level=info msg="Memory available for map entries (0.003% of 67421642752B): 168554106B" subsys=config level=info msg="option bpf-ct-global-tcp-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-ct-global-any-max set by dynamic sizing to 295708" subsys=config level=info msg="option bpf-nat-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-neigh-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-sock-rev-map-max set by dynamic sizing to 295708" subsys=config level=info msg=" --agent-health-port='9879'" subsys=daemon level=info msg=" --agent-labels=''" subsys=daemon level=info msg=" --agent-liveness-update-interval='1s'" subsys=daemon level=info msg=" --agent-not-ready-taint-key='node.cilium.io/agent-not-ready'" subsys=daemon level=info msg=" --allocator-list-timeout='3m0s'" subsys=daemon level=info msg=" --allow-icmp-frag-needed='true'" subsys=daemon level=info msg=" --allow-localhost='auto'" subsys=daemon level=info msg=" --annotate-k8s-node='false'" subsys=daemon level=info msg=" --api-rate-limit=''" subsys=daemon level=info msg=" --arping-refresh-period='30s'" subsys=daemon level=info msg=" --auto-create-cilium-node-resource='true'" subsys=daemon level=info msg=" --auto-direct-node-routes='false'" subsys=daemon level=info msg=" --bgp-announce-lb-ip='false'" subsys=daemon level=info msg=" --bgp-announce-pod-cidr='false'" subsys=daemon level=info msg=" --bgp-config-path='/var/lib/cilium/bgp/config.yaml'" subsys=daemon level=info msg=" --bpf-auth-map-max='524288'" subsys=daemon level=info msg=" --bpf-ct-global-any-max='262144'" subsys=daemon level=info msg=" --bpf-ct-global-tcp-max='524288'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-fin='10s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-syn='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp-grace='1m0s'" subsys=daemon level=info msg=" --bpf-filter-priority='1'" subsys=daemon level=info msg=" --bpf-fragments-map-max='8192'" subsys=daemon level=info msg=" --bpf-lb-acceleration='disabled'" subsys=daemon level=info msg=" --bpf-lb-affinity-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-algorithm='random'" subsys=daemon level=info msg=" --bpf-lb-dev-ip-addr-inherit=''" subsys=daemon level=info msg=" --bpf-lb-dsr-dispatch='opt'" subsys=daemon level=info msg=" --bpf-lb-dsr-l4-xlate='frontend'" subsys=daemon level=info msg=" --bpf-lb-external-clusterip='false'" subsys=daemon level=info msg=" --bpf-lb-maglev-hash-seed='JLfvgnHc2kaSUFaI'" subsys=daemon level=info msg=" --bpf-lb-maglev-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-maglev-table-size='16381'" subsys=daemon level=info msg=" --bpf-lb-map-max='65536'" subsys=daemon level=info msg=" --bpf-lb-mode='snat'" subsys=daemon level=info msg=" --bpf-lb-rev-nat-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-rss-ipv4-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-rss-ipv6-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-service-backend-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-service-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-sock='false'" subsys=daemon level=info msg=" --bpf-lb-sock-hostns-only='false'" subsys=daemon level=info msg=" --bpf-lb-source-range-map-max='0'" subsys=daemon level=info msg=" --bpf-map-dynamic-size-ratio='0.0025'" subsys=daemon level=info msg=" --bpf-map-event-buffers=''" subsys=daemon level=info msg=" --bpf-nat-global-max='524288'" subsys=daemon level=info msg=" --bpf-neigh-global-max='524288'" subsys=daemon level=info msg=" --bpf-policy-map-full-reconciliation-interval='15m0s'" subsys=daemon level=info msg=" --bpf-policy-map-max='16384'" subsys=daemon level=info msg=" --bpf-root='/sys/fs/bpf'" subsys=daemon level=info msg=" --bpf-sock-rev-map-max='262144'" subsys=daemon level=info msg=" --bypass-ip-availability-upon-restore='false'" subsys=daemon level=info msg=" --certificates-directory='/var/run/cilium/certs'" subsys=daemon level=info msg=" --cflags=''" subsys=daemon level=info msg=" --cgroup-root='/run/cilium/cgroupv2'" subsys=daemon level=info msg=" --cilium-endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --cluster-health-port='4240'" subsys=daemon level=info msg=" --cluster-id='0'" subsys=daemon level=info msg=" --cluster-name='default'" subsys=daemon level=info msg=" --cluster-pool-ipv4-cidr='10.0.0.0/8'" subsys=daemon level=info msg=" --cluster-pool-ipv4-mask-size='24'" subsys=daemon level=info msg=" --clustermesh-config='/var/lib/cilium/clustermesh/'" subsys=daemon level=info msg=" --clustermesh-ip-identities-sync-timeout='1m0s'" subsys=daemon level=info msg=" --cmdref=''" subsys=daemon level=info msg=" --cni-chaining-mode='none'" subsys=daemon level=info msg=" --cni-chaining-target=''" subsys=daemon level=info msg=" --cni-exclusive='true'" subsys=daemon level=info msg=" --cni-external-routing='false'" subsys=daemon level=info msg=" --cni-log-file='/var/run/cilium/cilium-cni.log'" subsys=daemon level=info msg=" --cnp-node-status-gc-interval='0s'" subsys=daemon level=info msg=" --config=''" subsys=daemon level=info msg=" --config-dir='/tmp/cilium/config-map'" subsys=daemon level=info msg=" --config-sources='config-map:kube-system/cilium-config'" subsys=daemon level=info msg=" --conntrack-gc-interval='0s'" subsys=daemon level=info msg=" --conntrack-gc-max-interval='0s'" subsys=daemon level=info msg=" --crd-wait-timeout='5m0s'" subsys=daemon level=info msg=" --custom-cni-conf='false'" subsys=daemon level=info msg=" --datapath-mode='veth'" subsys=daemon level=info msg=" --debug='false'" subsys=daemon level=info msg=" --debug-verbose=''" subsys=daemon level=info msg=" --derive-masquerade-ip-addr-from-device=''" subsys=daemon level=info msg=" --devices=''" subsys=daemon level=info msg=" --direct-routing-device=''" subsys=daemon level=info msg=" --disable-cnp-status-updates='true'" subsys=daemon level=info msg=" --disable-endpoint-crd='false'" subsys=daemon level=info msg=" --disable-envoy-version-check='false'" subsys=daemon level=info msg=" --disable-iptables-feeder-rules=''" subsys=daemon level=info msg=" --dns-max-ips-per-restored-rule='1000'" subsys=daemon level=info msg=" --dns-policy-unload-on-shutdown='false'" subsys=daemon level=info msg=" --dnsproxy-concurrency-limit='0'" subsys=daemon level=info msg=" --dnsproxy-concurrency-processing-grace-period='0s'" subsys=daemon level=info msg=" --dnsproxy-enable-transparent-mode='true'" subsys=daemon level=info msg=" --dnsproxy-lock-count='128'" subsys=daemon level=info msg=" --dnsproxy-lock-timeout='500ms'" subsys=daemon level=info msg=" --egress-gateway-policy-map-max='16384'" subsys=daemon level=info msg=" --egress-gateway-reconciliation-trigger-interval='1s'" subsys=daemon level=info msg=" --egress-masquerade-interfaces=''" subsys=daemon level=info msg=" --egress-multi-home-ip-rule-compat='false'" subsys=daemon level=info msg=" --enable-auto-protect-node-port-range='true'" subsys=daemon level=info msg=" --enable-bandwidth-manager='false'" subsys=daemon level=info msg=" --enable-bbr='false'" subsys=daemon level=info msg=" --enable-bgp-control-plane='false'" subsys=daemon level=info msg=" --enable-bpf-clock-probe='false'" subsys=daemon level=info msg=" --enable-bpf-masquerade='false'" subsys=daemon level=info msg=" --enable-bpf-tproxy='false'" subsys=daemon level=info msg=" --enable-cilium-api-server-access='*'" subsys=daemon level=info msg=" --enable-cilium-endpoint-slice='false'" subsys=daemon level=info msg=" --enable-cilium-health-api-server-access='*'" subsys=daemon level=info msg=" --enable-custom-calls='false'" subsys=daemon level=info msg=" --enable-endpoint-health-checking='true'" subsys=daemon level=info msg=" --enable-endpoint-routes='false'" subsys=daemon level=info msg=" --enable-envoy-config='false'" subsys=daemon level=info msg=" --enable-external-ips='false'" subsys=daemon level=info msg=" --enable-health-check-nodeport='true'" subsys=daemon level=info msg=" --enable-health-checking='true'" subsys=daemon level=info msg=" --enable-high-scale-ipcache='false'" subsys=daemon level=info msg=" --enable-host-firewall='false'" subsys=daemon level=info msg=" --enable-host-legacy-routing='false'" subsys=daemon level=info msg=" --enable-host-port='false'" subsys=daemon level=info msg=" --enable-hubble='false'" subsys=daemon level=info msg=" --enable-hubble-recorder-api='true'" subsys=daemon level=info msg=" --enable-icmp-rules='true'" subsys=daemon level=info msg=" --enable-identity-mark='true'" subsys=daemon level=info msg=" --enable-ip-masq-agent='false'" subsys=daemon level=info msg=" --enable-ipsec='false'" subsys=daemon level=info msg=" --enable-ipsec-key-watcher='true'" subsys=daemon level=info msg=" --enable-ipv4='true'" subsys=daemon level=info msg=" --enable-ipv4-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv4-egress-gateway='false'" subsys=daemon level=info msg=" --enable-ipv4-fragment-tracking='true'" subsys=daemon level=info msg=" --enable-ipv4-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6='false'" subsys=daemon level=info msg=" --enable-ipv6-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv6-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6-ndp='false'" subsys=daemon level=info msg=" --enable-k8s='true'" subsys=daemon level=info msg=" --enable-k8s-api-discovery='false'" subsys=daemon level=info msg=" --enable-k8s-endpoint-slice='true'" subsys=daemon level=info msg=" --enable-k8s-event-handover='false'" subsys=daemon level=info msg=" --enable-k8s-networkpolicy='true'" subsys=daemon level=info msg=" --enable-k8s-terminating-endpoint='true'" subsys=daemon level=info msg=" --enable-l2-announcements='false'" subsys=daemon level=info msg=" --enable-l2-neigh-discovery='true'" subsys=daemon level=info msg=" --enable-l2-pod-announcements='false'" subsys=daemon level=info msg=" --enable-l7-proxy='true'" subsys=daemon level=info msg=" --enable-local-node-route='true'" subsys=daemon level=info msg=" --enable-local-redirect-policy='false'" subsys=daemon level=info msg=" --enable-mke='false'" subsys=daemon level=info msg=" --enable-monitor='true'" subsys=daemon level=info msg=" --enable-nat46x64-gateway='false'" subsys=daemon level=info msg=" --enable-node-port='false'" subsys=daemon level=info msg=" --enable-pmtu-discovery='false'" subsys=daemon level=info msg=" --enable-policy='default'" subsys=daemon level=info msg=" --enable-recorder='false'" subsys=daemon level=info msg=" --enable-remote-node-identity='true'" subsys=daemon level=info msg=" --enable-runtime-device-detection='false'" subsys=daemon level=info msg=" --enable-sctp='false'" subsys=daemon level=info msg=" --enable-service-topology='false'" subsys=daemon level=info msg=" --enable-session-affinity='false'" subsys=daemon level=info msg=" --enable-srv6='false'" subsys=daemon level=info msg=" --enable-stale-cilium-endpoint-cleanup='true'" subsys=daemon level=info msg=" --enable-svc-source-range-check='true'" subsys=daemon level=info msg=" --enable-tracing='false'" subsys=daemon level=info msg=" --enable-unreachable-routes='false'" subsys=daemon level=info msg=" --enable-vtep='false'" subsys=daemon level=info msg=" --enable-well-known-identities='false'" subsys=daemon level=info msg=" --enable-wireguard='false'" subsys=daemon level=info msg=" --enable-wireguard-userspace-fallback='false'" subsys=daemon level=info msg=" --enable-xdp-prefilter='false'" subsys=daemon level=info msg=" --enable-xt-socket-fallback='true'" subsys=daemon level=info msg=" --encrypt-interface=''" subsys=daemon level=info msg=" --encrypt-node='false'" subsys=daemon level=info msg=" --endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --endpoint-queue-size='25'" subsys=daemon level=info msg=" --endpoint-status=''" subsys=daemon level=info msg=" --envoy-config-timeout='2m0s'" subsys=daemon level=info msg=" --envoy-log=''" subsys=daemon level=info msg=" --exclude-local-address=''" subsys=daemon level=info msg=" --external-envoy-proxy='false'" subsys=daemon level=info msg=" --fixed-identity-mapping=''" subsys=daemon level=info msg=" --fqdn-regex-compile-lru-size='1024'" subsys=daemon level=info msg=" --gops-port='9890'" subsys=daemon level=info msg=" --http-403-msg=''" subsys=daemon level=info msg=" --http-idle-timeout='0'" subsys=daemon level=info msg=" --http-max-grpc-timeout='0'" subsys=daemon level=info msg=" --http-normalize-path='true'" subsys=daemon level=info msg=" --http-request-timeout='3600'" subsys=daemon level=info msg=" --http-retry-count='3'" subsys=daemon level=info msg=" --http-retry-timeout='0'" subsys=daemon level=info msg=" --hubble-disable-tls='false'" subsys=daemon level=info msg=" --hubble-event-buffer-capacity='4095'" subsys=daemon level=info msg=" --hubble-event-queue-size='0'" subsys=daemon level=info msg=" --hubble-export-file-compress='false'" subsys=daemon level=info msg=" --hubble-export-file-max-backups='5'" subsys=daemon level=info msg=" --hubble-export-file-max-size-mb='10'" subsys=daemon level=info msg=" --hubble-export-file-path=''" subsys=daemon level=info msg=" --hubble-listen-address=''" subsys=daemon level=info msg=" --hubble-metrics=''" subsys=daemon level=info msg=" --hubble-metrics-server=''" subsys=daemon level=info msg=" --hubble-monitor-events=''" subsys=daemon level=info msg=" --hubble-prefer-ipv6='false'" subsys=daemon level=info msg=" --hubble-recorder-sink-queue-size='1024'" subsys=daemon level=info msg=" --hubble-recorder-storage-path='/var/run/cilium/pcaps'" subsys=daemon level=info msg=" --hubble-skip-unknown-cgroup-ids='true'" subsys=daemon level=info msg=" --hubble-socket-path='/var/run/cilium/hubble.sock'" subsys=daemon level=info msg=" --hubble-tls-cert-file=''" subsys=daemon level=info msg=" --hubble-tls-client-ca-files=''" subsys=daemon level=info msg=" --hubble-tls-key-file=''" subsys=daemon level=info msg=" --identity-allocation-mode='crd'" subsys=daemon level=info msg=" --identity-change-grace-period='5s'" subsys=daemon level=info msg=" --identity-gc-interval='15m0s'" subsys=daemon level=info msg=" --identity-heartbeat-timeout='30m0s'" subsys=daemon level=info msg=" --identity-restore-grace-period='10m0s'" subsys=daemon level=info msg=" --install-egress-gateway-routes='false'" subsys=daemon level=info msg=" --install-iptables-rules='true'" subsys=daemon level=info msg=" --install-no-conntrack-iptables-rules='false'" subsys=daemon level=info msg=" --ip-allocation-timeout='2m0s'" subsys=daemon level=info msg=" --ip-masq-agent-config-path='/etc/config/ip-masq-agent'" subsys=daemon level=info msg=" --ipam='cluster-pool'" subsys=daemon level=info msg=" --ipam-cilium-node-update-rate='15s'" subsys=daemon level=info msg=" --ipam-multi-pool-pre-allocation='default=8'" subsys=daemon level=info msg=" --ipsec-key-file=''" subsys=daemon level=info msg=" --ipsec-key-rotation-duration='5m0s'" subsys=daemon level=info msg=" --iptables-lock-timeout='5s'" subsys=daemon level=info msg=" --iptables-random-fully='false'" subsys=daemon level=info msg=" --ipv4-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv4-node='auto'" subsys=daemon level=info msg=" --ipv4-pod-subnets=''" subsys=daemon level=info msg=" --ipv4-range='auto'" subsys=daemon level=info msg=" --ipv4-service-loopback-address='169.254.42.1'" subsys=daemon level=info msg=" --ipv4-service-range='auto'" subsys=daemon level=info msg=" --ipv6-cluster-alloc-cidr='f00d::/64'" subsys=daemon level=info msg=" --ipv6-mcast-device=''" subsys=daemon level=info msg=" --ipv6-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv6-node='auto'" subsys=daemon level=info msg=" --ipv6-pod-subnets=''" subsys=daemon level=info msg=" --ipv6-range='auto'" subsys=daemon level=info msg=" --ipv6-service-range='auto'" subsys=daemon level=info msg=" --join-cluster='false'" subsys=daemon level=info msg=" --k8s-api-server=''" subsys=daemon level=info msg=" --k8s-client-burst='10'" subsys=daemon level=info msg=" --k8s-client-qps='5'" subsys=daemon level=info msg=" --k8s-heartbeat-timeout='30s'" subsys=daemon level=info msg=" --k8s-kubeconfig-path=''" subsys=daemon level=info msg=" --k8s-namespace='kube-system'" subsys=daemon level=info msg=" --k8s-require-ipv4-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-require-ipv6-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-service-cache-size='128'" subsys=daemon level=info msg=" --k8s-service-proxy-name=''" subsys=daemon level=info msg=" --k8s-sync-timeout='3m0s'" subsys=daemon level=info msg=" --k8s-watcher-endpoint-selector='metadata.name!=kube-scheduler,metadata.name!=kube-controller-manager,metadata.name!=etcd-operator,metadata.name!=gcp-controller-manager'" subsys=daemon level=info msg=" --keep-config='false'" subsys=daemon level=info msg=" --kube-proxy-replacement='disabled'" subsys=daemon level=info msg=" --kube-proxy-replacement-healthz-bind-address=''" subsys=daemon level=info msg=" --kvstore=''" subsys=daemon level=info msg=" --kvstore-connectivity-timeout='2m0s'" subsys=daemon level=info msg=" --kvstore-lease-ttl='15m0s'" subsys=daemon level=info msg=" --kvstore-max-consecutive-quorum-errors='2'" subsys=daemon level=info msg=" --kvstore-opt=''" subsys=daemon level=info msg=" --kvstore-periodic-sync='5m0s'" subsys=daemon level=info msg=" --l2-announcements-lease-duration='15s'" subsys=daemon level=info msg=" --l2-announcements-renew-deadline='5s'" subsys=daemon level=info msg=" --l2-announcements-retry-period='2s'" subsys=daemon level=info msg=" --l2-pod-announcements-interface=''" subsys=daemon level=info msg=" --label-prefix-file=''" subsys=daemon level=info msg=" --labels=''" subsys=daemon level=info msg=" --lib-dir='/var/lib/cilium'" subsys=daemon level=info msg=" --local-max-addr-scope='252'" subsys=daemon level=info msg=" --local-router-ipv4=''" subsys=daemon level=info msg=" --local-router-ipv6=''" subsys=daemon level=info msg=" --log-driver=''" subsys=daemon level=info msg=" --log-opt=''" subsys=daemon level=info msg=" --log-system-load='false'" subsys=daemon level=info msg=" --max-controller-interval='0'" subsys=daemon level=info msg=" --mesh-auth-enabled='true'" subsys=daemon level=info msg=" --mesh-auth-gc-interval='5m0s'" subsys=daemon level=info msg=" --mesh-auth-mutual-listener-port='0'" subsys=daemon level=info msg=" --mesh-auth-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-rotated-identities-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-signal-backoff-duration='1s'" subsys=daemon level=info msg=" --mesh-auth-spiffe-trust-domain='spiffe.cilium'" subsys=daemon level=info msg=" --mesh-auth-spire-admin-socket=''" subsys=daemon level=info msg=" --metrics=''" subsys=daemon level=info msg=" --mke-cgroup-mount=''" subsys=daemon level=info msg=" --monitor-aggregation='medium'" subsys=daemon level=info msg=" --monitor-aggregation-flags='all'" subsys=daemon level=info msg=" --monitor-aggregation-interval='5s'" subsys=daemon level=info msg=" --monitor-queue-size='0'" subsys=daemon level=info msg=" --mtu='0'" subsys=daemon level=info msg=" --node-encryption-opt-out-labels='node-role.kubernetes.io/control-plane'" subsys=daemon level=info msg=" --node-port-acceleration='disabled'" subsys=daemon level=info msg=" --node-port-algorithm='random'" subsys=daemon level=info msg=" --node-port-bind-protection='true'" subsys=daemon level=info msg=" --node-port-mode='snat'" subsys=daemon level=info msg=" --node-port-range='30000,32767'" subsys=daemon level=info msg=" --nodes-gc-interval='5m0s'" subsys=daemon level=info msg=" --operator-api-serve-addr='127.0.0.1:9234'" subsys=daemon level=info msg=" --policy-audit-mode='false'" subsys=daemon level=info msg=" --policy-queue-size='100'" subsys=daemon level=info msg=" --policy-trigger-interval='1s'" subsys=daemon level=info msg=" --pprof='false'" subsys=daemon level=info msg=" --pprof-address='localhost'" subsys=daemon level=info msg=" --pprof-port='6060'" subsys=daemon level=info msg=" --preallocate-bpf-maps='false'" subsys=daemon level=info msg=" --prepend-iptables-chains='true'" subsys=daemon level=info msg=" --procfs='/host/proc'" subsys=daemon level=info msg=" --prometheus-serve-addr=':9962'" subsys=daemon level=info msg=" --proxy-connect-timeout='2'" subsys=daemon level=info msg=" --proxy-gid='1337'" subsys=daemon level=info msg=" --proxy-idle-timeout-seconds='60'" subsys=daemon level=info msg=" --proxy-max-connection-duration-seconds='0'" subsys=daemon level=info msg=" --proxy-max-requests-per-connection='0'" subsys=daemon level=info msg=" --proxy-prometheus-port='9964'" subsys=daemon level=info msg=" --read-cni-conf=''" subsys=daemon level=info msg=" --remove-cilium-node-taints='true'" subsys=daemon level=info msg=" --restore='true'" subsys=daemon level=info msg=" --route-metric='0'" subsys=daemon level=info msg=" --routing-mode='tunnel'" subsys=daemon level=info msg=" --set-cilium-is-up-condition='true'" subsys=daemon level=info msg=" --set-cilium-node-taints='true'" subsys=daemon level=info msg=" --sidecar-istio-proxy-image='cilium/istio_proxy'" subsys=daemon level=info msg=" --single-cluster-route='false'" subsys=daemon level=info msg=" --skip-cnp-status-startup-clean='false'" subsys=daemon level=info msg=" --socket-path='/var/run/cilium/cilium.sock'" subsys=daemon level=info msg=" --srv6-encap-mode='reduced'" subsys=daemon level=info msg=" --state-dir='/var/run/cilium'" subsys=daemon level=info msg=" --synchronize-k8s-nodes='true'" subsys=daemon level=info msg=" --tofqdns-dns-reject-response-code='refused'" subsys=daemon level=info msg=" --tofqdns-enable-dns-compression='true'" subsys=daemon level=info msg=" --tofqdns-endpoint-max-ip-per-hostname='50'" subsys=daemon level=info msg=" --tofqdns-idle-connection-grace-period='0s'" subsys=daemon level=info msg=" --tofqdns-max-deferred-connection-deletes='10000'" subsys=daemon level=info msg=" --tofqdns-min-ttl='0'" subsys=daemon level=info msg=" --tofqdns-pre-cache=''" subsys=daemon level=info msg=" --tofqdns-proxy-port='0'" subsys=daemon level=info msg=" --tofqdns-proxy-response-max-delay='100ms'" subsys=daemon level=info msg=" --trace-payloadlen='128'" subsys=daemon level=info msg=" --trace-sock='true'" subsys=daemon level=info msg=" --tunnel=''" subsys=daemon level=info msg=" --tunnel-port='6082'" subsys=daemon level=info msg=" --tunnel-protocol='geneve'" subsys=daemon level=info msg=" --unmanaged-pod-watcher-interval='15'" subsys=daemon level=info msg=" --use-cilium-internal-ip-for-ipsec='false'" subsys=daemon level=info msg=" --version='false'" subsys=daemon level=info msg=" --vlan-bpf-bypass=''" subsys=daemon level=info msg=" --vtep-cidr=''" subsys=daemon level=info msg=" --vtep-endpoint=''" subsys=daemon level=info msg=" --vtep-mac=''" subsys=daemon level=info msg=" --vtep-mask=''" subsys=daemon level=info msg=" --wireguard-encapsulate='false'" subsys=daemon level=info msg=" --write-cni-conf-when-ready='/host/etc/cni/net.d/05-cilium.conflist'" subsys=daemon level=info msg=" _ _ _" subsys=daemon level=info msg=" ___|_| |_|_ _ _____" subsys=daemon level=info msg="| _| | | | | | |" subsys=daemon level=info msg="|___|_|_|_|___|_|_|_|" subsys=daemon level=info msg="Cilium 1.14.8 cf6e022e 2024-03-13T12:23:35-04:00 go version go1.21.8 linux/amd64" subsys=daemon level=info msg="clang (10.0.0) and kernel (5.15.0) versions: OK!" subsys=linux-datapath level=info msg="linking environment: OK!" subsys=linux-datapath level=info msg="Kernel config file not found: if the agent fails to start, check the system requirements at https://docs.cilium.io/en/stable/operations/system_requirements" subsys=probes level=info msg="Detected mounted BPF filesystem at /sys/fs/bpf" subsys=bpf level=info msg="Mounted cgroupv2 filesystem at /run/cilium/cgroupv2" subsys=cgroups level=info msg="Parsing base label prefixes from default label list" subsys=labels-filter level=info msg="Parsing additional label prefixes from user inputs: []" subsys=labels-filter level=info msg="Final label prefixes to be used for identity evaluation:" subsys=labels-filter level=info msg=" - reserved:.*" subsys=labels-filter level=info msg=" - :io\\.kubernetes\\.pod\\.namespace" subsys=labels-filter level=info msg=" - :io\\.cilium\\.k8s\\.namespace\\.labels" subsys=labels-filter level=info msg=" - :app\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:io\\.kubernetes" subsys=labels-filter level=info msg=" - !:kubernetes\\.io" subsys=labels-filter level=info msg=" - !:.*beta\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:k8s\\.io" subsys=labels-filter level=info msg=" - !:pod-template-generation" subsys=labels-filter level=info msg=" - !:pod-template-hash" subsys=labels-filter level=info msg=" - !:controller-revision-hash" subsys=labels-filter level=info msg=" - !:annotation.*" subsys=labels-filter level=info msg=" - !:etcd_node" subsys=labels-filter level=info msg=Invoked duration=1.288158ms function="pprof.glob..func1 (cell.go:50)" subsys=hive level=info msg=Invoked duration="69.461µs" function="gops.registerGopsHooks (cell.go:38)" subsys=hive level=info msg=Invoked duration=1.180127ms function="metrics.NewRegistry (registry.go:65)" subsys=hive level=info msg=Invoked duration="4.83µs" function="metrics.glob..func1 (cell.go:12)" subsys=hive level=info msg="Spire Delegate API Client is disabled as no socket path is configured" subsys=spire-delegate level=info msg="Mutual authentication handler is disabled as no port is configured" subsys=auth level=info msg=Invoked duration=104.643957ms function="cmd.glob..func4 (daemon_main.go:1607)" subsys=hive level=info msg=Invoked duration="17.48µs" function="gc.registerSignalHandler (cell.go:47)" subsys=hive level=info msg=Invoked duration="20.481µs" function="utime.initUtimeSync (cell.go:29)" subsys=hive level=info msg=Invoked duration="63.691µs" function="agentliveness.newAgentLivenessUpdater (agent_liveness.go:43)" subsys=hive level=info msg=Invoked duration="63.391µs" function="l2responder.NewL2ResponderReconciler (l2responder.go:63)" subsys=hive level=info msg=Invoked duration="102.792µs" function="garp.newGARPProcessor (processor.go:27)" subsys=hive level=info msg=Starting subsys=hive level=info msg="Started gops server" address="127.0.0.1:9890" subsys=gops level=info msg="Start hook executed" duration="394.788µs" function="gops.registerGopsHooks.func1 (cell.go:43)" subsys=hive level=info msg="Start hook executed" duration="2.291µs" function="metrics.NewRegistry.func1 (registry.go:86)" subsys=hive level=info msg="Establishing connection to apiserver" host="https://10.96.0.1:443" subsys=k8s-client level=info msg="Serving prometheus metrics on :9962" subsys=metrics level=info msg="Connected to apiserver" subsys=k8s-client level=info msg="Start hook executed" duration=11.961321ms function="client.(*compositeClientset).onStart" subsys=hive level=info msg="Start hook executed" duration=8.655689ms function="authmap.newAuthMap.func1 (cell.go:27)" subsys=hive level=info msg="Start hook executed" duration="53.461µs" function="configmap.newMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="43.971µs" function="signalmap.newMap.func1 (cell.go:44)" subsys=hive level=info msg="Start hook executed" duration="231.695µs" function="nodemap.newNodeMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="136.273µs" function="eventsmap.newEventsMap.func1 (cell.go:35)" subsys=hive level=info msg="Start hook executed" duration="110.423µs" function="*cni.cniConfigManager.Start" subsys=hive level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Wrote CNI configuration file to /host/etc/cni/net.d/05-cilium.conflist" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Start hook executed" duration=51.091388ms function="datapath.newDatapath.func1 (cells.go:113)" subsys=hive level=info msg="Restored 0 node IDs from the BPF map" subsys=linux-datapath level=info msg="Start hook executed" duration="104.423µs" function="datapath.newDatapath.func2 (cells.go:126)" subsys=hive level=info msg="Start hook executed" duration="14.411µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Node].Start" subsys=hive level=info msg="Start hook executed" duration="1.96µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNode].Start" subsys=hive level=info msg="Using autogenerated IPv4 allocation range" subsys=node v4Prefix=10.116.0.0/16 level=info msg="no local ciliumnode found, will not restore cilium internal ips from k8s" subsys=daemon level=info msg="Start hook executed" duration=103.685547ms function="node.NewLocalNodeStore.func1 (local_node_store.go:76)" subsys=hive level=info msg="Start hook executed" duration="20.07µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration=200.596025ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration="6.38µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Using discoveryv1.EndpointSlice" subsys=k8s level=info msg="Start hook executed" duration=100.293714ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Start hook executed" duration="3.47µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Pod].Start" subsys=hive level=info msg="Start hook executed" duration="2.05µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Namespace].Start" subsys=hive level=info msg="Start hook executed" duration="2.23µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="4.68µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumClusterwideNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="2.39µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumCIDRGroup].Start" subsys=hive level=info msg="Start hook executed" duration="24.82µs" function="endpointmanager.newDefaultEndpointManager.func1 (cell.go:203)" subsys=hive level=info msg="Start hook executed" duration="17.21µs" function="cmd.newPolicyTrifecta.func1 (policy.go:135)" subsys=hive level=info msg="Start hook executed" duration="38.04µs" function="*manager.manager.Start" subsys=hive level=info msg="Serving cilium node monitor v1.2 API at unix:///var/run/cilium/monitor1_2.sock" subsys=monitor-agent level=info msg="Start hook executed" duration="602.194µs" function="agent.newMonitorAgent.func1 (cell.go:61)" subsys=hive level=info msg="Start hook executed" duration="6.96µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumL2AnnouncementPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="9.94µs" function="*job.group.Start" subsys=hive level=info msg="Start hook executed" duration="422.839µs" function="proxy.newProxy.func1 (cell.go:55)" subsys=hive level=info msg="Envoy: Starting xDS gRPC server listening on /var/run/cilium/envoy/sockets/xds.sock" subsys=envoy-manager level=info msg="Start hook executed" duration=1.227486ms function="signal.provideSignalManager.func1 (cell.go:25)" subsys=hive level=info msg="Datapath signal listener running" subsys=signal level=info msg="Start hook executed" duration=1.651797ms function="auth.registerAuthManager.func1 (cell.go:109)" subsys=hive level=info msg="Start hook executed" duration="3.08µs" function="auth.registerGCJobs.func1 (cell.go:158)" subsys=hive level=info msg="Start hook executed" duration="17.15µs" function="*job.group.Start" subsys=hive level=warning msg="Deprecated value for --kube-proxy-replacement: disabled (use either \"true\", or \"false\")" subsys=daemon level=info msg="Auto-disabling \"enable-node-port\", \"enable-external-ips\", \"bpf-lb-sock\", \"enable-host-port\" features and falling back to \"enable-host-legacy-routing\"" subsys=daemon level=info msg="Inheriting MTU from external network interface" device=ens3 ipAddr=199.204.45.116 mtu=1500 subsys=mtu level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_ipcache, recreating and re-pinning map cilium_ipcache" file-path=/sys/fs/bpf/tc/globals/cilium_ipcache name=cilium_ipcache subsys=bpf level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_tunnel_map, recreating and re-pinning map cilium_tunnel_map" file-path=/sys/fs/bpf/tc/globals/cilium_tunnel_map name=cilium_tunnel_map subsys=bpf level=info msg="Restored services from maps" failedServices=0 restoredServices=0 subsys=service level=info msg="Restored backends from maps" failedBackends=0 restoredBackends=0 skippedBackends=0 subsys=service level=info msg="Reading old endpoints..." subsys=daemon level=info msg="No old endpoints found." subsys=daemon level=info msg="Waiting until all Cilium CRDs are available" subsys=k8s level=info msg="All Cilium CRDs have been found and are available" subsys=k8s level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=info msg="Successfully created CiliumNode resource" subsys=nodediscovery level=warning msg="Unable to create CiliumNode resource, will retry" error="ciliumnodes.cilium.io \"instance\" already exists" subsys=nodediscovery level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=info msg="Received own node information from API server" ipAddr.ipv4=199.204.45.116 ipAddr.ipv6="" k8sNodeIP=199.204.45.116 labels="map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:]" nodeName=instance subsys=k8s v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="k8s mode: Allowing localhost to reach local endpoints" subsys=daemon level=info msg="Detected devices" devices="[]" subsys=linux-datapath level=info msg="Enabling k8s event listener" subsys=k8s-watcher level=info msg="Removing stale endpoint interfaces" subsys=daemon level=info msg="Waiting until local node addressing before starting watchers depending on it" subsys=k8s-watcher level=info msg="Skipping kvstore configuration" subsys=daemon level=info msg="Initializing node addressing" subsys=daemon level=info msg="Initializing cluster-pool IPAM" subsys=ipam v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="Restoring endpoints..." subsys=daemon level=info msg="Endpoints restored" failed=0 restored=0 subsys=daemon level=info msg="Addressing information:" subsys=daemon level=info msg=" Cluster-Name: default" subsys=daemon level=info msg=" Cluster-ID: 0" subsys=daemon level=info msg=" Local node-name: instance" subsys=daemon level=info msg=" Node-IPv6: " subsys=daemon level=info msg=" External-Node IPv4: 199.204.45.116" subsys=daemon level=info msg=" Internal-Node IPv4: 10.0.0.120" subsys=daemon level=info msg=" IPv4 allocation prefix: 10.0.0.0/24" subsys=daemon level=info msg=" Loopback IPv4: 169.254.42.1" subsys=daemon level=info msg=" Local IPv4 addresses:" subsys=daemon level=info msg=" - 199.204.45.116" subsys=daemon level=info msg=" - 172.17.0.100" subsys=daemon level=info msg=" - 10.96.240.200" subsys=daemon level=info msg="Node updated" clusterName=default nodeName=instance subsys=nodemanager level=info msg="Adding local node to cluster" node="{instance default [{InternalIP 199.204.45.116} {CiliumInternalIP 10.0.0.120}] 10.0.0.0/24 [] [] 10.0.0.236 0 local 0 map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:] map[] 1 }" subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Waiting until all pre-existing resources have been received" subsys=k8s-watcher level=info msg="Initializing identity allocator" subsys=identity-cache level=info msg="Allocating identities between range" cluster-id=0 max=65535 min=256 subsys=identity-cache level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.core.bpf_jit_enable sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.all.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.fib_multipath_use_neigh sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.unprivileged_bpf_disabled sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.timer_migration sysParamValue=0 level=info msg="Setting up BPF datapath" bpfClockSource=ktime bpfInsnSet="" subsys=datapath-loader level=info msg="Iptables rules installed" subsys=iptables level=info msg="Adding new proxy port rules for cilium-dns-egress:40887" id=cilium-dns-egress subsys=proxy level=info msg="Iptables proxy rules installed" subsys=iptables level=info msg="Start hook executed" duration=2.641304386s function="cmd.newDaemonPromise.func1 (daemon_main.go:1663)" subsys=hive level=info msg="Starting IP identity watcher" subsys=ipcache level=info msg="Start hook executed" duration="17.33µs" function="utime.initUtimeSync.func1 (cell.go:33)" subsys=hive level=info msg="Initializing daemon" subsys=daemon level=info msg="Validating configured node address ranges" subsys=daemon level=info msg="Starting connection tracking garbage collector" subsys=daemon level=info msg="Start hook executed" duration="8.59µs" function="*job.group.Start" subsys=hive level=info msg="Start hook executed" duration="43.481µs" function="l2respondermap.newMap.func1 (l2_responder_map4.go:44)" subsys=hive level=info msg="Start hook executed" duration="11.31µs" function="*job.group.Start" subsys=hive level=info msg="Initial scan of connection tracking completed" subsys=ct-gc level=info msg="Regenerating restored endpoints" numRestored=0 subsys=daemon level=info msg="Creating host endpoint" subsys=daemon level=info msg="Finished regenerating restored endpoints" regenerated=0 subsys=daemon total=0 level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3279 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Deleted orphan backends" orphanBackends=0 subsys=service level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3279 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3279 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Launching Cilium health daemon" subsys=daemon level=info msg="Launching Cilium health endpoint" subsys=daemon level=info msg="Started healthz status API server" address="127.0.0.1:9879" subsys=daemon level=info msg="Processing queued endpoint deletion requests from /var/run/cilium/deleteQueue" subsys=daemon level=info msg="processing 0 queued deletion requests" subsys=daemon level=info msg="Initializing Cilium API" subsys=daemon level=info msg="Daemon initialization completed" bootstrapTime=3.743127929s subsys=daemon level=info msg="Hubble server is disabled" subsys=hubble level=info msg="Serving cilium API at unix:///var/run/cilium/cilium.sock" subsys=daemon level=info msg="Compiled new BPF template" BPFCompilationTime=311.108843ms file-path=/var/run/cilium/state/templates/7cf18aa784e4964744de0d8466c81e64b9931e2b40c0a1dede471571f8155b3a/bpf_host.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3279 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1518 ipv4=10.0.0.236 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1518 identityLabels="reserved:health" ipv4=10.0.0.236 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1518 identity=4 identityLabels="reserved:health" ipv4=10.0.0.236 ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.121 152a2f9e-2bbc-426a-a780-0be422498f82 default }" containerID=f901a407de1f09ffb821b9e412a041ece885d6828faed215a6ed2e5652fa610a datapathConfiguration="&{false false false false false }" interface=lxcbe2c823ee540 k8sPodName=kube-system/coredns-7c96b6546b-gg48k labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f901a407de datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1352 ipv4=10.0.0.121 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-gg48k subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f901a407de datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1352 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.121 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-gg48k subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:kube-system]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.237 b3f1de82-6afd-4e55-be7b-3fffda07d26d default }" containerID=fdf5b89b6539dbbdedd8f1205a7fbfa075c338df2b138509ce30ac09f848a5e1 datapathConfiguration="&{false false false false false }" interface=lxc82ebc1f5ac24 k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-c4krs labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fdf5b89b65 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=487 ipv4=10.0.0.237 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-c4krs subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fdf5b89b65 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=487 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=b00a6dda-9bf9-483b-b828-6b75d61f5a40,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=b00a6dda-9bf9-483b-b828-6b75d61f5a40,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.237 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-c4krs subsys=endpoint level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=coredns;k8s:io.kubernetes.pod.namespace=kube-system;k8s:k8s-app=kube-dns;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=f901a407de datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1352 identity=1677 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.121 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-gg48k oldIdentity="no identity" subsys=endpoint level=info msg="Invalid state transition skipped" containerID=fdf5b89b65 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=487 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.237 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-c4krs line=611 subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f901a407de datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1352 identity=1677 ipv4=10.0.0.121 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-gg48k subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=certgen;k8s:batch.kubernetes.io/controller-uid=b00a6dda-9bf9-483b-b828-6b75d61f5a40;k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen;k8s:controller-uid=b00a6dda-9bf9-483b-b828-6b75d61f5a40;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;k8s:job-name=envoy-gateway-gateway-helm-certgen;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fdf5b89b65 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=487 identity=45569 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=b00a6dda-9bf9-483b-b828-6b75d61f5a40,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=b00a6dda-9bf9-483b-b828-6b75d61f5a40,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.237 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-c4krs oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fdf5b89b65 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=487 identity=45569 ipv4=10.0.0.237 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-c4krs subsys=endpoint level=info msg="Serving cilium health API at unix:///var/run/cilium/health.sock" subsys=health-server level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Compiled new BPF template" BPFCompilationTime=1.055322015s file-path=/var/run/cilium/state/templates/63a34a14f8ca14f2a3d128ee47a404fad900b09c8313fd3bea796e798f3fd56c/bpf_lxc.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID=f901a407de datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1352 identity=1677 ipv4=10.0.0.121 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-gg48k subsys=endpoint level=info msg="Successful endpoint creation" containerID=f901a407de datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1352 identity=1677 ipv4=10.0.0.121 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-gg48k subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=fdf5b89b65 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=487 identity=45569 ipv4=10.0.0.237 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-c4krs subsys=endpoint level=info msg="Successful endpoint creation" containerID=fdf5b89b65 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=487 identity=45569 ipv4=10.0.0.237 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-c4krs subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1518 identity=4 ipv4=10.0.0.236 ipv6= k8sPodName=/ subsys=endpoint level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=fdf5b89b65 endpointID=487 k8sNamespace=envoy-gateway-system k8sPodName=envoy-gateway-gateway-helm-certgen-c4krs subsys=daemon level=info msg="Releasing key" key="[k8s:app=certgen k8s:batch.kubernetes.io/controller-uid=b00a6dda-9bf9-483b-b828-6b75d61f5a40 k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen k8s:controller-uid=b00a6dda-9bf9-483b-b828-6b75d61f5a40 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen k8s:io.kubernetes.pod.namespace=envoy-gateway-system k8s:job-name=envoy-gateway-gateway-helm-certgen]" subsys=allocator level=info msg="Removed endpoint" containerID=fdf5b89b65 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=487 identity=45569 ipv4=10.0.0.237 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-c4krs subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.206 c3f90c66-a54e-4b22-84c6-8c96dfda54a3 default }" containerID=603359bb0157ce43f5de8a29f00f2a838addf36d4da73e063a53d3d2e76ad238 datapathConfiguration="&{false false false false false }" interface=lxcbf2b00cf68ec k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-hntgr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=603359bb01 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3051 ipv4=10.0.0.206 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-hntgr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=603359bb01 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3051 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.206 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-hntgr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=603359bb01 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3051 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.206 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-hntgr line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=envoy-gateway;k8s:app.kubernetes.io/name=gateway-helm;k8s:control-plane=envoy-gateway;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=603359bb01 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3051 identity=7021 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.206 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-hntgr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=603359bb01 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3051 identity=7021 ipv4=10.0.0.206 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-hntgr subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=603359bb01 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3051 identity=7021 ipv4=10.0.0.206 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-hntgr subsys=endpoint level=info msg="Successful endpoint creation" containerID=603359bb01 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3051 identity=7021 ipv4=10.0.0.206 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-hntgr subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3279 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_03279 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_03279 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_03279 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_03279:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3279 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.156 b62b886b-ea34-483c-87c8-00d6f98a2f32 default }" containerID=38cefd7d3d43f2dbd3b1990e063988687a657f757f6547690e430a55a5f4d145 datapathConfiguration="&{false false false false false }" interface=lxc9e1d337c5584 k8sPodName=kube-system/coredns-67659f764b-5s9ck labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=38cefd7d3d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1676 ipv4=10.0.0.156 ipv6= k8sPodName=kube-system/coredns-67659f764b-5s9ck subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=38cefd7d3d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1676 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.156 ipv6= k8sPodName=kube-system/coredns-67659f764b-5s9ck subsys=endpoint level=info msg="Identity of endpoint changed" containerID=38cefd7d3d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1676 identity=1677 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.156 ipv6= k8sPodName=kube-system/coredns-67659f764b-5s9ck oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=38cefd7d3d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1676 identity=1677 ipv4=10.0.0.156 ipv6= k8sPodName=kube-system/coredns-67659f764b-5s9ck subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.151 bde03608-d98b-4077-b0a4-abdb60b0a532 default }" containerID=5773b1e49e0d819f2c7782ce955ebf2e24b96bfa5e4c3ea0ab90cc790bcfdf41 datapathConfiguration="&{false false false false false }" interface=lxcb2d51312e9ca k8sPodName=kube-system/coredns-67659f764b-5cdf6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5773b1e49e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=645 ipv4=10.0.0.151 ipv6= k8sPodName=kube-system/coredns-67659f764b-5cdf6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5773b1e49e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=645 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.151 ipv6= k8sPodName=kube-system/coredns-67659f764b-5cdf6 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=5773b1e49e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=645 identity=1677 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.151 ipv6= k8sPodName=kube-system/coredns-67659f764b-5cdf6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5773b1e49e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=645 identity=1677 ipv4=10.0.0.151 ipv6= k8sPodName=kube-system/coredns-67659f764b-5cdf6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=38cefd7d3d datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1676 identity=1677 ipv4=10.0.0.156 ipv6= k8sPodName=kube-system/coredns-67659f764b-5s9ck subsys=endpoint level=info msg="Successful endpoint creation" containerID=38cefd7d3d datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1676 identity=1677 ipv4=10.0.0.156 ipv6= k8sPodName=kube-system/coredns-67659f764b-5s9ck subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=5773b1e49e datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=645 identity=1677 ipv4=10.0.0.151 ipv6= k8sPodName=kube-system/coredns-67659f764b-5cdf6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=5773b1e49e datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=645 identity=1677 ipv4=10.0.0.151 ipv6= k8sPodName=kube-system/coredns-67659f764b-5cdf6 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.237 5555bd39-0df7-44b4-9dac-ec4457fd7d02 default }" containerID=86810e20432bd68a3d41097fdcd65668078cc40360d66a9b3fdab953ccaae266 datapathConfiguration="&{false false false false false }" interface=lxc1d50712e7431 k8sPodName=local-path-storage/local-path-provisioner-679c578f5-xrwj9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=86810e2043 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=260 ipv4=10.0.0.237 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-xrwj9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=86810e2043 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=260 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.237 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-xrwj9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=local-path-provisioner;k8s:app.kubernetes.io/name=local-path-provisioner;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=86810e2043 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=260 identity=16835 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.237 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-xrwj9 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=86810e2043 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=260 identity=16835 ipv4=10.0.0.237 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-xrwj9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=86810e2043 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=260 identity=16835 ipv4=10.0.0.237 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-xrwj9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=86810e2043 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=260 identity=16835 ipv4=10.0.0.237 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-xrwj9 subsys=daemon level=info msg="Delete endpoint request" containerID=f901a407de endpointID=1352 k8sNamespace=kube-system k8sPodName=coredns-7c96b6546b-gg48k subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=coredns k8s:io.kubernetes.pod.namespace=kube-system k8s:k8s-app=kube-dns]" subsys=allocator level=info msg="Removed endpoint" containerID=f901a407de datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1352 identity=1677 ipv4=10.0.0.121 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-gg48k subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.200 46cb1d71-6d32-4821-8052-28b065c06397 default }" containerID=91f84773ceb2f9b7240b78219169971e2cde99f3a230f9c41e6abe9d863c949d datapathConfiguration="&{false false false false false }" interface=lxcc212bc65ed79 k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-qb89c labels="[]" subsys=daemon sync-build=true level=info msg="Create endpoint request" addressing="&{10.0.0.21 91fe15f9-3f68-477f-a126-465970cccf0a default }" containerID=f8513e16baa7ed2f3bb8c5e0e4271d38d686f380a1aecbd599c1c829c27698e3 datapathConfiguration="&{false false false false false }" interface=lxc893e97c0a709 k8sPodName=cert-manager/cert-manager-webhook-548949fc64-4m5md labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=91f84773ce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2189 ipv4=10.0.0.200 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-qb89c subsys=endpoint level=info msg="New endpoint" containerID=f8513e16ba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3979 ipv4=10.0.0.21 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-4m5md subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=91f84773ce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2189 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.200 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-qb89c subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.70 767be558-61ab-445d-b801-43269c9e6159 default }" containerID=4516133a0c6b285f29d82d5cf26177fe08931d9d9636141ce7305a676cd88305 datapathConfiguration="&{false false false false false }" interface=lxcee163ffe1834 k8sPodName=cert-manager/cert-manager-75c4c745bc-9znn9 labels="[]" subsys=daemon sync-build=true level=info msg="Resolving identity labels (blocking)" containerID=f8513e16ba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3979 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.21 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-4m5md subsys=endpoint level=info msg="New endpoint" containerID=4516133a0c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=368 ipv4=10.0.0.70 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-9znn9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4516133a0c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=368 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.70 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-9znn9 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=f8513e16ba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3979 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.21 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-4m5md line=611 subsys=endpoint level=info msg="Invalid state transition skipped" containerID=4516133a0c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=368 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.70 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-9znn9 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=cainjector;k8s:app.kubernetes.io/component=cainjector;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cainjector;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=91f84773ce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2189 identity=29293 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.200 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-qb89c oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=91f84773ce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2189 identity=29293 ipv4=10.0.0.200 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-qb89c subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=webhook;k8s:app.kubernetes.io/component=webhook;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=webhook;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f8513e16ba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3979 identity=57982 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.21 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-4m5md oldIdentity="no identity" subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Waiting for endpoint to be generated" containerID=f8513e16ba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3979 identity=57982 ipv4=10.0.0.21 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-4m5md subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=cert-manager;k8s:app.kubernetes.io/component=controller;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cert-manager;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4516133a0c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=368 identity=15946 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.70 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-9znn9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4516133a0c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=368 identity=15946 ipv4=10.0.0.70 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-9znn9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4516133a0c datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=368 identity=15946 ipv4=10.0.0.70 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-9znn9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=4516133a0c datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=368 identity=15946 ipv4=10.0.0.70 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-9znn9 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=91f84773ce datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2189 identity=29293 ipv4=10.0.0.200 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-qb89c subsys=endpoint level=info msg="Successful endpoint creation" containerID=91f84773ce datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2189 identity=29293 ipv4=10.0.0.200 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-qb89c subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=f8513e16ba datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3979 identity=57982 ipv4=10.0.0.21 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-4m5md subsys=endpoint level=info msg="Successful endpoint creation" containerID=f8513e16ba datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3979 identity=57982 ipv4=10.0.0.21 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-4m5md subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.125 59003041-4c79-452a-a9f3-c7ac8c339d49 default }" containerID=ee473863696f6a095047506e096051ec724e275f1ca59006a96611db89edf565 datapathConfiguration="&{false false false false false }" interface=lxc25e3f81483d6 k8sPodName=cert-manager/cert-manager-startupapicheck-g7tsp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ee47386369 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=600 ipv4=10.0.0.125 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-g7tsp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ee47386369 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=600 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=e0d9308c-531c-4b22-aa6e-f680df1f7e93,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=e0d9308c-531c-4b22-aa6e-f680df1f7e93,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.125 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-g7tsp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=startupapicheck;k8s:app.kubernetes.io/component=startupapicheck;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=startupapicheck;k8s:app.kubernetes.io/version=v1.11.5;k8s:batch.kubernetes.io/controller-uid=e0d9308c-531c-4b22-aa6e-f680df1f7e93;k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck;k8s:controller-uid=e0d9308c-531c-4b22-aa6e-f680df1f7e93;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck;k8s:io.kubernetes.pod.namespace=cert-manager;k8s:job-name=cert-manager-startupapicheck;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ee47386369 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=600 identity=23152 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=e0d9308c-531c-4b22-aa6e-f680df1f7e93,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=e0d9308c-531c-4b22-aa6e-f680df1f7e93,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.125 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-g7tsp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ee47386369 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=600 identity=23152 ipv4=10.0.0.125 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-g7tsp subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ee47386369 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=600 identity=23152 ipv4=10.0.0.125 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-g7tsp subsys=endpoint level=info msg="Successful endpoint creation" containerID=ee47386369 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=600 identity=23152 ipv4=10.0.0.125 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-g7tsp subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=ee47386369 endpointID=600 k8sNamespace=cert-manager k8sPodName=cert-manager-startupapicheck-g7tsp subsys=daemon level=info msg="Releasing key" key="[k8s:app=startupapicheck k8s:app.kubernetes.io/component=startupapicheck k8s:app.kubernetes.io/instance=cert-manager k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=startupapicheck k8s:app.kubernetes.io/version=v1.11.5 k8s:batch.kubernetes.io/controller-uid=e0d9308c-531c-4b22-aa6e-f680df1f7e93 k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck k8s:controller-uid=e0d9308c-531c-4b22-aa6e-f680df1f7e93 k8s:helm.sh/chart=cert-manager-v1.11.5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager k8s:io.cilium.k8s.namespace.labels.name=cert-manager k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck k8s:io.kubernetes.pod.namespace=cert-manager k8s:job-name=cert-manager-startupapicheck]" subsys=allocator level=info msg="Removed endpoint" containerID=ee47386369 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=600 identity=23152 ipv4=10.0.0.125 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-g7tsp subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.163 6d867385-7f08-46cc-8de7-1dc17873daf5 default }" containerID=3bd51f99769d50c11ded44e1617b1159bea0f21d6312b4ffa4c5ab218224aa1b datapathConfiguration="&{false false false false false }" interface=lxc57dbc3925d45 k8sPodName=ingress-nginx/ingress-nginx-admission-create-4fpwl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3bd51f9976 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=235 ipv4=10.0.0.163 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-4fpwl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3bd51f9976 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=235 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=b84915a0-1129-4928-8146-0d085c35218e,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=b84915a0-1129-4928-8146-0d085c35218e,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.163 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-4fpwl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=b84915a0-1129-4928-8146-0d085c35218e;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create;k8s:controller-uid=b84915a0-1129-4928-8146-0d085c35218e;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-create;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3bd51f9976 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=235 identity=9789 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=b84915a0-1129-4928-8146-0d085c35218e,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=b84915a0-1129-4928-8146-0d085c35218e,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.163 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-4fpwl oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3bd51f9976 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=235 identity=9789 ipv4=10.0.0.163 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-4fpwl subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=3bd51f9976 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=235 identity=9789 ipv4=10.0.0.163 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-4fpwl subsys=endpoint level=info msg="Successful endpoint creation" containerID=3bd51f9976 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=235 identity=9789 ipv4=10.0.0.163 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-4fpwl subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=3bd51f9976 endpointID=235 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-create-4fpwl subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=b84915a0-1129-4928-8146-0d085c35218e k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create k8s:controller-uid=b84915a0-1129-4928-8146-0d085c35218e k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-create]" subsys=allocator level=info msg="Removed endpoint" containerID=3bd51f9976 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=235 identity=9789 ipv4=10.0.0.163 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-4fpwl subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.111 73565e19-615d-4c68-a48f-3292a9977a02 default }" containerID=3757c8437ba9dd7d52ba462c8d603a99ec069f6cb7fce436529620afe1eb455a datapathConfiguration="&{false false false false false }" interface=lxc7086c25f0af5 k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-wjfjp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3757c8437b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1744 ipv4=10.0.0.111 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-wjfjp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3757c8437b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1744 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.111 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-wjfjp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=default-backend;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend;k8s:io.kubernetes.pod.namespace=ingress-nginx;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3757c8437b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1744 identity=19345 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.111 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-wjfjp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3757c8437b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1744 identity=19345 ipv4=10.0.0.111 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-wjfjp subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=3757c8437b datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1744 identity=19345 ipv4=10.0.0.111 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-wjfjp subsys=endpoint level=info msg="Successful endpoint creation" containerID=3757c8437b datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1744 identity=19345 ipv4=10.0.0.111 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-wjfjp subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.226 d730d7fb-03de-48ef-8b74-d13ea7a01d2c default }" containerID=6ce067679349ea67afd050a18c4008c4dfb20ba52647b12ed44eeb3952cabdd9 datapathConfiguration="&{false false false false false }" interface=lxc2f7d6344d025 k8sPodName=ingress-nginx/ingress-nginx-admission-patch-68t9t labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6ce0676793 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=487 ipv4=10.0.0.226 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-68t9t subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6ce0676793 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=487 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=d3792574-6bde-4cd0-9560-579bcf501bd2,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=d3792574-6bde-4cd0-9560-579bcf501bd2,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.226 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-68t9t subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=d3792574-6bde-4cd0-9560-579bcf501bd2;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch;k8s:controller-uid=d3792574-6bde-4cd0-9560-579bcf501bd2;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-patch;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6ce0676793 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=487 identity=23049 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=d3792574-6bde-4cd0-9560-579bcf501bd2,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=d3792574-6bde-4cd0-9560-579bcf501bd2,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.226 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-68t9t oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6ce0676793 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=487 identity=23049 ipv4=10.0.0.226 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-68t9t subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6ce0676793 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=487 identity=23049 ipv4=10.0.0.226 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-68t9t subsys=endpoint level=info msg="Successful endpoint creation" containerID=6ce0676793 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=487 identity=23049 ipv4=10.0.0.226 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-68t9t subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=6ce0676793 endpointID=487 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-patch-68t9t subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=d3792574-6bde-4cd0-9560-579bcf501bd2 k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch k8s:controller-uid=d3792574-6bde-4cd0-9560-579bcf501bd2 k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-patch]" subsys=allocator level=info msg="Removed endpoint" containerID=6ce0676793 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=487 identity=23049 ipv4=10.0.0.226 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-68t9t subsys=endpoint level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"rabbitmq-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-cluster-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=f9623817-d73f-41ed-80d8-58c7c0e32292] Description:}]" policyAddRequest=dba4175e-4445-44df-8505-fcbcb481873e subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=dba4175e-4445-44df-8505-fcbcb481873e policyRevision=2 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-cluster-operator subsys=k8s-watcher level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"messaging-topology-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9443 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-messaging-topology-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=a57befa9-23ab-4438-821a-7d31e666f5f7] Description:}]" policyAddRequest=b55ddc50-a61f-40c7-af71-1ba5f9c78a29 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=b55ddc50-a61f-40c7-af71-1ba5f9c78a29 policyRevision=3 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-messaging-topology-operator subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.188 01f53fec-2b8b-4817-852e-dbeb0b0f9ed6 default }" containerID=06d10a616fe752f1cb39c2e76643a10dbe65c4c4b6a558dfc97435db597d7eb6 datapathConfiguration="&{false false false false false }" interface=lxc22e18a461ba5 k8sPodName=openstack/rabbitmq-cluster-operator-67fdb85b4f-sg8j8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=06d10a616f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3788 ipv4=10.0.0.188 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-67fdb85b4f-sg8j8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=06d10a616f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3788 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.8.0,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.2.4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.188 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-67fdb85b4f-sg8j8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=06d10a616f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3788 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.188 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-67fdb85b4f-sg8j8 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=2.8.0;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.2.4;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=06d10a616f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3788 identity=3387 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.8.0,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.2.4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.188 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-67fdb85b4f-sg8j8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=06d10a616f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3788 identity=3387 ipv4=10.0.0.188 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-67fdb85b4f-sg8j8 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=06d10a616f datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=3788 identity=3387 ipv4=10.0.0.188 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-67fdb85b4f-sg8j8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=06d10a616f datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=3788 identity=3387 ipv4=10.0.0.188 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-67fdb85b4f-sg8j8 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.187 2dcaf086-4347-4f04-bcfd-e4fb8aeea13c default }" containerID=3280aedceed6b07b46b8e7a5c72374cdb5d19de995e6c1a9ccc3737ef6ba2966 datapathConfiguration="&{false false false false false }" interface=lxc271a016ee0c9 k8sPodName=openstack/rabbitmq-messaging-topology-operator-5c9876cc97-v9rrp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3280aedcee datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1320 ipv4=10.0.0.187 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-5c9876cc97-v9rrp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3280aedcee datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1320 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.13.0,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.2.4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.187 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-5c9876cc97-v9rrp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=messaging-topology-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=1.13.0;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.2.4;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3280aedcee datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1320 identity=30319 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.13.0,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.2.4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.187 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-5c9876cc97-v9rrp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3280aedcee datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1320 identity=30319 ipv4=10.0.0.187 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-5c9876cc97-v9rrp subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3280aedcee datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1320 identity=30319 ipv4=10.0.0.187 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-5c9876cc97-v9rrp subsys=endpoint level=info msg="Successful endpoint creation" containerID=3280aedcee datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1320 identity=30319 ipv4=10.0.0.187 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-5c9876cc97-v9rrp subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.37 f2cf115a-3d97-4d0a-9808-c781d911850f default }" containerID=f0306bfc0edcfd3f167596bef1cce2b32a20f84fa30077910cbd20cbffeaa798 datapathConfiguration="&{false false false false false }" interface=lxc89cd44860d71 k8sPodName=openstack/pxc-operator-7cff949c8b-bxbmq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f0306bfc0e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3734 ipv4=10.0.0.37 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-bxbmq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f0306bfc0e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3734 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.37 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-bxbmq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=operator;k8s:app.kubernetes.io/instance=pxc-operator;k8s:app.kubernetes.io/name=pxc-operator;k8s:app.kubernetes.io/part-of=pxc-operator;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f0306bfc0e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3734 identity=34470 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.37 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-bxbmq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f0306bfc0e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3734 identity=34470 ipv4=10.0.0.37 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-bxbmq subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f0306bfc0e datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=3734 identity=34470 ipv4=10.0.0.37 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-bxbmq subsys=endpoint level=info msg="Successful endpoint creation" containerID=f0306bfc0e datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=3734 identity=34470 ipv4=10.0.0.37 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-bxbmq subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.71 150237ff-d8e6-481f-92d4-0b735a6024c5 default }" containerID=afeb8fe90e97b1b964aef34ba7282b1c710821a6ffe3d72d359887a77335bcde datapathConfiguration="&{false false false false false }" interface=lxc2cb571698ffb k8sPodName=openstack/percona-xtradb-haproxy-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=afeb8fe90e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=330 ipv4=10.0.0.71 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=afeb8fe90e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=330 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.71 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=afeb8fe90e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=330 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.71 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=haproxy;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=afeb8fe90e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=330 identity=63288 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.71 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=afeb8fe90e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=330 identity=63288 ipv4=10.0.0.71 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.152 e4df78da-cc54-44db-999e-fd98f93eef25 default }" containerID=4a25b540bb92c24a4749ffc11c2ec106d7bf00527ded535ed6cd6800b5e82fc0 datapathConfiguration="&{false false false false false }" interface=lxc1a79f244f042 k8sPodName=local-path-storage/helper-pod-create-pvc-e68b70a7-6520-4cb5-920e-b5021125dba4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4a25b540bb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=201 ipv4=10.0.0.152 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e68b70a7-6520-4cb5-920e-b5021125dba4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4a25b540bb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=201 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.152 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e68b70a7-6520-4cb5-920e-b5021125dba4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4a25b540bb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=201 identity=18132 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.152 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e68b70a7-6520-4cb5-920e-b5021125dba4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4a25b540bb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=201 identity=18132 ipv4=10.0.0.152 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e68b70a7-6520-4cb5-920e-b5021125dba4 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=afeb8fe90e datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=330 identity=63288 ipv4=10.0.0.71 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=afeb8fe90e datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=330 identity=63288 ipv4=10.0.0.71 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=4a25b540bb datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=201 identity=18132 ipv4=10.0.0.152 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e68b70a7-6520-4cb5-920e-b5021125dba4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=4a25b540bb datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=201 identity=18132 ipv4=10.0.0.152 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e68b70a7-6520-4cb5-920e-b5021125dba4 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=4a25b540bb endpointID=201 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-e68b70a7-6520-4cb5-920e-b5021125dba4 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=4a25b540bb datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=201 identity=18132 ipv4=10.0.0.152 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e68b70a7-6520-4cb5-920e-b5021125dba4 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.242 ec35af3e-2b3c-4a4f-bdcf-c19d17d3832c default }" containerID=d5f261c807f3888ad67b7048e07cc75ad11da0cb6e18b6898b5af8348d9708a5 datapathConfiguration="&{false false false false false }" interface=lxc9c94fb557527 k8sPodName=openstack/percona-xtradb-pxc-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d5f261c807 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=710 ipv4=10.0.0.242 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d5f261c807 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=710 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.242 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=pxc;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=d5f261c807 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=710 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.242 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=d5f261c807 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=710 identity=3197 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.242 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d5f261c807 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=710 identity=3197 ipv4=10.0.0.242 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d5f261c807 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=710 identity=3197 ipv4=10.0.0.242 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=d5f261c807 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=710 identity=3197 ipv4=10.0.0.242 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"keycloak\",\"k8s:app.kubernetes.io/instance\":\"keycloak\",\"k8s:app.kubernetes.io/name\":\"keycloak\",\"k8s:io.kubernetes.pod.namespace\":\"auth-system\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:7800 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:8080 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=keycloak k8s:io.cilium.k8s.policy.namespace=auth-system k8s:io.cilium.k8s.policy.uid=2b49e104-0a62-40c9-a3d1-e28fa6db5746] Description:}]" policyAddRequest=eed4fbea-f335-4241-a71f-75c3ba7534b2 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=eed4fbea-f335-4241-a71f-75c3ba7534b2 policyRevision=4 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=keycloak subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.190 f6272720-a46c-4b79-8728-74280fd63f9f default }" containerID=ab7fdc5d35adaa07585777551d214c172b89cc1e419e9e52ef65b634d5246159 datapathConfiguration="&{false false false false false }" interface=lxca3ff85481379 k8sPodName=auth-system/keycloak-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ab7fdc5d35 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=120 ipv4=10.0.0.190 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ab7fdc5d35 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=120 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=23.0.7,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-20.0.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.190 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:auth-system k8s:io.cilium.k8s.namespace.labels.name:auth-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=keycloak;k8s:app.kubernetes.io/instance=keycloak;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=keycloak;k8s:app.kubernetes.io/version=23.0.7;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=keycloak-20.0.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system;k8s:io.cilium.k8s.namespace.labels.name=auth-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keycloak;k8s:io.kubernetes.pod.namespace=auth-system;k8s:statefulset.kubernetes.io/pod-name=keycloak-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ab7fdc5d35 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=120 identity=34468 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=23.0.7,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-20.0.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.190 ipv6= k8sPodName=auth-system/keycloak-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ab7fdc5d35 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=120 identity=34468 ipv4=10.0.0.190 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=ab7fdc5d35 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=120 identity=34468 ipv4=10.0.0.190 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=ab7fdc5d35 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=120 identity=34468 ipv4=10.0.0.190 ipv6= k8sPodName=auth-system/keycloak-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.010807959202997552 newInterval=7m30s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.57 8152bdc7-46be-471a-8615-9dde7196925c default }" containerID=e0f81494fef72c8a7fae1a875f1dac9f9e495fb98b5e665899a59f9e6e2484b9 datapathConfiguration="&{false false false false false }" interface=lxcf41b5ea1e28e k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-sr2cl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e0f81494fe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3507 ipv4=10.0.0.57 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-sr2cl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e0f81494fe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3507 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.57 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-sr2cl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.227 1b1706ad-a53a-4af2-bf01-61f023f46b34 default }" containerID=ea4caa1160e6336a486492f57fb148dc70d529d64193d78dc6f8f0875aad475e datapathConfiguration="&{false false false false false }" interface=lxc7796f070e087 k8sPodName=monitoring/node-feature-discovery-worker-69f5v labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ea4caa1160 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2352 ipv4=10.0.0.227 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-69f5v subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ea4caa1160 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2352 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.227 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-69f5v subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=e0f81494fe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3507 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.57 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-sr2cl line=611 subsys=endpoint level=info msg="Invalid state transition skipped" containerID=ea4caa1160 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2352 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.227 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-69f5v line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=gc;" subsys=allocator level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Identity of endpoint changed" containerID=e0f81494fe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3507 identity=16817 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.57 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-sr2cl oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e0f81494fe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3507 identity=16817 ipv4=10.0.0.57 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-sr2cl subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=worker;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ea4caa1160 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2352 identity=20535 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.227 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-69f5v oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ea4caa1160 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2352 identity=20535 ipv4=10.0.0.227 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-69f5v subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ea4caa1160 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2352 identity=20535 ipv4=10.0.0.227 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-69f5v subsys=endpoint level=info msg="Successful endpoint creation" containerID=ea4caa1160 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2352 identity=20535 ipv4=10.0.0.227 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-69f5v subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=e0f81494fe datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3507 identity=16817 ipv4=10.0.0.57 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-sr2cl subsys=endpoint level=info msg="Successful endpoint creation" containerID=e0f81494fe datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3507 identity=16817 ipv4=10.0.0.57 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-sr2cl subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.137 9e70e3fb-156b-4be8-b82d-8f38d4922311 default }" containerID=b4622ff4c73db65e2381ace250d8c03b9d233095af244897c1dc06af0cbf9cb1 datapathConfiguration="&{false false false false false }" interface=lxc88df6d13e47b k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-l78pr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b4622ff4c7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3962 ipv4=10.0.0.137 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-l78pr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b4622ff4c7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3962 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.137 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-l78pr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=master;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b4622ff4c7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3962 identity=27815 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.137 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-l78pr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b4622ff4c7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3962 identity=27815 ipv4=10.0.0.137 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-l78pr subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b4622ff4c7 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3962 identity=27815 ipv4=10.0.0.137 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-l78pr subsys=endpoint level=info msg="Successful endpoint creation" containerID=b4622ff4c7 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3962 identity=27815 ipv4=10.0.0.137 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-l78pr subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.163 012dc520-957e-4ad8-aba6-1d1fb5b1a73b default }" containerID=4e179f80f0521d8f5cb3e0c3a707ecdd33dd9f5eb05b4b6d46d0bd59c4e5ec99 datapathConfiguration="&{false false false false false }" interface=lxc9a16a0f625dc k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-v4vv4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4e179f80f0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1852 ipv4=10.0.0.163 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-v4vv4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4e179f80f0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1852 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.163 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-v4vv4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:secretgen-controller]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=secretgen-controller;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa;k8s:io.kubernetes.pod.namespace=secretgen-controller;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4e179f80f0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1852 identity=63559 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.163 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-v4vv4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4e179f80f0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1852 identity=63559 ipv4=10.0.0.163 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-v4vv4 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4e179f80f0 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1852 identity=63559 ipv4=10.0.0.163 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-v4vv4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=4e179f80f0 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1852 identity=63559 ipv4=10.0.0.163 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-v4vv4 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3279 identity=1 identityLabels="k8s:feature.node.kubernetes.io/cpu-cpuid.ADX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AESNI=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX2=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CLZERO=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CMPXCHG8=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FMA3=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSROPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.HYPERVISOR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IA32_ARCH_CAP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBPB=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBRS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.LAHF=true,k8s:feature.node.kubernetes.io/cpu-cpuid.MOVBE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.NRIPS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.OSXSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SHA=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SPEC_CTRL_SSBD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SSE4A=true,k8s:feature.node.kubernetes.io/cpu-cpuid.STIBP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVM=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVMNP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSCALL=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSEE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.TOPEXT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.WBNOINVD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.X87=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XGETBV1=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEC=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEOPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVES=true,k8s:feature.node.kubernetes.io/cpu-hardware_multithreading=false,k8s:feature.node.kubernetes.io/cpu-model.family=23,k8s:feature.node.kubernetes.io/cpu-model.id=49,k8s:feature.node.kubernetes.io/cpu-model.vendor_id=AMD,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ=true,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ_IDLE=true,k8s:feature.node.kubernetes.io/kernel-version.full=5.15.0-174-generic,k8s:feature.node.kubernetes.io/kernel-version.major=5,k8s:feature.node.kubernetes.io/kernel-version.minor=15,k8s:feature.node.kubernetes.io/kernel-version.revision=0,k8s:feature.node.kubernetes.io/pci-0300_1af4.present=true,k8s:feature.node.kubernetes.io/system-os_release.ID=ubuntu,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.major=22,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.minor=04,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID=22.04,k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_03279 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_03279 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_03279 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_03279:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3279 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.112 d89df53c-322e-4aa0-b76c-04fbd716b3a0 default }" containerID=52b62ce258cf712b529073144d2740522c0d73d7d936c9a9fba02c2519f54891 datapathConfiguration="&{false false false false false }" interface=lxc4d6d2deceed8 k8sPodName=monitoring/kube-prometheus-stack-admission-create-md2fz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=52b62ce258 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3774 ipv4=10.0.0.112 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-md2fz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=52b62ce258 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3774 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=58.2.1,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=ee8b574f-12f5-495c-b0f4-7842f4c74f3e,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-58.2.1,k8s:controller-uid=ee8b574f-12f5-495c-b0f4-7842f4c74f3e,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.112 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-md2fz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-create;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=58.2.1;k8s:batch.kubernetes.io/controller-uid=ee8b574f-12f5-495c-b0f4-7842f4c74f3e;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create;k8s:chart=kube-prometheus-stack-58.2.1;k8s:controller-uid=ee8b574f-12f5-495c-b0f4-7842f4c74f3e;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-create;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=52b62ce258 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3774 identity=27741 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=58.2.1,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=ee8b574f-12f5-495c-b0f4-7842f4c74f3e,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-58.2.1,k8s:controller-uid=ee8b574f-12f5-495c-b0f4-7842f4c74f3e,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.112 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-md2fz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=52b62ce258 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3774 identity=27741 ipv4=10.0.0.112 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-md2fz subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=52b62ce258 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3774 identity=27741 ipv4=10.0.0.112 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-md2fz subsys=endpoint level=info msg="Successful endpoint creation" containerID=52b62ce258 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3774 identity=27741 ipv4=10.0.0.112 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-md2fz subsys=daemon level=info msg="Delete endpoint request" containerID=52b62ce258 endpointID=3774 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-create-md2fz subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-create k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=58.2.1 k8s:batch.kubernetes.io/controller-uid=ee8b574f-12f5-495c-b0f4-7842f4c74f3e k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create k8s:chart=kube-prometheus-stack-58.2.1 k8s:controller-uid=ee8b574f-12f5-495c-b0f4-7842f4c74f3e k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-create k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=52b62ce258 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3774 identity=27741 ipv4=10.0.0.112 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-md2fz subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.103 b5a018e2-3445-44e5-b0b9-bc29ac2f4b09 default }" containerID=8acf9e3737feae9382492037fb13d2cdabf56609e49f12e78a5e0346dbf39420 datapathConfiguration="&{false false false false false }" interface=lxc36323a6d612b k8sPodName=monitoring/kube-prometheus-stack-operator-7d58f4b66c-bmjx7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8acf9e3737 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2058 ipv4=10.0.0.103 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-7d58f4b66c-bmjx7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8acf9e3737 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2058 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=58.2.1,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-58.2.1,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.103 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-7d58f4b66c-bmjx7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-operator;k8s:app.kubernetes.io/component=prometheus-operator;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=58.2.1;k8s:chart=kube-prometheus-stack-58.2.1;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8acf9e3737 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2058 identity=718 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=58.2.1,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-58.2.1,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.103 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-7d58f4b66c-bmjx7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8acf9e3737 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2058 identity=718 ipv4=10.0.0.103 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-7d58f4b66c-bmjx7 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.106 d68c81a5-9f00-43ea-9c12-f17b44347720 default }" containerID=040825946f05301b0e4ce80bcf25171cabdaf38092c77f1e9c75c792bd57d233 datapathConfiguration="&{false false false false false }" interface=lxc6e43fbd16f2a k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-75jdw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=040825946f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=479 ipv4=10.0.0.106 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-75jdw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=040825946f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=479 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.18.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.106 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-75jdw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=metrics;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-state-metrics;k8s:app.kubernetes.io/part-of=kube-state-metrics;k8s:app.kubernetes.io/version=2.12.0;k8s:helm.sh/chart=kube-state-metrics-5.18.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=040825946f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=479 identity=7467 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.18.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.106 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-75jdw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=040825946f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=479 identity=7467 ipv4=10.0.0.106 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-75jdw subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=040825946f datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=479 identity=7467 ipv4=10.0.0.106 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-75jdw subsys=endpoint level=info msg="Successful endpoint creation" containerID=040825946f datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=479 identity=7467 ipv4=10.0.0.106 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-75jdw subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=8acf9e3737 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2058 identity=718 ipv4=10.0.0.103 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-7d58f4b66c-bmjx7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=8acf9e3737 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2058 identity=718 ipv4=10.0.0.103 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-7d58f4b66c-bmjx7 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.81 eb2f82f2-5596-4c9b-b2d8-a66c6003f5cd default }" containerID=22ab5923ef02ebeabd989bb246536057f3f4a3e899289f64d1b13b8aa266a434 datapathConfiguration="&{false false false false false }" interface=lxc30a0b68b8767 k8sPodName=monitoring/kube-prometheus-stack-grafana-6b965d97b9-zggcn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=22ab5923ef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3090 ipv4=10.0.0.81 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-6b965d97b9-zggcn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=22ab5923ef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3090 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.81 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-6b965d97b9-zggcn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/name=grafana;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=22ab5923ef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3090 identity=48309 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.81 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-6b965d97b9-zggcn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=22ab5923ef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3090 identity=48309 ipv4=10.0.0.81 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-6b965d97b9-zggcn subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=22ab5923ef datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3090 identity=48309 ipv4=10.0.0.81 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-6b965d97b9-zggcn subsys=endpoint level=info msg="Successful endpoint creation" containerID=22ab5923ef datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3090 identity=48309 ipv4=10.0.0.81 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-6b965d97b9-zggcn subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.115 a9f82057-ddfc-47d0-9faf-96daf91578d4 default }" containerID=79b72b22c1e3da56fa6879cd51047054a8be7f8b265b2ac62b3c3758d2442445 datapathConfiguration="&{false false false false false }" interface=lxcf17df5ba25f0 k8sPodName=monitoring/kube-prometheus-stack-admission-patch-bkttj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=79b72b22c1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=411 ipv4=10.0.0.115 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-bkttj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=79b72b22c1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=411 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=58.2.1,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=2fc94e6a-55a0-41b4-bbe6-3c9af4dc0bcf,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-58.2.1,k8s:controller-uid=2fc94e6a-55a0-41b4-bbe6-3c9af4dc0bcf,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.115 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-bkttj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-patch;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=58.2.1;k8s:batch.kubernetes.io/controller-uid=2fc94e6a-55a0-41b4-bbe6-3c9af4dc0bcf;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch;k8s:chart=kube-prometheus-stack-58.2.1;k8s:controller-uid=2fc94e6a-55a0-41b4-bbe6-3c9af4dc0bcf;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-patch;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=79b72b22c1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=411 identity=30874 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=58.2.1,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=2fc94e6a-55a0-41b4-bbe6-3c9af4dc0bcf,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-58.2.1,k8s:controller-uid=2fc94e6a-55a0-41b4-bbe6-3c9af4dc0bcf,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.115 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-bkttj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=79b72b22c1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=411 identity=30874 ipv4=10.0.0.115 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-bkttj subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=79b72b22c1 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=411 identity=30874 ipv4=10.0.0.115 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-bkttj subsys=endpoint level=info msg="Successful endpoint creation" containerID=79b72b22c1 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=411 identity=30874 ipv4=10.0.0.115 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-bkttj subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=79b72b22c1 endpointID=411 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-patch-bkttj subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-patch k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=58.2.1 k8s:batch.kubernetes.io/controller-uid=2fc94e6a-55a0-41b4-bbe6-3c9af4dc0bcf k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch k8s:chart=kube-prometheus-stack-58.2.1 k8s:controller-uid=2fc94e6a-55a0-41b4-bbe6-3c9af4dc0bcf k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-patch k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=79b72b22c1 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=411 identity=30874 ipv4=10.0.0.115 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-bkttj subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.238 f531a39a-b971-44f7-a9db-52ebca2c5e4b default }" containerID=3ac76cd379101f66c79e9ad5e38e43e8aab98435eedd3271de25c3ee08bb525f datapathConfiguration="&{false false false false false }" interface=lxc0eaa00bdbdec k8sPodName=local-path-storage/helper-pod-create-pvc-52f2c0c1-2d4b-4afa-a934-b37ce3f1755e labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3ac76cd379 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=453 ipv4=10.0.0.238 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-52f2c0c1-2d4b-4afa-a934-b37ce3f1755e subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3ac76cd379 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=453 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.238 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-52f2c0c1-2d4b-4afa-a934-b37ce3f1755e subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3ac76cd379 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=453 identity=18132 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.238 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-52f2c0c1-2d4b-4afa-a934-b37ce3f1755e oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3ac76cd379 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=453 identity=18132 ipv4=10.0.0.238 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-52f2c0c1-2d4b-4afa-a934-b37ce3f1755e subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3ac76cd379 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=453 identity=18132 ipv4=10.0.0.238 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-52f2c0c1-2d4b-4afa-a934-b37ce3f1755e subsys=endpoint level=info msg="Successful endpoint creation" containerID=3ac76cd379 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=453 identity=18132 ipv4=10.0.0.238 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-52f2c0c1-2d4b-4afa-a934-b37ce3f1755e subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.64 317628b1-4544-40b6-9bee-5dc79f32236a default }" containerID=81c1dbf0722715b55930b05dfbd43262906aaaf289776195230fb42f9c6476f8 datapathConfiguration="&{false false false false false }" interface=lxcd1fa3fd809e4 k8sPodName=local-path-storage/helper-pod-create-pvc-8d7a9dc3-ce1a-4257-90cd-75a790804e94 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=81c1dbf072 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1952 ipv4=10.0.0.64 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8d7a9dc3-ce1a-4257-90cd-75a790804e94 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=81c1dbf072 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1952 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.64 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8d7a9dc3-ce1a-4257-90cd-75a790804e94 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=81c1dbf072 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1952 identity=18132 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.64 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8d7a9dc3-ce1a-4257-90cd-75a790804e94 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=81c1dbf072 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1952 identity=18132 ipv4=10.0.0.64 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8d7a9dc3-ce1a-4257-90cd-75a790804e94 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=81c1dbf072 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1952 identity=18132 ipv4=10.0.0.64 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8d7a9dc3-ce1a-4257-90cd-75a790804e94 subsys=endpoint level=info msg="Successful endpoint creation" containerID=81c1dbf072 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1952 identity=18132 ipv4=10.0.0.64 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8d7a9dc3-ce1a-4257-90cd-75a790804e94 subsys=daemon level=info msg="Delete endpoint request" containerID=3ac76cd379 endpointID=453 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-52f2c0c1-2d4b-4afa-a934-b37ce3f1755e subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=3ac76cd379 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=453 identity=18132 ipv4=10.0.0.238 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-52f2c0c1-2d4b-4afa-a934-b37ce3f1755e subsys=endpoint level=info msg="Delete endpoint request" containerID=81c1dbf072 endpointID=1952 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-8d7a9dc3-ce1a-4257-90cd-75a790804e94 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=81c1dbf072 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1952 identity=18132 ipv4=10.0.0.64 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8d7a9dc3-ce1a-4257-90cd-75a790804e94 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.2 8564dab0-42b0-4375-887d-fc63f5560980 default }" containerID=ed79cbdba6a82feb2069d9e230a81543ee6ae1cce3b0420abc97d78e34f7bdfe datapathConfiguration="&{false false false false false }" interface=lxc5a2f05525ae5 k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ed79cbdba6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2936 ipv4=10.0.0.2 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ed79cbdba6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2936 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.2 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:alertmanager=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=alertmanager;k8s:app.kubernetes.io/version=0.27.0;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ed79cbdba6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2936 identity=27784 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.2 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ed79cbdba6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2936 identity=27784 ipv4=10.0.0.2 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ed79cbdba6 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2936 identity=27784 ipv4=10.0.0.2 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=ed79cbdba6 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2936 identity=27784 ipv4=10.0.0.2 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.193 57ba194e-7f71-40b9-b721-bd08069177e3 default }" containerID=3c9f08e5bba8281cb2fc8304eece044a17adbeb1d9e707c39ee80f2502d06414 datapathConfiguration="&{false false false false false }" interface=lxc8d18f5bdcc1a k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3c9f08e5bb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=119 ipv4=10.0.0.193 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3c9f08e5bb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=119 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.193 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=prometheus;k8s:app.kubernetes.io/version=2.51.2;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus;k8s:io.kubernetes.pod.namespace=monitoring;k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus;k8s:operator.prometheus.io/shard=0;k8s:prometheus=kube-prometheus-stack-prometheus;k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3c9f08e5bb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=119 identity=37742 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.193 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3c9f08e5bb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=119 identity=37742 ipv4=10.0.0.193 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3c9f08e5bb datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=119 identity=37742 ipv4=10.0.0.193 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=3c9f08e5bb datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=119 identity=37742 ipv4=10.0.0.193 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.105 a6c939d5-99ec-4cab-9738-134243a2cd57 default }" containerID=a28ab3b02219827a5ca7d3386bad0aa560e239322beabb2d0882a1e973351d5c datapathConfiguration="&{false false false false false }" interface=lxcb941f77e0e3e k8sPodName=monitoring/loki-gateway-748b556d75-h8485 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a28ab3b022 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2115 ipv4=10.0.0.105 ipv6= k8sPodName=monitoring/loki-gateway-748b556d75-h8485 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a28ab3b022 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2115 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.105 ipv6= k8sPodName=monitoring/loki-gateway-748b556d75-h8485 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=gateway;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a28ab3b022 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2115 identity=1405 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.105 ipv6= k8sPodName=monitoring/loki-gateway-748b556d75-h8485 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a28ab3b022 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2115 identity=1405 ipv4=10.0.0.105 ipv6= k8sPodName=monitoring/loki-gateway-748b556d75-h8485 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.249 49caa4e7-480c-43c9-afa5-98cffe8f8aca default }" containerID=f5d14faae6f13a65f92657a3cb62b7c8b2353b6569c7201df370a342be29c951 datapathConfiguration="&{false false false false false }" interface=lxc87ad63e52434 k8sPodName=monitoring/loki-results-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f5d14faae6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1370 ipv4=10.0.0.249 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f5d14faae6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1370 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.249 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-results-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-results-cache;k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f5d14faae6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1370 identity=2147 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.249 ipv6= k8sPodName=monitoring/loki-results-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f5d14faae6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1370 identity=2147 ipv4=10.0.0.249 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a28ab3b022 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2115 identity=1405 ipv4=10.0.0.105 ipv6= k8sPodName=monitoring/loki-gateway-748b556d75-h8485 subsys=endpoint level=info msg="Successful endpoint creation" containerID=a28ab3b022 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2115 identity=1405 ipv4=10.0.0.105 ipv6= k8sPodName=monitoring/loki-gateway-748b556d75-h8485 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.1 6f6e5df1-d8c0-454b-bf83-5482289890ce default }" containerID=7ed2bd14a20bf6d659f8243c3fffaccd87d5d57aa8ed0773c7b23a5f01082750 datapathConfiguration="&{false false false false false }" interface=lxcca0a02241b60 k8sPodName=monitoring/loki-chunks-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7ed2bd14a2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=62 ipv4=10.0.0.1 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7ed2bd14a2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=62 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.1 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-chunks-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-chunks-cache;k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7ed2bd14a2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=62 identity=25561 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.1 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7ed2bd14a2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=62 identity=25561 ipv4=10.0.0.1 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f5d14faae6 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1370 identity=2147 ipv4=10.0.0.249 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f5d14faae6 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1370 identity=2147 ipv4=10.0.0.249 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.243 00100c3f-09f9-4c7a-9211-fb6c9b49062e default }" containerID=4ac1b2bea49d309c593ab04ce1b0a4f09457db37eacde75a917819bfcfe6e87e datapathConfiguration="&{false false false false false }" interface=lxc8ee12b8797bf k8sPodName=local-path-storage/helper-pod-create-pvc-39626ad9-f06d-4cfc-b17d-0a76e64e3623 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4ac1b2bea4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=249 ipv4=10.0.0.243 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-39626ad9-f06d-4cfc-b17d-0a76e64e3623 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4ac1b2bea4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=249 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.243 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-39626ad9-f06d-4cfc-b17d-0a76e64e3623 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4ac1b2bea4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=249 identity=18132 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.243 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-39626ad9-f06d-4cfc-b17d-0a76e64e3623 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4ac1b2bea4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=249 identity=18132 ipv4=10.0.0.243 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-39626ad9-f06d-4cfc-b17d-0a76e64e3623 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7ed2bd14a2 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=62 identity=25561 ipv4=10.0.0.1 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=7ed2bd14a2 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=62 identity=25561 ipv4=10.0.0.1 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=4ac1b2bea4 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=249 identity=18132 ipv4=10.0.0.243 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-39626ad9-f06d-4cfc-b17d-0a76e64e3623 subsys=endpoint level=info msg="Successful endpoint creation" containerID=4ac1b2bea4 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=249 identity=18132 ipv4=10.0.0.243 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-39626ad9-f06d-4cfc-b17d-0a76e64e3623 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.152 934655c2-1502-4be3-84d1-d86756b40e45 default }" containerID=8e44d35293342b7965b6988e7aa8b635f1f25dcd9dc23776737b6029f1113fe8 datapathConfiguration="&{false false false false false }" interface=lxc867a24f3370f k8sPodName=monitoring/vector-tvtt7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8e44d35293 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=742 ipv4=10.0.0.152 ipv6= k8sPodName=monitoring/vector-tvtt7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8e44d35293 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=742 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.152 ipv6= k8sPodName=monitoring/vector-tvtt7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=Agent;k8s:app.kubernetes.io/instance=vector;k8s:app.kubernetes.io/name=vector;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=vector;k8s:io.kubernetes.pod.namespace=monitoring;k8s:vector.dev/exclude=true;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8e44d35293 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=742 identity=4482 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.152 ipv6= k8sPodName=monitoring/vector-tvtt7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8e44d35293 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=742 identity=4482 ipv4=10.0.0.152 ipv6= k8sPodName=monitoring/vector-tvtt7 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8e44d35293 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=742 identity=4482 ipv4=10.0.0.152 ipv6= k8sPodName=monitoring/vector-tvtt7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=8e44d35293 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=742 identity=4482 ipv4=10.0.0.152 ipv6= k8sPodName=monitoring/vector-tvtt7 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=4ac1b2bea4 endpointID=249 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-39626ad9-f06d-4cfc-b17d-0a76e64e3623 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=4ac1b2bea4 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=249 identity=18132 ipv4=10.0.0.243 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-39626ad9-f06d-4cfc-b17d-0a76e64e3623 subsys=endpoint level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.3 1d486db8-2f15-4fcd-99ad-4ae19d2a483d default }" containerID=3d7d1b8a688d8d96d326e48e689fb16e2d2db54663b524099edf5799e3484c9a datapathConfiguration="&{false false false false false }" interface=lxc7965b54ef673 k8sPodName=monitoring/loki-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3d7d1b8a68 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=501 ipv4=10.0.0.3 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3d7d1b8a68 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=501 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.3 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=single-binary;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:app.kubernetes.io/part-of=memberlist;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=loki-0;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=3d7d1b8a68 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=501 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.3 ipv6= k8sPodName=monitoring/loki-0 line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=3d7d1b8a68 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=501 identity=18899 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.3 ipv6= k8sPodName=monitoring/loki-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3d7d1b8a68 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=501 identity=18899 ipv4=10.0.0.3 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3d7d1b8a68 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=501 identity=18899 ipv4=10.0.0.3 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=3d7d1b8a68 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=501 identity=18899 ipv4=10.0.0.3 ipv6= k8sPodName=monitoring/loki-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.216 4f303a75-7ce7-4131-9f77-3f1182cbb412 default }" containerID=c6f0a2b9751c67f23249b838ac05fbfa08af605bf5ef98683b8b42929236af75 datapathConfiguration="&{false false false false false }" interface=lxc2a2616b159f4 k8sPodName=monitoring/prometheus-pushgateway-7c6f84b96c-6cvvd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c6f0a2b975 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=131 ipv4=10.0.0.216 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7c6f84b96c-6cvvd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c6f0a2b975 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=131 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.12.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.216 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7c6f84b96c-6cvvd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=c6f0a2b975 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=131 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.216 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7c6f84b96c-6cvvd line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=prometheus-pushgateway;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=prometheus-pushgateway;k8s:app.kubernetes.io/version=v1.8.0;k8s:helm.sh/chart=prometheus-pushgateway-2.12.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c6f0a2b975 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=131 identity=18431 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.12.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.216 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7c6f84b96c-6cvvd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c6f0a2b975 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=131 identity=18431 ipv4=10.0.0.216 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7c6f84b96c-6cvvd subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c6f0a2b975 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=131 identity=18431 ipv4=10.0.0.216 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7c6f84b96c-6cvvd subsys=endpoint level=info msg="Successful endpoint creation" containerID=c6f0a2b975 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=131 identity=18431 ipv4=10.0.0.216 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7c6f84b96c-6cvvd subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.74 58e7eb00-ce3d-405c-9b62-947d1de6b0b9 default }" containerID=0a9099e7b209bd0db9d7ca2ca1c19635e223db2b1203c504074b3fa8d1da7ab5 datapathConfiguration="&{false false false false false }" interface=lxc08d07ce138eb k8sPodName=openstack/memcached-memcached-6479589586-mwkn4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0a9099e7b2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=888 ipv4=10.0.0.74 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-mwkn4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0a9099e7b2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=888 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.74 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-mwkn4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=0a9099e7b2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=888 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.74 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-mwkn4 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=memcached;k8s:component=server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=memcached;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0a9099e7b2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=888 identity=29137 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.74 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-mwkn4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0a9099e7b2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=888 identity=29137 ipv4=10.0.0.74 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-mwkn4 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0a9099e7b2 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=888 identity=29137 ipv4=10.0.0.74 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-mwkn4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=0a9099e7b2 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=888 identity=29137 ipv4=10.0.0.74 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-mwkn4 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.243 b41c6bce-f7b4-4f3f-aeae-c9635c8c08f1 default }" containerID=beb22df1ff11b5de0913658f8255360f4eb73a71cf763dfca4d1d98c90e004cc datapathConfiguration="&{false false false false false }" interface=lxc168b6a4d17d0 k8sPodName=local-path-storage/helper-pod-create-pvc-81038b15-ac0d-4810-841e-dd045fa4f7d1 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=beb22df1ff datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2762 ipv4=10.0.0.243 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-81038b15-ac0d-4810-841e-dd045fa4f7d1 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=beb22df1ff datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2762 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.243 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-81038b15-ac0d-4810-841e-dd045fa4f7d1 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=beb22df1ff datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2762 identity=18132 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.243 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-81038b15-ac0d-4810-841e-dd045fa4f7d1 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=beb22df1ff datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2762 identity=18132 ipv4=10.0.0.243 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-81038b15-ac0d-4810-841e-dd045fa4f7d1 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=beb22df1ff datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2762 identity=18132 ipv4=10.0.0.243 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-81038b15-ac0d-4810-841e-dd045fa4f7d1 subsys=endpoint level=info msg="Successful endpoint creation" containerID=beb22df1ff datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2762 identity=18132 ipv4=10.0.0.243 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-81038b15-ac0d-4810-841e-dd045fa4f7d1 subsys=daemon level=info msg="Delete endpoint request" containerID=beb22df1ff endpointID=2762 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-81038b15-ac0d-4810-841e-dd045fa4f7d1 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=beb22df1ff datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2762 identity=18132 ipv4=10.0.0.243 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-81038b15-ac0d-4810-841e-dd045fa4f7d1 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.67 750e9634-45f5-4dc8-a7a6-a5725e281689 default }" containerID=515bb274d4cd80ef2d1d9f49473c63c5e062cb6847fbe33101adf660ab970fd3 datapathConfiguration="&{false false false false false }" interface=lxcc39d7a01d889 k8sPodName=openstack/rabbitmq-keystone-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=515bb274d4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=169 ipv4=10.0.0.67 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=515bb274d4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=169 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.67 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-keystone;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=515bb274d4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=169 identity=37052 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.67 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=515bb274d4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=169 identity=37052 ipv4=10.0.0.67 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=515bb274d4 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=169 identity=37052 ipv4=10.0.0.67 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=515bb274d4 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=169 identity=37052 ipv4=10.0.0.67 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.115 a216d16c-af7d-4edc-855d-53ea8f10de28 default }" containerID=bc9b9269038d5cf85659cbe8e1636256a9765f6dc3595a217ec50a5106a219e5 datapathConfiguration="&{false false false false false }" interface=lxcf8afa15ce6e0 k8sPodName=openstack/keystone-api-7d7b85c55f-vqdqz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bc9b926903 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1510 ipv4=10.0.0.115 ipv6= k8sPodName=openstack/keystone-api-7d7b85c55f-vqdqz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bc9b926903 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1510 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.115 ipv6= k8sPodName=openstack/keystone-api-7d7b85c55f-vqdqz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=keystone;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=bc9b926903 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1510 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.115 ipv6= k8sPodName=openstack/keystone-api-7d7b85c55f-vqdqz line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=bc9b926903 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1510 identity=31008 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.115 ipv6= k8sPodName=openstack/keystone-api-7d7b85c55f-vqdqz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=bc9b926903 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1510 identity=31008 ipv4=10.0.0.115 ipv6= k8sPodName=openstack/keystone-api-7d7b85c55f-vqdqz subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.22 309177f7-37cb-4a9f-8369-9676f0a3af5e default }" containerID=61e0c3853a68e311688d321f8af0de7fc254ecb232df0523bb2ec05be667055f datapathConfiguration="&{false false false false false }" interface=lxcd41f84fbf404 k8sPodName=openstack/keystone-credential-setup-2hdqt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=61e0c3853a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1536 ipv4=10.0.0.22 ipv6= k8sPodName=openstack/keystone-credential-setup-2hdqt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=61e0c3853a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1536 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=2f34aa89-f718-4c89-81ef-4dda5f330644,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=2f34aa89-f718-4c89-81ef-4dda5f330644,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.22 ipv6= k8sPodName=openstack/keystone-credential-setup-2hdqt subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=2f34aa89-f718-4c89-81ef-4dda5f330644;k8s:batch.kubernetes.io/job-name=keystone-credential-setup;k8s:component=credential-setup;k8s:controller-uid=2f34aa89-f718-4c89-81ef-4dda5f330644;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-credential-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=61e0c3853a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1536 identity=2995 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=2f34aa89-f718-4c89-81ef-4dda5f330644,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=2f34aa89-f718-4c89-81ef-4dda5f330644,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.22 ipv6= k8sPodName=openstack/keystone-credential-setup-2hdqt oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=61e0c3853a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1536 identity=2995 ipv4=10.0.0.22 ipv6= k8sPodName=openstack/keystone-credential-setup-2hdqt subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=bc9b926903 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1510 identity=31008 ipv4=10.0.0.115 ipv6= k8sPodName=openstack/keystone-api-7d7b85c55f-vqdqz subsys=endpoint level=info msg="Successful endpoint creation" containerID=bc9b926903 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1510 identity=31008 ipv4=10.0.0.115 ipv6= k8sPodName=openstack/keystone-api-7d7b85c55f-vqdqz subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=61e0c3853a datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1536 identity=2995 ipv4=10.0.0.22 ipv6= k8sPodName=openstack/keystone-credential-setup-2hdqt subsys=endpoint level=info msg="Successful endpoint creation" containerID=61e0c3853a datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1536 identity=2995 ipv4=10.0.0.22 ipv6= k8sPodName=openstack/keystone-credential-setup-2hdqt subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=61e0c3853a endpointID=1536 k8sNamespace=openstack k8sPodName=keystone-credential-setup-2hdqt subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=2f34aa89-f718-4c89-81ef-4dda5f330644 k8s:batch.kubernetes.io/job-name=keystone-credential-setup k8s:component=credential-setup k8s:controller-uid=2f34aa89-f718-4c89-81ef-4dda5f330644 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-credential-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=61e0c3853a datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1536 identity=2995 ipv4=10.0.0.22 ipv6= k8sPodName=openstack/keystone-credential-setup-2hdqt subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.53 818cae47-956f-4711-a37e-203cc1f201fa default }" containerID=6e166ad3ae5532f1df29f7b34d18dc786d4e147c43e1b80d4e4215a39f4adb5a datapathConfiguration="&{false false false false false }" interface=lxc3b401047d074 k8sPodName=openstack/keystone-db-init-g2tw6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6e166ad3ae datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1602 ipv4=10.0.0.53 ipv6= k8sPodName=openstack/keystone-db-init-g2tw6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6e166ad3ae datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1602 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=640b0841-23e9-454b-92ab-c082e1ffd228,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=640b0841-23e9-454b-92ab-c082e1ffd228,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.53 ipv6= k8sPodName=openstack/keystone-db-init-g2tw6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=640b0841-23e9-454b-92ab-c082e1ffd228;k8s:batch.kubernetes.io/job-name=keystone-db-init;k8s:component=db-init;k8s:controller-uid=640b0841-23e9-454b-92ab-c082e1ffd228;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=6e166ad3ae datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1602 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.53 ipv6= k8sPodName=openstack/keystone-db-init-g2tw6 line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=6e166ad3ae datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1602 identity=51156 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=640b0841-23e9-454b-92ab-c082e1ffd228,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=640b0841-23e9-454b-92ab-c082e1ffd228,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.53 ipv6= k8sPodName=openstack/keystone-db-init-g2tw6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6e166ad3ae datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1602 identity=51156 ipv4=10.0.0.53 ipv6= k8sPodName=openstack/keystone-db-init-g2tw6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6e166ad3ae datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1602 identity=51156 ipv4=10.0.0.53 ipv6= k8sPodName=openstack/keystone-db-init-g2tw6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=6e166ad3ae datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1602 identity=51156 ipv4=10.0.0.53 ipv6= k8sPodName=openstack/keystone-db-init-g2tw6 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=6e166ad3ae endpointID=1602 k8sNamespace=openstack k8sPodName=keystone-db-init-g2tw6 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=640b0841-23e9-454b-92ab-c082e1ffd228 k8s:batch.kubernetes.io/job-name=keystone-db-init k8s:component=db-init k8s:controller-uid=640b0841-23e9-454b-92ab-c082e1ffd228 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=6e166ad3ae datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1602 identity=51156 ipv4=10.0.0.53 ipv6= k8sPodName=openstack/keystone-db-init-g2tw6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.72 f477cefd-0b9f-4dda-ab33-09c41c2b6fbf default }" containerID=fc9bcf823e09808068951809352853d2e6bd16e2eee48dd7bd861ea6a8198b14 datapathConfiguration="&{false false false false false }" interface=lxc8a5a7da798b9 k8sPodName=openstack/keystone-fernet-setup-g24kh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fc9bcf823e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1020 ipv4=10.0.0.72 ipv6= k8sPodName=openstack/keystone-fernet-setup-g24kh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fc9bcf823e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1020 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=b19d1880-2fc4-4e06-9570-3a5ee899c51c,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=b19d1880-2fc4-4e06-9570-3a5ee899c51c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.72 ipv6= k8sPodName=openstack/keystone-fernet-setup-g24kh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=b19d1880-2fc4-4e06-9570-3a5ee899c51c;k8s:batch.kubernetes.io/job-name=keystone-fernet-setup;k8s:component=fernet-setup;k8s:controller-uid=b19d1880-2fc4-4e06-9570-3a5ee899c51c;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-fernet-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fc9bcf823e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1020 identity=18936 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=b19d1880-2fc4-4e06-9570-3a5ee899c51c,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=b19d1880-2fc4-4e06-9570-3a5ee899c51c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.72 ipv6= k8sPodName=openstack/keystone-fernet-setup-g24kh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fc9bcf823e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1020 identity=18936 ipv4=10.0.0.72 ipv6= k8sPodName=openstack/keystone-fernet-setup-g24kh subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=fc9bcf823e datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1020 identity=18936 ipv4=10.0.0.72 ipv6= k8sPodName=openstack/keystone-fernet-setup-g24kh subsys=endpoint level=info msg="Successful endpoint creation" containerID=fc9bcf823e datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1020 identity=18936 ipv4=10.0.0.72 ipv6= k8sPodName=openstack/keystone-fernet-setup-g24kh subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=fc9bcf823e endpointID=1020 k8sNamespace=openstack k8sPodName=keystone-fernet-setup-g24kh subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=b19d1880-2fc4-4e06-9570-3a5ee899c51c k8s:batch.kubernetes.io/job-name=keystone-fernet-setup k8s:component=fernet-setup k8s:controller-uid=b19d1880-2fc4-4e06-9570-3a5ee899c51c k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-fernet-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=fc9bcf823e datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1020 identity=18936 ipv4=10.0.0.72 ipv6= k8sPodName=openstack/keystone-fernet-setup-g24kh subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.49 53a5bf7c-36f8-4345-903c-451d0be59018 default }" containerID=8673c7d67c43e75dce40f14afb40a4443280dcb63e71e52f36fcd41b09fade79 datapathConfiguration="&{false false false false false }" interface=lxcc11884849d4e k8sPodName=openstack/keystone-db-sync-rpgpc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8673c7d67c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=148 ipv4=10.0.0.49 ipv6= k8sPodName=openstack/keystone-db-sync-rpgpc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8673c7d67c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=148 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=1fc0e54b-75b8-4d88-ab60-ec90dd4f7f1c,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=1fc0e54b-75b8-4d88-ab60-ec90dd4f7f1c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.49 ipv6= k8sPodName=openstack/keystone-db-sync-rpgpc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=8673c7d67c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=148 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.49 ipv6= k8sPodName=openstack/keystone-db-sync-rpgpc line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=1fc0e54b-75b8-4d88-ab60-ec90dd4f7f1c;k8s:batch.kubernetes.io/job-name=keystone-db-sync;k8s:component=db-sync;k8s:controller-uid=1fc0e54b-75b8-4d88-ab60-ec90dd4f7f1c;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-sync;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8673c7d67c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=148 identity=8472 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=1fc0e54b-75b8-4d88-ab60-ec90dd4f7f1c,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=1fc0e54b-75b8-4d88-ab60-ec90dd4f7f1c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.49 ipv6= k8sPodName=openstack/keystone-db-sync-rpgpc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8673c7d67c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=148 identity=8472 ipv4=10.0.0.49 ipv6= k8sPodName=openstack/keystone-db-sync-rpgpc subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8673c7d67c datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=148 identity=8472 ipv4=10.0.0.49 ipv6= k8sPodName=openstack/keystone-db-sync-rpgpc subsys=endpoint level=info msg="Successful endpoint creation" containerID=8673c7d67c datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=148 identity=8472 ipv4=10.0.0.49 ipv6= k8sPodName=openstack/keystone-db-sync-rpgpc subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=8673c7d67c endpointID=148 k8sNamespace=openstack k8sPodName=keystone-db-sync-rpgpc subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=1fc0e54b-75b8-4d88-ab60-ec90dd4f7f1c k8s:batch.kubernetes.io/job-name=keystone-db-sync k8s:component=db-sync k8s:controller-uid=1fc0e54b-75b8-4d88-ab60-ec90dd4f7f1c k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-sync k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=8673c7d67c datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=148 identity=8472 ipv4=10.0.0.49 ipv6= k8sPodName=openstack/keystone-db-sync-rpgpc subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.157 6999cc4c-e122-4bdd-b895-b1f82ef2cbbd default }" containerID=119e28816ac529cd5d22713c0325155595fbf760beadb167352df02a4d746c64 datapathConfiguration="&{false false false false false }" interface=lxc5ab9b948fd77 k8sPodName=openstack/keystone-rabbit-init-smh5t labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=119e28816a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=378 ipv4=10.0.0.157 ipv6= k8sPodName=openstack/keystone-rabbit-init-smh5t subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=119e28816a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=378 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=1057546d-07b6-433d-9811-dae5caffdd2d,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=1057546d-07b6-433d-9811-dae5caffdd2d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.157 ipv6= k8sPodName=openstack/keystone-rabbit-init-smh5t subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=1057546d-07b6-433d-9811-dae5caffdd2d;k8s:batch.kubernetes.io/job-name=keystone-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=1057546d-07b6-433d-9811-dae5caffdd2d;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-rabbit-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=119e28816a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=378 identity=46001 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=1057546d-07b6-433d-9811-dae5caffdd2d,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=1057546d-07b6-433d-9811-dae5caffdd2d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.157 ipv6= k8sPodName=openstack/keystone-rabbit-init-smh5t oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=119e28816a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=378 identity=46001 ipv4=10.0.0.157 ipv6= k8sPodName=openstack/keystone-rabbit-init-smh5t subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=119e28816a datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=378 identity=46001 ipv4=10.0.0.157 ipv6= k8sPodName=openstack/keystone-rabbit-init-smh5t subsys=endpoint level=info msg="Successful endpoint creation" containerID=119e28816a datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=378 identity=46001 ipv4=10.0.0.157 ipv6= k8sPodName=openstack/keystone-rabbit-init-smh5t subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=119e28816a endpointID=378 k8sNamespace=openstack k8sPodName=keystone-rabbit-init-smh5t subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=1057546d-07b6-433d-9811-dae5caffdd2d k8s:batch.kubernetes.io/job-name=keystone-rabbit-init k8s:component=rabbit-init k8s:controller-uid=1057546d-07b6-433d-9811-dae5caffdd2d k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-rabbit-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=119e28816a datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=378 identity=46001 ipv4=10.0.0.157 ipv6= k8sPodName=openstack/keystone-rabbit-init-smh5t subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.44 1b0caf61-d73a-46fa-8594-8ed81aa9978c default }" containerID=39729c9e4cc78feb27a226843105ca733731106a0998c2944ec027d17ea60926 datapathConfiguration="&{false false false false false }" interface=lxca649e114582f k8sPodName=openstack/keystone-domain-manage-mr5wh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=39729c9e4c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1774 ipv4=10.0.0.44 ipv6= k8sPodName=openstack/keystone-domain-manage-mr5wh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=39729c9e4c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1774 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=d097e16d-4491-4a1d-989c-86746bc12b35,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=d097e16d-4491-4a1d-989c-86746bc12b35,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.44 ipv6= k8sPodName=openstack/keystone-domain-manage-mr5wh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=d097e16d-4491-4a1d-989c-86746bc12b35;k8s:batch.kubernetes.io/job-name=keystone-domain-manage;k8s:component=domain-manage;k8s:controller-uid=d097e16d-4491-4a1d-989c-86746bc12b35;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-domain-manage;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=39729c9e4c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1774 identity=3375 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=d097e16d-4491-4a1d-989c-86746bc12b35,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=d097e16d-4491-4a1d-989c-86746bc12b35,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.44 ipv6= k8sPodName=openstack/keystone-domain-manage-mr5wh oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=39729c9e4c datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1774 identity=3375 ipv4=10.0.0.44 ipv6= k8sPodName=openstack/keystone-domain-manage-mr5wh subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=39729c9e4c datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1774 identity=3375 ipv4=10.0.0.44 ipv6= k8sPodName=openstack/keystone-domain-manage-mr5wh subsys=endpoint level=info msg="Successful endpoint creation" containerID=39729c9e4c datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1774 identity=3375 ipv4=10.0.0.44 ipv6= k8sPodName=openstack/keystone-domain-manage-mr5wh subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=39729c9e4c endpointID=1774 k8sNamespace=openstack k8sPodName=keystone-domain-manage-mr5wh subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=d097e16d-4491-4a1d-989c-86746bc12b35 k8s:batch.kubernetes.io/job-name=keystone-domain-manage k8s:component=domain-manage k8s:controller-uid=d097e16d-4491-4a1d-989c-86746bc12b35 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-domain-manage k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=39729c9e4c datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1774 identity=3375 ipv4=10.0.0.44 ipv6= k8sPodName=openstack/keystone-domain-manage-mr5wh subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.192 e51ef269-4932-4a72-a06d-44f441a2043a default }" containerID=a1cf3773a59e65ca10b7f527e03d0f880fa2123186c93eb49aa65b4f25f4dae9 datapathConfiguration="&{false false false false false }" interface=lxc51226c16eabc k8sPodName=openstack/keystone-bootstrap-25hgt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a1cf3773a5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=967 ipv4=10.0.0.192 ipv6= k8sPodName=openstack/keystone-bootstrap-25hgt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a1cf3773a5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=967 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=36dec9f5-ce8f-4843-8b81-fb2bb51002af,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=36dec9f5-ce8f-4843-8b81-fb2bb51002af,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.192 ipv6= k8sPodName=openstack/keystone-bootstrap-25hgt subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=36dec9f5-ce8f-4843-8b81-fb2bb51002af;k8s:batch.kubernetes.io/job-name=keystone-bootstrap;k8s:component=bootstrap;k8s:controller-uid=36dec9f5-ce8f-4843-8b81-fb2bb51002af;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-bootstrap;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a1cf3773a5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=967 identity=32739 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=36dec9f5-ce8f-4843-8b81-fb2bb51002af,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=36dec9f5-ce8f-4843-8b81-fb2bb51002af,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.192 ipv6= k8sPodName=openstack/keystone-bootstrap-25hgt oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a1cf3773a5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=967 identity=32739 ipv4=10.0.0.192 ipv6= k8sPodName=openstack/keystone-bootstrap-25hgt subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=a1cf3773a5 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=967 identity=32739 ipv4=10.0.0.192 ipv6= k8sPodName=openstack/keystone-bootstrap-25hgt subsys=endpoint level=info msg="Successful endpoint creation" containerID=a1cf3773a5 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=967 identity=32739 ipv4=10.0.0.192 ipv6= k8sPodName=openstack/keystone-bootstrap-25hgt subsys=daemon level=info msg="Delete endpoint request" containerID=a1cf3773a5 endpointID=967 k8sNamespace=openstack k8sPodName=keystone-bootstrap-25hgt subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=36dec9f5-ce8f-4843-8b81-fb2bb51002af k8s:batch.kubernetes.io/job-name=keystone-bootstrap k8s:component=bootstrap k8s:controller-uid=36dec9f5-ce8f-4843-8b81-fb2bb51002af k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-bootstrap k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=a1cf3773a5 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=967 identity=32739 ipv4=10.0.0.192 ipv6= k8sPodName=openstack/keystone-bootstrap-25hgt subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.39 28e7bed4-9710-4d24-a679-0a93b77e2982 default }" containerID=d244b5e25dd6fa47dcc5a2cf8abf273d23328264460e0db8cf2a430b09aeb644 datapathConfiguration="&{false false false false false }" interface=lxca3df9909f3d9 k8sPodName=local-path-storage/helper-pod-create-pvc-dfcd564c-40a6-4b50-9c61-0032cec1fe91 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d244b5e25d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=964 ipv4=10.0.0.39 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-dfcd564c-40a6-4b50-9c61-0032cec1fe91 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d244b5e25d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=964 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.39 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-dfcd564c-40a6-4b50-9c61-0032cec1fe91 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d244b5e25d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=964 identity=18132 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.39 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-dfcd564c-40a6-4b50-9c61-0032cec1fe91 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d244b5e25d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=964 identity=18132 ipv4=10.0.0.39 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-dfcd564c-40a6-4b50-9c61-0032cec1fe91 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d244b5e25d datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=964 identity=18132 ipv4=10.0.0.39 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-dfcd564c-40a6-4b50-9c61-0032cec1fe91 subsys=endpoint level=info msg="Successful endpoint creation" containerID=d244b5e25d datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=964 identity=18132 ipv4=10.0.0.39 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-dfcd564c-40a6-4b50-9c61-0032cec1fe91 subsys=daemon level=info msg="Delete endpoint request" containerID=d244b5e25d endpointID=964 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-dfcd564c-40a6-4b50-9c61-0032cec1fe91 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=d244b5e25d datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=964 identity=18132 ipv4=10.0.0.39 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-dfcd564c-40a6-4b50-9c61-0032cec1fe91 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.35 d0bbfa20-caf7-4839-829c-81426ad52477 default }" containerID=9a59dc2e07b5699ba70b64b324f79530e17b10faa67e952bb93d5af3f4404225 datapathConfiguration="&{false false false false false }" interface=lxce0cff64dd1b0 k8sPodName=openstack/rabbitmq-barbican-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9a59dc2e07 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1904 ipv4=10.0.0.35 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9a59dc2e07 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1904 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.35 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-barbican;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9a59dc2e07 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1904 identity=55503 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.35 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9a59dc2e07 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1904 identity=55503 ipv4=10.0.0.35 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9a59dc2e07 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1904 identity=55503 ipv4=10.0.0.35 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=9a59dc2e07 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1904 identity=55503 ipv4=10.0.0.35 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.196 de1aefaa-d7a1-4d19-9499-b04fdefcf1cc default }" containerID=0a5419bffa8d665950387abe4c6e0f33b829bfbcea157df3fdf5196cb006d611 datapathConfiguration="&{false false false false false }" interface=lxcc1b9492d7ef0 k8sPodName=openstack/barbican-api-6f848cf695-r5fmx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0a5419bffa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=378 ipv4=10.0.0.196 ipv6= k8sPodName=openstack/barbican-api-6f848cf695-r5fmx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0a5419bffa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=378 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.196 ipv6= k8sPodName=openstack/barbican-api-6f848cf695-r5fmx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0a5419bffa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=378 identity=10534 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.196 ipv6= k8sPodName=openstack/barbican-api-6f848cf695-r5fmx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0a5419bffa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=378 identity=10534 ipv4=10.0.0.196 ipv6= k8sPodName=openstack/barbican-api-6f848cf695-r5fmx subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.75 40281d35-beb6-4705-ba97-2998bb3e7543 default }" containerID=2b717c2eedc21e9d1de29c2dc96872031028ac3891cc7b6802653439aa6efb3f datapathConfiguration="&{false false false false false }" interface=lxca9f586de04b0 k8sPodName=openstack/barbican-db-init-dj955 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2b717c2eed datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1506 ipv4=10.0.0.75 ipv6= k8sPodName=openstack/barbican-db-init-dj955 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2b717c2eed datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1506 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=dbc1b475-ab76-4350-8865-e77c95f7f1b8,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=dbc1b475-ab76-4350-8865-e77c95f7f1b8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.75 ipv6= k8sPodName=openstack/barbican-db-init-dj955 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=dbc1b475-ab76-4350-8865-e77c95f7f1b8;k8s:batch.kubernetes.io/job-name=barbican-db-init;k8s:component=db-init;k8s:controller-uid=dbc1b475-ab76-4350-8865-e77c95f7f1b8;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2b717c2eed datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1506 identity=8185 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=dbc1b475-ab76-4350-8865-e77c95f7f1b8,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=dbc1b475-ab76-4350-8865-e77c95f7f1b8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.75 ipv6= k8sPodName=openstack/barbican-db-init-dj955 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2b717c2eed datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1506 identity=8185 ipv4=10.0.0.75 ipv6= k8sPodName=openstack/barbican-db-init-dj955 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0a5419bffa datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=378 identity=10534 ipv4=10.0.0.196 ipv6= k8sPodName=openstack/barbican-api-6f848cf695-r5fmx subsys=endpoint level=info msg="Successful endpoint creation" containerID=0a5419bffa datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=378 identity=10534 ipv4=10.0.0.196 ipv6= k8sPodName=openstack/barbican-api-6f848cf695-r5fmx subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=2b717c2eed datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1506 identity=8185 ipv4=10.0.0.75 ipv6= k8sPodName=openstack/barbican-db-init-dj955 subsys=endpoint level=info msg="Successful endpoint creation" containerID=2b717c2eed datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1506 identity=8185 ipv4=10.0.0.75 ipv6= k8sPodName=openstack/barbican-db-init-dj955 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=2b717c2eed endpointID=1506 k8sNamespace=openstack k8sPodName=barbican-db-init-dj955 subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=dbc1b475-ab76-4350-8865-e77c95f7f1b8 k8s:batch.kubernetes.io/job-name=barbican-db-init k8s:component=db-init k8s:controller-uid=dbc1b475-ab76-4350-8865-e77c95f7f1b8 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=2b717c2eed datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1506 identity=8185 ipv4=10.0.0.75 ipv6= k8sPodName=openstack/barbican-db-init-dj955 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.183 9fe5cf02-d6c2-4a62-a04a-1a7db4241df1 default }" containerID=e5e635af82c9601fb0214a32354d6e506c7484e2d03e0f0b572729cd340f2f34 datapathConfiguration="&{false false false false false }" interface=lxc91a44a913252 k8sPodName=openstack/barbican-db-sync-f42st labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e5e635af82 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2380 ipv4=10.0.0.183 ipv6= k8sPodName=openstack/barbican-db-sync-f42st subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e5e635af82 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2380 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=575b94fa-f445-435c-9f4a-b4534405c3e4,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=575b94fa-f445-435c-9f4a-b4534405c3e4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.183 ipv6= k8sPodName=openstack/barbican-db-sync-f42st subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=575b94fa-f445-435c-9f4a-b4534405c3e4;k8s:batch.kubernetes.io/job-name=barbican-db-sync;k8s:component=db-sync;k8s:controller-uid=575b94fa-f445-435c-9f4a-b4534405c3e4;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-sync;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e5e635af82 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2380 identity=24570 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=575b94fa-f445-435c-9f4a-b4534405c3e4,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=575b94fa-f445-435c-9f4a-b4534405c3e4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.183 ipv6= k8sPodName=openstack/barbican-db-sync-f42st oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e5e635af82 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2380 identity=24570 ipv4=10.0.0.183 ipv6= k8sPodName=openstack/barbican-db-sync-f42st subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=e5e635af82 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2380 identity=24570 ipv4=10.0.0.183 ipv6= k8sPodName=openstack/barbican-db-sync-f42st subsys=endpoint level=info msg="Successful endpoint creation" containerID=e5e635af82 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2380 identity=24570 ipv4=10.0.0.183 ipv6= k8sPodName=openstack/barbican-db-sync-f42st subsys=daemon level=info msg="Delete endpoint request" containerID=e5e635af82 endpointID=2380 k8sNamespace=openstack k8sPodName=barbican-db-sync-f42st subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=575b94fa-f445-435c-9f4a-b4534405c3e4 k8s:batch.kubernetes.io/job-name=barbican-db-sync k8s:component=db-sync k8s:controller-uid=575b94fa-f445-435c-9f4a-b4534405c3e4 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-sync k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=e5e635af82 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2380 identity=24570 ipv4=10.0.0.183 ipv6= k8sPodName=openstack/barbican-db-sync-f42st subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.159 8853e0cb-1ed6-4fb0-b6c3-bfe2c3c1cff0 default }" containerID=207fc3dbb2a21f957163a1b89d6448a779e957f39bb841a55f1f27c3902d69eb datapathConfiguration="&{false false false false false }" interface=lxc0759265c2af4 k8sPodName=openstack/barbican-rabbit-init-xgb55 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=207fc3dbb2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2682 ipv4=10.0.0.159 ipv6= k8sPodName=openstack/barbican-rabbit-init-xgb55 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=207fc3dbb2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2682 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=826ddaa8-8e92-4c16-9203-9abbabcc04f7,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=826ddaa8-8e92-4c16-9203-9abbabcc04f7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.159 ipv6= k8sPodName=openstack/barbican-rabbit-init-xgb55 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=826ddaa8-8e92-4c16-9203-9abbabcc04f7;k8s:batch.kubernetes.io/job-name=barbican-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=826ddaa8-8e92-4c16-9203-9abbabcc04f7;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-rabbit-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=207fc3dbb2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2682 identity=27046 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=826ddaa8-8e92-4c16-9203-9abbabcc04f7,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=826ddaa8-8e92-4c16-9203-9abbabcc04f7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.159 ipv6= k8sPodName=openstack/barbican-rabbit-init-xgb55 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=207fc3dbb2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2682 identity=27046 ipv4=10.0.0.159 ipv6= k8sPodName=openstack/barbican-rabbit-init-xgb55 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=207fc3dbb2 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2682 identity=27046 ipv4=10.0.0.159 ipv6= k8sPodName=openstack/barbican-rabbit-init-xgb55 subsys=endpoint level=info msg="Successful endpoint creation" containerID=207fc3dbb2 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2682 identity=27046 ipv4=10.0.0.159 ipv6= k8sPodName=openstack/barbican-rabbit-init-xgb55 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=207fc3dbb2 endpointID=2682 k8sNamespace=openstack k8sPodName=barbican-rabbit-init-xgb55 subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=826ddaa8-8e92-4c16-9203-9abbabcc04f7 k8s:batch.kubernetes.io/job-name=barbican-rabbit-init k8s:component=rabbit-init k8s:controller-uid=826ddaa8-8e92-4c16-9203-9abbabcc04f7 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-rabbit-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=207fc3dbb2 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2682 identity=27046 ipv4=10.0.0.159 ipv6= k8sPodName=openstack/barbican-rabbit-init-xgb55 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.117 265a7247-131c-4186-ae5d-7a9d014bd328 default }" containerID=ba18e2d476993bc2a85d25123291139264e6e5761bfa02e76173271026fdae0e datapathConfiguration="&{false false false false false }" interface=lxc8bf238e48206 k8sPodName=openstack/barbican-ks-service-5g5q9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ba18e2d476 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3469 ipv4=10.0.0.117 ipv6= k8sPodName=openstack/barbican-ks-service-5g5q9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ba18e2d476 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3469 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=c98ef949-421f-40d4-acc3-16976f643a23,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=c98ef949-421f-40d4-acc3-16976f643a23,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.117 ipv6= k8sPodName=openstack/barbican-ks-service-5g5q9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=ba18e2d476 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3469 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.117 ipv6= k8sPodName=openstack/barbican-ks-service-5g5q9 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=c98ef949-421f-40d4-acc3-16976f643a23;k8s:batch.kubernetes.io/job-name=barbican-ks-service;k8s:component=ks-service;k8s:controller-uid=c98ef949-421f-40d4-acc3-16976f643a23;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-service;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ba18e2d476 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3469 identity=35660 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=c98ef949-421f-40d4-acc3-16976f643a23,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=c98ef949-421f-40d4-acc3-16976f643a23,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.117 ipv6= k8sPodName=openstack/barbican-ks-service-5g5q9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ba18e2d476 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3469 identity=35660 ipv4=10.0.0.117 ipv6= k8sPodName=openstack/barbican-ks-service-5g5q9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ba18e2d476 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3469 identity=35660 ipv4=10.0.0.117 ipv6= k8sPodName=openstack/barbican-ks-service-5g5q9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=ba18e2d476 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3469 identity=35660 ipv4=10.0.0.117 ipv6= k8sPodName=openstack/barbican-ks-service-5g5q9 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=ba18e2d476 endpointID=3469 k8sNamespace=openstack k8sPodName=barbican-ks-service-5g5q9 subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=c98ef949-421f-40d4-acc3-16976f643a23 k8s:batch.kubernetes.io/job-name=barbican-ks-service k8s:component=ks-service k8s:controller-uid=c98ef949-421f-40d4-acc3-16976f643a23 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-service k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=ba18e2d476 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3469 identity=35660 ipv4=10.0.0.117 ipv6= k8sPodName=openstack/barbican-ks-service-5g5q9 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.112 1026dfff-e897-4b90-9629-649b3504e7d0 default }" containerID=2190bcfe3024015283bec38c80ba46ccc138af477ad1d3ad13703261741fcc9f datapathConfiguration="&{false false false false false }" interface=lxce3470c82cd27 k8sPodName=openstack/barbican-ks-endpoints-phrzp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2190bcfe30 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1110 ipv4=10.0.0.112 ipv6= k8sPodName=openstack/barbican-ks-endpoints-phrzp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2190bcfe30 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1110 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=94af604b-4232-4843-a207-4c89100201ca,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=94af604b-4232-4843-a207-4c89100201ca,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.112 ipv6= k8sPodName=openstack/barbican-ks-endpoints-phrzp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=94af604b-4232-4843-a207-4c89100201ca;k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=94af604b-4232-4843-a207-4c89100201ca;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-endpoints;k8s:release_group=barbican;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=2190bcfe30 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1110 identity=18708 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=94af604b-4232-4843-a207-4c89100201ca,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=94af604b-4232-4843-a207-4c89100201ca,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.112 ipv6= k8sPodName=openstack/barbican-ks-endpoints-phrzp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2190bcfe30 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1110 identity=18708 ipv4=10.0.0.112 ipv6= k8sPodName=openstack/barbican-ks-endpoints-phrzp subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2190bcfe30 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1110 identity=18708 ipv4=10.0.0.112 ipv6= k8sPodName=openstack/barbican-ks-endpoints-phrzp subsys=endpoint level=info msg="Successful endpoint creation" containerID=2190bcfe30 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1110 identity=18708 ipv4=10.0.0.112 ipv6= k8sPodName=openstack/barbican-ks-endpoints-phrzp subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=2190bcfe30 endpointID=1110 k8sNamespace=openstack k8sPodName=barbican-ks-endpoints-phrzp subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=94af604b-4232-4843-a207-4c89100201ca k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=94af604b-4232-4843-a207-4c89100201ca k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-endpoints k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=2190bcfe30 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1110 identity=18708 ipv4=10.0.0.112 ipv6= k8sPodName=openstack/barbican-ks-endpoints-phrzp subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.107 4352de0b-17e8-43cb-a801-1ee5f08921c4 default }" containerID=e99e1b08b7231a767469a43734da7f78777af0ead362d2ac1e2405d4da67b28f datapathConfiguration="&{false false false false false }" interface=lxc8d7a86731cbf k8sPodName=openstack/barbican-ks-user-gj924 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e99e1b08b7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1272 ipv4=10.0.0.107 ipv6= k8sPodName=openstack/barbican-ks-user-gj924 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e99e1b08b7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1272 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=85da9167-c3c0-423d-9ac0-073fdd69119b,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=85da9167-c3c0-423d-9ac0-073fdd69119b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.107 ipv6= k8sPodName=openstack/barbican-ks-user-gj924 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=e99e1b08b7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1272 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.107 ipv6= k8sPodName=openstack/barbican-ks-user-gj924 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=85da9167-c3c0-423d-9ac0-073fdd69119b;k8s:batch.kubernetes.io/job-name=barbican-ks-user;k8s:component=ks-user;k8s:controller-uid=85da9167-c3c0-423d-9ac0-073fdd69119b;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-user;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e99e1b08b7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1272 identity=31833 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=85da9167-c3c0-423d-9ac0-073fdd69119b,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=85da9167-c3c0-423d-9ac0-073fdd69119b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.107 ipv6= k8sPodName=openstack/barbican-ks-user-gj924 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e99e1b08b7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1272 identity=31833 ipv4=10.0.0.107 ipv6= k8sPodName=openstack/barbican-ks-user-gj924 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e99e1b08b7 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1272 identity=31833 ipv4=10.0.0.107 ipv6= k8sPodName=openstack/barbican-ks-user-gj924 subsys=endpoint level=info msg="Successful endpoint creation" containerID=e99e1b08b7 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1272 identity=31833 ipv4=10.0.0.107 ipv6= k8sPodName=openstack/barbican-ks-user-gj924 subsys=daemon level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.03658000459913158 newInterval=11m15s subsys=map-ct level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=e99e1b08b7 endpointID=1272 k8sNamespace=openstack k8sPodName=barbican-ks-user-gj924 subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=85da9167-c3c0-423d-9ac0-073fdd69119b k8s:batch.kubernetes.io/job-name=barbican-ks-user k8s:component=ks-user k8s:controller-uid=85da9167-c3c0-423d-9ac0-073fdd69119b k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-user k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=e99e1b08b7 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1272 identity=31833 ipv4=10.0.0.107 ipv6= k8sPodName=openstack/barbican-ks-user-gj924 subsys=endpoint level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Create endpoint request" addressing="&{10.0.0.228 8707adc8-0f58-4daa-85f5-d128f7616d52 default }" containerID=5d423fb6af3ad5dee921da88a17397b7fb2bbfff200609606e103ee88fdb4448 datapathConfiguration="&{false false false false false }" interface=lxcdd3df43d4c20 k8sPodName=rook-ceph/rook-ceph-operator-76c484c45f-rx8wl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5d423fb6af datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=720 ipv4=10.0.0.228 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76c484c45f-rx8wl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5d423fb6af datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=720 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.14.2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.228 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76c484c45f-rx8wl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:rook-ceph k8s:io.cilium.k8s.namespace.labels.name:rook-ceph]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=5d423fb6af datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=720 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.228 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76c484c45f-rx8wl line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=rook-ceph-operator;k8s:helm.sh/chart=rook-ceph-v1.14.2;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph;k8s:io.cilium.k8s.namespace.labels.name=rook-ceph;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system;k8s:io.kubernetes.pod.namespace=rook-ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5d423fb6af datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=720 identity=42436 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.14.2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.228 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76c484c45f-rx8wl oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5d423fb6af datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=720 identity=42436 ipv4=10.0.0.228 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76c484c45f-rx8wl subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5d423fb6af datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=720 identity=42436 ipv4=10.0.0.228 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76c484c45f-rx8wl subsys=endpoint level=info msg="Successful endpoint creation" containerID=5d423fb6af datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=720 identity=42436 ipv4=10.0.0.228 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76c484c45f-rx8wl subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.231 7555f4ba-a307-474d-adb3-0fdb3688d355 default }" containerID=c33b3d3e857b165a3a42d8fb4677562c27d91c99ec895f8638a9d5d0dab7a781 datapathConfiguration="&{false false false false false }" interface=lxca0826c4216e2 k8sPodName=openstack/rook-ceph-detect-version-v8q9w labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c33b3d3e85 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2901 ipv4=10.0.0.231 ipv6= k8sPodName=openstack/rook-ceph-detect-version-v8q9w subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c33b3d3e85 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2901 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=a31aa56a-47cc-47e1-93f5-963bc7856998,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=a31aa56a-47cc-47e1-93f5-963bc7856998,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.14.2" ipv4=10.0.0.231 ipv6= k8sPodName=openstack/rook-ceph-detect-version-v8q9w subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=c33b3d3e85 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2901 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.231 ipv6= k8sPodName=openstack/rook-ceph-detect-version-v8q9w line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=rook-ceph-detect-version;k8s:batch.kubernetes.io/controller-uid=a31aa56a-47cc-47e1-93f5-963bc7856998;k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version;k8s:controller-uid=a31aa56a-47cc-47e1-93f5-963bc7856998;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=rook-ceph-detect-version;k8s:rook-version=v1.14.2;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c33b3d3e85 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2901 identity=41871 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=a31aa56a-47cc-47e1-93f5-963bc7856998,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=a31aa56a-47cc-47e1-93f5-963bc7856998,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.14.2" ipv4=10.0.0.231 ipv6= k8sPodName=openstack/rook-ceph-detect-version-v8q9w oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c33b3d3e85 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2901 identity=41871 ipv4=10.0.0.231 ipv6= k8sPodName=openstack/rook-ceph-detect-version-v8q9w subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c33b3d3e85 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2901 identity=41871 ipv4=10.0.0.231 ipv6= k8sPodName=openstack/rook-ceph-detect-version-v8q9w subsys=endpoint level=info msg="Successful endpoint creation" containerID=c33b3d3e85 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2901 identity=41871 ipv4=10.0.0.231 ipv6= k8sPodName=openstack/rook-ceph-detect-version-v8q9w subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=c33b3d3e85 endpointID=2901 k8sNamespace=openstack k8sPodName=rook-ceph-detect-version-v8q9w subsys=daemon level=info msg="Releasing key" key="[k8s:app=rook-ceph-detect-version k8s:batch.kubernetes.io/controller-uid=a31aa56a-47cc-47e1-93f5-963bc7856998 k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version k8s:controller-uid=a31aa56a-47cc-47e1-93f5-963bc7856998 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=rook-ceph-detect-version k8s:rook-version=v1.14.2]" subsys=allocator level=info msg="Removed endpoint" containerID=c33b3d3e85 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2901 identity=41871 ipv4=10.0.0.231 ipv6= k8sPodName=openstack/rook-ceph-detect-version-v8q9w subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.38 0633e437-2c60-42c5-b3f4-002433eac0b5 default }" containerID=bf0b2add46d3719ebcc85de8abda7aa5121534d1838710f3c940e4c40f925d51 datapathConfiguration="&{false false false false false }" interface=lxcf70f4424a2f2 k8sPodName=local-path-storage/helper-pod-create-pvc-bc31725c-2e0c-489a-9273-ac2155cc9829 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bf0b2add46 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2940 ipv4=10.0.0.38 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-bc31725c-2e0c-489a-9273-ac2155cc9829 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bf0b2add46 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2940 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.38 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-bc31725c-2e0c-489a-9273-ac2155cc9829 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=bf0b2add46 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2940 identity=18132 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.38 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-bc31725c-2e0c-489a-9273-ac2155cc9829 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=bf0b2add46 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2940 identity=18132 ipv4=10.0.0.38 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-bc31725c-2e0c-489a-9273-ac2155cc9829 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=bf0b2add46 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2940 identity=18132 ipv4=10.0.0.38 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-bc31725c-2e0c-489a-9273-ac2155cc9829 subsys=endpoint level=info msg="Successful endpoint creation" containerID=bf0b2add46 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2940 identity=18132 ipv4=10.0.0.38 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-bc31725c-2e0c-489a-9273-ac2155cc9829 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.201 5e55a38b-8052-4f9c-a564-31d63ce95710 default }" containerID=12df95d76cf3dc80db13c648f653d15fdb6a080c799827794e38bdd2227ab5d8 datapathConfiguration="&{false false false false false }" interface=lxc8e90cc5e0a7a k8sPodName=openstack/ceph-object-controller-detect-version-9jfdp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=12df95d76c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=333 ipv4=10.0.0.201 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-9jfdp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=12df95d76c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=333 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=4e67e8f2-045d-425b-8289-08466834c3a3,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=4e67e8f2-045d-425b-8289-08466834c3a3,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.14.2" ipv4=10.0.0.201 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-9jfdp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=ceph-object-controller-detect-version;k8s:batch.kubernetes.io/controller-uid=4e67e8f2-045d-425b-8289-08466834c3a3;k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version;k8s:controller-uid=4e67e8f2-045d-425b-8289-08466834c3a3;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=ceph-object-controller-detect-version;k8s:rook-version=v1.14.2;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=12df95d76c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=333 identity=61486 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=4e67e8f2-045d-425b-8289-08466834c3a3,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=4e67e8f2-045d-425b-8289-08466834c3a3,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.14.2" ipv4=10.0.0.201 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-9jfdp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=12df95d76c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=333 identity=61486 ipv4=10.0.0.201 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-9jfdp subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=12df95d76c datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=333 identity=61486 ipv4=10.0.0.201 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-9jfdp subsys=endpoint level=info msg="Successful endpoint creation" containerID=12df95d76c datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=333 identity=61486 ipv4=10.0.0.201 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-9jfdp subsys=daemon level=info msg="Delete endpoint request" containerID=bf0b2add46 endpointID=2940 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-bc31725c-2e0c-489a-9273-ac2155cc9829 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=bf0b2add46 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2940 identity=18132 ipv4=10.0.0.38 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-bc31725c-2e0c-489a-9273-ac2155cc9829 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=12df95d76c endpointID=333 k8sNamespace=openstack k8sPodName=ceph-object-controller-detect-version-9jfdp subsys=daemon level=info msg="Releasing key" key="[k8s:app=ceph-object-controller-detect-version k8s:batch.kubernetes.io/controller-uid=4e67e8f2-045d-425b-8289-08466834c3a3 k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version k8s:controller-uid=4e67e8f2-045d-425b-8289-08466834c3a3 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=ceph-object-controller-detect-version k8s:rook-version=v1.14.2]" subsys=allocator level=info msg="Removed endpoint" containerID=12df95d76c datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=333 identity=61486 ipv4=10.0.0.201 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-9jfdp subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.50 3eec2dc3-037d-4348-82c6-c4939c648cd1 default }" containerID=f48e47bf7e727091cba5e80e20a28e581fa83d32aa52d7e39747cce384cfeaab datapathConfiguration="&{false false false false false }" interface=lxc6399c91924b0 k8sPodName=openstack/rabbitmq-glance-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f48e47bf7e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=724 ipv4=10.0.0.50 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f48e47bf7e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=724 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.50 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-glance;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f48e47bf7e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=724 identity=14817 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.50 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=f48e47bf7e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=724 identity=14817 ipv4=10.0.0.50 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f48e47bf7e datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=724 identity=14817 ipv4=10.0.0.50 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f48e47bf7e datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=724 identity=14817 ipv4=10.0.0.50 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.4 2f8f0480-5892-4c8a-a349-d91c269ccd53 default }" containerID=b654ddbd1e49960efb49cba3fa4755616f9f58b130e383298603e97330ce88bd datapathConfiguration="&{false false false false false }" interface=lxcc3b905d50986 k8sPodName=openstack/glance-db-init-65cvs labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b654ddbd1e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=671 ipv4=10.0.0.4 ipv6= k8sPodName=openstack/glance-db-init-65cvs subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b654ddbd1e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=671 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=1eb3636b-fede-4703-8c86-534e5d7a0238,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=1eb3636b-fede-4703-8c86-534e5d7a0238,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.4 ipv6= k8sPodName=openstack/glance-db-init-65cvs subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=1eb3636b-fede-4703-8c86-534e5d7a0238;k8s:batch.kubernetes.io/job-name=glance-db-init;k8s:component=db-init;k8s:controller-uid=1eb3636b-fede-4703-8c86-534e5d7a0238;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-init;k8s:release_group=glance;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=b654ddbd1e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=671 identity=19134 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=1eb3636b-fede-4703-8c86-534e5d7a0238,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=1eb3636b-fede-4703-8c86-534e5d7a0238,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.4 ipv6= k8sPodName=openstack/glance-db-init-65cvs oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b654ddbd1e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=671 identity=19134 ipv4=10.0.0.4 ipv6= k8sPodName=openstack/glance-db-init-65cvs subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b654ddbd1e datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=671 identity=19134 ipv4=10.0.0.4 ipv6= k8sPodName=openstack/glance-db-init-65cvs subsys=endpoint level=info msg="Successful endpoint creation" containerID=b654ddbd1e datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=671 identity=19134 ipv4=10.0.0.4 ipv6= k8sPodName=openstack/glance-db-init-65cvs subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=b654ddbd1e endpointID=671 k8sNamespace=openstack k8sPodName=glance-db-init-65cvs subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=1eb3636b-fede-4703-8c86-534e5d7a0238 k8s:batch.kubernetes.io/job-name=glance-db-init k8s:component=db-init k8s:controller-uid=1eb3636b-fede-4703-8c86-534e5d7a0238 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=b654ddbd1e datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=671 identity=19134 ipv4=10.0.0.4 ipv6= k8sPodName=openstack/glance-db-init-65cvs subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.116 ee3406b7-d18f-497e-94c2-89fbbefca860 default }" containerID=c2c3215509a0842831664134679e2f45b0d4d3c64cabe1281c0ad01a3fb57faa datapathConfiguration="&{false false false false false }" interface=lxceaca8ba013ff k8sPodName=openstack/glance-db-sync-4k6rr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c2c3215509 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1824 ipv4=10.0.0.116 ipv6= k8sPodName=openstack/glance-db-sync-4k6rr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c2c3215509 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1824 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=5874c1c5-07af-4c6a-a05a-5e87cc47a0ce,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=5874c1c5-07af-4c6a-a05a-5e87cc47a0ce,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.116 ipv6= k8sPodName=openstack/glance-db-sync-4k6rr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=c2c3215509 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1824 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.116 ipv6= k8sPodName=openstack/glance-db-sync-4k6rr line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=5874c1c5-07af-4c6a-a05a-5e87cc47a0ce;k8s:batch.kubernetes.io/job-name=glance-db-sync;k8s:component=db-sync;k8s:controller-uid=5874c1c5-07af-4c6a-a05a-5e87cc47a0ce;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-sync;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c2c3215509 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1824 identity=57904 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=5874c1c5-07af-4c6a-a05a-5e87cc47a0ce,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=5874c1c5-07af-4c6a-a05a-5e87cc47a0ce,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.116 ipv6= k8sPodName=openstack/glance-db-sync-4k6rr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c2c3215509 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1824 identity=57904 ipv4=10.0.0.116 ipv6= k8sPodName=openstack/glance-db-sync-4k6rr subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c2c3215509 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1824 identity=57904 ipv4=10.0.0.116 ipv6= k8sPodName=openstack/glance-db-sync-4k6rr subsys=endpoint level=info msg="Successful endpoint creation" containerID=c2c3215509 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1824 identity=57904 ipv4=10.0.0.116 ipv6= k8sPodName=openstack/glance-db-sync-4k6rr subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=c2c3215509 endpointID=1824 k8sNamespace=openstack k8sPodName=glance-db-sync-4k6rr subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=5874c1c5-07af-4c6a-a05a-5e87cc47a0ce k8s:batch.kubernetes.io/job-name=glance-db-sync k8s:component=db-sync k8s:controller-uid=5874c1c5-07af-4c6a-a05a-5e87cc47a0ce k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-sync k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=c2c3215509 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1824 identity=57904 ipv4=10.0.0.116 ipv6= k8sPodName=openstack/glance-db-sync-4k6rr subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.172 534c7e64-e63b-44ad-b176-dfacd6072ab1 default }" containerID=d962292ad195f7f4644c76bfbd4e09cef8952fa93ffc6f8f0c68ee84bdb14514 datapathConfiguration="&{false false false false false }" interface=lxc46678acb2354 k8sPodName=openstack/glance-rabbit-init-8br8p labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d962292ad1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3914 ipv4=10.0.0.172 ipv6= k8sPodName=openstack/glance-rabbit-init-8br8p subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d962292ad1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3914 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=a48dc77e-6779-4bf1-85a2-27e9db980d92,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=a48dc77e-6779-4bf1-85a2-27e9db980d92,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.172 ipv6= k8sPodName=openstack/glance-rabbit-init-8br8p subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=a48dc77e-6779-4bf1-85a2-27e9db980d92;k8s:batch.kubernetes.io/job-name=glance-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=a48dc77e-6779-4bf1-85a2-27e9db980d92;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-rabbit-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d962292ad1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3914 identity=5642 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=a48dc77e-6779-4bf1-85a2-27e9db980d92,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=a48dc77e-6779-4bf1-85a2-27e9db980d92,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.172 ipv6= k8sPodName=openstack/glance-rabbit-init-8br8p oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d962292ad1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3914 identity=5642 ipv4=10.0.0.172 ipv6= k8sPodName=openstack/glance-rabbit-init-8br8p subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=d962292ad1 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3914 identity=5642 ipv4=10.0.0.172 ipv6= k8sPodName=openstack/glance-rabbit-init-8br8p subsys=endpoint level=info msg="Successful endpoint creation" containerID=d962292ad1 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3914 identity=5642 ipv4=10.0.0.172 ipv6= k8sPodName=openstack/glance-rabbit-init-8br8p subsys=daemon level=info msg="Delete endpoint request" containerID=d962292ad1 endpointID=3914 k8sNamespace=openstack k8sPodName=glance-rabbit-init-8br8p subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=a48dc77e-6779-4bf1-85a2-27e9db980d92 k8s:batch.kubernetes.io/job-name=glance-rabbit-init k8s:component=rabbit-init k8s:controller-uid=a48dc77e-6779-4bf1-85a2-27e9db980d92 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-rabbit-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=d962292ad1 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3914 identity=5642 ipv4=10.0.0.172 ipv6= k8sPodName=openstack/glance-rabbit-init-8br8p subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.15 12392f2b-bc7d-4d0b-96f6-9a162186af5f default }" containerID=db9a6efaf7711ec389936b7be2e3321ef9d85e584416da57544ab5931c5322f9 datapathConfiguration="&{false false false false false }" interface=lxc3d25647de7dc k8sPodName=openstack/glance-ks-service-gqnfr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=db9a6efaf7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=453 ipv4=10.0.0.15 ipv6= k8sPodName=openstack/glance-ks-service-gqnfr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=db9a6efaf7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=453 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=9992fe13-56f6-4c20-866f-efe575fea5c1,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=9992fe13-56f6-4c20-866f-efe575fea5c1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.15 ipv6= k8sPodName=openstack/glance-ks-service-gqnfr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=9992fe13-56f6-4c20-866f-efe575fea5c1;k8s:batch.kubernetes.io/job-name=glance-ks-service;k8s:component=ks-service;k8s:controller-uid=9992fe13-56f6-4c20-866f-efe575fea5c1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-service;k8s:release_group=glance;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=db9a6efaf7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=453 identity=13507 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=9992fe13-56f6-4c20-866f-efe575fea5c1,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=9992fe13-56f6-4c20-866f-efe575fea5c1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.15 ipv6= k8sPodName=openstack/glance-ks-service-gqnfr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=db9a6efaf7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=453 identity=13507 ipv4=10.0.0.15 ipv6= k8sPodName=openstack/glance-ks-service-gqnfr subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=db9a6efaf7 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=453 identity=13507 ipv4=10.0.0.15 ipv6= k8sPodName=openstack/glance-ks-service-gqnfr subsys=endpoint level=info msg="Successful endpoint creation" containerID=db9a6efaf7 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=453 identity=13507 ipv4=10.0.0.15 ipv6= k8sPodName=openstack/glance-ks-service-gqnfr subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.44 90d24523-4d29-4c82-8f2f-3073e7e2d958 default }" containerID=ca0a2371e355a5775768b00e991b7709f17136d4ee6d4c912b0ad8abb205629c datapathConfiguration="&{false false false false false }" interface=lxcc06d754280ce k8sPodName=openstack/rook-ceph-rgw-ceph-a-cf9f85b9f-kblnr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ca0a2371e3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1425 ipv4=10.0.0.44 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-cf9f85b9f-kblnr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ca0a2371e3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1425 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.44 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-cf9f85b9f-kblnr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=ca0a2371e3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1425 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.44 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-cf9f85b9f-kblnr line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=rook-ceph-rgw;k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io;k8s:app.kubernetes.io/created-by=rook-ceph-operator;k8s:app.kubernetes.io/instance=ceph;k8s:app.kubernetes.io/managed-by=rook-ceph-operator;k8s:app.kubernetes.io/name=ceph-rgw;k8s:app.kubernetes.io/part-of=ceph;k8s:ceph_daemon_id=ceph;k8s:ceph_daemon_type=rgw;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw;k8s:io.kubernetes.pod.namespace=openstack;k8s:rgw=ceph;k8s:rook.io/operator-namespace=rook-ceph;k8s:rook_cluster=openstack;k8s:rook_object_store=ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ca0a2371e3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1425 identity=4669 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.44 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-cf9f85b9f-kblnr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ca0a2371e3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1425 identity=4669 ipv4=10.0.0.44 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-cf9f85b9f-kblnr subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.68 418f20a3-8c5c-498f-8177-d66828a7a6c5 default }" containerID=4edaf58d27665a65424e7b5ab56c22c509c5b6844f60f9c59c354ea3d7d3b0b4 datapathConfiguration="&{false false false false false }" interface=lxc22b543f59b8a k8sPodName=openstack/rook-ceph-crashcollector-instance-7c8df6f89b-6smfx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4edaf58d27 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1050 ipv4=10.0.0.68 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-7c8df6f89b-6smfx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4edaf58d27 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1050 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.1-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.68 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-7c8df6f89b-6smfx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-crashcollector;k8s:ceph-version=18.2.1-0;k8s:ceph_daemon_id=crash;k8s:crashcollector=crash;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default;k8s:io.kubernetes.pod.namespace=openstack;k8s:node_name=instance;k8s:rook_cluster=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4edaf58d27 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1050 identity=28021 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.1-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.68 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-7c8df6f89b-6smfx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4edaf58d27 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1050 identity=28021 ipv4=10.0.0.68 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-7c8df6f89b-6smfx subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ca0a2371e3 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1425 identity=4669 ipv4=10.0.0.44 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-cf9f85b9f-kblnr subsys=endpoint level=info msg="Successful endpoint creation" containerID=ca0a2371e3 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1425 identity=4669 ipv4=10.0.0.44 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-cf9f85b9f-kblnr subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=4edaf58d27 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1050 identity=28021 ipv4=10.0.0.68 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-7c8df6f89b-6smfx subsys=endpoint level=info msg="Successful endpoint creation" containerID=4edaf58d27 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1050 identity=28021 ipv4=10.0.0.68 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-7c8df6f89b-6smfx subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=db9a6efaf7 endpointID=453 k8sNamespace=openstack k8sPodName=glance-ks-service-gqnfr subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=9992fe13-56f6-4c20-866f-efe575fea5c1 k8s:batch.kubernetes.io/job-name=glance-ks-service k8s:component=ks-service k8s:controller-uid=9992fe13-56f6-4c20-866f-efe575fea5c1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-service k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=db9a6efaf7 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=453 identity=13507 ipv4=10.0.0.15 ipv6= k8sPodName=openstack/glance-ks-service-gqnfr subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.172 859986b8-b8c2-4833-a3df-6b7365a274f7 default }" containerID=865b03a80821f04c988298179c3b9183333fc722962cc0ce5b02c125f8a0a80f datapathConfiguration="&{false false false false false }" interface=lxcc43e2612e443 k8sPodName=openstack/glance-ks-endpoints-zk5g5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=865b03a808 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=269 ipv4=10.0.0.172 ipv6= k8sPodName=openstack/glance-ks-endpoints-zk5g5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=865b03a808 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=269 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=eb4e0477-aa97-4c2d-af84-0b6c50d6e333,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=eb4e0477-aa97-4c2d-af84-0b6c50d6e333,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.172 ipv6= k8sPodName=openstack/glance-ks-endpoints-zk5g5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=eb4e0477-aa97-4c2d-af84-0b6c50d6e333;k8s:batch.kubernetes.io/job-name=glance-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=eb4e0477-aa97-4c2d-af84-0b6c50d6e333;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-endpoints;k8s:release_group=glance;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=865b03a808 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=269 identity=10816 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=eb4e0477-aa97-4c2d-af84-0b6c50d6e333,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=eb4e0477-aa97-4c2d-af84-0b6c50d6e333,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.172 ipv6= k8sPodName=openstack/glance-ks-endpoints-zk5g5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=865b03a808 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=269 identity=10816 ipv4=10.0.0.172 ipv6= k8sPodName=openstack/glance-ks-endpoints-zk5g5 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=865b03a808 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=269 identity=10816 ipv4=10.0.0.172 ipv6= k8sPodName=openstack/glance-ks-endpoints-zk5g5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=865b03a808 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=269 identity=10816 ipv4=10.0.0.172 ipv6= k8sPodName=openstack/glance-ks-endpoints-zk5g5 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=865b03a808 endpointID=269 k8sNamespace=openstack k8sPodName=glance-ks-endpoints-zk5g5 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=eb4e0477-aa97-4c2d-af84-0b6c50d6e333 k8s:batch.kubernetes.io/job-name=glance-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=eb4e0477-aa97-4c2d-af84-0b6c50d6e333 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-endpoints k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=865b03a808 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=269 identity=10816 ipv4=10.0.0.172 ipv6= k8sPodName=openstack/glance-ks-endpoints-zk5g5 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.107 e57c1902-e920-4a19-b1b1-d67e35050da0 default }" containerID=14e1789240ca839dcaabf3c8858044d6a3e3a325ce85efe64ba164168d44faee datapathConfiguration="&{false false false false false }" interface=lxcb1ed06b0b447 k8sPodName=openstack/ceph-object-controller-detect-version-wpmt7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=14e1789240 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=55 ipv4=10.0.0.107 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-wpmt7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=14e1789240 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=55 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=9c38ca2b-a679-414b-8d93-8f2b13e5cea6,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=9c38ca2b-a679-414b-8d93-8f2b13e5cea6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.14.2" ipv4=10.0.0.107 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-wpmt7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=ceph-object-controller-detect-version;k8s:batch.kubernetes.io/controller-uid=9c38ca2b-a679-414b-8d93-8f2b13e5cea6;k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version;k8s:controller-uid=9c38ca2b-a679-414b-8d93-8f2b13e5cea6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=ceph-object-controller-detect-version;k8s:rook-version=v1.14.2;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=14e1789240 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=55 identity=13862 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=9c38ca2b-a679-414b-8d93-8f2b13e5cea6,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=9c38ca2b-a679-414b-8d93-8f2b13e5cea6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.14.2" ipv4=10.0.0.107 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-wpmt7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=14e1789240 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=55 identity=13862 ipv4=10.0.0.107 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-wpmt7 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=14e1789240 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=55 identity=13862 ipv4=10.0.0.107 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-wpmt7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=14e1789240 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=55 identity=13862 ipv4=10.0.0.107 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-wpmt7 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.76 c562e65b-a10e-4b93-b5d8-13b5db11e0e6 default }" containerID=246c460ffccfee06a28d547a9356ef6ed51a6006bb5c66d11f8d332b253dad3d datapathConfiguration="&{false false false false false }" interface=lxc9026fdd0824d k8sPodName=openstack/glance-ks-user-cxlck labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=246c460ffc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2946 ipv4=10.0.0.76 ipv6= k8sPodName=openstack/glance-ks-user-cxlck subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=246c460ffc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2946 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=5556b0cf-1ce7-425a-ae86-3afa7e3e2b14,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=5556b0cf-1ce7-425a-ae86-3afa7e3e2b14,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.76 ipv6= k8sPodName=openstack/glance-ks-user-cxlck subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=5556b0cf-1ce7-425a-ae86-3afa7e3e2b14;k8s:batch.kubernetes.io/job-name=glance-ks-user;k8s:component=ks-user;k8s:controller-uid=5556b0cf-1ce7-425a-ae86-3afa7e3e2b14;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-user;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=246c460ffc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2946 identity=19906 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=5556b0cf-1ce7-425a-ae86-3afa7e3e2b14,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=5556b0cf-1ce7-425a-ae86-3afa7e3e2b14,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.76 ipv6= k8sPodName=openstack/glance-ks-user-cxlck oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=246c460ffc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2946 identity=19906 ipv4=10.0.0.76 ipv6= k8sPodName=openstack/glance-ks-user-cxlck subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=246c460ffc datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2946 identity=19906 ipv4=10.0.0.76 ipv6= k8sPodName=openstack/glance-ks-user-cxlck subsys=endpoint level=info msg