-982c-85a44d0db23e;k8s:batch.kubernetes.io/job-name=glance-ks-user;k8s:component=ks-user;k8s:controller-uid=c3931927-6415-4ee2-982c-85a44d0db23e;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-user;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f781da5325 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1466 identity=7068 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=c3931927-6415-4ee2-982c-85a44d0db23e,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=c3931927-6415-4ee2-982c-85a44d0db23e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.103 ipv6= k8sPodName=openstack/glance-ks-user-4lfjr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f781da5325 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1466 identity=7068 ipv4=10.0.0.103 ipv6= k8sPodName=openstack/glance-ks-user-4lfjr subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f781da5325 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1466 identity=7068 ipv4=10.0.0.103 ipv6= k8sPodName=openstack/glance-ks-user-4lfjr subsys=endpoint level=info msg="Successful endpoint creation" containerID=f781da5325 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1466 identity=7068 ipv4=10.0.0.103 ipv6= k8sPodName=openstack/glance-ks-user-4lfjr subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=f781da5325 endpointID=1466 k8sNamespace=openstack k8sPodName=glance-ks-user-4lfjr subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=c3931927-6415-4ee2-982c-85a44d0db23e k8s:batch.kubernetes.io/job-name=glance-ks-user k8s:component=ks-user k8s:controller-uid=c3931927-6415-4ee2-982c-85a44d0db23e k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-user k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=f781da5325 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1466 identity=7068 ipv4=10.0.0.103 ipv6= k8sPodName=openstack/glance-ks-user-4lfjr subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.10 ac7a79dc-ae06-46cc-aca4-54732e4134e5 default }" containerID=274c24992d29fbeea5e76b227720499a18f2a8888239593246e6726edc635818 datapathConfiguration="&{false false false false false }" interface=lxca940d10d2223 k8sPodName=openstack/glance-metadefs-load-gnv8p labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=274c24992d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3430 ipv4=10.0.0.10 ipv6= k8sPodName=openstack/glance-metadefs-load-gnv8p subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=274c24992d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3430 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=cbe525de-361f-4877-9827-ec99efbe12fe,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=cbe525de-361f-4877-9827-ec99efbe12fe,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.10 ipv6= k8sPodName=openstack/glance-metadefs-load-gnv8p subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=274c24992d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3430 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.10 ipv6= k8sPodName=openstack/glance-metadefs-load-gnv8p line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=cbe525de-361f-4877-9827-ec99efbe12fe;k8s:batch.kubernetes.io/job-name=glance-metadefs-load;k8s:component=metadefs_load;k8s:controller-uid=cbe525de-361f-4877-9827-ec99efbe12fe;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-metadefs-load;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=274c24992d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3430 identity=64689 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=cbe525de-361f-4877-9827-ec99efbe12fe,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=cbe525de-361f-4877-9827-ec99efbe12fe,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.10 ipv6= k8sPodName=openstack/glance-metadefs-load-gnv8p oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=274c24992d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3430 identity=64689 ipv4=10.0.0.10 ipv6= k8sPodName=openstack/glance-metadefs-load-gnv8p subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=274c24992d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3430 identity=64689 ipv4=10.0.0.10 ipv6= k8sPodName=openstack/glance-metadefs-load-gnv8p subsys=endpoint level=info msg="Successful endpoint creation" containerID=274c24992d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3430 identity=64689 ipv4=10.0.0.10 ipv6= k8sPodName=openstack/glance-metadefs-load-gnv8p subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=274c24992d endpointID=3430 k8sNamespace=openstack k8sPodName=glance-metadefs-load-gnv8p subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=cbe525de-361f-4877-9827-ec99efbe12fe k8s:batch.kubernetes.io/job-name=glance-metadefs-load k8s:component=metadefs_load k8s:controller-uid=cbe525de-361f-4877-9827-ec99efbe12fe k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-metadefs-load k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=274c24992d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3430 identity=64689 ipv4=10.0.0.10 ipv6= k8sPodName=openstack/glance-metadefs-load-gnv8p subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.37 69070878-8aff-4b0e-8704-753d7b764f9b default }" containerID=a14e48938849202f1672215132f0bc0962b48ddd0618c958f6cb743e91b8035b datapathConfiguration="&{false false false false false }" interface=lxc00c97701114c k8sPodName=openstack/glance-storage-init-phpfl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a14e489388 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1565 ipv4=10.0.0.37 ipv6= k8sPodName=openstack/glance-storage-init-phpfl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a14e489388 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1565 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=62279ebc-168d-4145-87ca-13b262981ed4,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=62279ebc-168d-4145-87ca-13b262981ed4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.37 ipv6= k8sPodName=openstack/glance-storage-init-phpfl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=62279ebc-168d-4145-87ca-13b262981ed4;k8s:batch.kubernetes.io/job-name=glance-storage-init;k8s:component=storage-init;k8s:controller-uid=62279ebc-168d-4145-87ca-13b262981ed4;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-storage-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a14e489388 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1565 identity=22514 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=62279ebc-168d-4145-87ca-13b262981ed4,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=62279ebc-168d-4145-87ca-13b262981ed4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.37 ipv6= k8sPodName=openstack/glance-storage-init-phpfl oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a14e489388 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1565 identity=22514 ipv4=10.0.0.37 ipv6= k8sPodName=openstack/glance-storage-init-phpfl subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=a14e489388 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1565 identity=22514 ipv4=10.0.0.37 ipv6= k8sPodName=openstack/glance-storage-init-phpfl subsys=endpoint level=info msg="Successful endpoint creation" containerID=a14e489388 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1565 identity=22514 ipv4=10.0.0.37 ipv6= k8sPodName=openstack/glance-storage-init-phpfl subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=a14e489388 endpointID=1565 k8sNamespace=openstack k8sPodName=glance-storage-init-phpfl subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=62279ebc-168d-4145-87ca-13b262981ed4 k8s:batch.kubernetes.io/job-name=glance-storage-init k8s:component=storage-init k8s:controller-uid=62279ebc-168d-4145-87ca-13b262981ed4 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-storage-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=a14e489388 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1565 identity=22514 ipv4=10.0.0.37 ipv6= k8sPodName=openstack/glance-storage-init-phpfl subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.20 496aadf7-78c3-4b8f-ab84-33ea0efa1d36 default }" containerID=163cebe38601b5878b25d440e40c6c7401813b34285a979182a247664d319836 datapathConfiguration="&{false false false false false }" interface=lxc7739e5837162 k8sPodName=openstack/glance-api-655556bbf6-r2x9q labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=163cebe386 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=400 ipv4=10.0.0.20 ipv6= k8sPodName=openstack/glance-api-655556bbf6-r2x9q subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=163cebe386 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=400 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.20 ipv6= k8sPodName=openstack/glance-api-655556bbf6-r2x9q subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=163cebe386 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=400 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.20 ipv6= k8sPodName=openstack/glance-api-655556bbf6-r2x9q line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=163cebe386 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=400 identity=30969 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.20 ipv6= k8sPodName=openstack/glance-api-655556bbf6-r2x9q oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=163cebe386 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=400 identity=30969 ipv4=10.0.0.20 ipv6= k8sPodName=openstack/glance-api-655556bbf6-r2x9q subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=163cebe386 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=400 identity=30969 ipv4=10.0.0.20 ipv6= k8sPodName=openstack/glance-api-655556bbf6-r2x9q subsys=endpoint level=info msg="Successful endpoint creation" containerID=163cebe386 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=400 identity=30969 ipv4=10.0.0.20 ipv6= k8sPodName=openstack/glance-api-655556bbf6-r2x9q subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.178 5ddecc5b-85e2-4032-9b9d-dfdc707ed035 default }" containerID=e822c8505b2bc96098e589359aa8a54fdd8e6dab6a68269cc66875d0bba9727d datapathConfiguration="&{false false false false false }" interface=lxc2a20a08bc702 k8sPodName=openstack/staffeln-api-64c8cbddb5-s8vlk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e822c8505b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=904 ipv4=10.0.0.178 ipv6= k8sPodName=openstack/staffeln-api-64c8cbddb5-s8vlk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e822c8505b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=904 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.178 ipv6= k8sPodName=openstack/staffeln-api-64c8cbddb5-s8vlk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=e822c8505b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=904 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.178 ipv6= k8sPodName=openstack/staffeln-api-64c8cbddb5-s8vlk line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e822c8505b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=904 identity=50658 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.178 ipv6= k8sPodName=openstack/staffeln-api-64c8cbddb5-s8vlk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e822c8505b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=904 identity=50658 ipv4=10.0.0.178 ipv6= k8sPodName=openstack/staffeln-api-64c8cbddb5-s8vlk subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.21 14b7ee0d-7717-4d02-83b3-1c6ca1e11c11 default }" containerID=ebad3ec1742fbf77df051d8819ed8008d089af89688f02e1708125b9ab152cb7 datapathConfiguration="&{false false false false false }" interface=lxc93eb6a3517ae k8sPodName=openstack/staffeln-conductor-6f45698446-ddprt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ebad3ec174 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1983 ipv4=10.0.0.21 ipv6= k8sPodName=openstack/staffeln-conductor-6f45698446-ddprt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ebad3ec174 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1983 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.21 ipv6= k8sPodName=openstack/staffeln-conductor-6f45698446-ddprt subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=conductor;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ebad3ec174 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1983 identity=26915 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.21 ipv6= k8sPodName=openstack/staffeln-conductor-6f45698446-ddprt oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ebad3ec174 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1983 identity=26915 ipv4=10.0.0.21 ipv6= k8sPodName=openstack/staffeln-conductor-6f45698446-ddprt subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e822c8505b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=904 identity=50658 ipv4=10.0.0.178 ipv6= k8sPodName=openstack/staffeln-api-64c8cbddb5-s8vlk subsys=endpoint level=info msg="Successful endpoint creation" containerID=e822c8505b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=904 identity=50658 ipv4=10.0.0.178 ipv6= k8sPodName=openstack/staffeln-api-64c8cbddb5-s8vlk subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.80 66d837ee-7f56-4dd5-b0dc-3c240bc9e218 default }" containerID=46eaaa9585b8b65f06d62d1f344ded635e8fa7466209afa51006052f1d303fbb datapathConfiguration="&{false false false false false }" interface=lxc9849d2586ae5 k8sPodName=openstack/staffeln-db-init-5p8f2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=46eaaa9585 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1272 ipv4=10.0.0.80 ipv6= k8sPodName=openstack/staffeln-db-init-5p8f2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=46eaaa9585 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1272 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=f52b7feb-3521-486b-b770-7321f78ffb60,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=f52b7feb-3521-486b-b770-7321f78ffb60,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.80 ipv6= k8sPodName=openstack/staffeln-db-init-5p8f2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=f52b7feb-3521-486b-b770-7321f78ffb60;k8s:batch.kubernetes.io/job-name=staffeln-db-init;k8s:component=db-init;k8s:controller-uid=f52b7feb-3521-486b-b770-7321f78ffb60;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-init;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=46eaaa9585 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1272 identity=3936 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=f52b7feb-3521-486b-b770-7321f78ffb60,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=f52b7feb-3521-486b-b770-7321f78ffb60,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.80 ipv6= k8sPodName=openstack/staffeln-db-init-5p8f2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=46eaaa9585 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1272 identity=3936 ipv4=10.0.0.80 ipv6= k8sPodName=openstack/staffeln-db-init-5p8f2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ebad3ec174 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1983 identity=26915 ipv4=10.0.0.21 ipv6= k8sPodName=openstack/staffeln-conductor-6f45698446-ddprt subsys=endpoint level=info msg="Successful endpoint creation" containerID=ebad3ec174 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1983 identity=26915 ipv4=10.0.0.21 ipv6= k8sPodName=openstack/staffeln-conductor-6f45698446-ddprt subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=46eaaa9585 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1272 identity=3936 ipv4=10.0.0.80 ipv6= k8sPodName=openstack/staffeln-db-init-5p8f2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=46eaaa9585 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1272 identity=3936 ipv4=10.0.0.80 ipv6= k8sPodName=openstack/staffeln-db-init-5p8f2 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=46eaaa9585 endpointID=1272 k8sNamespace=openstack k8sPodName=staffeln-db-init-5p8f2 subsys=daemon level=info msg="Releasing key" key="[k8s:application=staffeln k8s:batch.kubernetes.io/controller-uid=f52b7feb-3521-486b-b770-7321f78ffb60 k8s:batch.kubernetes.io/job-name=staffeln-db-init k8s:component=db-init k8s:controller-uid=f52b7feb-3521-486b-b770-7321f78ffb60 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=staffeln-db-init k8s:release_group=staffeln]" subsys=allocator level=info msg="Removed endpoint" containerID=46eaaa9585 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1272 identity=3936 ipv4=10.0.0.80 ipv6= k8sPodName=openstack/staffeln-db-init-5p8f2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.10 5152e329-5c45-4910-9276-fb5c0464add2 default }" containerID=9f9ac486a5a689a257853fc8ee649bb0e8fae116690931bcdc86cacab422e1e7 datapathConfiguration="&{false false false false false }" interface=lxcb781f751917c k8sPodName=openstack/staffeln-db-sync-qzg5x labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9f9ac486a5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1108 ipv4=10.0.0.10 ipv6= k8sPodName=openstack/staffeln-db-sync-qzg5x subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9f9ac486a5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1108 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=e43c7cca-8001-4a6b-9c60-972c6c092dd0,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=e43c7cca-8001-4a6b-9c60-972c6c092dd0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.10 ipv6= k8sPodName=openstack/staffeln-db-sync-qzg5x subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=e43c7cca-8001-4a6b-9c60-972c6c092dd0;k8s:batch.kubernetes.io/job-name=staffeln-db-sync;k8s:component=db-sync;k8s:controller-uid=e43c7cca-8001-4a6b-9c60-972c6c092dd0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-sync;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9f9ac486a5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1108 identity=19277 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=e43c7cca-8001-4a6b-9c60-972c6c092dd0,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=e43c7cca-8001-4a6b-9c60-972c6c092dd0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.10 ipv6= k8sPodName=openstack/staffeln-db-sync-qzg5x oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=9f9ac486a5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1108 identity=19277 ipv4=10.0.0.10 ipv6= k8sPodName=openstack/staffeln-db-sync-qzg5x subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9f9ac486a5 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1108 identity=19277 ipv4=10.0.0.10 ipv6= k8sPodName=openstack/staffeln-db-sync-qzg5x subsys=endpoint level=info msg="Successful endpoint creation" containerID=9f9ac486a5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1108 identity=19277 ipv4=10.0.0.10 ipv6= k8sPodName=openstack/staffeln-db-sync-qzg5x subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager