level=info msg="Memory available for map entries (0.003% of 67421642752B): 168554106B" subsys=config level=info msg="option bpf-ct-global-tcp-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-ct-global-any-max set by dynamic sizing to 295708" subsys=config level=info msg="option bpf-nat-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-neigh-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-sock-rev-map-max set by dynamic sizing to 295708" subsys=config level=info msg=" --agent-health-port='9879'" subsys=daemon level=info msg=" --agent-labels=''" subsys=daemon level=info msg=" --agent-liveness-update-interval='1s'" subsys=daemon level=info msg=" --agent-not-ready-taint-key='node.cilium.io/agent-not-ready'" subsys=daemon level=info msg=" --allocator-list-timeout='3m0s'" subsys=daemon level=info msg=" --allow-icmp-frag-needed='true'" subsys=daemon level=info msg=" --allow-localhost='auto'" subsys=daemon level=info msg=" --annotate-k8s-node='false'" subsys=daemon level=info msg=" --api-rate-limit=''" subsys=daemon level=info msg=" --arping-refresh-period='30s'" subsys=daemon level=info msg=" --auto-create-cilium-node-resource='true'" subsys=daemon level=info msg=" --auto-direct-node-routes='false'" subsys=daemon level=info msg=" --bgp-announce-lb-ip='false'" subsys=daemon level=info msg=" --bgp-announce-pod-cidr='false'" subsys=daemon level=info msg=" --bgp-config-path='/var/lib/cilium/bgp/config.yaml'" subsys=daemon level=info msg=" --bpf-auth-map-max='524288'" subsys=daemon level=info msg=" --bpf-ct-global-any-max='262144'" subsys=daemon level=info msg=" --bpf-ct-global-tcp-max='524288'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-fin='10s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-syn='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp-grace='1m0s'" subsys=daemon level=info msg=" --bpf-filter-priority='1'" subsys=daemon level=info msg=" --bpf-fragments-map-max='8192'" subsys=daemon level=info msg=" --bpf-lb-acceleration='disabled'" subsys=daemon level=info msg=" --bpf-lb-affinity-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-algorithm='random'" subsys=daemon level=info msg=" --bpf-lb-dev-ip-addr-inherit=''" subsys=daemon level=info msg=" --bpf-lb-dsr-dispatch='opt'" subsys=daemon level=info msg=" --bpf-lb-dsr-l4-xlate='frontend'" subsys=daemon level=info msg=" --bpf-lb-external-clusterip='false'" subsys=daemon level=info msg=" --bpf-lb-maglev-hash-seed='JLfvgnHc2kaSUFaI'" subsys=daemon level=info msg=" --bpf-lb-maglev-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-maglev-table-size='16381'" subsys=daemon level=info msg=" --bpf-lb-map-max='65536'" subsys=daemon level=info msg=" --bpf-lb-mode='snat'" subsys=daemon level=info msg=" --bpf-lb-rev-nat-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-rss-ipv4-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-rss-ipv6-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-service-backend-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-service-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-sock='false'" subsys=daemon level=info msg=" --bpf-lb-sock-hostns-only='false'" subsys=daemon level=info msg=" --bpf-lb-source-range-map-max='0'" subsys=daemon level=info msg=" --bpf-map-dynamic-size-ratio='0.0025'" subsys=daemon level=info msg=" --bpf-map-event-buffers=''" subsys=daemon level=info msg=" --bpf-nat-global-max='524288'" subsys=daemon level=info msg=" --bpf-neigh-global-max='524288'" subsys=daemon level=info msg=" --bpf-policy-map-full-reconciliation-interval='15m0s'" subsys=daemon level=info msg=" --bpf-policy-map-max='16384'" subsys=daemon level=info msg=" --bpf-root='/sys/fs/bpf'" subsys=daemon level=info msg=" --bpf-sock-rev-map-max='262144'" subsys=daemon level=info msg=" --bypass-ip-availability-upon-restore='false'" subsys=daemon level=info msg=" --certificates-directory='/var/run/cilium/certs'" subsys=daemon level=info msg=" --cflags=''" subsys=daemon level=info msg=" --cgroup-root='/run/cilium/cgroupv2'" subsys=daemon level=info msg=" --cilium-endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --cluster-health-port='4240'" subsys=daemon level=info msg=" --cluster-id='0'" subsys=daemon level=info msg=" --cluster-name='default'" subsys=daemon level=info msg=" --cluster-pool-ipv4-cidr='10.0.0.0/8'" subsys=daemon level=info msg=" --cluster-pool-ipv4-mask-size='24'" subsys=daemon level=info msg=" --clustermesh-config='/var/lib/cilium/clustermesh/'" subsys=daemon level=info msg=" --clustermesh-ip-identities-sync-timeout='1m0s'" subsys=daemon level=info msg=" --cmdref=''" subsys=daemon level=info msg=" --cni-chaining-mode='none'" subsys=daemon level=info msg=" --cni-chaining-target=''" subsys=daemon level=info msg=" --cni-exclusive='true'" subsys=daemon level=info msg=" --cni-external-routing='false'" subsys=daemon level=info msg=" --cni-log-file='/var/run/cilium/cilium-cni.log'" subsys=daemon level=info msg=" --cnp-node-status-gc-interval='0s'" subsys=daemon level=info msg=" --config=''" subsys=daemon level=info msg=" --config-dir='/tmp/cilium/config-map'" subsys=daemon level=info msg=" --config-sources='config-map:kube-system/cilium-config'" subsys=daemon level=info msg=" --conntrack-gc-interval='0s'" subsys=daemon level=info msg=" --conntrack-gc-max-interval='0s'" subsys=daemon level=info msg=" --crd-wait-timeout='5m0s'" subsys=daemon level=info msg=" --custom-cni-conf='false'" subsys=daemon level=info msg=" --datapath-mode='veth'" subsys=daemon level=info msg=" --debug='false'" subsys=daemon level=info msg=" --debug-verbose=''" subsys=daemon level=info msg=" --derive-masquerade-ip-addr-from-device=''" subsys=daemon level=info msg=" --devices=''" subsys=daemon level=info msg=" --direct-routing-device=''" subsys=daemon level=info msg=" --disable-cnp-status-updates='true'" subsys=daemon level=info msg=" --disable-endpoint-crd='false'" subsys=daemon level=info msg=" --disable-envoy-version-check='false'" subsys=daemon level=info msg=" --disable-iptables-feeder-rules=''" subsys=daemon level=info msg=" --dns-max-ips-per-restored-rule='1000'" subsys=daemon level=info msg=" --dns-policy-unload-on-shutdown='false'" subsys=daemon level=info msg=" --dnsproxy-concurrency-limit='0'" subsys=daemon level=info msg=" --dnsproxy-concurrency-processing-grace-period='0s'" subsys=daemon level=info msg=" --dnsproxy-enable-transparent-mode='true'" subsys=daemon level=info msg=" --dnsproxy-lock-count='128'" subsys=daemon level=info msg=" --dnsproxy-lock-timeout='500ms'" subsys=daemon level=info msg=" --egress-gateway-policy-map-max='16384'" subsys=daemon level=info msg=" --egress-gateway-reconciliation-trigger-interval='1s'" subsys=daemon level=info msg=" --egress-masquerade-interfaces=''" subsys=daemon level=info msg=" --egress-multi-home-ip-rule-compat='false'" subsys=daemon level=info msg=" --enable-auto-protect-node-port-range='true'" subsys=daemon level=info msg=" --enable-bandwidth-manager='false'" subsys=daemon level=info msg=" --enable-bbr='false'" subsys=daemon level=info msg=" --enable-bgp-control-plane='false'" subsys=daemon level=info msg=" --enable-bpf-clock-probe='false'" subsys=daemon level=info msg=" --enable-bpf-masquerade='false'" subsys=daemon level=info msg=" --enable-bpf-tproxy='false'" subsys=daemon level=info msg=" --enable-cilium-api-server-access='*'" subsys=daemon level=info msg=" --enable-cilium-endpoint-slice='false'" subsys=daemon level=info msg=" --enable-cilium-health-api-server-access='*'" subsys=daemon level=info msg=" --enable-custom-calls='false'" subsys=daemon level=info msg=" --enable-endpoint-health-checking='true'" subsys=daemon level=info msg=" --enable-endpoint-routes='false'" subsys=daemon level=info msg=" --enable-envoy-config='false'" subsys=daemon level=info msg=" --enable-external-ips='false'" subsys=daemon level=info msg=" --enable-health-check-nodeport='true'" subsys=daemon level=info msg=" --enable-health-checking='true'" subsys=daemon level=info msg=" --enable-high-scale-ipcache='false'" subsys=daemon level=info msg=" --enable-host-firewall='false'" subsys=daemon level=info msg=" --enable-host-legacy-routing='false'" subsys=daemon level=info msg=" --enable-host-port='false'" subsys=daemon level=info msg=" --enable-hubble='false'" subsys=daemon level=info msg=" --enable-hubble-recorder-api='true'" subsys=daemon level=info msg=" --enable-icmp-rules='true'" subsys=daemon level=info msg=" --enable-identity-mark='true'" subsys=daemon level=info msg=" --enable-ip-masq-agent='false'" subsys=daemon level=info msg=" --enable-ipsec='false'" subsys=daemon level=info msg=" --enable-ipsec-key-watcher='true'" subsys=daemon level=info msg=" --enable-ipv4='true'" subsys=daemon level=info msg=" --enable-ipv4-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv4-egress-gateway='false'" subsys=daemon level=info msg=" --enable-ipv4-fragment-tracking='true'" subsys=daemon level=info msg=" --enable-ipv4-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6='false'" subsys=daemon level=info msg=" --enable-ipv6-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv6-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6-ndp='false'" subsys=daemon level=info msg=" --enable-k8s='true'" subsys=daemon level=info msg=" --enable-k8s-api-discovery='false'" subsys=daemon level=info msg=" --enable-k8s-endpoint-slice='true'" subsys=daemon level=info msg=" --enable-k8s-event-handover='false'" subsys=daemon level=info msg=" --enable-k8s-networkpolicy='true'" subsys=daemon level=info msg=" --enable-k8s-terminating-endpoint='true'" subsys=daemon level=info msg=" --enable-l2-announcements='false'" subsys=daemon level=info msg=" --enable-l2-neigh-discovery='true'" subsys=daemon level=info msg=" --enable-l2-pod-announcements='false'" subsys=daemon level=info msg=" --enable-l7-proxy='true'" subsys=daemon level=info msg=" --enable-local-node-route='true'" subsys=daemon level=info msg=" --enable-local-redirect-policy='false'" subsys=daemon level=info msg=" --enable-mke='false'" subsys=daemon level=info msg=" --enable-monitor='true'" subsys=daemon level=info msg=" --enable-nat46x64-gateway='false'" subsys=daemon level=info msg=" --enable-node-port='false'" subsys=daemon level=info msg=" --enable-pmtu-discovery='false'" subsys=daemon level=info msg=" --enable-policy='default'" subsys=daemon level=info msg=" --enable-recorder='false'" subsys=daemon level=info msg=" --enable-remote-node-identity='true'" subsys=daemon level=info msg=" --enable-runtime-device-detection='false'" subsys=daemon level=info msg=" --enable-sctp='false'" subsys=daemon level=info msg=" --enable-service-topology='false'" subsys=daemon level=info msg=" --enable-session-affinity='false'" subsys=daemon level=info msg=" --enable-srv6='false'" subsys=daemon level=info msg=" --enable-stale-cilium-endpoint-cleanup='true'" subsys=daemon level=info msg=" --enable-svc-source-range-check='true'" subsys=daemon level=info msg=" --enable-tracing='false'" subsys=daemon level=info msg=" --enable-unreachable-routes='false'" subsys=daemon level=info msg=" --enable-vtep='false'" subsys=daemon level=info msg=" --enable-well-known-identities='false'" subsys=daemon level=info msg=" --enable-wireguard='false'" subsys=daemon level=info msg=" --enable-wireguard-userspace-fallback='false'" subsys=daemon level=info msg=" --enable-xdp-prefilter='false'" subsys=daemon level=info msg=" --enable-xt-socket-fallback='true'" subsys=daemon level=info msg=" --encrypt-interface=''" subsys=daemon level=info msg=" --encrypt-node='false'" subsys=daemon level=info msg=" --endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --endpoint-queue-size='25'" subsys=daemon level=info msg=" --endpoint-status=''" subsys=daemon level=info msg=" --envoy-config-timeout='2m0s'" subsys=daemon level=info msg=" --envoy-log=''" subsys=daemon level=info msg=" --exclude-local-address=''" subsys=daemon level=info msg=" --external-envoy-proxy='false'" subsys=daemon level=info msg=" --fixed-identity-mapping=''" subsys=daemon level=info msg=" --fqdn-regex-compile-lru-size='1024'" subsys=daemon level=info msg=" --gops-port='9890'" subsys=daemon level=info msg=" --http-403-msg=''" subsys=daemon level=info msg=" --http-idle-timeout='0'" subsys=daemon level=info msg=" --http-max-grpc-timeout='0'" subsys=daemon level=info msg=" --http-normalize-path='true'" subsys=daemon level=info msg=" --http-request-timeout='3600'" subsys=daemon level=info msg=" --http-retry-count='3'" subsys=daemon level=info msg=" --http-retry-timeout='0'" subsys=daemon level=info msg=" --hubble-disable-tls='false'" subsys=daemon level=info msg=" --hubble-event-buffer-capacity='4095'" subsys=daemon level=info msg=" --hubble-event-queue-size='0'" subsys=daemon level=info msg=" --hubble-export-file-compress='false'" subsys=daemon level=info msg=" --hubble-export-file-max-backups='5'" subsys=daemon level=info msg=" --hubble-export-file-max-size-mb='10'" subsys=daemon level=info msg=" --hubble-export-file-path=''" subsys=daemon level=info msg=" --hubble-listen-address=''" subsys=daemon level=info msg=" --hubble-metrics=''" subsys=daemon level=info msg=" --hubble-metrics-server=''" subsys=daemon level=info msg=" --hubble-monitor-events=''" subsys=daemon level=info msg=" --hubble-prefer-ipv6='false'" subsys=daemon level=info msg=" --hubble-recorder-sink-queue-size='1024'" subsys=daemon level=info msg=" --hubble-recorder-storage-path='/var/run/cilium/pcaps'" subsys=daemon level=info msg=" --hubble-skip-unknown-cgroup-ids='true'" subsys=daemon level=info msg=" --hubble-socket-path='/var/run/cilium/hubble.sock'" subsys=daemon level=info msg=" --hubble-tls-cert-file=''" subsys=daemon level=info msg=" --hubble-tls-client-ca-files=''" subsys=daemon level=info msg=" --hubble-tls-key-file=''" subsys=daemon level=info msg=" --identity-allocation-mode='crd'" subsys=daemon level=info msg=" --identity-change-grace-period='5s'" subsys=daemon level=info msg=" --identity-gc-interval='15m0s'" subsys=daemon level=info msg=" --identity-heartbeat-timeout='30m0s'" subsys=daemon level=info msg=" --identity-restore-grace-period='10m0s'" subsys=daemon level=info msg=" --install-egress-gateway-routes='false'" subsys=daemon level=info msg=" --install-iptables-rules='true'" subsys=daemon level=info msg=" --install-no-conntrack-iptables-rules='false'" subsys=daemon level=info msg=" --ip-allocation-timeout='2m0s'" subsys=daemon level=info msg=" --ip-masq-agent-config-path='/etc/config/ip-masq-agent'" subsys=daemon level=info msg=" --ipam='cluster-pool'" subsys=daemon level=info msg=" --ipam-cilium-node-update-rate='15s'" subsys=daemon level=info msg=" --ipam-multi-pool-pre-allocation='default=8'" subsys=daemon level=info msg=" --ipsec-key-file=''" subsys=daemon level=info msg=" --ipsec-key-rotation-duration='5m0s'" subsys=daemon level=info msg=" --iptables-lock-timeout='5s'" subsys=daemon level=info msg=" --iptables-random-fully='false'" subsys=daemon level=info msg=" --ipv4-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv4-node='auto'" subsys=daemon level=info msg=" --ipv4-pod-subnets=''" subsys=daemon level=info msg=" --ipv4-range='auto'" subsys=daemon level=info msg=" --ipv4-service-loopback-address='169.254.42.1'" subsys=daemon level=info msg=" --ipv4-service-range='auto'" subsys=daemon level=info msg=" --ipv6-cluster-alloc-cidr='f00d::/64'" subsys=daemon level=info msg=" --ipv6-mcast-device=''" subsys=daemon level=info msg=" --ipv6-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv6-node='auto'" subsys=daemon level=info msg=" --ipv6-pod-subnets=''" subsys=daemon level=info msg=" --ipv6-range='auto'" subsys=daemon level=info msg=" --ipv6-service-range='auto'" subsys=daemon level=info msg=" --join-cluster='false'" subsys=daemon level=info msg=" --k8s-api-server=''" subsys=daemon level=info msg=" --k8s-client-burst='10'" subsys=daemon level=info msg=" --k8s-client-qps='5'" subsys=daemon level=info msg=" --k8s-heartbeat-timeout='30s'" subsys=daemon level=info msg=" --k8s-kubeconfig-path=''" subsys=daemon level=info msg=" --k8s-namespace='kube-system'" subsys=daemon level=info msg=" --k8s-require-ipv4-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-require-ipv6-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-service-cache-size='128'" subsys=daemon level=info msg=" --k8s-service-proxy-name=''" subsys=daemon level=info msg=" --k8s-sync-timeout='3m0s'" subsys=daemon level=info msg=" --k8s-watcher-endpoint-selector='metadata.name!=kube-scheduler,metadata.name!=kube-controller-manager,metadata.name!=etcd-operator,metadata.name!=gcp-controller-manager'" subsys=daemon level=info msg=" --keep-config='false'" subsys=daemon level=info msg=" --kube-proxy-replacement='disabled'" subsys=daemon level=info msg=" --kube-proxy-replacement-healthz-bind-address=''" subsys=daemon level=info msg=" --kvstore=''" subsys=daemon level=info msg=" --kvstore-connectivity-timeout='2m0s'" subsys=daemon level=info msg=" --kvstore-lease-ttl='15m0s'" subsys=daemon level=info msg=" --kvstore-max-consecutive-quorum-errors='2'" subsys=daemon level=info msg=" --kvstore-opt=''" subsys=daemon level=info msg=" --kvstore-periodic-sync='5m0s'" subsys=daemon level=info msg=" --l2-announcements-lease-duration='15s'" subsys=daemon level=info msg=" --l2-announcements-renew-deadline='5s'" subsys=daemon level=info msg=" --l2-announcements-retry-period='2s'" subsys=daemon level=info msg=" --l2-pod-announcements-interface=''" subsys=daemon level=info msg=" --label-prefix-file=''" subsys=daemon level=info msg=" --labels=''" subsys=daemon level=info msg=" --lib-dir='/var/lib/cilium'" subsys=daemon level=info msg=" --local-max-addr-scope='252'" subsys=daemon level=info msg=" --local-router-ipv4=''" subsys=daemon level=info msg=" --local-router-ipv6=''" subsys=daemon level=info msg=" --log-driver=''" subsys=daemon level=info msg=" --log-opt=''" subsys=daemon level=info msg=" --log-system-load='false'" subsys=daemon level=info msg=" --max-controller-interval='0'" subsys=daemon level=info msg=" --mesh-auth-enabled='true'" subsys=daemon level=info msg=" --mesh-auth-gc-interval='5m0s'" subsys=daemon level=info msg=" --mesh-auth-mutual-listener-port='0'" subsys=daemon level=info msg=" --mesh-auth-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-rotated-identities-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-signal-backoff-duration='1s'" subsys=daemon level=info msg=" --mesh-auth-spiffe-trust-domain='spiffe.cilium'" subsys=daemon level=info msg=" --mesh-auth-spire-admin-socket=''" subsys=daemon level=info msg=" --metrics=''" subsys=daemon level=info msg=" --mke-cgroup-mount=''" subsys=daemon level=info msg=" --monitor-aggregation='medium'" subsys=daemon level=info msg=" --monitor-aggregation-flags='all'" subsys=daemon level=info msg=" --monitor-aggregation-interval='5s'" subsys=daemon level=info msg=" --monitor-queue-size='0'" subsys=daemon level=info msg=" --mtu='0'" subsys=daemon level=info msg=" --node-encryption-opt-out-labels='node-role.kubernetes.io/control-plane'" subsys=daemon level=info msg=" --node-port-acceleration='disabled'" subsys=daemon level=info msg=" --node-port-algorithm='random'" subsys=daemon level=info msg=" --node-port-bind-protection='true'" subsys=daemon level=info msg=" --node-port-mode='snat'" subsys=daemon level=info msg=" --node-port-range='30000,32767'" subsys=daemon level=info msg=" --nodes-gc-interval='5m0s'" subsys=daemon level=info msg=" --operator-api-serve-addr='127.0.0.1:9234'" subsys=daemon level=info msg=" --policy-audit-mode='false'" subsys=daemon level=info msg=" --policy-queue-size='100'" subsys=daemon level=info msg=" --policy-trigger-interval='1s'" subsys=daemon level=info msg=" --pprof='false'" subsys=daemon level=info msg=" --pprof-address='localhost'" subsys=daemon level=info msg=" --pprof-port='6060'" subsys=daemon level=info msg=" --preallocate-bpf-maps='false'" subsys=daemon level=info msg=" --prepend-iptables-chains='true'" subsys=daemon level=info msg=" --procfs='/host/proc'" subsys=daemon level=info msg=" --prometheus-serve-addr=':9962'" subsys=daemon level=info msg=" --proxy-connect-timeout='2'" subsys=daemon level=info msg=" --proxy-gid='1337'" subsys=daemon level=info msg=" --proxy-idle-timeout-seconds='60'" subsys=daemon level=info msg=" --proxy-max-connection-duration-seconds='0'" subsys=daemon level=info msg=" --proxy-max-requests-per-connection='0'" subsys=daemon level=info msg=" --proxy-prometheus-port='9964'" subsys=daemon level=info msg=" --read-cni-conf=''" subsys=daemon level=info msg=" --remove-cilium-node-taints='true'" subsys=daemon level=info msg=" --restore='true'" subsys=daemon level=info msg=" --route-metric='0'" subsys=daemon level=info msg=" --routing-mode='tunnel'" subsys=daemon level=info msg=" --set-cilium-is-up-condition='true'" subsys=daemon level=info msg=" --set-cilium-node-taints='true'" subsys=daemon level=info msg=" --sidecar-istio-proxy-image='cilium/istio_proxy'" subsys=daemon level=info msg=" --single-cluster-route='false'" subsys=daemon level=info msg=" --skip-cnp-status-startup-clean='false'" subsys=daemon level=info msg=" --socket-path='/var/run/cilium/cilium.sock'" subsys=daemon level=info msg=" --srv6-encap-mode='reduced'" subsys=daemon level=info msg=" --state-dir='/var/run/cilium'" subsys=daemon level=info msg=" --synchronize-k8s-nodes='true'" subsys=daemon level=info msg=" --tofqdns-dns-reject-response-code='refused'" subsys=daemon level=info msg=" --tofqdns-enable-dns-compression='true'" subsys=daemon level=info msg=" --tofqdns-endpoint-max-ip-per-hostname='50'" subsys=daemon level=info msg=" --tofqdns-idle-connection-grace-period='0s'" subsys=daemon level=info msg=" --tofqdns-max-deferred-connection-deletes='10000'" subsys=daemon level=info msg=" --tofqdns-min-ttl='0'" subsys=daemon level=info msg=" --tofqdns-pre-cache=''" subsys=daemon level=info msg=" --tofqdns-proxy-port='0'" subsys=daemon level=info msg=" --tofqdns-proxy-response-max-delay='100ms'" subsys=daemon level=info msg=" --trace-payloadlen='128'" subsys=daemon level=info msg=" --trace-sock='true'" subsys=daemon level=info msg=" --tunnel=''" subsys=daemon level=info msg=" --tunnel-port='6082'" subsys=daemon level=info msg=" --tunnel-protocol='geneve'" subsys=daemon level=info msg=" --unmanaged-pod-watcher-interval='15'" subsys=daemon level=info msg=" --use-cilium-internal-ip-for-ipsec='false'" subsys=daemon level=info msg=" --version='false'" subsys=daemon level=info msg=" --vlan-bpf-bypass=''" subsys=daemon level=info msg=" --vtep-cidr=''" subsys=daemon level=info msg=" --vtep-endpoint=''" subsys=daemon level=info msg=" --vtep-mac=''" subsys=daemon level=info msg=" --vtep-mask=''" subsys=daemon level=info msg=" --wireguard-encapsulate='false'" subsys=daemon level=info msg=" --write-cni-conf-when-ready='/host/etc/cni/net.d/05-cilium.conflist'" subsys=daemon level=info msg=" _ _ _" subsys=daemon level=info msg=" ___|_| |_|_ _ _____" subsys=daemon level=info msg="| _| | | | | | |" subsys=daemon level=info msg="|___|_|_|_|___|_|_|_|" subsys=daemon level=info msg="Cilium 1.14.8 cf6e022e 2024-03-13T12:23:35-04:00 go version go1.21.8 linux/amd64" subsys=daemon level=info msg="clang (10.0.0) and kernel (5.15.0) versions: OK!" subsys=linux-datapath level=info msg="linking environment: OK!" subsys=linux-datapath level=info msg="Kernel config file not found: if the agent fails to start, check the system requirements at https://docs.cilium.io/en/stable/operations/system_requirements" subsys=probes level=info msg="Detected mounted BPF filesystem at /sys/fs/bpf" subsys=bpf level=info msg="Mounted cgroupv2 filesystem at /run/cilium/cgroupv2" subsys=cgroups level=info msg="Parsing base label prefixes from default label list" subsys=labels-filter level=info msg="Parsing additional label prefixes from user inputs: []" subsys=labels-filter level=info msg="Final label prefixes to be used for identity evaluation:" subsys=labels-filter level=info msg=" - reserved:.*" subsys=labels-filter level=info msg=" - :io\\.kubernetes\\.pod\\.namespace" subsys=labels-filter level=info msg=" - :io\\.cilium\\.k8s\\.namespace\\.labels" subsys=labels-filter level=info msg=" - :app\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:io\\.kubernetes" subsys=labels-filter level=info msg=" - !:kubernetes\\.io" subsys=labels-filter level=info msg=" - !:.*beta\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:k8s\\.io" subsys=labels-filter level=info msg=" - !:pod-template-generation" subsys=labels-filter level=info msg=" - !:pod-template-hash" subsys=labels-filter level=info msg=" - !:controller-revision-hash" subsys=labels-filter level=info msg=" - !:annotation.*" subsys=labels-filter level=info msg=" - !:etcd_node" subsys=labels-filter level=info msg=Invoked duration="981.078µs" function="pprof.glob..func1 (cell.go:50)" subsys=hive level=info msg=Invoked duration="57.361µs" function="gops.registerGopsHooks (cell.go:38)" subsys=hive level=info msg=Invoked duration=1.092161ms function="metrics.NewRegistry (registry.go:65)" subsys=hive level=info msg=Invoked duration="10.71µs" function="metrics.glob..func1 (cell.go:12)" subsys=hive level=info msg="Spire Delegate API Client is disabled as no socket path is configured" subsys=spire-delegate level=info msg="Mutual authentication handler is disabled as no port is configured" subsys=auth level=info msg=Invoked duration=96.298744ms function="cmd.glob..func4 (daemon_main.go:1607)" subsys=hive level=info msg=Invoked duration="10.49µs" function="gc.registerSignalHandler (cell.go:47)" subsys=hive level=info msg=Invoked duration="12.35µs" function="utime.initUtimeSync (cell.go:29)" subsys=hive level=info msg=Invoked duration="47.561µs" function="agentliveness.newAgentLivenessUpdater (agent_liveness.go:43)" subsys=hive level=info msg=Invoked duration="53.171µs" function="l2responder.NewL2ResponderReconciler (l2responder.go:63)" subsys=hive level=info msg=Invoked duration="66.812µs" function="garp.newGARPProcessor (processor.go:27)" subsys=hive level=info msg=Starting subsys=hive level=info msg="Started gops server" address="127.0.0.1:9890" subsys=gops level=info msg="Start hook executed" duration="422.638µs" function="gops.registerGopsHooks.func1 (cell.go:43)" subsys=hive level=info msg="Start hook executed" duration="1.981µs" function="metrics.NewRegistry.func1 (registry.go:86)" subsys=hive level=info msg="Establishing connection to apiserver" host="https://10.96.0.1:443" subsys=k8s-client level=info msg="Serving prometheus metrics on :9962" subsys=metrics level=info msg="Connected to apiserver" subsys=k8s-client level=info msg="Start hook executed" duration=8.389676ms function="client.(*compositeClientset).onStart" subsys=hive level=info msg="Start hook executed" duration=7.417948ms function="authmap.newAuthMap.func1 (cell.go:27)" subsys=hive level=info msg="Start hook executed" duration="30.881µs" function="configmap.newMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="34.011µs" function="signalmap.newMap.func1 (cell.go:44)" subsys=hive level=info msg="Start hook executed" duration="234.744µs" function="nodemap.newNodeMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="102.762µs" function="eventsmap.newEventsMap.func1 (cell.go:35)" subsys=hive level=info msg="Start hook executed" duration="59.591µs" function="*cni.cniConfigManager.Start" subsys=hive level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Wrote CNI configuration file to /host/etc/cni/net.d/05-cilium.conflist" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Start hook executed" duration=43.175435ms function="datapath.newDatapath.func1 (cells.go:113)" subsys=hive level=info msg="Restored 0 node IDs from the BPF map" subsys=linux-datapath level=info msg="Start hook executed" duration="83.312µs" function="datapath.newDatapath.func2 (cells.go:126)" subsys=hive level=info msg="Start hook executed" duration="9.42µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Node].Start" subsys=hive level=info msg="Start hook executed" duration="5.18µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNode].Start" subsys=hive level=info msg="Using autogenerated IPv4 allocation range" subsys=node v4Prefix=10.134.0.0/16 level=warning msg="github.com/cilium/cilium/pkg/k8s/resource/resource.go:305: failed to list *v2.CiliumNode: the server could not find the requested resource (get ciliumnodes.cilium.io)" subsys=klog level=error msg=k8sError error="github.com/cilium/cilium/pkg/k8s/resource/resource.go:305: Failed to watch *v2.CiliumNode: failed to list *v2.CiliumNode: the server could not find the requested resource (get ciliumnodes.cilium.io)" subsys=k8s level=warning msg="github.com/cilium/cilium/pkg/k8s/resource/resource.go:305: failed to list *v2.CiliumNode: the server could not find the requested resource (get ciliumnodes.cilium.io)" subsys=klog level=error msg=k8sError error="github.com/cilium/cilium/pkg/k8s/resource/resource.go:305: Failed to watch *v2.CiliumNode: failed to list *v2.CiliumNode: the server could not find the requested resource (get ciliumnodes.cilium.io)" subsys=k8s level=warning msg="github.com/cilium/cilium/pkg/k8s/resource/resource.go:305: failed to list *v2.CiliumNode: the server could not find the requested resource (get ciliumnodes.cilium.io)" subsys=klog level=error msg=k8sError error="github.com/cilium/cilium/pkg/k8s/resource/resource.go:305: Failed to watch *v2.CiliumNode: failed to list *v2.CiliumNode: the server could not find the requested resource (get ciliumnodes.cilium.io)" subsys=k8s level=warning msg="github.com/cilium/cilium/pkg/k8s/resource/resource.go:305: failed to list *v2.CiliumNode: the server could not find the requested resource (get ciliumnodes.cilium.io)" subsys=klog level=error msg=k8sError error="github.com/cilium/cilium/pkg/k8s/resource/resource.go:305: Failed to watch *v2.CiliumNode: failed to list *v2.CiliumNode: the server could not find the requested resource (get ciliumnodes.cilium.io)" subsys=k8s level=warning msg="github.com/cilium/cilium/pkg/k8s/resource/resource.go:305: failed to list *v2.CiliumNode: the server could not find the requested resource (get ciliumnodes.cilium.io)" subsys=klog level=error msg=k8sError error="github.com/cilium/cilium/pkg/k8s/resource/resource.go:305: Failed to watch *v2.CiliumNode: failed to list *v2.CiliumNode: the server could not find the requested resource (get ciliumnodes.cilium.io)" subsys=k8s level=info msg="no local ciliumnode found, will not restore cilium internal ips from k8s" subsys=daemon level=info msg="Start hook executed" duration=35.603119026s function="node.NewLocalNodeStore.func1 (local_node_store.go:76)" subsys=hive level=info msg="Start hook executed" duration="3.47µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration=101.110144ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration="3.9µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Using discoveryv1.EndpointSlice" subsys=k8s level=info msg="Start hook executed" duration=100.467632ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Start hook executed" duration="5.67µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Pod].Start" subsys=hive level=info msg="Start hook executed" duration="3.56µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Namespace].Start" subsys=hive level=info msg="Start hook executed" duration="2.06µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="1.81µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumClusterwideNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="1.9µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumCIDRGroup].Start" subsys=hive level=info msg="Start hook executed" duration="116.372µs" function="endpointmanager.newDefaultEndpointManager.func1 (cell.go:203)" subsys=hive level=info msg="Start hook executed" duration="28.821µs" function="cmd.newPolicyTrifecta.func1 (policy.go:135)" subsys=hive level=info msg="Start hook executed" duration="58.491µs" function="*manager.manager.Start" subsys=hive level=info msg="Serving cilium node monitor v1.2 API at unix:///var/run/cilium/monitor1_2.sock" subsys=monitor-agent level=info msg="Start hook executed" duration="354.497µs" function="agent.newMonitorAgent.func1 (cell.go:61)" subsys=hive level=info msg="Start hook executed" duration="2.37µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumL2AnnouncementPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="9.16µs" function="*job.group.Start" subsys=hive level=info msg="Start hook executed" duration="216.204µs" function="proxy.newProxy.func1 (cell.go:55)" subsys=hive level=info msg="Envoy: Starting xDS gRPC server listening on /var/run/cilium/envoy/sockets/xds.sock" subsys=envoy-manager level=info msg="Start hook executed" duration="969.378µs" function="signal.provideSignalManager.func1 (cell.go:25)" subsys=hive level=info msg="Datapath signal listener running" subsys=signal level=info msg="Start hook executed" duration=1.286314ms function="auth.registerAuthManager.func1 (cell.go:109)" subsys=hive level=info msg="Start hook executed" duration="4.77µs" function="auth.registerGCJobs.func1 (cell.go:158)" subsys=hive level=info msg="Start hook executed" duration="17.39µs" function="*job.group.Start" subsys=hive level=warning msg="Deprecated value for --kube-proxy-replacement: disabled (use either \"true\", or \"false\")" subsys=daemon level=info msg="Auto-disabling \"enable-node-port\", \"enable-external-ips\", \"bpf-lb-sock\", \"enable-host-port\" features and falling back to \"enable-host-legacy-routing\"" subsys=daemon level=info msg="Inheriting MTU from external network interface" device=ens3 ipAddr=199.19.213.134 mtu=1500 subsys=mtu level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_ipcache, recreating and re-pinning map cilium_ipcache" file-path=/sys/fs/bpf/tc/globals/cilium_ipcache name=cilium_ipcache subsys=bpf level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_tunnel_map, recreating and re-pinning map cilium_tunnel_map" file-path=/sys/fs/bpf/tc/globals/cilium_tunnel_map name=cilium_tunnel_map subsys=bpf level=info msg="Restored services from maps" failedServices=0 restoredServices=0 subsys=service level=info msg="Restored backends from maps" failedBackends=0 restoredBackends=0 skippedBackends=0 subsys=service level=info msg="Reading old endpoints..." subsys=daemon level=info msg="No old endpoints found." subsys=daemon level=info msg="Waiting until all Cilium CRDs are available" subsys=k8s level=info msg="All Cilium CRDs have been found and are available" subsys=k8s level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=info msg="Successfully created CiliumNode resource" subsys=nodediscovery level=warning msg="Unable to create CiliumNode resource, will retry" error="ciliumnodes.cilium.io \"instance\" already exists" subsys=nodediscovery level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=info msg="Received own node information from API server" ipAddr.ipv4=199.19.213.134 ipAddr.ipv6="" k8sNodeIP=199.19.213.134 labels="map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:]" nodeName=instance subsys=k8s v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="k8s mode: Allowing localhost to reach local endpoints" subsys=daemon level=info msg="Detected devices" devices="[]" subsys=linux-datapath level=info msg="Enabling k8s event listener" subsys=k8s-watcher level=info msg="Removing stale endpoint interfaces" subsys=daemon level=info msg="Skipping kvstore configuration" subsys=daemon level=info msg="Initializing node addressing" subsys=daemon level=info msg="Waiting until local node addressing before starting watchers depending on it" subsys=k8s-watcher level=info msg="Initializing cluster-pool IPAM" subsys=ipam v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="Restoring endpoints..." subsys=daemon level=info msg="Endpoints restored" failed=0 restored=0 subsys=daemon level=info msg="Addressing information:" subsys=daemon level=info msg=" Cluster-Name: default" subsys=daemon level=info msg=" Cluster-ID: 0" subsys=daemon level=info msg=" Local node-name: instance" subsys=daemon level=info msg=" Node-IPv6: " subsys=daemon level=info msg=" External-Node IPv4: 199.19.213.134" subsys=daemon level=info msg=" Internal-Node IPv4: 10.0.0.215" subsys=daemon level=info msg=" IPv4 allocation prefix: 10.0.0.0/24" subsys=daemon level=info msg=" Loopback IPv4: 169.254.42.1" subsys=daemon level=info msg=" Local IPv4 addresses:" subsys=daemon level=info msg=" - 199.19.213.134" subsys=daemon level=info msg=" - 172.17.0.100" subsys=daemon level=info msg=" - 10.96.240.200" subsys=daemon level=info msg="Node updated" clusterName=default nodeName=instance subsys=nodemanager level=info msg="Adding local node to cluster" node="{instance default [{InternalIP 199.19.213.134} {CiliumInternalIP 10.0.0.215}] 10.0.0.0/24 [] [] 10.0.0.11 0 local 0 map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:] map[] 1 }" subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Waiting until all pre-existing resources have been received" subsys=k8s-watcher level=info msg="Initializing identity allocator" subsys=identity-cache level=info msg="Allocating identities between range" cluster-id=0 max=65535 min=256 subsys=identity-cache level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.core.bpf_jit_enable sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.all.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.fib_multipath_use_neigh sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.unprivileged_bpf_disabled sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.timer_migration sysParamValue=0 level=info msg="Setting up BPF datapath" bpfClockSource=ktime bpfInsnSet="" subsys=datapath-loader level=info msg="Iptables rules installed" subsys=iptables level=info msg="Adding new proxy port rules for cilium-dns-egress:41109" id=cilium-dns-egress subsys=proxy level=info msg="Iptables proxy rules installed" subsys=iptables level=info msg="Start hook executed" duration=2.613074351s function="cmd.newDaemonPromise.func1 (daemon_main.go:1663)" subsys=hive level=info msg="Start hook executed" duration="24µs" function="utime.initUtimeSync.func1 (cell.go:33)" subsys=hive level=info msg="Initializing daemon" subsys=daemon level=info msg="Validating configured node address ranges" subsys=daemon level=info msg="Starting connection tracking garbage collector" subsys=daemon level=info msg="Start hook executed" duration="9.24µs" function="*job.group.Start" subsys=hive level=info msg="Starting IP identity watcher" subsys=ipcache level=info msg="Start hook executed" duration="63.721µs" function="l2respondermap.newMap.func1 (l2_responder_map4.go:44)" subsys=hive level=info msg="Start hook executed" duration="11.94µs" function="*job.group.Start" subsys=hive level=info msg="Initial scan of connection tracking completed" subsys=ct-gc level=info msg="Regenerating restored endpoints" numRestored=0 subsys=daemon level=info msg="Creating host endpoint" subsys=daemon level=info msg="Finished regenerating restored endpoints" regenerated=0 subsys=daemon total=0 level=info msg="Deleted orphan backends" orphanBackends=0 subsys=service level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2864 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2864 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2864 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Launching Cilium health daemon" subsys=daemon level=info msg="Launching Cilium health endpoint" subsys=daemon level=info msg="Started healthz status API server" address="127.0.0.1:9879" subsys=daemon level=info msg="Processing queued endpoint deletion requests from /var/run/cilium/deleteQueue" subsys=daemon level=info msg="processing 0 queued deletion requests" subsys=daemon level=info msg="Initializing Cilium API" subsys=daemon level=info msg="Daemon initialization completed" bootstrapTime=39.03600701s subsys=daemon level=info msg="Hubble server is disabled" subsys=hubble level=info msg="Serving cilium API at unix:///var/run/cilium/cilium.sock" subsys=daemon level=info msg="Compiled new BPF template" BPFCompilationTime=301.832714ms file-path=/var/run/cilium/state/templates/ea61dc6e94da68566a00e064d5912c61777625eb2e659b3f1ee5a8b37c3a51af/bpf_host.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2864 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3382 ipv4=10.0.0.11 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3382 identityLabels="reserved:health" ipv4=10.0.0.11 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3382 identity=4 identityLabels="reserved:health" ipv4=10.0.0.11 ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Serving cilium health API at unix:///var/run/cilium/health.sock" subsys=health-server level=info msg="Compiled new BPF template" BPFCompilationTime=1.115901449s file-path=/var/run/cilium/state/templates/485d1f1e41088f47f8fbd8ba648bc233403923d9be7af1197e022a6f13aaa751/bpf_lxc.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3382 identity=4 ipv4=10.0.0.11 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.98 93709b73-7cc0-4c80-bd96-0e7bdfe316c7 default }" containerID=48410bdeebceaeb519fb2c4b3ed0128770c0b8eb9df561af98889353f451fdb1 datapathConfiguration="&{false false false false false }" interface=lxc1abaa7983e67 k8sPodName=kube-system/coredns-7c96b6546b-9cpds labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=48410bdeeb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=159 ipv4=10.0.0.98 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-9cpds subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=48410bdeeb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=159 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.98 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-9cpds subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:kube-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=coredns;k8s:io.kubernetes.pod.namespace=kube-system;k8s:k8s-app=kube-dns;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=48410bdeeb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=159 identity=60198 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.98 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-9cpds oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=48410bdeeb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=159 identity=60198 ipv4=10.0.0.98 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-9cpds subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.240 081d2f5d-560b-4167-98dd-28acd37e7876 default }" containerID=3a9c35922391ef7107d9bffa8daaae2fc8ca4b219482b71d344052cf06c37285 datapathConfiguration="&{false false false false false }" interface=lxc7d3e835bb196 k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-rfshl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3a9c359223 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=139 ipv4=10.0.0.240 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-rfshl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3a9c359223 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=139 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=cf061e13-0d41-47a8-b6f5-c49bd4287cab,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=cf061e13-0d41-47a8-b6f5-c49bd4287cab,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.240 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-rfshl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=certgen;k8s:batch.kubernetes.io/controller-uid=cf061e13-0d41-47a8-b6f5-c49bd4287cab;k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen;k8s:controller-uid=cf061e13-0d41-47a8-b6f5-c49bd4287cab;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;k8s:job-name=envoy-gateway-gateway-helm-certgen;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3a9c359223 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=139 identity=19195 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=cf061e13-0d41-47a8-b6f5-c49bd4287cab,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=cf061e13-0d41-47a8-b6f5-c49bd4287cab,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.240 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-rfshl oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3a9c359223 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=139 identity=19195 ipv4=10.0.0.240 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-rfshl subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=48410bdeeb datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=159 identity=60198 ipv4=10.0.0.98 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-9cpds subsys=endpoint level=info msg="Successful endpoint creation" containerID=48410bdeeb datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=159 identity=60198 ipv4=10.0.0.98 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-9cpds subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=3a9c359223 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=139 identity=19195 ipv4=10.0.0.240 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-rfshl subsys=endpoint level=info msg="Successful endpoint creation" containerID=3a9c359223 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=139 identity=19195 ipv4=10.0.0.240 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-rfshl subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=3a9c359223 endpointID=139 k8sNamespace=envoy-gateway-system k8sPodName=envoy-gateway-gateway-helm-certgen-rfshl subsys=daemon level=info msg="Releasing key" key="[k8s:app=certgen k8s:batch.kubernetes.io/controller-uid=cf061e13-0d41-47a8-b6f5-c49bd4287cab k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen k8s:controller-uid=cf061e13-0d41-47a8-b6f5-c49bd4287cab k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen k8s:io.kubernetes.pod.namespace=envoy-gateway-system k8s:job-name=envoy-gateway-gateway-helm-certgen]" subsys=allocator level=info msg="Removed endpoint" containerID=3a9c359223 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=139 identity=19195 ipv4=10.0.0.240 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-rfshl subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.73 7664e327-439b-464c-afd2-1adc9e26c997 default }" containerID=7d63ea7396d54420ac22abf1f09b2c6a1a5d0770d3c2510e66a8022a9ef3e001 datapathConfiguration="&{false false false false false }" interface=lxc731cffca655a k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-frx6q labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7d63ea7396 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3801 ipv4=10.0.0.73 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-frx6q subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7d63ea7396 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3801 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.73 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-frx6q subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=7d63ea7396 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3801 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.73 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-frx6q line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=envoy-gateway;k8s:app.kubernetes.io/name=gateway-helm;k8s:control-plane=envoy-gateway;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7d63ea7396 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3801 identity=38336 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.73 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-frx6q oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7d63ea7396 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3801 identity=38336 ipv4=10.0.0.73 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-frx6q subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7d63ea7396 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3801 identity=38336 ipv4=10.0.0.73 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-frx6q subsys=endpoint level=info msg="Successful endpoint creation" containerID=7d63ea7396 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3801 identity=38336 ipv4=10.0.0.73 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-frx6q subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2864 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_02864 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_02864 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_02864 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_02864:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2864 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.183 7edc267f-d419-400c-ae20-a815d6a8efff default }" containerID=df12afb2c5646956cab294e3c48ff855ca4408d43f96dd93e7c7b30fdf6c02b3 datapathConfiguration="&{false false false false false }" interface=lxcd6f3b418500b k8sPodName=kube-system/coredns-67659f764b-5hrnc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=df12afb2c5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1073 ipv4=10.0.0.183 ipv6= k8sPodName=kube-system/coredns-67659f764b-5hrnc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=df12afb2c5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1073 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.183 ipv6= k8sPodName=kube-system/coredns-67659f764b-5hrnc subsys=endpoint level=info msg="Identity of endpoint changed" containerID=df12afb2c5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1073 identity=60198 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.183 ipv6= k8sPodName=kube-system/coredns-67659f764b-5hrnc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=df12afb2c5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1073 identity=60198 ipv4=10.0.0.183 ipv6= k8sPodName=kube-system/coredns-67659f764b-5hrnc subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.132 c1e5f094-7f97-4960-b9f6-2187fe739188 default }" containerID=6afa663d2aa347105698846ab2a2ec8f21741a2e97e46ee4f81fb756924e8fc1 datapathConfiguration="&{false false false false false }" interface=lxc8fc76ec7833b k8sPodName=kube-system/coredns-67659f764b-5gbjk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6afa663d2a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=387 ipv4=10.0.0.132 ipv6= k8sPodName=kube-system/coredns-67659f764b-5gbjk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6afa663d2a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=387 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.132 ipv6= k8sPodName=kube-system/coredns-67659f764b-5gbjk subsys=endpoint level=info msg="Identity of endpoint changed" containerID=6afa663d2a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=387 identity=60198 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.132 ipv6= k8sPodName=kube-system/coredns-67659f764b-5gbjk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6afa663d2a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=387 identity=60198 ipv4=10.0.0.132 ipv6= k8sPodName=kube-system/coredns-67659f764b-5gbjk subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=df12afb2c5 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1073 identity=60198 ipv4=10.0.0.183 ipv6= k8sPodName=kube-system/coredns-67659f764b-5hrnc subsys=endpoint level=info msg="Successful endpoint creation" containerID=df12afb2c5 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1073 identity=60198 ipv4=10.0.0.183 ipv6= k8sPodName=kube-system/coredns-67659f764b-5hrnc subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=6afa663d2a datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=387 identity=60198 ipv4=10.0.0.132 ipv6= k8sPodName=kube-system/coredns-67659f764b-5gbjk subsys=endpoint level=info msg="Successful endpoint creation" containerID=6afa663d2a datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=387 identity=60198 ipv4=10.0.0.132 ipv6= k8sPodName=kube-system/coredns-67659f764b-5gbjk subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.99 d2d1f9e4-4b7a-4005-ab74-c96f138b6b5d default }" containerID=95a04edfdb4a1de000eb25fdacf06d1efaa7b713a58ba50c23d50a6d6b69043a datapathConfiguration="&{false false false false false }" interface=lxc57e8ead61c19 k8sPodName=local-path-storage/local-path-provisioner-679c578f5-zfmc2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=95a04edfdb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2410 ipv4=10.0.0.99 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-zfmc2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=95a04edfdb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2410 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.99 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-zfmc2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=local-path-provisioner;k8s:app.kubernetes.io/name=local-path-provisioner;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=95a04edfdb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2410 identity=40408 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.99 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-zfmc2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=95a04edfdb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2410 identity=40408 ipv4=10.0.0.99 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-zfmc2 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=95a04edfdb datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2410 identity=40408 ipv4=10.0.0.99 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-zfmc2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=95a04edfdb datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2410 identity=40408 ipv4=10.0.0.99 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-zfmc2 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=48410bdeeb endpointID=159 k8sNamespace=kube-system k8sPodName=coredns-7c96b6546b-9cpds subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=coredns k8s:io.kubernetes.pod.namespace=kube-system k8s:k8s-app=kube-dns]" subsys=allocator level=info msg="Removed endpoint" containerID=48410bdeeb datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=159 identity=60198 ipv4=10.0.0.98 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-9cpds subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.173 3c1a1625-5dd5-4496-8fb7-638009d277be default }" containerID=f8c3ee5e334c57effd1a564ccb488828270acc8b83806497b287da02f076b333 datapathConfiguration="&{false false false false false }" interface=lxc2512916ead8b k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-kh7gx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f8c3ee5e33 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=740 ipv4=10.0.0.173 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-kh7gx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f8c3ee5e33 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=740 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.173 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-kh7gx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=cainjector;k8s:app.kubernetes.io/component=cainjector;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cainjector;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f8c3ee5e33 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=740 identity=8440 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.173 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-kh7gx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f8c3ee5e33 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=740 identity=8440 ipv4=10.0.0.173 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-kh7gx subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.228 5251db84-6e99-466c-90ef-d16b16c5a360 default }" containerID=ed3ceefdecd98d4ed76f54ff81fa0bdb90556432e9f485d960f0cb22ea64338a datapathConfiguration="&{false false false false false }" interface=lxc082668925f22 k8sPodName=cert-manager/cert-manager-75c4c745bc-wfn6g labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ed3ceefdec datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3422 ipv4=10.0.0.228 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-wfn6g subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.204 d7e603cb-672b-40b2-b7c4-07b9f29c6d1a default }" containerID=cce98da98576a7eb84a0e19610858e0d715de2f8d7bf3ff5f0d8732322098911 datapathConfiguration="&{false false false false false }" interface=lxc9bb2fd3cc401 k8sPodName=cert-manager/cert-manager-webhook-548949fc64-s7c8b labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=cce98da985 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1795 ipv4=10.0.0.204 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-s7c8b subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=cce98da985 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1795 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.204 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-s7c8b subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ed3ceefdec datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3422 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.228 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-wfn6g subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=webhook;k8s:app.kubernetes.io/component=webhook;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=webhook;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=cce98da985 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1795 identity=16364 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.204 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-s7c8b oldIdentity="no identity" subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Waiting for endpoint to be generated" containerID=cce98da985 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1795 identity=16364 ipv4=10.0.0.204 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-s7c8b subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=cert-manager;k8s:app.kubernetes.io/component=controller;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cert-manager;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ed3ceefdec datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3422 identity=51415 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.228 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-wfn6g oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ed3ceefdec datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3422 identity=51415 ipv4=10.0.0.228 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-wfn6g subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f8c3ee5e33 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=740 identity=8440 ipv4=10.0.0.173 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-kh7gx subsys=endpoint level=info msg="Successful endpoint creation" containerID=f8c3ee5e33 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=740 identity=8440 ipv4=10.0.0.173 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-kh7gx subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=cce98da985 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1795 identity=16364 ipv4=10.0.0.204 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-s7c8b subsys=endpoint level=info msg="Successful endpoint creation" containerID=cce98da985 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1795 identity=16364 ipv4=10.0.0.204 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-s7c8b subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=ed3ceefdec datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3422 identity=51415 ipv4=10.0.0.228 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-wfn6g subsys=endpoint level=info msg="Successful endpoint creation" containerID=ed3ceefdec datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3422 identity=51415 ipv4=10.0.0.228 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-wfn6g subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.120 7c3d8f45-9282-42f1-8e93-44081bdb6955 default }" containerID=b27199813dee5d53e886a76e93677edb5f6d9e350ae68bacb37da688c7c87e6a datapathConfiguration="&{false false false false false }" interface=lxc283e6ef16035 k8sPodName=cert-manager/cert-manager-startupapicheck-g2n2z labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b27199813d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1052 ipv4=10.0.0.120 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-g2n2z subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b27199813d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1052 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=e3c85e68-cfee-463c-8d57-a49f9fc88869,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=e3c85e68-cfee-463c-8d57-a49f9fc88869,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.120 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-g2n2z subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=startupapicheck;k8s:app.kubernetes.io/component=startupapicheck;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=startupapicheck;k8s:app.kubernetes.io/version=v1.11.5;k8s:batch.kubernetes.io/controller-uid=e3c85e68-cfee-463c-8d57-a49f9fc88869;k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck;k8s:controller-uid=e3c85e68-cfee-463c-8d57-a49f9fc88869;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck;k8s:io.kubernetes.pod.namespace=cert-manager;k8s:job-name=cert-manager-startupapicheck;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b27199813d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1052 identity=4922 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=e3c85e68-cfee-463c-8d57-a49f9fc88869,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=e3c85e68-cfee-463c-8d57-a49f9fc88869,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.120 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-g2n2z oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b27199813d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1052 identity=4922 ipv4=10.0.0.120 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-g2n2z subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b27199813d datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1052 identity=4922 ipv4=10.0.0.120 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-g2n2z subsys=endpoint level=info msg="Successful endpoint creation" containerID=b27199813d datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1052 identity=4922 ipv4=10.0.0.120 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-g2n2z subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=b27199813d endpointID=1052 k8sNamespace=cert-manager k8sPodName=cert-manager-startupapicheck-g2n2z subsys=daemon level=info msg="Releasing key" key="[k8s:app=startupapicheck k8s:app.kubernetes.io/component=startupapicheck k8s:app.kubernetes.io/instance=cert-manager k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=startupapicheck k8s:app.kubernetes.io/version=v1.11.5 k8s:batch.kubernetes.io/controller-uid=e3c85e68-cfee-463c-8d57-a49f9fc88869 k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck k8s:controller-uid=e3c85e68-cfee-463c-8d57-a49f9fc88869 k8s:helm.sh/chart=cert-manager-v1.11.5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager k8s:io.cilium.k8s.namespace.labels.name=cert-manager k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck k8s:io.kubernetes.pod.namespace=cert-manager k8s:job-name=cert-manager-startupapicheck]" subsys=allocator level=info msg="Removed endpoint" containerID=b27199813d datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1052 identity=4922 ipv4=10.0.0.120 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-g2n2z subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.40 a54c8490-5e1d-4f58-88a6-154e98e8bff7 default }" containerID=b0eb5cb5deb39235a7d5513c633323a862c72ba67c0b858b303baacece739d4b datapathConfiguration="&{false false false false false }" interface=lxc6cda5ae52dc6 k8sPodName=ingress-nginx/ingress-nginx-admission-create-z29hz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b0eb5cb5de datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=901 ipv4=10.0.0.40 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-z29hz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b0eb5cb5de datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=901 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=7ad04ee1-a56b-4435-8481-2248eec2c7da,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=7ad04ee1-a56b-4435-8481-2248eec2c7da,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.40 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-z29hz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=7ad04ee1-a56b-4435-8481-2248eec2c7da;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create;k8s:controller-uid=7ad04ee1-a56b-4435-8481-2248eec2c7da;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-create;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b0eb5cb5de datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=901 identity=63652 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=7ad04ee1-a56b-4435-8481-2248eec2c7da,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=7ad04ee1-a56b-4435-8481-2248eec2c7da,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.40 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-z29hz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b0eb5cb5de datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=901 identity=63652 ipv4=10.0.0.40 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-z29hz subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=b0eb5cb5de datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=901 identity=63652 ipv4=10.0.0.40 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-z29hz subsys=endpoint level=info msg="Successful endpoint creation" containerID=b0eb5cb5de datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=901 identity=63652 ipv4=10.0.0.40 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-z29hz subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=b0eb5cb5de endpointID=901 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-create-z29hz subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=7ad04ee1-a56b-4435-8481-2248eec2c7da k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create k8s:controller-uid=7ad04ee1-a56b-4435-8481-2248eec2c7da k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-create]" subsys=allocator level=info msg="Removed endpoint" containerID=b0eb5cb5de datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=901 identity=63652 ipv4=10.0.0.40 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-z29hz subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.58 593d21d1-b2df-49f3-929f-d7c795001c59 default }" containerID=75ca89a2ac86df4d0ae08d6b2349107fac5224518ff60614ba62407a67645626 datapathConfiguration="&{false false false false false }" interface=lxc7dc77387bcf8 k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-2lm89 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=75ca89a2ac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2345 ipv4=10.0.0.58 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-2lm89 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=75ca89a2ac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2345 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.58 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-2lm89 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=75ca89a2ac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2345 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.58 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-2lm89 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=default-backend;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend;k8s:io.kubernetes.pod.namespace=ingress-nginx;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=75ca89a2ac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2345 identity=17877 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.58 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-2lm89 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=75ca89a2ac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2345 identity=17877 ipv4=10.0.0.58 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-2lm89 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=75ca89a2ac datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2345 identity=17877 ipv4=10.0.0.58 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-2lm89 subsys=endpoint level=info msg="Successful endpoint creation" containerID=75ca89a2ac datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2345 identity=17877 ipv4=10.0.0.58 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-2lm89 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.125 5deeec59-c30e-43f9-aac9-9d9a6d2dced9 default }" containerID=bb271bfe48d6e76b56c413257fe43e280a71b8975a307838502a528ae907cdc7 datapathConfiguration="&{false false false false false }" interface=lxca924b1908b00 k8sPodName=ingress-nginx/ingress-nginx-admission-patch-h5tvj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bb271bfe48 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2342 ipv4=10.0.0.125 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-h5tvj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bb271bfe48 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2342 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=46d94635-3590-491c-8018-6502ac5c025c,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=46d94635-3590-491c-8018-6502ac5c025c,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.125 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-h5tvj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=46d94635-3590-491c-8018-6502ac5c025c;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch;k8s:controller-uid=46d94635-3590-491c-8018-6502ac5c025c;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-patch;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=bb271bfe48 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2342 identity=7697 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=46d94635-3590-491c-8018-6502ac5c025c,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=46d94635-3590-491c-8018-6502ac5c025c,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.125 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-h5tvj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=bb271bfe48 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2342 identity=7697 ipv4=10.0.0.125 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-h5tvj subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=bb271bfe48 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2342 identity=7697 ipv4=10.0.0.125 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-h5tvj subsys=endpoint level=info msg="Successful endpoint creation" containerID=bb271bfe48 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2342 identity=7697 ipv4=10.0.0.125 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-h5tvj subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=bb271bfe48 endpointID=2342 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-patch-h5tvj subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=46d94635-3590-491c-8018-6502ac5c025c k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch k8s:controller-uid=46d94635-3590-491c-8018-6502ac5c025c k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-patch]" subsys=allocator level=info msg="Removed endpoint" containerID=bb271bfe48 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2342 identity=7697 ipv4=10.0.0.125 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-h5tvj subsys=endpoint level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"rabbitmq-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-cluster-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=4bc978bf-61a3-47b2-ba22-a9a01eb0ff7e] Description:}]" policyAddRequest=164316fd-f793-4811-9694-b9ab1e50fbec subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=164316fd-f793-4811-9694-b9ab1e50fbec policyRevision=2 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-cluster-operator subsys=k8s-watcher level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"messaging-topology-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9443 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-messaging-topology-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=24970571-370d-43e4-a075-23bf102663a9] Description:}]" policyAddRequest=3391358a-0ede-45ca-8813-a97060b4bca4 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=3391358a-0ede-45ca-8813-a97060b4bca4 policyRevision=3 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-messaging-topology-operator subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.49 d345f433-4234-472f-91b7-254f77ef0eaa default }" containerID=9d474dab50606da0139a8ac2be3ce4f41cafd8426bbc4c736b74f9fc6e627c51 datapathConfiguration="&{false false false false false }" interface=lxc439c7e83f050 k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-bkvwc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9d474dab50 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=144 ipv4=10.0.0.49 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-bkvwc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9d474dab50 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=144 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.17.4,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.49 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-bkvwc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.234 ed49c3cf-3326-49e5-995b-a7a8e6538e15 default }" containerID=cfdd1c2f40b3cd70d825acaff60885cc8e4c90ebccbd9b63da897f5e28637a4e datapathConfiguration="&{false false false false false }" interface=lxc5c707749f9ba k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-z9nmg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=cfdd1c2f40 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2582 ipv4=10.0.0.234 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-z9nmg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=cfdd1c2f40 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2582 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.16.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.234 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-z9nmg subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=messaging-topology-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=1.17.4;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9d474dab50 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=144 identity=20602 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.17.4,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.49 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-bkvwc oldIdentity="no identity" subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Waiting for endpoint to be generated" containerID=9d474dab50 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=144 identity=20602 ipv4=10.0.0.49 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-bkvwc subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=cfdd1c2f40 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2582 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.234 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-z9nmg line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=2.16.1;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=cfdd1c2f40 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2582 identity=20071 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.16.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.234 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-z9nmg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=cfdd1c2f40 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2582 identity=20071 ipv4=10.0.0.234 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-z9nmg subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9d474dab50 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=144 identity=20602 ipv4=10.0.0.49 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-bkvwc subsys=endpoint level=info msg="Successful endpoint creation" containerID=9d474dab50 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=144 identity=20602 ipv4=10.0.0.49 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-bkvwc subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=cfdd1c2f40 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=2582 identity=20071 ipv4=10.0.0.234 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-z9nmg subsys=endpoint level=info msg="Successful endpoint creation" containerID=cfdd1c2f40 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=2582 identity=20071 ipv4=10.0.0.234 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-z9nmg subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.27 10b1490e-1d8f-40e0-8c60-4ef8148613ad default }" containerID=916bbc5e78ccd96d68076b1ae9a700570e4239b480d6da8b7d899c8224c85dc6 datapathConfiguration="&{false false false false false }" interface=lxcadad8b562fc3 k8sPodName=openstack/pxc-operator-69cb5bbdb9-sbk52 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=916bbc5e78 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1702 ipv4=10.0.0.27 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-sbk52 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=916bbc5e78 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1702 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.27 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-sbk52 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=916bbc5e78 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1702 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.27 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-sbk52 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=operator;k8s:app.kubernetes.io/instance=pxc-operator;k8s:app.kubernetes.io/name=pxc-operator;k8s:app.kubernetes.io/part-of=pxc-operator;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=916bbc5e78 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1702 identity=5954 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.27 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-sbk52 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=916bbc5e78 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1702 identity=5954 ipv4=10.0.0.27 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-sbk52 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=916bbc5e78 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1702 identity=5954 ipv4=10.0.0.27 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-sbk52 subsys=endpoint level=info msg="Successful endpoint creation" containerID=916bbc5e78 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1702 identity=5954 ipv4=10.0.0.27 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-sbk52 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.119 dd59e7bf-81c7-466d-b62f-179a6853342d default }" containerID=6ab9a898710a3863d4e398927210ac7e9dfc7edc76aa5d5b1c6ecb25d56fa473 datapathConfiguration="&{false false false false false }" interface=lxc16badf4ea2eb k8sPodName=openstack/percona-xtradb-haproxy-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6ab9a89871 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=33 ipv4=10.0.0.119 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6ab9a89871 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=33 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.119 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=haproxy;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=6ab9a89871 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=33 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.119 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=6ab9a89871 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=33 identity=29295 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.119 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6ab9a89871 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=33 identity=29295 ipv4=10.0.0.119 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6ab9a89871 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=33 identity=29295 ipv4=10.0.0.119 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=6ab9a89871 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=33 identity=29295 ipv4=10.0.0.119 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.98 237793f6-e32e-4343-8460-b33062eb4b9f default }" containerID=76b07db9481776b6d7718b9a294ee5cb099d76596f072c9eb808082de502d6cb datapathConfiguration="&{false false false false false }" interface=lxc3325b7de62e5 k8sPodName=local-path-storage/helper-pod-create-pvc-05fc9db6-92dd-410d-aa80-41ba8a5f7f67 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=76b07db948 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=692 ipv4=10.0.0.98 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-05fc9db6-92dd-410d-aa80-41ba8a5f7f67 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=76b07db948 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=692 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.98 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-05fc9db6-92dd-410d-aa80-41ba8a5f7f67 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=76b07db948 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=692 identity=18301 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.98 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-05fc9db6-92dd-410d-aa80-41ba8a5f7f67 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=76b07db948 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=692 identity=18301 ipv4=10.0.0.98 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-05fc9db6-92dd-410d-aa80-41ba8a5f7f67 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=76b07db948 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=692 identity=18301 ipv4=10.0.0.98 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-05fc9db6-92dd-410d-aa80-41ba8a5f7f67 subsys=endpoint level=info msg="Successful endpoint creation" containerID=76b07db948 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=692 identity=18301 ipv4=10.0.0.98 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-05fc9db6-92dd-410d-aa80-41ba8a5f7f67 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=76b07db948 endpointID=692 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-05fc9db6-92dd-410d-aa80-41ba8a5f7f67 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=76b07db948 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=692 identity=18301 ipv4=10.0.0.98 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-05fc9db6-92dd-410d-aa80-41ba8a5f7f67 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.89 51d1bf76-5548-40d7-a69f-af54545df057 default }" containerID=618844a648b91d01c5ffed392375173988b08f89d09a84faed8811fc80a32a95 datapathConfiguration="&{false false false false false }" interface=lxc7a1f062774d1 k8sPodName=openstack/percona-xtradb-pxc-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=618844a648 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1209 ipv4=10.0.0.89 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=618844a648 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1209 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.89 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=618844a648 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1209 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.89 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=pxc;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=618844a648 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1209 identity=25742 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.89 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=618844a648 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1209 identity=25742 ipv4=10.0.0.89 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=618844a648 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1209 identity=25742 ipv4=10.0.0.89 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=618844a648 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1209 identity=25742 ipv4=10.0.0.89 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/instance\":\"valkey\",\"k8s:app.kubernetes.io/name\":\"valkey\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:6379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:26379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:} {IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9121 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=valkey k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=373d2b8f-7d76-4d1a-a71a-13a74524d95f] Description:}]" policyAddRequest=6ceac1ea-60b7-4322-a81f-54afafbf0615 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=6ceac1ea-60b7-4322-a81f-54afafbf0615 policyRevision=4 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=valkey subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.103 71fbc434-7b2c-4f39-bde2-8e3e3ec8aeee default }" containerID=63558187424dd2a11cdb0d7bd94a5b7d1db1b52827769d67534cb12467e5d123 datapathConfiguration="&{false false false false false }" interface=lxcf1632b9a7dc5 k8sPodName=local-path-storage/helper-pod-create-pvc-c9c1d3dc-586b-424e-8728-facc9c2ce8d8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6355818742 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=216 ipv4=10.0.0.103 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c9c1d3dc-586b-424e-8728-facc9c2ce8d8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6355818742 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=216 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.103 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c9c1d3dc-586b-424e-8728-facc9c2ce8d8 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6355818742 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=216 identity=18301 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.103 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c9c1d3dc-586b-424e-8728-facc9c2ce8d8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6355818742 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=216 identity=18301 ipv4=10.0.0.103 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c9c1d3dc-586b-424e-8728-facc9c2ce8d8 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6355818742 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=216 identity=18301 ipv4=10.0.0.103 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c9c1d3dc-586b-424e-8728-facc9c2ce8d8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=6355818742 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=216 identity=18301 ipv4=10.0.0.103 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c9c1d3dc-586b-424e-8728-facc9c2ce8d8 subsys=daemon level=info msg="Delete endpoint request" containerID=6355818742 endpointID=216 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-c9c1d3dc-586b-424e-8728-facc9c2ce8d8 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=6355818742 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=216 identity=18301 ipv4=10.0.0.103 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c9c1d3dc-586b-424e-8728-facc9c2ce8d8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.94 afa477c3-4239-4480-8b56-645a6be78078 default }" containerID=c49970b6f5c52635c412f5c8c46a426eb29c4ea257711ebe8e4429373152f405 datapathConfiguration="&{false false false false false }" interface=lxcdfc256e6ddc9 k8sPodName=openstack/valkey-node-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c49970b6f5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1981 ipv4=10.0.0.94 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c49970b6f5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1981 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.94 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=node;k8s:app.kubernetes.io/instance=valkey;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=valkey;k8s:app.kubernetes.io/version=8.0.2;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=valkey-2.4.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=valkey;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=valkey-node-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c49970b6f5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1981 identity=12830 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.94 ipv6= k8sPodName=openstack/valkey-node-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c49970b6f5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1981 identity=12830 ipv4=10.0.0.94 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c49970b6f5 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1981 identity=12830 ipv4=10.0.0.94 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=c49970b6f5 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1981 identity=12830 ipv4=10.0.0.94 ipv6= k8sPodName=openstack/valkey-node-0 subsys=daemon level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"keycloak\",\"k8s:app.kubernetes.io/instance\":\"keycloak\",\"k8s:app.kubernetes.io/name\":\"keycloak\",\"k8s:io.kubernetes.pod.namespace\":\"auth-system\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:7800 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:8080 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=keycloak k8s:io.cilium.k8s.policy.namespace=auth-system k8s:io.cilium.k8s.policy.uid=97a579ac-ea01-42db-bb59-a09397da2feb] Description:}]" policyAddRequest=cd63e0d8-5ad7-498b-a0c3-4d803258376f subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=keycloak subsys=k8s-watcher level=info msg="Policy imported via API, recalculating..." policyAddRequest=cd63e0d8-5ad7-498b-a0c3-4d803258376f policyRevision=5 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.168 0d283678-eab4-468b-bdbe-393bdedbf5f3 default }" containerID=b3f089d9d21ac52b1d2bdd5763d809b17679a74b8c1c99533c11663d7d649d47 datapathConfiguration="&{false false false false false }" interface=lxc40de4d7ba871 k8sPodName=auth-system/keycloak-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b3f089d9d2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1492 ipv4=10.0.0.168 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b3f089d9d2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1492 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.168 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:auth-system k8s:io.cilium.k8s.namespace.labels.name:auth-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=keycloak;k8s:app.kubernetes.io/instance=keycloak;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=keycloak;k8s:app.kubernetes.io/version=24.0.5;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=keycloak-21.4.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system;k8s:io.cilium.k8s.namespace.labels.name=auth-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keycloak;k8s:io.kubernetes.pod.namespace=auth-system;k8s:statefulset.kubernetes.io/pod-name=keycloak-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b3f089d9d2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1492 identity=37539 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.168 ipv6= k8sPodName=auth-system/keycloak-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b3f089d9d2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1492 identity=37539 ipv4=10.0.0.168 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b3f089d9d2 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1492 identity=37539 ipv4=10.0.0.168 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=b3f089d9d2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1492 identity=37539 ipv4=10.0.0.168 ipv6= k8sPodName=auth-system/keycloak-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.00918473629391156 newInterval=7m30s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.133 99c13b46-df4f-4ff4-b16b-bcdffa3a56c2 default }" containerID=dc031935500aaa37083ab14a2658ab3865383a371a3949ad9201d968ce527f56 datapathConfiguration="&{false false false false false }" interface=lxcce825fba9fc3 k8sPodName=monitoring/node-feature-discovery-worker-nzrjv labels="[]" subsys=daemon sync-build=true level=info msg="Create endpoint request" addressing="&{10.0.0.187 cf3d269a-e07d-4c1a-b6c0-f1753f3933dd default }" containerID=d2475f55d54dec86a76af7fddbfa165d2732f2e7f70c54cb3cc96c8dfdf722d1 datapathConfiguration="&{false false false false false }" interface=lxc09748e6ff7c9 k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-pggnr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d2475f55d5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1064 ipv4=10.0.0.187 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-pggnr subsys=endpoint level=info msg="New endpoint" containerID=dc03193550 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=821 ipv4=10.0.0.133 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-nzrjv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d2475f55d5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1064 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.187 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-pggnr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Resolving identity labels (blocking)" containerID=dc03193550 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=821 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.133 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-nzrjv subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.155 69bd922c-c594-450c-a5f2-fd1d131d8779 default }" containerID=15b4105f4bcd135ce03e60694508ddaa97b3047343808a1cac95e3e7c4d56484 datapathConfiguration="&{false false false false false }" interface=lxcb6061e6fa317 k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-l5k9n labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=15b4105f4b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1284 ipv4=10.0.0.155 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-l5k9n subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=15b4105f4b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1284 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.155 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-l5k9n subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=dc03193550 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=821 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.133 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-nzrjv line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=gc;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d2475f55d5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1064 identity=15330 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.187 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-pggnr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d2475f55d5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1064 identity=15330 ipv4=10.0.0.187 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-pggnr subsys=endpoint level=info msg="Invalid state transition skipped" containerID=15b4105f4b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1284 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.155 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-l5k9n line=611 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=worker;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=dc03193550 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=821 identity=4424 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.133 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-nzrjv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=dc03193550 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=821 identity=4424 ipv4=10.0.0.133 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-nzrjv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=master;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=15b4105f4b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1284 identity=4508 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.155 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-l5k9n oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=15b4105f4b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1284 identity=4508 ipv4=10.0.0.155 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-l5k9n subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d2475f55d5 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1064 identity=15330 ipv4=10.0.0.187 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-pggnr subsys=endpoint level=info msg="Successful endpoint creation" containerID=d2475f55d5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1064 identity=15330 ipv4=10.0.0.187 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-pggnr subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=dc03193550 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=821 identity=4424 ipv4=10.0.0.133 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-nzrjv subsys=endpoint level=info msg="Successful endpoint creation" containerID=dc03193550 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=821 identity=4424 ipv4=10.0.0.133 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-nzrjv subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=15b4105f4b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1284 identity=4508 ipv4=10.0.0.155 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-l5k9n subsys=endpoint level=info msg="Successful endpoint creation" containerID=15b4105f4b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1284 identity=4508 ipv4=10.0.0.155 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-l5k9n subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.93 f431027c-cfad-4776-b86e-af1c0096212c default }" containerID=42e82c1d1312db12ae34317f47e669a9dfec66d8f057aa81d9aeb20b2a896b2a datapathConfiguration="&{false false false false false }" interface=lxcf443f816c5d6 k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-pqvjn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=42e82c1d13 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=784 ipv4=10.0.0.93 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-pqvjn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=42e82c1d13 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=784 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.93 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-pqvjn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:secretgen-controller]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=secretgen-controller;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa;k8s:io.kubernetes.pod.namespace=secretgen-controller;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=42e82c1d13 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=784 identity=59938 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.93 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-pqvjn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=42e82c1d13 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=784 identity=59938 ipv4=10.0.0.93 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-pqvjn subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=42e82c1d13 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=784 identity=59938 ipv4=10.0.0.93 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-pqvjn subsys=endpoint level=info msg="Successful endpoint creation" containerID=42e82c1d13 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=784 identity=59938 ipv4=10.0.0.93 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-pqvjn subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2864 identity=1 identityLabels="k8s:feature.node.kubernetes.io/cpu-cpuid.ADX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AESNI=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX2=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CLZERO=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CMPXCHG8=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FMA3=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSROPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.HYPERVISOR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IA32_ARCH_CAP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBPB=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBRS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.LAHF=true,k8s:feature.node.kubernetes.io/cpu-cpuid.MOVBE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.NRIPS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.OSXSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SHA=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SPEC_CTRL_SSBD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SSE4A=true,k8s:feature.node.kubernetes.io/cpu-cpuid.STIBP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVM=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVMNP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSCALL=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSEE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.TOPEXT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.WBNOINVD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.X87=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XGETBV1=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEC=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEOPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVES=true,k8s:feature.node.kubernetes.io/cpu-hardware_multithreading=false,k8s:feature.node.kubernetes.io/cpu-model.family=23,k8s:feature.node.kubernetes.io/cpu-model.id=49,k8s:feature.node.kubernetes.io/cpu-model.vendor_id=AMD,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ=true,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ_IDLE=true,k8s:feature.node.kubernetes.io/kernel-version.full=5.15.0-174-generic,k8s:feature.node.kubernetes.io/kernel-version.major=5,k8s:feature.node.kubernetes.io/kernel-version.minor=15,k8s:feature.node.kubernetes.io/kernel-version.revision=0,k8s:feature.node.kubernetes.io/pci-0300_1af4.present=true,k8s:feature.node.kubernetes.io/system-os_release.ID=ubuntu,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.major=22,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.minor=04,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID=22.04,k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_02864 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_02864 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_02864 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_02864:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2864 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.25 06820ee1-2f2d-4898-8036-59cd6e808c0b default }" containerID=f41a68b49d42cf621cfeadb26f14057b303667312ca65e245cac4107373666f0 datapathConfiguration="&{false false false false false }" interface=lxc211beedd8061 k8sPodName=monitoring/kube-prometheus-stack-admission-create-2wmrr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f41a68b49d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1049 ipv4=10.0.0.25 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-2wmrr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f41a68b49d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1049 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=2da1261d-5179-44f3-8ecd-d5784ba37778,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=2da1261d-5179-44f3-8ecd-d5784ba37778,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.25 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-2wmrr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-create;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=2da1261d-5179-44f3-8ecd-d5784ba37778;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=2da1261d-5179-44f3-8ecd-d5784ba37778;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-create;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f41a68b49d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1049 identity=65519 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=2da1261d-5179-44f3-8ecd-d5784ba37778,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=2da1261d-5179-44f3-8ecd-d5784ba37778,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.25 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-2wmrr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f41a68b49d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1049 identity=65519 ipv4=10.0.0.25 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-2wmrr subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=f41a68b49d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1049 identity=65519 ipv4=10.0.0.25 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-2wmrr subsys=endpoint level=info msg="Successful endpoint creation" containerID=f41a68b49d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1049 identity=65519 ipv4=10.0.0.25 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-2wmrr subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=f41a68b49d endpointID=1049 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-create-2wmrr subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-create k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=2da1261d-5179-44f3-8ecd-d5784ba37778 k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=2da1261d-5179-44f3-8ecd-d5784ba37778 k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-create k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=f41a68b49d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1049 identity=65519 ipv4=10.0.0.25 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-2wmrr subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.38 c6a7d150-17cf-417e-852c-bf1ab0499e52 default }" containerID=2ccff79d0f0ff95fa948a6880b4e9f822676b6cb20d612a21eabb360d1a5cf71 datapathConfiguration="&{false false false false false }" interface=lxcc82dea4c61c6 k8sPodName=monitoring/kube-prometheus-stack-grafana-867b65fcfd-6hq94 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2ccff79d0f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=881 ipv4=10.0.0.38 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-867b65fcfd-6hq94 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2ccff79d0f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=881 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.38 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-867b65fcfd-6hq94 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/name=grafana;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2ccff79d0f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=881 identity=32704 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.38 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-867b65fcfd-6hq94 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=2ccff79d0f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=881 identity=32704 ipv4=10.0.0.38 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-867b65fcfd-6hq94 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.5 437e6032-b896-446f-a69a-e841da49856f default }" containerID=5849c97717cdddd9a175cea104bc3c07673175f34968d8f0424b6c8df9344d6c datapathConfiguration="&{false false false false false }" interface=lxc2b24c0e95811 k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-t9nq7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5849c97717 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2900 ipv4=10.0.0.5 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-t9nq7 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.175 b480d8ac-e7ec-4ce1-9934-cbc5d24570f9 default }" containerID=e2cf612e54030b12aa5367070061584b5006b9c28ecdd3456010345ccfd2170b datapathConfiguration="&{false false false false false }" interface=lxc840a39a54168 k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-xcv8s labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e2cf612e54 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3976 ipv4=10.0.0.175 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-xcv8s subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5849c97717 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2900 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.5 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-t9nq7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Resolving identity labels (blocking)" containerID=e2cf612e54 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3976 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.175 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-xcv8s subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-operator;k8s:app.kubernetes.io/component=prometheus-operator;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:chart=kube-prometheus-stack-60.2.0;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Identity of endpoint changed" containerID=5849c97717 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2900 identity=42706 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.5 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-t9nq7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5849c97717 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2900 identity=42706 ipv4=10.0.0.5 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-t9nq7 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=metrics;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-state-metrics;k8s:app.kubernetes.io/part-of=kube-state-metrics;k8s:app.kubernetes.io/version=2.12.0;k8s:helm.sh/chart=kube-state-metrics-5.20.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e2cf612e54 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3976 identity=2811 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.175 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-xcv8s oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e2cf612e54 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3976 identity=2811 ipv4=10.0.0.175 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-xcv8s subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2ccff79d0f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=881 identity=32704 ipv4=10.0.0.38 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-867b65fcfd-6hq94 subsys=endpoint level=info msg="Successful endpoint creation" containerID=2ccff79d0f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=881 identity=32704 ipv4=10.0.0.38 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-867b65fcfd-6hq94 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=e2cf612e54 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3976 identity=2811 ipv4=10.0.0.175 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-xcv8s subsys=endpoint level=info msg="Successful endpoint creation" containerID=e2cf612e54 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3976 identity=2811 ipv4=10.0.0.175 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-xcv8s subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=5849c97717 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2900 identity=42706 ipv4=10.0.0.5 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-t9nq7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=5849c97717 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2900 identity=42706 ipv4=10.0.0.5 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-t9nq7 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.162 34bd0283-10ef-4f90-94d2-032db37a9547 default }" containerID=f213f8e20404bff704fc3fbf4fa9bf2474d1e5c32735ce9723da139a7b7931f3 datapathConfiguration="&{false false false false false }" interface=lxc5460505d23d1 k8sPodName=monitoring/kube-prometheus-stack-admission-patch-nd9gm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f213f8e204 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1941 ipv4=10.0.0.162 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-nd9gm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f213f8e204 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1941 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=3e8bea63-70ba-437e-b744-7d6a2cfd3a06,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=3e8bea63-70ba-437e-b744-7d6a2cfd3a06,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.162 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-nd9gm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-patch;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=3e8bea63-70ba-437e-b744-7d6a2cfd3a06;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=3e8bea63-70ba-437e-b744-7d6a2cfd3a06;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-patch;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f213f8e204 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1941 identity=5211 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=3e8bea63-70ba-437e-b744-7d6a2cfd3a06,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=3e8bea63-70ba-437e-b744-7d6a2cfd3a06,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.162 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-nd9gm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f213f8e204 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1941 identity=5211 ipv4=10.0.0.162 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-nd9gm subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f213f8e204 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1941 identity=5211 ipv4=10.0.0.162 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-nd9gm subsys=endpoint level=info msg="Successful endpoint creation" containerID=f213f8e204 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1941 identity=5211 ipv4=10.0.0.162 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-nd9gm subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=f213f8e204 endpointID=1941 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-patch-nd9gm subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-patch k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=3e8bea63-70ba-437e-b744-7d6a2cfd3a06 k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=3e8bea63-70ba-437e-b744-7d6a2cfd3a06 k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-patch k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=f213f8e204 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1941 identity=5211 ipv4=10.0.0.162 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-nd9gm subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.41 bbbf763b-a3f9-46a6-bb61-cff5920daf55 default }" containerID=c7aad2874e94672d7eef85aff0851ae5b58f756c1363b9164066afaf5f310f2c datapathConfiguration="&{false false false false false }" interface=lxca2fabb056993 k8sPodName=local-path-storage/helper-pod-create-pvc-99ad5bd3-911d-4321-8d32-c7e715187c26 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c7aad2874e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=890 ipv4=10.0.0.41 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-99ad5bd3-911d-4321-8d32-c7e715187c26 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c7aad2874e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=890 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.41 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-99ad5bd3-911d-4321-8d32-c7e715187c26 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c7aad2874e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=890 identity=18301 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.41 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-99ad5bd3-911d-4321-8d32-c7e715187c26 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c7aad2874e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=890 identity=18301 ipv4=10.0.0.41 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-99ad5bd3-911d-4321-8d32-c7e715187c26 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c7aad2874e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=890 identity=18301 ipv4=10.0.0.41 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-99ad5bd3-911d-4321-8d32-c7e715187c26 subsys=endpoint level=info msg="Successful endpoint creation" containerID=c7aad2874e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=890 identity=18301 ipv4=10.0.0.41 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-99ad5bd3-911d-4321-8d32-c7e715187c26 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.2 02d2125d-b7b3-4192-ac3a-fed725180b2e default }" containerID=781085ec166f517c53ee5dbc7faeef7f125ed167a60e5dd6c000b2c2fdbda8e9 datapathConfiguration="&{false false false false false }" interface=lxce61ebb278bd3 k8sPodName=local-path-storage/helper-pod-create-pvc-6b81386b-bb6a-40ad-bafd-ce7ca87ce95a labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=781085ec16 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2937 ipv4=10.0.0.2 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6b81386b-bb6a-40ad-bafd-ce7ca87ce95a subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=781085ec16 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2937 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.2 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6b81386b-bb6a-40ad-bafd-ce7ca87ce95a subsys=endpoint level=info msg="Identity of endpoint changed" containerID=781085ec16 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2937 identity=18301 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.2 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6b81386b-bb6a-40ad-bafd-ce7ca87ce95a oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=781085ec16 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2937 identity=18301 ipv4=10.0.0.2 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6b81386b-bb6a-40ad-bafd-ce7ca87ce95a subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=781085ec16 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2937 identity=18301 ipv4=10.0.0.2 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6b81386b-bb6a-40ad-bafd-ce7ca87ce95a subsys=endpoint level=info msg="Successful endpoint creation" containerID=781085ec16 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2937 identity=18301 ipv4=10.0.0.2 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6b81386b-bb6a-40ad-bafd-ce7ca87ce95a subsys=daemon level=info msg="Delete endpoint request" containerID=c7aad2874e endpointID=890 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-99ad5bd3-911d-4321-8d32-c7e715187c26 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=c7aad2874e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=890 identity=18301 ipv4=10.0.0.41 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-99ad5bd3-911d-4321-8d32-c7e715187c26 subsys=endpoint level=info msg="Delete endpoint request" containerID=781085ec16 endpointID=2937 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-6b81386b-bb6a-40ad-bafd-ce7ca87ce95a subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=781085ec16 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2937 identity=18301 ipv4=10.0.0.2 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6b81386b-bb6a-40ad-bafd-ce7ca87ce95a subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.203 12e2cd65-3a6f-4f63-a997-ae6133d5dc53 default }" containerID=32e1362cb61fdf6d4d66a3e5329ca7a2ecd08eb47d303cfc3384d15a3c48d400 datapathConfiguration="&{false false false false false }" interface=lxc08b6f5b0c55e k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=32e1362cb6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4084 ipv4=10.0.0.203 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=32e1362cb6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4084 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.203 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=32e1362cb6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4084 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.203 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:alertmanager=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=alertmanager;k8s:app.kubernetes.io/version=0.27.0;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=32e1362cb6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4084 identity=49994 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.203 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=32e1362cb6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4084 identity=49994 ipv4=10.0.0.203 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.159 2556b804-0f46-4971-ae0f-af7c7058fa82 default }" containerID=af124f6378caea814a3c57ebdb6d426524abf32c981e07d942fc8763ca3e4631 datapathConfiguration="&{false false false false false }" interface=lxc27f84f9aa9c1 k8sPodName=monitoring/loki-gateway-cf54cb88c-c9k6w labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=af124f6378 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3349 ipv4=10.0.0.159 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-c9k6w subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=af124f6378 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3349 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.159 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-c9k6w subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=gateway;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=af124f6378 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3349 identity=21361 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.159 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-c9k6w oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=af124f6378 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3349 identity=21361 ipv4=10.0.0.159 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-c9k6w subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=32e1362cb6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=4084 identity=49994 ipv4=10.0.0.203 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=32e1362cb6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=4084 identity=49994 ipv4=10.0.0.203 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=af124f6378 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3349 identity=21361 ipv4=10.0.0.159 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-c9k6w subsys=endpoint level=info msg="Successful endpoint creation" containerID=af124f6378 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3349 identity=21361 ipv4=10.0.0.159 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-c9k6w subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.145 b10207e7-9581-4f25-a788-b10eac88ed26 default }" containerID=8490ddd863ffc76acf7c1a345b4d197cef216f36a7b826d5158c07f1525a433b datapathConfiguration="&{false false false false false }" interface=lxcfa1de4443d4b k8sPodName=monitoring/loki-chunks-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8490ddd863 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1052 ipv4=10.0.0.145 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8490ddd863 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1052 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.145 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-chunks-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-chunks-cache;k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8490ddd863 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1052 identity=30766 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.145 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8490ddd863 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1052 identity=30766 ipv4=10.0.0.145 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.212 8084b781-18d3-4a44-bf30-c344d03baed6 default }" containerID=f7e2f76e419af55f60e26b44a1aa2af181603a510487b2a15a73f63332928ed2 datapathConfiguration="&{false false false false false }" interface=lxc1c93cbe0af7d k8sPodName=local-path-storage/helper-pod-create-pvc-2e7d62e2-0bac-45ec-a9ab-be55155d0cfd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f7e2f76e41 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3902 ipv4=10.0.0.212 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2e7d62e2-0bac-45ec-a9ab-be55155d0cfd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f7e2f76e41 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3902 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.212 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2e7d62e2-0bac-45ec-a9ab-be55155d0cfd subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f7e2f76e41 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3902 identity=18301 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.212 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2e7d62e2-0bac-45ec-a9ab-be55155d0cfd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f7e2f76e41 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3902 identity=18301 ipv4=10.0.0.212 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2e7d62e2-0bac-45ec-a9ab-be55155d0cfd subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.114 4a8e5ff6-e52f-4070-a043-5454a5d70af7 default }" containerID=7d29c107c20ccb62e23bbf06bde007fc7fb85305445bcabf74167c1ca3ab63e3 datapathConfiguration="&{false false false false false }" interface=lxcf2aebb490086 k8sPodName=monitoring/loki-results-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7d29c107c2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2868 ipv4=10.0.0.114 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7d29c107c2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2868 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.114 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-results-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-results-cache;k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7d29c107c2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2868 identity=16046 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.114 ipv6= k8sPodName=monitoring/loki-results-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7d29c107c2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2868 identity=16046 ipv4=10.0.0.114 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8490ddd863 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1052 identity=30766 ipv4=10.0.0.145 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=8490ddd863 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1052 identity=30766 ipv4=10.0.0.145 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.33 111ca33d-6339-41df-90f4-d333c2a0421a default }" containerID=4829c96b6ebc0c085f9ebb1085df240ef82d712da1feacf282ed0c1e84ab1626 datapathConfiguration="&{false false false false false }" interface=lxc45f29ce63835 k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4829c96b6e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1866 ipv4=10.0.0.33 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4829c96b6e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1866 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.33 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Rewrote endpoint BPF program" containerID=7d29c107c2 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2868 identity=16046 ipv4=10.0.0.114 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=7d29c107c2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2868 identity=16046 ipv4=10.0.0.114 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=f7e2f76e41 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3902 identity=18301 ipv4=10.0.0.212 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2e7d62e2-0bac-45ec-a9ab-be55155d0cfd subsys=endpoint level=info msg="Successful endpoint creation" containerID=f7e2f76e41 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3902 identity=18301 ipv4=10.0.0.212 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2e7d62e2-0bac-45ec-a9ab-be55155d0cfd subsys=daemon level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=prometheus;k8s:app.kubernetes.io/version=2.51.2;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus;k8s:io.kubernetes.pod.namespace=monitoring;k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus;k8s:operator.prometheus.io/shard=0;k8s:prometheus=kube-prometheus-stack-prometheus;k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4829c96b6e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1866 identity=41048 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.33 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4829c96b6e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1866 identity=41048 ipv4=10.0.0.33 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4829c96b6e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1866 identity=41048 ipv4=10.0.0.33 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=4829c96b6e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1866 identity=41048 ipv4=10.0.0.33 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.251 2742cd76-d0a2-4964-ad2f-2da3ffddf89e default }" containerID=92855abb090888599f112464b2fbca3fa7769273fb2e972fca9a2a5e3bb91ce6 datapathConfiguration="&{false false false false false }" interface=lxc7e4d78311fed k8sPodName=monitoring/vector-kxxhp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=92855abb09 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3274 ipv4=10.0.0.251 ipv6= k8sPodName=monitoring/vector-kxxhp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=92855abb09 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3274 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.251 ipv6= k8sPodName=monitoring/vector-kxxhp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=Agent;k8s:app.kubernetes.io/instance=vector;k8s:app.kubernetes.io/name=vector;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=vector;k8s:io.kubernetes.pod.namespace=monitoring;k8s:vector.dev/exclude=true;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=92855abb09 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3274 identity=1123 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.251 ipv6= k8sPodName=monitoring/vector-kxxhp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=92855abb09 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3274 identity=1123 ipv4=10.0.0.251 ipv6= k8sPodName=monitoring/vector-kxxhp subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=92855abb09 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3274 identity=1123 ipv4=10.0.0.251 ipv6= k8sPodName=monitoring/vector-kxxhp subsys=endpoint level=info msg="Successful endpoint creation" containerID=92855abb09 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3274 identity=1123 ipv4=10.0.0.251 ipv6= k8sPodName=monitoring/vector-kxxhp subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=f7e2f76e41 endpointID=3902 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-2e7d62e2-0bac-45ec-a9ab-be55155d0cfd subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=f7e2f76e41 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3902 identity=18301 ipv4=10.0.0.212 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2e7d62e2-0bac-45ec-a9ab-be55155d0cfd subsys=endpoint level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.197 351d54c6-cae5-4b37-a98c-660d8a142a03 default }" containerID=bb449c986c88feb896c8f8677a95b372b6c4fa749c49c53fcbb79ab0fe285b8c datapathConfiguration="&{false false false false false }" interface=lxc0ff5299aca58 k8sPodName=monitoring/loki-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bb449c986c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3010 ipv4=10.0.0.197 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bb449c986c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3010 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.197 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=bb449c986c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3010 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.197 ipv6= k8sPodName=monitoring/loki-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=single-binary;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:app.kubernetes.io/part-of=memberlist;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=loki-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=bb449c986c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3010 identity=3380 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.197 ipv6= k8sPodName=monitoring/loki-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=bb449c986c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3010 identity=3380 ipv4=10.0.0.197 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=bb449c986c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3010 identity=3380 ipv4=10.0.0.197 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=bb449c986c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3010 identity=3380 ipv4=10.0.0.197 ipv6= k8sPodName=monitoring/loki-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.185 1e9d3b80-11d3-4bd2-b48d-0a66de0a0a27 default }" containerID=29ca546cd1b2470dff3834484cdfbfff8f43d822926f0f069598901fb5018569 datapathConfiguration="&{false false false false false }" interface=lxc32c236733a7e k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-swsjx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=29ca546cd1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3796 ipv4=10.0.0.185 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-swsjx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=29ca546cd1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3796 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.185 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-swsjx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=prometheus-pushgateway;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=prometheus-pushgateway;k8s:app.kubernetes.io/version=v1.8.0;k8s:helm.sh/chart=prometheus-pushgateway-2.13.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=29ca546cd1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3796 identity=7728 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.185 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-swsjx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=29ca546cd1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3796 identity=7728 ipv4=10.0.0.185 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-swsjx subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=29ca546cd1 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3796 identity=7728 ipv4=10.0.0.185 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-swsjx subsys=endpoint level=info msg="Successful endpoint creation" containerID=29ca546cd1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3796 identity=7728 ipv4=10.0.0.185 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-swsjx subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.158 832cacc1-0e68-4419-9479-3b17ad05c7c7 default }" containerID=c6763416835decca362dc181c31361b6f2f514f84eeb1f26f545c53a1221a9e3 datapathConfiguration="&{false false false false false }" interface=lxcc60244aa40a3 k8sPodName=openstack/memcached-memcached-6479589586-p4sxr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c676341683 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2088 ipv4=10.0.0.158 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-p4sxr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c676341683 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2088 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.158 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-p4sxr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=memcached;k8s:component=server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=memcached;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c676341683 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2088 identity=44635 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.158 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-p4sxr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c676341683 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2088 identity=44635 ipv4=10.0.0.158 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-p4sxr subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=c676341683 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2088 identity=44635 ipv4=10.0.0.158 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-p4sxr subsys=endpoint level=info msg="Successful endpoint creation" containerID=c676341683 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2088 identity=44635 ipv4=10.0.0.158 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-p4sxr subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.253 7c6e6649-7276-4247-a82c-8147a3865a34 default }" containerID=d83a270f9a591bad17ac4984b201eb1daf9922e5c21a2c9ec2cfac42887adf79 datapathConfiguration="&{false false false false false }" interface=lxcb8a39bc21bba k8sPodName=local-path-storage/helper-pod-create-pvc-70f2fa8e-7d93-4f5b-8ade-04d4fb25e399 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d83a270f9a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2403 ipv4=10.0.0.253 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-70f2fa8e-7d93-4f5b-8ade-04d4fb25e399 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d83a270f9a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2403 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.253 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-70f2fa8e-7d93-4f5b-8ade-04d4fb25e399 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d83a270f9a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2403 identity=18301 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.253 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-70f2fa8e-7d93-4f5b-8ade-04d4fb25e399 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d83a270f9a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2403 identity=18301 ipv4=10.0.0.253 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-70f2fa8e-7d93-4f5b-8ade-04d4fb25e399 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d83a270f9a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2403 identity=18301 ipv4=10.0.0.253 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-70f2fa8e-7d93-4f5b-8ade-04d4fb25e399 subsys=endpoint level=info msg="Successful endpoint creation" containerID=d83a270f9a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2403 identity=18301 ipv4=10.0.0.253 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-70f2fa8e-7d93-4f5b-8ade-04d4fb25e399 subsys=daemon level=info msg="Delete endpoint request" containerID=d83a270f9a endpointID=2403 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-70f2fa8e-7d93-4f5b-8ade-04d4fb25e399 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=d83a270f9a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2403 identity=18301 ipv4=10.0.0.253 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-70f2fa8e-7d93-4f5b-8ade-04d4fb25e399 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.120 e60ab45c-eb1a-443b-9637-250d765670c1 default }" containerID=0d0e2656d58ed0f2817f1aa8c4ae3f70ed130b8196ad7137724ba62551e42b6d datapathConfiguration="&{false false false false false }" interface=lxcbd0afce4a410 k8sPodName=openstack/rabbitmq-keystone-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0d0e2656d5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3971 ipv4=10.0.0.120 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0d0e2656d5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3971 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.120 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-keystone;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0d0e2656d5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3971 identity=19016 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.120 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0d0e2656d5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3971 identity=19016 ipv4=10.0.0.120 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0d0e2656d5 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3971 identity=19016 ipv4=10.0.0.120 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=0d0e2656d5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3971 identity=19016 ipv4=10.0.0.120 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.148 7080803e-841b-40a8-bede-6b262aeb8e5b default }" containerID=8f2e35e5d053b76dd88ffcbe8c7d84fb4ba6f7c56e5d19999744f92801240f66 datapathConfiguration="&{false false false false false }" interface=lxc8e998399c574 k8sPodName=openstack/keystone-api-94bb4f95d-hsjzt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8f2e35e5d0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=620 ipv4=10.0.0.148 ipv6= k8sPodName=openstack/keystone-api-94bb4f95d-hsjzt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8f2e35e5d0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=620 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.148 ipv6= k8sPodName=openstack/keystone-api-94bb4f95d-hsjzt subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=keystone;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=8f2e35e5d0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=620 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.148 ipv6= k8sPodName=openstack/keystone-api-94bb4f95d-hsjzt line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=8f2e35e5d0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=620 identity=7008 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.148 ipv6= k8sPodName=openstack/keystone-api-94bb4f95d-hsjzt oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8f2e35e5d0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=620 identity=7008 ipv4=10.0.0.148 ipv6= k8sPodName=openstack/keystone-api-94bb4f95d-hsjzt subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8f2e35e5d0 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=620 identity=7008 ipv4=10.0.0.148 ipv6= k8sPodName=openstack/keystone-api-94bb4f95d-hsjzt subsys=endpoint level=info msg="Successful endpoint creation" containerID=8f2e35e5d0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=620 identity=7008 ipv4=10.0.0.148 ipv6= k8sPodName=openstack/keystone-api-94bb4f95d-hsjzt subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.50 0e0c6cc1-83ac-437d-84e3-52a3c71b866d default }" containerID=52259698e3ae8395a768bbb764b52ce8777153d84b02d924af88162da9a29ba6 datapathConfiguration="&{false false false false false }" interface=lxc41535e2e4c61 k8sPodName=openstack/keystone-credential-setup-nk9sk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=52259698e3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=726 ipv4=10.0.0.50 ipv6= k8sPodName=openstack/keystone-credential-setup-nk9sk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=52259698e3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=726 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=bf953c23-6635-434a-ab25-7d13901c3f90,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=bf953c23-6635-434a-ab25-7d13901c3f90,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.50 ipv6= k8sPodName=openstack/keystone-credential-setup-nk9sk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=bf953c23-6635-434a-ab25-7d13901c3f90;k8s:batch.kubernetes.io/job-name=keystone-credential-setup;k8s:component=credential-setup;k8s:controller-uid=bf953c23-6635-434a-ab25-7d13901c3f90;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-credential-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=52259698e3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=726 identity=29539 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=bf953c23-6635-434a-ab25-7d13901c3f90,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=bf953c23-6635-434a-ab25-7d13901c3f90,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.50 ipv6= k8sPodName=openstack/keystone-credential-setup-nk9sk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=52259698e3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=726 identity=29539 ipv4=10.0.0.50 ipv6= k8sPodName=openstack/keystone-credential-setup-nk9sk subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=52259698e3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=726 identity=29539 ipv4=10.0.0.50 ipv6= k8sPodName=openstack/keystone-credential-setup-nk9sk subsys=endpoint level=info msg="Successful endpoint creation" containerID=52259698e3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=726 identity=29539 ipv4=10.0.0.50 ipv6= k8sPodName=openstack/keystone-credential-setup-nk9sk subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=52259698e3 endpointID=726 k8sNamespace=openstack k8sPodName=keystone-credential-setup-nk9sk subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=bf953c23-6635-434a-ab25-7d13901c3f90 k8s:batch.kubernetes.io/job-name=keystone-credential-setup k8s:component=credential-setup k8s:controller-uid=bf953c23-6635-434a-ab25-7d13901c3f90 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-credential-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=52259698e3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=726 identity=29539 ipv4=10.0.0.50 ipv6= k8sPodName=openstack/keystone-credential-setup-nk9sk subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.53 7a37f83b-bbc3-4d0b-bc42-05402564fcd1 default }" containerID=e2041aa04ea52c94918e23d79df01543b0de4d8d7967aa6724da2677b68a6efb datapathConfiguration="&{false false false false false }" interface=lxce732a3651247 k8sPodName=openstack/keystone-db-init-bhrzl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e2041aa04e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1143 ipv4=10.0.0.53 ipv6= k8sPodName=openstack/keystone-db-init-bhrzl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e2041aa04e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1143 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=3ab98bd6-3ae2-4414-94dd-d13af4f2f984,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=3ab98bd6-3ae2-4414-94dd-d13af4f2f984,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.53 ipv6= k8sPodName=openstack/keystone-db-init-bhrzl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=3ab98bd6-3ae2-4414-94dd-d13af4f2f984;k8s:batch.kubernetes.io/job-name=keystone-db-init;k8s:component=db-init;k8s:controller-uid=3ab98bd6-3ae2-4414-94dd-d13af4f2f984;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-init;k8s:release_group=keystone;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=e2041aa04e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1143 identity=48483 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=3ab98bd6-3ae2-4414-94dd-d13af4f2f984,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=3ab98bd6-3ae2-4414-94dd-d13af4f2f984,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.53 ipv6= k8sPodName=openstack/keystone-db-init-bhrzl oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e2041aa04e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1143 identity=48483 ipv4=10.0.0.53 ipv6= k8sPodName=openstack/keystone-db-init-bhrzl subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e2041aa04e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1143 identity=48483 ipv4=10.0.0.53 ipv6= k8sPodName=openstack/keystone-db-init-bhrzl subsys=endpoint level=info msg="Successful endpoint creation" containerID=e2041aa04e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1143 identity=48483 ipv4=10.0.0.53 ipv6= k8sPodName=openstack/keystone-db-init-bhrzl subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=e2041aa04e endpointID=1143 k8sNamespace=openstack k8sPodName=keystone-db-init-bhrzl subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=3ab98bd6-3ae2-4414-94dd-d13af4f2f984 k8s:batch.kubernetes.io/job-name=keystone-db-init k8s:component=db-init k8s:controller-uid=3ab98bd6-3ae2-4414-94dd-d13af4f2f984 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=e2041aa04e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1143 identity=48483 ipv4=10.0.0.53 ipv6= k8sPodName=openstack/keystone-db-init-bhrzl subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.198 49ce62a1-e98e-41c8-92be-b3e3380947d4 default }" containerID=c0b3ccf5c3658de43024b13beb2c14160c4e3b3f78769e89c0cf8dfbd9a44e4e datapathConfiguration="&{false false false false false }" interface=lxc704a9a6b3db1 k8sPodName=openstack/keystone-fernet-setup-xp56j labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c0b3ccf5c3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3232 ipv4=10.0.0.198 ipv6= k8sPodName=openstack/keystone-fernet-setup-xp56j subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c0b3ccf5c3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3232 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=ee35a75b-22e1-45bc-9d90-f23aac90586f,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=ee35a75b-22e1-45bc-9d90-f23aac90586f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.198 ipv6= k8sPodName=openstack/keystone-fernet-setup-xp56j subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=c0b3ccf5c3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3232 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.198 ipv6= k8sPodName=openstack/keystone-fernet-setup-xp56j line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=ee35a75b-22e1-45bc-9d90-f23aac90586f;k8s:batch.kubernetes.io/job-name=keystone-fernet-setup;k8s:component=fernet-setup;k8s:controller-uid=ee35a75b-22e1-45bc-9d90-f23aac90586f;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-fernet-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c0b3ccf5c3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3232 identity=13589 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=ee35a75b-22e1-45bc-9d90-f23aac90586f,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=ee35a75b-22e1-45bc-9d90-f23aac90586f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.198 ipv6= k8sPodName=openstack/keystone-fernet-setup-xp56j oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c0b3ccf5c3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3232 identity=13589 ipv4=10.0.0.198 ipv6= k8sPodName=openstack/keystone-fernet-setup-xp56j subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c0b3ccf5c3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3232 identity=13589 ipv4=10.0.0.198 ipv6= k8sPodName=openstack/keystone-fernet-setup-xp56j subsys=endpoint level=info msg="Successful endpoint creation" containerID=c0b3ccf5c3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3232 identity=13589 ipv4=10.0.0.198 ipv6= k8sPodName=openstack/keystone-fernet-setup-xp56j subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=c0b3ccf5c3 endpointID=3232 k8sNamespace=openstack k8sPodName=keystone-fernet-setup-xp56j subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=ee35a75b-22e1-45bc-9d90-f23aac90586f k8s:batch.kubernetes.io/job-name=keystone-fernet-setup k8s:component=fernet-setup k8s:controller-uid=ee35a75b-22e1-45bc-9d90-f23aac90586f k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-fernet-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=c0b3ccf5c3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3232 identity=13589 ipv4=10.0.0.198 ipv6= k8sPodName=openstack/keystone-fernet-setup-xp56j subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.174 9ec628fc-5c38-4fd3-b01e-1de24192b40a default }" containerID=fc0c8454fc047bfdfcc9001415b54033564e56798e09f0b9425985c76d1549d4 datapathConfiguration="&{false false false false false }" interface=lxc57facea495d8 k8sPodName=openstack/keystone-db-sync-n8bh9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fc0c8454fc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=395 ipv4=10.0.0.174 ipv6= k8sPodName=openstack/keystone-db-sync-n8bh9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fc0c8454fc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=395 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=3ec23e79-e466-46d3-9961-f788769c3603,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=3ec23e79-e466-46d3-9961-f788769c3603,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.174 ipv6= k8sPodName=openstack/keystone-db-sync-n8bh9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=3ec23e79-e466-46d3-9961-f788769c3603;k8s:batch.kubernetes.io/job-name=keystone-db-sync;k8s:component=db-sync;k8s:controller-uid=3ec23e79-e466-46d3-9961-f788769c3603;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-sync;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fc0c8454fc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=395 identity=65251 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=3ec23e79-e466-46d3-9961-f788769c3603,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=3ec23e79-e466-46d3-9961-f788769c3603,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.174 ipv6= k8sPodName=openstack/keystone-db-sync-n8bh9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fc0c8454fc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=395 identity=65251 ipv4=10.0.0.174 ipv6= k8sPodName=openstack/keystone-db-sync-n8bh9 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=fc0c8454fc datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=395 identity=65251 ipv4=10.0.0.174 ipv6= k8sPodName=openstack/keystone-db-sync-n8bh9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=fc0c8454fc datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=395 identity=65251 ipv4=10.0.0.174 ipv6= k8sPodName=openstack/keystone-db-sync-n8bh9 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=fc0c8454fc endpointID=395 k8sNamespace=openstack k8sPodName=keystone-db-sync-n8bh9 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=3ec23e79-e466-46d3-9961-f788769c3603 k8s:batch.kubernetes.io/job-name=keystone-db-sync k8s:component=db-sync k8s:controller-uid=3ec23e79-e466-46d3-9961-f788769c3603 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-sync k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=fc0c8454fc datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=395 identity=65251 ipv4=10.0.0.174 ipv6= k8sPodName=openstack/keystone-db-sync-n8bh9 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.9 5b1eb8e5-dbd2-4dfc-add4-65213ae1896d default }" containerID=251bbfe859276152bb6e1cbd730fc51cae4d22e31ee10ccd40a9902be943a582 datapathConfiguration="&{false false false false false }" interface=lxc176979826a65 k8sPodName=openstack/keystone-rabbit-init-66rgc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=251bbfe859 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=874 ipv4=10.0.0.9 ipv6= k8sPodName=openstack/keystone-rabbit-init-66rgc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=251bbfe859 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=874 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=93eadd9f-05e4-4248-a60a-6997fdbf3881,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=93eadd9f-05e4-4248-a60a-6997fdbf3881,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.9 ipv6= k8sPodName=openstack/keystone-rabbit-init-66rgc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=93eadd9f-05e4-4248-a60a-6997fdbf3881;k8s:batch.kubernetes.io/job-name=keystone-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=93eadd9f-05e4-4248-a60a-6997fdbf3881;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-rabbit-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=251bbfe859 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=874 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.9 ipv6= k8sPodName=openstack/keystone-rabbit-init-66rgc line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=251bbfe859 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=874 identity=18626 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=93eadd9f-05e4-4248-a60a-6997fdbf3881,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=93eadd9f-05e4-4248-a60a-6997fdbf3881,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.9 ipv6= k8sPodName=openstack/keystone-rabbit-init-66rgc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=251bbfe859 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=874 identity=18626 ipv4=10.0.0.9 ipv6= k8sPodName=openstack/keystone-rabbit-init-66rgc subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=251bbfe859 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=874 identity=18626 ipv4=10.0.0.9 ipv6= k8sPodName=openstack/keystone-rabbit-init-66rgc subsys=endpoint level=info msg="Successful endpoint creation" containerID=251bbfe859 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=874 identity=18626 ipv4=10.0.0.9 ipv6= k8sPodName=openstack/keystone-rabbit-init-66rgc subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=251bbfe859 endpointID=874 k8sNamespace=openstack k8sPodName=keystone-rabbit-init-66rgc subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=93eadd9f-05e4-4248-a60a-6997fdbf3881 k8s:batch.kubernetes.io/job-name=keystone-rabbit-init k8s:component=rabbit-init k8s:controller-uid=93eadd9f-05e4-4248-a60a-6997fdbf3881 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-rabbit-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=251bbfe859 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=874 identity=18626 ipv4=10.0.0.9 ipv6= k8sPodName=openstack/keystone-rabbit-init-66rgc subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.172 94a68975-1d83-4442-9b38-9cd4a5e28010 default }" containerID=b9cb32cc4eb65ac8ecf1041ca792a0ebbb9cf4f49e3f778f62a1e3753b15a01a datapathConfiguration="&{false false false false false }" interface=lxc5c3146bd4e06 k8sPodName=openstack/keystone-domain-manage-t9bs9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b9cb32cc4e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3617 ipv4=10.0.0.172 ipv6= k8sPodName=openstack/keystone-domain-manage-t9bs9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b9cb32cc4e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3617 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=a5ecfa6b-5ab6-4eaa-8696-46be9e71f714,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=a5ecfa6b-5ab6-4eaa-8696-46be9e71f714,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.172 ipv6= k8sPodName=openstack/keystone-domain-manage-t9bs9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=a5ecfa6b-5ab6-4eaa-8696-46be9e71f714;k8s:batch.kubernetes.io/job-name=keystone-domain-manage;k8s:component=domain-manage;k8s:controller-uid=a5ecfa6b-5ab6-4eaa-8696-46be9e71f714;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-domain-manage;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b9cb32cc4e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3617 identity=15219 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=a5ecfa6b-5ab6-4eaa-8696-46be9e71f714,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=a5ecfa6b-5ab6-4eaa-8696-46be9e71f714,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.172 ipv6= k8sPodName=openstack/keystone-domain-manage-t9bs9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b9cb32cc4e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3617 identity=15219 ipv4=10.0.0.172 ipv6= k8sPodName=openstack/keystone-domain-manage-t9bs9 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=b9cb32cc4e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3617 identity=15219 ipv4=10.0.0.172 ipv6= k8sPodName=openstack/keystone-domain-manage-t9bs9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=b9cb32cc4e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3617 identity=15219 ipv4=10.0.0.172 ipv6= k8sPodName=openstack/keystone-domain-manage-t9bs9 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=b9cb32cc4e endpointID=3617 k8sNamespace=openstack k8sPodName=keystone-domain-manage-t9bs9 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=a5ecfa6b-5ab6-4eaa-8696-46be9e71f714 k8s:batch.kubernetes.io/job-name=keystone-domain-manage k8s:component=domain-manage k8s:controller-uid=a5ecfa6b-5ab6-4eaa-8696-46be9e71f714 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-domain-manage k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=b9cb32cc4e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3617 identity=15219 ipv4=10.0.0.172 ipv6= k8sPodName=openstack/keystone-domain-manage-t9bs9 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.13 167c7ffe-118f-4397-abea-a1c34da49bdf default }" containerID=17649f0fd368945886250cf3204ce367423d8fc53e5f0757d71716a7860e940c datapathConfiguration="&{false false false false false }" interface=lxc19cff4a6cf4e k8sPodName=openstack/keystone-bootstrap-wmk7g labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=17649f0fd3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3855 ipv4=10.0.0.13 ipv6= k8sPodName=openstack/keystone-bootstrap-wmk7g subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=17649f0fd3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3855 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=1f7d0788-70d6-401b-9179-22c8f9c00a10,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=1f7d0788-70d6-401b-9179-22c8f9c00a10,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.13 ipv6= k8sPodName=openstack/keystone-bootstrap-wmk7g subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=1f7d0788-70d6-401b-9179-22c8f9c00a10;k8s:batch.kubernetes.io/job-name=keystone-bootstrap;k8s:component=bootstrap;k8s:controller-uid=1f7d0788-70d6-401b-9179-22c8f9c00a10;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-bootstrap;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=17649f0fd3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3855 identity=19355 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=1f7d0788-70d6-401b-9179-22c8f9c00a10,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=1f7d0788-70d6-401b-9179-22c8f9c00a10,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.13 ipv6= k8sPodName=openstack/keystone-bootstrap-wmk7g oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=17649f0fd3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3855 identity=19355 ipv4=10.0.0.13 ipv6= k8sPodName=openstack/keystone-bootstrap-wmk7g subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=17649f0fd3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3855 identity=19355 ipv4=10.0.0.13 ipv6= k8sPodName=openstack/keystone-bootstrap-wmk7g subsys=endpoint level=info msg="Successful endpoint creation" containerID=17649f0fd3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3855 identity=19355 ipv4=10.0.0.13 ipv6= k8sPodName=openstack/keystone-bootstrap-wmk7g subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=17649f0fd3 endpointID=3855 k8sNamespace=openstack k8sPodName=keystone-bootstrap-wmk7g subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=1f7d0788-70d6-401b-9179-22c8f9c00a10 k8s:batch.kubernetes.io/job-name=keystone-bootstrap k8s:component=bootstrap k8s:controller-uid=1f7d0788-70d6-401b-9179-22c8f9c00a10 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-bootstrap k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=17649f0fd3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3855 identity=19355 ipv4=10.0.0.13 ipv6= k8sPodName=openstack/keystone-bootstrap-wmk7g subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.189 944b6558-9140-43a9-a86b-d1dd933414a1 default }" containerID=b31c688ce5b13e85d1aec0d6bf0c29e21cc706d2f696e4030b9e92a260d2661d datapathConfiguration="&{false false false false false }" interface=lxc36cabe973144 k8sPodName=local-path-storage/helper-pod-create-pvc-0cfaf775-f0eb-4796-82f7-3b1c9275ff03 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b31c688ce5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3611 ipv4=10.0.0.189 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0cfaf775-f0eb-4796-82f7-3b1c9275ff03 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b31c688ce5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3611 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.189 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0cfaf775-f0eb-4796-82f7-3b1c9275ff03 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b31c688ce5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3611 identity=18301 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.189 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0cfaf775-f0eb-4796-82f7-3b1c9275ff03 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b31c688ce5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3611 identity=18301 ipv4=10.0.0.189 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0cfaf775-f0eb-4796-82f7-3b1c9275ff03 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b31c688ce5 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3611 identity=18301 ipv4=10.0.0.189 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0cfaf775-f0eb-4796-82f7-3b1c9275ff03 subsys=endpoint level=info msg="Successful endpoint creation" containerID=b31c688ce5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3611 identity=18301 ipv4=10.0.0.189 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0cfaf775-f0eb-4796-82f7-3b1c9275ff03 subsys=daemon level=info msg="Delete endpoint request" containerID=b31c688ce5 endpointID=3611 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-0cfaf775-f0eb-4796-82f7-3b1c9275ff03 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=b31c688ce5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3611 identity=18301 ipv4=10.0.0.189 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0cfaf775-f0eb-4796-82f7-3b1c9275ff03 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.121 412d0a0d-c173-430b-bdf0-5479301a3c76 default }" containerID=1bfd2e5c6d20ba28cb1a7e3004d3cc5f9471ce2c18914818258633013a93ddf5 datapathConfiguration="&{false false false false false }" interface=lxc6318983d4618 k8sPodName=openstack/rabbitmq-barbican-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1bfd2e5c6d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=221 ipv4=10.0.0.121 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1bfd2e5c6d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=221 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.121 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-barbican;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1bfd2e5c6d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=221 identity=6839 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.121 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=1bfd2e5c6d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=221 identity=6839 ipv4=10.0.0.121 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1bfd2e5c6d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=221 identity=6839 ipv4=10.0.0.121 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=1bfd2e5c6d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=221 identity=6839 ipv4=10.0.0.121 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.205 1b6bc69c-3da2-473e-8526-603bfa2f7d41 default }" containerID=baaec546d9eaa433cbcc5eefea845f282afcc2c275a5208a265556e7981211f2 datapathConfiguration="&{false false false false false }" interface=lxc00a9a259fe47 k8sPodName=openstack/barbican-api-65597c465c-tfsms labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=baaec546d9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1874 ipv4=10.0.0.205 ipv6= k8sPodName=openstack/barbican-api-65597c465c-tfsms subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=baaec546d9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1874 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.205 ipv6= k8sPodName=openstack/barbican-api-65597c465c-tfsms subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=baaec546d9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1874 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.205 ipv6= k8sPodName=openstack/barbican-api-65597c465c-tfsms line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=baaec546d9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1874 identity=44431 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.205 ipv6= k8sPodName=openstack/barbican-api-65597c465c-tfsms oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=baaec546d9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1874 identity=44431 ipv4=10.0.0.205 ipv6= k8sPodName=openstack/barbican-api-65597c465c-tfsms subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.88 764cd169-371f-4f10-9d86-574db3bf89e4 default }" containerID=2560a8e70588246cb163f4c23f7de59f5712a0a49f45ebe8c711a36ed7fc3c99 datapathConfiguration="&{false false false false false }" interface=lxc359843e6ea4f k8sPodName=openstack/barbican-db-init-jcqqg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2560a8e705 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3637 ipv4=10.0.0.88 ipv6= k8sPodName=openstack/barbican-db-init-jcqqg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2560a8e705 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3637 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=75bd7fea-b528-4c74-a334-34eede016f39,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=75bd7fea-b528-4c74-a334-34eede016f39,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.88 ipv6= k8sPodName=openstack/barbican-db-init-jcqqg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=75bd7fea-b528-4c74-a334-34eede016f39;k8s:batch.kubernetes.io/job-name=barbican-db-init;k8s:component=db-init;k8s:controller-uid=75bd7fea-b528-4c74-a334-34eede016f39;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2560a8e705 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3637 identity=41458 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=75bd7fea-b528-4c74-a334-34eede016f39,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=75bd7fea-b528-4c74-a334-34eede016f39,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.88 ipv6= k8sPodName=openstack/barbican-db-init-jcqqg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2560a8e705 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3637 identity=41458 ipv4=10.0.0.88 ipv6= k8sPodName=openstack/barbican-db-init-jcqqg subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=baaec546d9 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1874 identity=44431 ipv4=10.0.0.205 ipv6= k8sPodName=openstack/barbican-api-65597c465c-tfsms subsys=endpoint level=info msg="Successful endpoint creation" containerID=baaec546d9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1874 identity=44431 ipv4=10.0.0.205 ipv6= k8sPodName=openstack/barbican-api-65597c465c-tfsms subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=2560a8e705 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3637 identity=41458 ipv4=10.0.0.88 ipv6= k8sPodName=openstack/barbican-db-init-jcqqg subsys=endpoint level=info msg="Successful endpoint creation" containerID=2560a8e705 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3637 identity=41458 ipv4=10.0.0.88 ipv6= k8sPodName=openstack/barbican-db-init-jcqqg subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=2560a8e705 endpointID=3637 k8sNamespace=openstack k8sPodName=barbican-db-init-jcqqg subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=75bd7fea-b528-4c74-a334-34eede016f39 k8s:batch.kubernetes.io/job-name=barbican-db-init k8s:component=db-init k8s:controller-uid=75bd7fea-b528-4c74-a334-34eede016f39 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=2560a8e705 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3637 identity=41458 ipv4=10.0.0.88 ipv6= k8sPodName=openstack/barbican-db-init-jcqqg subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.65 925fd8dc-c1ed-44e5-b593-9829900cdbdc default }" containerID=7c691828b1f4133f909ae25a29fc80a1aec2bac192b3cd234e0e26a5a2d9c3fc datapathConfiguration="&{false false false false false }" interface=lxca3042e93d6b0 k8sPodName=openstack/barbican-db-sync-ztz27 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7c691828b1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1559 ipv4=10.0.0.65 ipv6= k8sPodName=openstack/barbican-db-sync-ztz27 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7c691828b1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1559 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=b565a24d-a46a-4a35-bd95-6cf8e70d06cc,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=b565a24d-a46a-4a35-bd95-6cf8e70d06cc,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.65 ipv6= k8sPodName=openstack/barbican-db-sync-ztz27 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=b565a24d-a46a-4a35-bd95-6cf8e70d06cc;k8s:batch.kubernetes.io/job-name=barbican-db-sync;k8s:component=db-sync;k8s:controller-uid=b565a24d-a46a-4a35-bd95-6cf8e70d06cc;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-sync;k8s:release_group=barbican;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=7c691828b1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1559 identity=22078 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=b565a24d-a46a-4a35-bd95-6cf8e70d06cc,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=b565a24d-a46a-4a35-bd95-6cf8e70d06cc,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.65 ipv6= k8sPodName=openstack/barbican-db-sync-ztz27 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7c691828b1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1559 identity=22078 ipv4=10.0.0.65 ipv6= k8sPodName=openstack/barbican-db-sync-ztz27 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7c691828b1 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1559 identity=22078 ipv4=10.0.0.65 ipv6= k8sPodName=openstack/barbican-db-sync-ztz27 subsys=endpoint level=info msg="Successful endpoint creation" containerID=7c691828b1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1559 identity=22078 ipv4=10.0.0.65 ipv6= k8sPodName=openstack/barbican-db-sync-ztz27 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=7c691828b1 endpointID=1559 k8sNamespace=openstack k8sPodName=barbican-db-sync-ztz27 subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=b565a24d-a46a-4a35-bd95-6cf8e70d06cc k8s:batch.kubernetes.io/job-name=barbican-db-sync k8s:component=db-sync k8s:controller-uid=b565a24d-a46a-4a35-bd95-6cf8e70d06cc k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-sync k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=7c691828b1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1559 identity=22078 ipv4=10.0.0.65 ipv6= k8sPodName=openstack/barbican-db-sync-ztz27 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.57 164cfa6a-ce1c-4ec3-aef3-74a9ff6605ba default }" containerID=9b3a6592726fb7e953ced077cde1d5740fda38b29748354bafbdd1d8fcbaaa4a datapathConfiguration="&{false false false false false }" interface=lxc2e57acfdc749 k8sPodName=openstack/barbican-rabbit-init-nmrkb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9b3a659272 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2443 ipv4=10.0.0.57 ipv6= k8sPodName=openstack/barbican-rabbit-init-nmrkb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9b3a659272 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2443 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=ed95a2af-d8ea-405e-b983-505859d87ad3,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=ed95a2af-d8ea-405e-b983-505859d87ad3,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.57 ipv6= k8sPodName=openstack/barbican-rabbit-init-nmrkb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=9b3a659272 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2443 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.57 ipv6= k8sPodName=openstack/barbican-rabbit-init-nmrkb line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=ed95a2af-d8ea-405e-b983-505859d87ad3;k8s:batch.kubernetes.io/job-name=barbican-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=ed95a2af-d8ea-405e-b983-505859d87ad3;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-rabbit-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9b3a659272 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2443 identity=64746 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=ed95a2af-d8ea-405e-b983-505859d87ad3,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=ed95a2af-d8ea-405e-b983-505859d87ad3,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.57 ipv6= k8sPodName=openstack/barbican-rabbit-init-nmrkb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9b3a659272 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2443 identity=64746 ipv4=10.0.0.57 ipv6= k8sPodName=openstack/barbican-rabbit-init-nmrkb subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9b3a659272 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2443 identity=64746 ipv4=10.0.0.57 ipv6= k8sPodName=openstack/barbican-rabbit-init-nmrkb subsys=endpoint level=info msg="Successful endpoint creation" containerID=9b3a659272 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2443 identity=64746 ipv4=10.0.0.57 ipv6= k8sPodName=openstack/barbican-rabbit-init-nmrkb subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=9b3a659272 endpointID=2443 k8sNamespace=openstack k8sPodName=barbican-rabbit-init-nmrkb subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=ed95a2af-d8ea-405e-b983-505859d87ad3 k8s:batch.kubernetes.io/job-name=barbican-rabbit-init k8s:component=rabbit-init k8s:controller-uid=ed95a2af-d8ea-405e-b983-505859d87ad3 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-rabbit-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=9b3a659272 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2443 identity=64746 ipv4=10.0.0.57 ipv6= k8sPodName=openstack/barbican-rabbit-init-nmrkb subsys=endpoint level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.03646840802413191 newInterval=11m15s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.150 66b1f07b-5eb2-4de6-b6b6-ce807e9d59e7 default }" containerID=4429b14e8253427360866b29c3017dca06ecc7ab7465d49b5655a64c4763a387 datapathConfiguration="&{false false false false false }" interface=lxc02666fa00940 k8sPodName=openstack/barbican-ks-service-lhjx2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4429b14e82 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=339 ipv4=10.0.0.150 ipv6= k8sPodName=openstack/barbican-ks-service-lhjx2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4429b14e82 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=339 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=cd55b55e-7fb0-4e91-a199-8b5aa96f6c79,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=cd55b55e-7fb0-4e91-a199-8b5aa96f6c79,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.150 ipv6= k8sPodName=openstack/barbican-ks-service-lhjx2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=cd55b55e-7fb0-4e91-a199-8b5aa96f6c79;k8s:batch.kubernetes.io/job-name=barbican-ks-service;k8s:component=ks-service;k8s:controller-uid=cd55b55e-7fb0-4e91-a199-8b5aa96f6c79;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-service;k8s:release_group=barbican;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=4429b14e82 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=339 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.150 ipv6= k8sPodName=openstack/barbican-ks-service-lhjx2 line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=4429b14e82 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=339 identity=8700 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=cd55b55e-7fb0-4e91-a199-8b5aa96f6c79,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=cd55b55e-7fb0-4e91-a199-8b5aa96f6c79,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.150 ipv6= k8sPodName=openstack/barbican-ks-service-lhjx2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4429b14e82 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=339 identity=8700 ipv4=10.0.0.150 ipv6= k8sPodName=openstack/barbican-ks-service-lhjx2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4429b14e82 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=339 identity=8700 ipv4=10.0.0.150 ipv6= k8sPodName=openstack/barbican-ks-service-lhjx2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=4429b14e82 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=339 identity=8700 ipv4=10.0.0.150 ipv6= k8sPodName=openstack/barbican-ks-service-lhjx2 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=4429b14e82 endpointID=339 k8sNamespace=openstack k8sPodName=barbican-ks-service-lhjx2 subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=cd55b55e-7fb0-4e91-a199-8b5aa96f6c79 k8s:batch.kubernetes.io/job-name=barbican-ks-service k8s:component=ks-service k8s:controller-uid=cd55b55e-7fb0-4e91-a199-8b5aa96f6c79 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-service k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=4429b14e82 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=339 identity=8700 ipv4=10.0.0.150 ipv6= k8sPodName=openstack/barbican-ks-service-lhjx2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.165 b42c6150-2feb-4474-b319-3140ed7bca99 default }" containerID=495811aec0ff05c800df88c7be7a742c12e9951d70b8f21092d800aa5f77f928 datapathConfiguration="&{false false false false false }" interface=lxc3096aadc408f k8sPodName=openstack/barbican-ks-endpoints-zmclq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=495811aec0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=104 ipv4=10.0.0.165 ipv6= k8sPodName=openstack/barbican-ks-endpoints-zmclq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=495811aec0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=104 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=0f7a9570-f7da-4c5d-87ed-08987ef83054,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=0f7a9570-f7da-4c5d-87ed-08987ef83054,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.165 ipv6= k8sPodName=openstack/barbican-ks-endpoints-zmclq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=0f7a9570-f7da-4c5d-87ed-08987ef83054;k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=0f7a9570-f7da-4c5d-87ed-08987ef83054;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-endpoints;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=495811aec0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=104 identity=52403 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=0f7a9570-f7da-4c5d-87ed-08987ef83054,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=0f7a9570-f7da-4c5d-87ed-08987ef83054,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.165 ipv6= k8sPodName=openstack/barbican-ks-endpoints-zmclq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=495811aec0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=104 identity=52403 ipv4=10.0.0.165 ipv6= k8sPodName=openstack/barbican-ks-endpoints-zmclq subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=495811aec0 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=104 identity=52403 ipv4=10.0.0.165 ipv6= k8sPodName=openstack/barbican-ks-endpoints-zmclq subsys=endpoint level=info msg="Successful endpoint creation" containerID=495811aec0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=104 identity=52403 ipv4=10.0.0.165 ipv6= k8sPodName=openstack/barbican-ks-endpoints-zmclq subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=495811aec0 endpointID=104 k8sNamespace=openstack k8sPodName=barbican-ks-endpoints-zmclq subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=0f7a9570-f7da-4c5d-87ed-08987ef83054 k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=0f7a9570-f7da-4c5d-87ed-08987ef83054 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-endpoints k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=495811aec0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=104 identity=52403 ipv4=10.0.0.165 ipv6= k8sPodName=openstack/barbican-ks-endpoints-zmclq subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.149 a47b93d1-aef1-4e31-9ff8-b8872ee73526 default }" containerID=6fbcefcf4e071e3d1b1c01b375571f4de34dfc5bd2eaf1fddbb414ce12312531 datapathConfiguration="&{false false false false false }" interface=lxcf84cad985165 k8sPodName=openstack/barbican-ks-user-lg94d labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6fbcefcf4e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3083 ipv4=10.0.0.149 ipv6= k8sPodName=openstack/barbican-ks-user-lg94d subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6fbcefcf4e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3083 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=13c43935-0882-439a-8907-d316df4e2992,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=13c43935-0882-439a-8907-d316df4e2992,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.149 ipv6= k8sPodName=openstack/barbican-ks-user-lg94d subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=13c43935-0882-439a-8907-d316df4e2992;k8s:batch.kubernetes.io/job-name=barbican-ks-user;k8s:component=ks-user;k8s:controller-uid=13c43935-0882-439a-8907-d316df4e2992;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-user;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6fbcefcf4e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3083 identity=57462 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=13c43935-0882-439a-8907-d316df4e2992,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=13c43935-0882-439a-8907-d316df4e2992,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.149 ipv6= k8sPodName=openstack/barbican-ks-user-lg94d oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=6fbcefcf4e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3083 identity=57462 ipv4=10.0.0.149 ipv6= k8sPodName=openstack/barbican-ks-user-lg94d subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6fbcefcf4e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3083 identity=57462 ipv4=10.0.0.149 ipv6= k8sPodName=openstack/barbican-ks-user-lg94d subsys=endpoint level=info msg="Successful endpoint creation" containerID=6fbcefcf4e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3083 identity=57462 ipv4=10.0.0.149 ipv6= k8sPodName=openstack/barbican-ks-user-lg94d subsys=daemon level=info msg="Delete endpoint request" containerID=6fbcefcf4e endpointID=3083 k8sNamespace=openstack k8sPodName=barbican-ks-user-lg94d subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=13c43935-0882-439a-8907-d316df4e2992 k8s:batch.kubernetes.io/job-name=barbican-ks-user k8s:component=ks-user k8s:controller-uid=13c43935-0882-439a-8907-d316df4e2992 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-user k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=6fbcefcf4e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3083 identity=57462 ipv4=10.0.0.149 ipv6= k8sPodName=openstack/barbican-ks-user-lg94d subsys=endpoint level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Create endpoint request" addressing="&{10.0.0.116 5372453a-e107-442c-8f49-56599a4054c8 default }" containerID=e3843fad34990f300565186294520e37baef1f93dfd8a909ef248cda9344715f datapathConfiguration="&{false false false false false }" interface=lxcf671c939088d k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-v4prg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e3843fad34 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1425 ipv4=10.0.0.116 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-v4prg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e3843fad34 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1425 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.15.9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.116 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-v4prg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:rook-ceph k8s:io.cilium.k8s.namespace.labels.name:rook-ceph]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-operator;k8s:helm.sh/chart=rook-ceph-v1.15.9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph;k8s:io.cilium.k8s.namespace.labels.name=rook-ceph;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system;k8s:io.kubernetes.pod.namespace=rook-ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e3843fad34 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1425 identity=10411 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.15.9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.116 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-v4prg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e3843fad34 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1425 identity=10411 ipv4=10.0.0.116 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-v4prg subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=e3843fad34 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1425 identity=10411 ipv4=10.0.0.116 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-v4prg subsys=endpoint level=info msg="Successful endpoint creation" containerID=e3843fad34 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1425 identity=10411 ipv4=10.0.0.116 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-v4prg subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.206 cb7c9092-4e40-40d0-9599-27ca007b7f3f default }" containerID=61b54f27c9e40d63b90ea681acbf775ad3930e2e59ed187f9bfcc590e18f5807 datapathConfiguration="&{false false false false false }" interface=lxccefb4fee168c k8sPodName=openstack/rook-ceph-detect-version-wwhgg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=61b54f27c9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1685 ipv4=10.0.0.206 ipv6= k8sPodName=openstack/rook-ceph-detect-version-wwhgg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=61b54f27c9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1685 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=6c62e096-ca79-4f7a-9248-3146119ecd77,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=6c62e096-ca79-4f7a-9248-3146119ecd77,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.206 ipv6= k8sPodName=openstack/rook-ceph-detect-version-wwhgg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-detect-version;k8s:batch.kubernetes.io/controller-uid=6c62e096-ca79-4f7a-9248-3146119ecd77;k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version;k8s:controller-uid=6c62e096-ca79-4f7a-9248-3146119ecd77;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=rook-ceph-detect-version;k8s:rook-version=v1.15.9;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=61b54f27c9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1685 identity=45051 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=6c62e096-ca79-4f7a-9248-3146119ecd77,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=6c62e096-ca79-4f7a-9248-3146119ecd77,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.206 ipv6= k8sPodName=openstack/rook-ceph-detect-version-wwhgg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=61b54f27c9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1685 identity=45051 ipv4=10.0.0.206 ipv6= k8sPodName=openstack/rook-ceph-detect-version-wwhgg subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=61b54f27c9 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1685 identity=45051 ipv4=10.0.0.206 ipv6= k8sPodName=openstack/rook-ceph-detect-version-wwhgg subsys=endpoint level=info msg="Successful endpoint creation" containerID=61b54f27c9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1685 identity=45051 ipv4=10.0.0.206 ipv6= k8sPodName=openstack/rook-ceph-detect-version-wwhgg subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=61b54f27c9 endpointID=1685 k8sNamespace=openstack k8sPodName=rook-ceph-detect-version-wwhgg subsys=daemon level=info msg="Releasing key" key="[k8s:app=rook-ceph-detect-version k8s:batch.kubernetes.io/controller-uid=6c62e096-ca79-4f7a-9248-3146119ecd77 k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version k8s:controller-uid=6c62e096-ca79-4f7a-9248-3146119ecd77 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=rook-ceph-detect-version k8s:rook-version=v1.15.9]" subsys=allocator level=info msg="Removed endpoint" containerID=61b54f27c9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1685 identity=45051 ipv4=10.0.0.206 ipv6= k8sPodName=openstack/rook-ceph-detect-version-wwhgg subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.90 d035077e-cba6-4509-9928-123fed781589 default }" containerID=dd9b4c49610c66552589bc5d96e97afdb5a055a27d6a76ca75055c5617445939 datapathConfiguration="&{false false false false false }" interface=lxc70174fc32f85 k8sPodName=openstack/ceph-object-controller-detect-version-kqvc6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=dd9b4c4961 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3567 ipv4=10.0.0.90 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-kqvc6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=dd9b4c4961 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3567 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=01da3d0d-6255-45f8-b6dd-a9ac0a1e0d04,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=01da3d0d-6255-45f8-b6dd-a9ac0a1e0d04,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.90 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-kqvc6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=dd9b4c4961 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3567 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.90 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-kqvc6 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=ceph-object-controller-detect-version;k8s:batch.kubernetes.io/controller-uid=01da3d0d-6255-45f8-b6dd-a9ac0a1e0d04;k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version;k8s:controller-uid=01da3d0d-6255-45f8-b6dd-a9ac0a1e0d04;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=ceph-object-controller-detect-version;k8s:rook-version=v1.15.9;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=dd9b4c4961 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3567 identity=13847 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=01da3d0d-6255-45f8-b6dd-a9ac0a1e0d04,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=01da3d0d-6255-45f8-b6dd-a9ac0a1e0d04,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.90 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-kqvc6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=dd9b4c4961 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3567 identity=13847 ipv4=10.0.0.90 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-kqvc6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=dd9b4c4961 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3567 identity=13847 ipv4=10.0.0.90 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-kqvc6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=dd9b4c4961 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3567 identity=13847 ipv4=10.0.0.90 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-kqvc6 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=dd9b4c4961 endpointID=3567 k8sNamespace=openstack k8sPodName=ceph-object-controller-detect-version-kqvc6 subsys=daemon level=info msg="Releasing key" key="[k8s:app=ceph-object-controller-detect-version k8s:batch.kubernetes.io/controller-uid=01da3d0d-6255-45f8-b6dd-a9ac0a1e0d04 k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version k8s:controller-uid=01da3d0d-6255-45f8-b6dd-a9ac0a1e0d04 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=ceph-object-controller-detect-version k8s:rook-version=v1.15.9]" subsys=allocator level=info msg="Removed endpoint" containerID=dd9b4c4961 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3567 identity=13847 ipv4=10.0.0.90 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-kqvc6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.118 a8af52e6-03b4-4c19-b6ed-ab7b79cf6412 default }" containerID=99baa9a8cc1eee17b0cdc2dd86124ac4f46309641a6c95517a0f2e895b6b73b9 datapathConfiguration="&{false false false false false }" interface=lxcfcd0484f29d1 k8sPodName=local-path-storage/helper-pod-create-pvc-b8ddcd4d-2f6b-48b3-ae54-1de4cce278c8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=99baa9a8cc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=349 ipv4=10.0.0.118 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b8ddcd4d-2f6b-48b3-ae54-1de4cce278c8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=99baa9a8cc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=349 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.118 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b8ddcd4d-2f6b-48b3-ae54-1de4cce278c8 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=99baa9a8cc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=349 identity=18301 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.118 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b8ddcd4d-2f6b-48b3-ae54-1de4cce278c8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=99baa9a8cc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=349 identity=18301 ipv4=10.0.0.118 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b8ddcd4d-2f6b-48b3-ae54-1de4cce278c8 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=99baa9a8cc datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=349 identity=18301 ipv4=10.0.0.118 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b8ddcd4d-2f6b-48b3-ae54-1de4cce278c8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=99baa9a8cc datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=349 identity=18301 ipv4=10.0.0.118 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b8ddcd4d-2f6b-48b3-ae54-1de4cce278c8 subsys=daemon level=info msg="Delete endpoint request" containerID=99baa9a8cc endpointID=349 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-b8ddcd4d-2f6b-48b3-ae54-1de4cce278c8 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=99baa9a8cc datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=349 identity=18301 ipv4=10.0.0.118 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b8ddcd4d-2f6b-48b3-ae54-1de4cce278c8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.149 d7d2a63d-2e94-4537-aa60-97d0b5831dd9 default }" containerID=19f5255893fd26af42796cbede1682101347d667daed66de9646feb6907488d8 datapathConfiguration="&{false false false false false }" interface=lxc3e6c7948c81d k8sPodName=openstack/rabbitmq-glance-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=19f5255893 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3627 ipv4=10.0.0.149 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=19f5255893 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3627 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.149 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-glance;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=19f5255893 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3627 identity=14802 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.149 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=19f5255893 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3627 identity=14802 ipv4=10.0.0.149 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=19f5255893 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3627 identity=14802 ipv4=10.0.0.149 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=19f5255893 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3627 identity=14802 ipv4=10.0.0.149 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.67 51847e12-43fa-4078-86e9-5f01aca2f33f default }" containerID=a8a89200f627aab1fefb4f9a0a0e9968a8571408bf289509c1be2c8b3d0c7740 datapathConfiguration="&{false false false false false }" interface=lxcc5e2b3928aa1 k8sPodName=openstack/glance-db-init-brtdv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a8a89200f6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=517 ipv4=10.0.0.67 ipv6= k8sPodName=openstack/glance-db-init-brtdv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a8a89200f6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=517 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=a54635e0-1e0b-4d4e-961d-dd50da0d756f,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=a54635e0-1e0b-4d4e-961d-dd50da0d756f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.67 ipv6= k8sPodName=openstack/glance-db-init-brtdv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=a54635e0-1e0b-4d4e-961d-dd50da0d756f;k8s:batch.kubernetes.io/job-name=glance-db-init;k8s:component=db-init;k8s:controller-uid=a54635e0-1e0b-4d4e-961d-dd50da0d756f;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a8a89200f6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=517 identity=60881 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=a54635e0-1e0b-4d4e-961d-dd50da0d756f,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=a54635e0-1e0b-4d4e-961d-dd50da0d756f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.67 ipv6= k8sPodName=openstack/glance-db-init-brtdv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a8a89200f6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=517 identity=60881 ipv4=10.0.0.67 ipv6= k8sPodName=openstack/glance-db-init-brtdv subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=a8a89200f6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=517 identity=60881 ipv4=10.0.0.67 ipv6= k8sPodName=openstack/glance-db-init-brtdv subsys=endpoint level=info msg="Successful endpoint creation" containerID=a8a89200f6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=517 identity=60881 ipv4=10.0.0.67 ipv6= k8sPodName=openstack/glance-db-init-brtdv subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.199 4551d9c6-a525-48c6-abfb-a41f62e8718b default }" containerID=2dc00d4ee8f13da2d3a070fbfeef7ff0bafb8c2a712102da6d0c0acaf33a1b59 datapathConfiguration="&{false false false false false }" interface=lxc585df1d45adb k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-l2dct labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2dc00d4ee8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=159 ipv4=10.0.0.199 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-l2dct subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2dc00d4ee8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=159 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.199 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-l2dct subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=2dc00d4ee8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=159 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.199 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-l2dct line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=rook-ceph-rgw;k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io;k8s:app.kubernetes.io/created-by=rook-ceph-operator;k8s:app.kubernetes.io/instance=ceph;k8s:app.kubernetes.io/managed-by=rook-ceph-operator;k8s:app.kubernetes.io/name=ceph-rgw;k8s:app.kubernetes.io/part-of=ceph;k8s:ceph_daemon_id=ceph;k8s:ceph_daemon_type=rgw;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw;k8s:io.kubernetes.pod.namespace=openstack;k8s:rgw=ceph;k8s:rook.io/operator-namespace=rook-ceph;k8s:rook_cluster=openstack;k8s:rook_object_store=ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2dc00d4ee8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=159 identity=12432 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.199 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-l2dct oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2dc00d4ee8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=159 identity=12432 ipv4=10.0.0.199 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-l2dct subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.156 49bcbb0e-814c-4a32-b62d-56610ffd4bc8 default }" containerID=719544bdd8483536ea83eeee2c3ab4f2bc824079fdb3a6511aa4c539e4a01d3c datapathConfiguration="&{false false false false false }" interface=lxc9601d3d8d6db k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-gqc4m labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=719544bdd8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1900 ipv4=10.0.0.156 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-gqc4m subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=719544bdd8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1900 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.156 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-gqc4m subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-crashcollector;k8s:ceph-version=18.2.7-0;k8s:ceph_daemon_id=crash;k8s:crashcollector=crash;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default;k8s:io.kubernetes.pod.namespace=openstack;k8s:node_name=instance;k8s:rook_cluster=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=719544bdd8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1900 identity=7771 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.156 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-gqc4m oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=719544bdd8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1900 identity=7771 ipv4=10.0.0.156 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-gqc4m subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2dc00d4ee8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=159 identity=12432 ipv4=10.0.0.199 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-l2dct subsys=endpoint level=info msg="Successful endpoint creation" containerID=2dc00d4ee8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=159 identity=12432 ipv4=10.0.0.199 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-l2dct subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=719544bdd8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1900 identity=7771 ipv4=10.0.0.156 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-gqc4m subsys=endpoint level=info msg="Successful endpoint creation" containerID=719544bdd8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1900 identity=7771 ipv4=10.0.0.156 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-gqc4m subsys=daemon level=info msg="Delete endpoint request" containerID=a8a89200f6 endpointID=517 k8sNamespace=openstack k8sPodName=glance-db-init-brtdv subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=a54635e0-1e0b-4d4e-961d-dd50da0d756f k8s:batch.kubernetes.io/job-name=glance-db-init k8s:component=db-init k8s:controller-uid=a54635e0-1e0b-4d4e-961d-dd50da0d756f k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=a8a89200f6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=517 identity=60881 ipv4=10.0.0.67 ipv6= k8sPodName=openstack/glance-db-init-brtdv subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.127 2da82ee9-b69e-4d84-b9ee-4001f06f6b40 default }" containerID=b5a10bbef67a739ecb76c10e493158a590df15d97e11e021bf9252d6c441602f datapathConfiguration="&{false false false false false }" interface=lxcf67860471090 k8sPodName=openstack/glance-db-sync-lfxlt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b5a10bbef6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=543 ipv4=10.0.0.127 ipv6= k8sPodName=openstack/glance-db-sync-lfxlt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b5a10bbef6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=543 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=ab08daf6-0500-43b1-ab21-94ab17916a97,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=ab08daf6-0500-43b1-ab21-94ab17916a97,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.127 ipv6= k8sPodName=openstack/glance-db-sync-lfxlt subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=b5a10bbef6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=543 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.127 ipv6= k8sPodName=openstack/glance-db-sync-lfxlt line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=ab08daf6-0500-43b1-ab21-94ab17916a97;k8s:batch.kubernetes.io/job-name=glance-db-sync;k8s:component=db-sync;k8s:controller-uid=ab08daf6-0500-43b1-ab21-94ab17916a97;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-sync;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b5a10bbef6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=543 identity=38028 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=ab08daf6-0500-43b1-ab21-94ab17916a97,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=ab08daf6-0500-43b1-ab21-94ab17916a97,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.127 ipv6= k8sPodName=openstack/glance-db-sync-lfxlt oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b5a10bbef6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=543 identity=38028 ipv4=10.0.0.127 ipv6= k8sPodName=openstack/glance-db-sync-lfxlt subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b5a10bbef6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=543 identity=38028 ipv4=10.0.0.127 ipv6= k8sPodName=openstack/glance-db-sync-lfxlt subsys=endpoint level=info msg="Successful endpoint creation" containerID=b5a10bbef6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=543 identity=38028 ipv4=10.0.0.127 ipv6= k8sPodName=openstack/glance-db-sync-lfxlt subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=b5a10bbef6 endpointID=543 k8sNamespace=openstack k8sPodName=glance-db-sync-lfxlt subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=ab08daf6-0500-43b1-ab21-94ab17916a97 k8s:batch.kubernetes.io/job-name=glance-db-sync k8s:component=db-sync k8s:controller-uid=ab08daf6-0500-43b1-ab21-94ab17916a97 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-sync k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=b5a10bbef6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=543 identity=38028 ipv4=10.0.0.127 ipv6= k8sPodName=openstack/glance-db-sync-lfxlt subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.162 9f8e280b-bcbc-4acd-a7d3-3920b1ce5767 default }" containerID=ae76b91feaf7526feb02f5e01ea659137f6bb09f1fc7fc643969e71f8d0a8972 datapathConfiguration="&{false false false false false }" interface=lxccf7463eae276 k8sPodName=openstack/glance-rabbit-init-dm72s labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ae76b91fea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=861 ipv4=10.0.0.162 ipv6= k8sPodName=openstack/glance-rabbit-init-dm72s subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ae76b91fea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=861 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=5fb022f6-276d-4e3e-aeac-a71724053773,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=5fb022f6-276d-4e3e-aeac-a71724053773,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.162 ipv6= k8sPodName=openstack/glance-rabbit-init-dm72s subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=ae76b91fea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=861 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.162 ipv6= k8sPodName=openstack/glance-rabbit-init-dm72s line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=5fb022f6-276d-4e3e-aeac-a71724053773;k8s:batch.kubernetes.io/job-name=glance-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=5fb022f6-276d-4e3e-aeac-a71724053773;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-rabbit-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ae76b91fea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=861 identity=5738 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=5fb022f6-276d-4e3e-aeac-a71724053773,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=5fb022f6-276d-4e3e-aeac-a71724053773,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.162 ipv6= k8sPodName=openstack/glance-rabbit-init-dm72s oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ae76b91fea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=861 identity=5738 ipv4=10.0.0.162 ipv6= k8sPodName=openstack/glance-rabbit-init-dm72s subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ae76b91fea datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=861 identity=5738 ipv4=10.0.0.162 ipv6= k8sPodName=openstack/glance-rabbit-init-dm72s subsys=endpoint level=info msg="Successful endpoint creation" containerID=ae76b91fea datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=861 identity=5738 ipv4=10.0.0.162 ipv6= k8sPodName=openstack/glance-rabbit-init-dm72s subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=ae76b91fea endpointID=861 k8sNamespace=openstack k8sPodName=glance-rabbit-init-dm72s subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=5fb022f6-276d-4e3e-aeac-a71724053773 k8s:batch.kubernetes.io/job-name=glance-rabbit-init k8s:component=rabbit-init k8s:controller-uid=5fb022f6-276d-4e3e-aeac-a71724053773 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-rabbit-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=ae76b91fea datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=861 identity=5738 ipv4=10.0.0.162 ipv6= k8sPodName=openstack/glance-rabbit-init-dm72s subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.68 578fb608-3c0d-4751-8534-dba3c3b80a82 default }" containerID=b8dc83ad7172c2e557e5ae1be356c415d8451593416ed024da49c83ba566bc0a datapathConfiguration="&{false false false false false }" interface=lxcbe11913e7922 k8sPodName=openstack/glance-ks-service-z69jr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b8dc83ad71 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2640 ipv4=10.0.0.68 ipv6= k8sPodName=openstack/glance-ks-service-z69jr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b8dc83ad71 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2640 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=abfd1445-db83-481b-bc70-8a4d5c6ceafd,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=abfd1445-db83-481b-bc70-8a4d5c6ceafd,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.68 ipv6= k8sPodName=openstack/glance-ks-service-z69jr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=abfd1445-db83-481b-bc70-8a4d5c6ceafd;k8s:batch.kubernetes.io/job-name=glance-ks-service;k8s:component=ks-service;k8s:controller-uid=abfd1445-db83-481b-bc70-8a4d5c6ceafd;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-service;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b8dc83ad71 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2640 identity=52955 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=abfd1445-db83-481b-bc70-8a4d5c6ceafd,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=abfd1445-db83-481b-bc70-8a4d5c6ceafd,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.68 ipv6= k8sPodName=openstack/glance-ks-service-z69jr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b8dc83ad71 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2640 identity=52955 ipv4=10.0.0.68 ipv6= k8sPodName=openstack/glance-ks-service-z69jr subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b8dc83ad71 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2640 identity=52955 ipv4=10.0.0.68 ipv6= k8sPodName=openstack/glance-ks-service-z69jr subsys=endpoint level=info msg="Successful endpoint creation" containerID=b8dc83ad71 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2640 identity=52955 ipv4=10.0.0.68 ipv6= k8sPodName=openstack/glance-ks-service-z69jr subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=b8dc83ad71 endpointID=2640 k8sNamespace=openstack k8sPodName=glance-ks-service-z69jr subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=abfd1445-db83-481b-bc70-8a4d5c6ceafd k8s:batch.kubernetes.io/job-name=glance-ks-service k8s:component=ks-service k8s:controller-uid=abfd1445-db83-481b-bc70-8a4d5c6ceafd k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-service k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=b8dc83ad71 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2640 identity=52955 ipv4=10.0.0.68 ipv6= k8sPodName=openstack/glance-ks-service-z69jr subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.135 23207ef6-4430-4ca3-8a6d-6a988c0d8c0f default }" containerID=867ae69a13c3c8ae34b1323617eeab3e166534717706ba130a5c40f6b75a3f64 datapathConfiguration="&{false false false false false }" interface=lxccc700fe870ea k8sPodName=openstack/glance-ks-endpoints-97dzc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=867ae69a13 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=285 ipv4=10.0.0.135 ipv6= k8sPodName=openstack/glance-ks-endpoints-97dzc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=867ae69a13 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=285 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=5d39c5a8-81be-4eb5-9276-4d3d12d7f442,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=5d39c5a8-81be-4eb5-9276-4d3d12d7f442,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.135 ipv6= k8sPodName=openstack/glance-ks-endpoints-97dzc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=5d39c5a8-81be-4eb5-9276-4d3d12d7f442;k8s:batch.kubernetes.io/job-name=glance-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=5d39c5a8-81be-4eb5-9276-4d3d12d7f442;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-endpoints;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=867ae69a13 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=285 identity=15644 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=5d39c5a8-81be-4eb5-9276-4d3d12d7f442,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=5d39c5a8-81be-4eb5-9276-4d3d12d7f442,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.135 ipv6= k8sPodName=openstack/glance-ks-endpoints-97dzc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=867ae69a13 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=285 identity=15644 ipv4=10.0.0.135 ipv6= k8sPodName=openstack/glance-ks-endpoints-97dzc subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=867ae69a13 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=285 identity=15644 ipv4=10.0.0.135 ipv6= k8sPodName=openstack/glance-ks-endpoints-97dzc subsys=endpoint level=info msg="Successful endpoint creation" containerID=867ae69a13 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=285 identity=15644 ipv4=10.0.0.135 ipv6= k8sPodName=openstack/glance-ks-endpoints-97dzc subsys=daemon level=info msg="Delete endpoint request" containerID=867ae69a13 endpointID=285 k8sNamespace=openstack k8sPodName=glance-ks-endpoints-97dzc subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=5d39c5a8-81be-4eb5-9276-4d3d12d7f442 k8s:batch.kubernetes.io/job-name=glance-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=5d39c5a8-81be-4eb5-9276-4d3d12d7f442 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-endpoints k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=867ae69a13 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=285 identity=15644 ipv4=10.0.0.135 ipv6= k8sPodName=openstack/glance-ks-endpoints-97dzc subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.252 fe695d6a-4389-44cd-8e9b-c0c0895ea10f default }" containerID=85f1965783d082e8bf89e8bf47555e6c2d486020e1258b1cba2e7c08ab406b96 datapathConfiguration="&{false false false false false }" interface=lxc85ff7b71215b k8sPodName=openstack/glance-ks-user-58qbr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=85f1965783 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=407 ipv4=10.0.0.252 ipv6= k8sPodName=openstack/glance-ks-user-58qbr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=85f1965783 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=407 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=f90f2e60-c993-44d9-a42d-5d0ac07cdf7b,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=f90f2e60-c993-44d9-a42d-5d0ac07cdf7b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.252 ipv6= k8sPodName=openstack/glance-ks-user-58qbr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=85f1965783 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=407 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.252 ipv6= k8sPodName=openstack/glance-ks-user-58qbr line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=f90f2e60-c993-44d9-a42d-5d0ac07cdf7b;k8s:batch.kubernetes.io/job-name=glance-ks-user;k8s:component=ks-user;k8s:controller-uid=f90f2e60-c993-44d9-a42d-5d0ac07cdf7b;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-user;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=85f1965783 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=407 identity=4133 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=f90f2e60-c993-44d9-a42d-5d0ac07cdf7b,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=f90f2e60-c993-44d9-a42d-5d0ac07cdf7b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.252 ipv6= k8sPodName=openstack/glance-ks-user-58qbr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=85f1965783 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=407 identity=4133 ipv4=10.0.0.252 ipv6= k8sPodName=openstack/glance-ks-user-58qbr subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=85f1965783 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=407 identity=4133 ipv4=10.0.0.252 ipv6= k8sPodName=openstack/glance-ks-user-58qbr subsys=endpoint level=info msg="Successful endpoint creation" containerID=85f1965783 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=407 identity=4133 ipv4=10.0.0.252 ipv6= k8sPodName=openstack/glance-ks-user-58qbr subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=85f1965783 endpointID=407 k8sNamespace=openstack k8sPodName=glance-ks-user-58qbr subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=f90f2e60-c993-44d9-a42d-5d0ac07cdf7b k8s:batch.kubernetes.io/job-name=glance-ks-user k8s:component=ks-user k8s:controller-uid=f90f2e60-c993-44d9-a42d-5d0ac07cdf7b k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-user k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=85f1965783 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=407 identity=4133 ipv4=10.0.0.252 ipv6= k8sPodName=openstack/glance-ks-user-58qbr subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.212 7623fa5b-5a6c-4f77-917b-23dba404b6ad default }" containerID=169a6bf9edd91998de3328902f3ce095b8ec1f72c0bb8a0523bb00ab15904b5b datapathConfiguration="&{false false false false false }" interface=lxc590a656b4598 k8sPodName=openstack/glance-metadefs-load-db4zj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=169a6bf9ed datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2815 ipv4=10.0.0.212 ipv6= k8sPodName=openstack/glance-metadefs-load-db4zj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=169a6bf9ed datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2815 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=cc3cf1d9-bcec-459f-a309-c6065fdc7886,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=cc3cf1d9-bcec-459f-a309-c6065fdc7886,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.212 ipv6= k8sPodName=openstack/glance-metadefs-load-db4zj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=169a6bf9ed datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2815 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.212 ipv6= k8sPodName=openstack/glance-metadefs-load-db4zj line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=cc3cf1d9-bcec-459f-a309-c6065fdc7886;k8s:batch.kubernetes.io/job-name=glance-metadefs-load;k8s:component=metadefs_load;k8s:controller-uid=cc3cf1d9-bcec-459f-a309-c6065fdc7886;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-metadefs-load;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=169a6bf9ed datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2815 identity=6771 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=cc3cf1d9-bcec-459f-a309-c6065fdc7886,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=cc3cf1d9-bcec-459f-a309-c6065fdc7886,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.212 ipv6= k8sPodName=openstack/glance-metadefs-load-db4zj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=169a6bf9ed datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2815 identity=6771 ipv4=10.0.0.212 ipv6= k8sPodName=openstack/glance-metadefs-load-db4zj subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=169a6bf9ed datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2815 identity=6771 ipv4=10.0.0.212 ipv6= k8sPodName=openstack/glance-metadefs-load-db4zj subsys=endpoint level=info msg="Successful endpoint creation" containerID=169a6bf9ed datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2815 identity=6771 ipv4=10.0.0.212 ipv6= k8sPodName=openstack/glance-metadefs-load-db4zj subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=169a6bf9ed endpointID=2815 k8sNamespace=openstack k8sPodName=glance-metadefs-load-db4zj subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=cc3cf1d9-bcec-459f-a309-c6065fdc7886 k8s:batch.kubernetes.io/job-name=glance-metadefs-load k8s:component=metadefs_load k8s:controller-uid=cc3cf1d9-bcec-459f-a309-c6065fdc7886 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-metadefs-load k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=169a6bf9ed datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2815 identity=6771 ipv4=10.0.0.212 ipv6= k8sPodName=openstack/glance-metadefs-load-db4zj subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.57 990509ee-34bf-4fe2-9ef4-7eddd6c1332b default }" containerID=a900245f80e86e92710825f65f58ad80555e264dfdf342a7d9efa2f099829c4b datapathConfiguration="&{false false false false false }" interface=lxcd6b7c36aa77f k8sPodName=openstack/glance-storage-init-nkxlj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a900245f80 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1149 ipv4=10.0.0.57 ipv6= k8sPodName=openstack/glance-storage-init-nkxlj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a900245f80 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1149 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=6bf4e835-bc7c-4054-b9f4-bcb2b13cd89c,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=6bf4e835-bc7c-4054-b9f4-bcb2b13cd89c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.57 ipv6= k8sPodName=openstack/glance-storage-init-nkxlj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=6bf4e835-bc7c-4054-b9f4-bcb2b13cd89c;k8s:batch.kubernetes.io/job-name=glance-storage-init;k8s:component=storage-init;k8s:controller-uid=6bf4e835-bc7c-4054-b9f4-bcb2b13cd89c;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-storage-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a900245f80 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1149 identity=57726 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=6bf4e835-bc7c-4054-b9f4-bcb2b13cd89c,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=6bf4e835-bc7c-4054-b9f4-bcb2b13cd89c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.57 ipv6= k8sPodName=openstack/glance-storage-init-nkxlj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a900245f80 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1149 identity=57726 ipv4=10.0.0.57 ipv6= k8sPodName=openstack/glance-storage-init-nkxlj subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=a900245f80 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1149 identity=57726 ipv4=10.0.0.57 ipv6= k8sPodName=openstack/glance-storage-init-nkxlj subsys=endpoint level=info msg="Successful endpoint creation" containerID=a900245f80 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1149 identity=57726 ipv4=10.0.0.57 ipv6= k8sPodName=openstack/glance-storage-init-nkxlj subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=a900245f80 endpointID=1149 k8sNamespace=openstack k8sPodName=glance-storage-init-nkxlj subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=6bf4e835-bc7c-4054-b9f4-bcb2b13cd89c k8s:batch.kubernetes.io/job-name=glance-storage-init k8s:component=storage-init k8s:controller-uid=6bf4e835-bc7c-4054-b9f4-bcb2b13cd89c k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-storage-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=a900245f80 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1149 identity=57726 ipv4=10.0.0.57 ipv6= k8sPodName=openstack/glance-storage-init-nkxlj subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.122 101a512e-0325-466e-b06a-a32f77be2906 default }" containerID=ef20156d16a4706941350cf86eb0f0c4a65f419d88c72597ead6952612a1e219 datapathConfiguration="&{false false false false false }" interface=lxce9abc21da92c k8sPodName=openstack/glance-api-77454855fd-mvd9n labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ef20156d16 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=904 ipv4=10.0.0.122 ipv6= k8sPodName=openstack/glance-api-77454855fd-mvd9n subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ef20156d16 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=904 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.122 ipv6= k8sPodName=openstack/glance-api-77454855fd-mvd9n subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ef20156d16 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=904 identity=45698 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.122 ipv6= k8sPodName=openstack/glance-api-77454855fd-mvd9n oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=ef20156d16 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=904 identity=45698 ipv4=10.0.0.122 ipv6= k8sPodName=openstack/glance-api-77454855fd-mvd9n subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ef20156d16 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=904 identity=45698 ipv4=10.0.0.122 ipv6= k8sPodName=openstack/glance-api-77454855fd-mvd9n subsys=endpoint level=info msg="Successful endpoint creation" containerID=ef20156d16 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=904 identity=45698 ipv4=10.0.0.122 ipv6= k8sPodName=openstack/glance-api-77454855fd-mvd9n subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.20 aa05c04c-542d-4768-b5dd-e0ed7afcd015 default }" containerID=50da1bb0e87d32aa98ccac993247ff90705cfecb28c3369105e6ae2a45985608 datapathConfiguration="&{false false false false false }" interface=lxc7b05cd9ec0f4 k8sPodName=openstack/staffeln-conductor-7cc4f64d58-x9rtx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=50da1bb0e8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=353 ipv4=10.0.0.20 ipv6= k8sPodName=openstack/staffeln-conductor-7cc4f64d58-x9rtx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=50da1bb0e8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=353 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.20 ipv6= k8sPodName=openstack/staffeln-conductor-7cc4f64d58-x9rtx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=conductor;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=50da1bb0e8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=353 identity=5127 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.20 ipv6= k8sPodName=openstack/staffeln-conductor-7cc4f64d58-x9rtx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=50da1bb0e8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=353 identity=5127 ipv4=10.0.0.20 ipv6= k8sPodName=openstack/staffeln-conductor-7cc4f64d58-x9rtx subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.218 74ec1ec4-37fc-4477-a3e4-7a21be202350 default }" containerID=95815b98f0891cd93b4aee00f995734a60da08f368c8332e2b8131707a84116a datapathConfiguration="&{false false false false false }" interface=lxce98c18dafd39 k8sPodName=openstack/staffeln-api-cffcc4f45-xbfhx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=95815b98f0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2881 ipv4=10.0.0.218 ipv6= k8sPodName=openstack/staffeln-api-cffcc4f45-xbfhx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=95815b98f0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2881 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.218 ipv6= k8sPodName=openstack/staffeln-api-cffcc4f45-xbfhx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=95815b98f0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2881 identity=6067 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.218 ipv6= k8sPodName=openstack/staffeln-api-cffcc4f45-xbfhx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=95815b98f0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2881 identity=6067 ipv4=10.0.0.218 ipv6= k8sPodName=openstack/staffeln-api-cffcc4f45-xbfhx subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=50da1bb0e8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=353 identity=5127 ipv4=10.0.0.20 ipv6= k8sPodName=openstack/staffeln-conductor-7cc4f64d58-x9rtx subsys=endpoint level=info msg="Successful endpoint creation" containerID=50da1bb0e8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=353 identity=5127 ipv4=10.0.0.20 ipv6= k8sPodName=openstack/staffeln-conductor-7cc4f64d58-x9rtx subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.18 f4d95707-e175-4050-9d5c-8240fad428d0 default }" containerID=251b776b3ffccc75edc7e622241c21c6d43fa2c7e3aa333b115f7116d5abc80a datapathConfiguration="&{false false false false false }" interface=lxc40ef46d4ba2f k8sPodName=openstack/staffeln-db-init-sgpfv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=251b776b3f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1170 ipv4=10.0.0.18 ipv6= k8sPodName=openstack/staffeln-db-init-sgpfv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=251b776b3f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1170 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=091cbfd4-36ee-461f-ac89-ebc03cce75c4,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=091cbfd4-36ee-461f-ac89-ebc03cce75c4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.18 ipv6= k8sPodName=openstack/staffeln-db-init-sgpfv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=091cbfd4-36ee-461f-ac89-ebc03cce75c4;k8s:batch.kubernetes.io/job-name=staffeln-db-init;k8s:component=db-init;k8s:controller-uid=091cbfd4-36ee-461f-ac89-ebc03cce75c4;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-init;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=251b776b3f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1170 identity=5100 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=091cbfd4-36ee-461f-ac89-ebc03cce75c4,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=091cbfd4-36ee-461f-ac89-ebc03cce75c4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.18 ipv6= k8sPodName=openstack/staffeln-db-init-sgpfv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=251b776b3f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1170 identity=5100 ipv4=10.0.0.18 ipv6= k8sPodName=openstack/staffeln-db-init-sgpfv subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=95815b98f0 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2881 identity=6067 ipv4=10.0.0.218 ipv6= k8sPodName=openstack/staffeln-api-cffcc4f45-xbfhx subsys=endpoint level=info msg="Successful endpoint creation" containerID=95815b98f0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2881 identity=6067 ipv4=10.0.0.218 ipv6= k8sPodName=openstack/staffeln-api-cffcc4f45-xbfhx subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=251b776b3f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1170 identity=5100 ipv4=10.0.0.18 ipv6= k8sPodName=openstack/staffeln-db-init-sgpfv subsys=endpoint level=info msg="Successful endpoint creation" containerID=251b776b3f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1170 identity=5100 ipv4=10.0.0.18 ipv6= k8sPodName=openstack/staffeln-db-init-sgpfv subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=251b776b3f endpointID=1170 k8sNamespace=openstack k8sPodName=staffeln-db-init-sgpfv subsys=daemon level=info msg="Releasing key" key="[k8s:application=staffeln k8s:batch.kubernetes.io/controller-uid=091cbfd4-36ee-461f-ac89-ebc03cce75c4 k8s:batch.kubernetes.io/job-name=staffeln-db-init k8s:component=db-init k8s:controller-uid=091cbfd4-36ee-461f-ac89-ebc03cce75c4 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=staffeln-db-init k8s:release_group=staffeln]" subsys=allocator level=info msg="Removed endpoint" containerID=251b776b3f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1170 identity=5100 ipv4=10.0.0.18 ipv6= k8sPodName=openstack/staffeln-db-init-sgpfv subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.43 2ccee462-398a-4b6f-9a48-793977539a89 default }" containerID=a2c751293b7bb77e7eeb802d89aaddd93cfef3f1cb2b7defe6609eb0a2119991 datapathConfiguration="&{false false false false false }" interface=lxceb91c6a689af k8sPodName=openstack/staffeln-db-sync-rh7lj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a2c751293b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1244 ipv4=10.0.0.43 ipv6= k8sPodName=openstack/staffeln-db-sync-rh7lj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a2c751293b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1244 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=4efb3fc5-0137-4ad7-ae9a-ed61e448ded3,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=4efb3fc5-0137-4ad7-ae9a-ed61e448ded3,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.43 ipv6= k8sPodName=openstack/staffeln-db-sync-rh7lj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=4efb3fc5-0137-4ad7-ae9a-ed61e448ded3;k8s:batch.kubernetes.io/job-name=staffeln-db-sync;k8s:component=db-sync;k8s:controller-uid=4efb3fc5-0137-4ad7-ae9a-ed61e448ded3;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-sync;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a2c751293b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1244 identity=43646 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=4efb3fc5-0137-4ad7-ae9a-ed61e448ded3,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=4efb3fc5-0137-4ad7-ae9a-ed61e448ded3,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.43 ipv6= k8sPodName=openstack/staffeln-db-sync-rh7lj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a2c751293b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1244 identity=43646 ipv4=10.0.0.43 ipv6= k8sPodName=openstack/staffeln-db-sync-rh7lj subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a2c751293b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1244 identity=43646 ipv4=10.0.0.43 ipv6= k8sPodName=openstack/staffeln-db-sync-rh7lj subsys=endpoint level=info msg="Successful endpoint creation" containerID=a2c751293b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1244 identity=43646 ipv4=10.0.0.43 ipv6= k8sPodName=openstack/staffeln-db-sync-rh7lj subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager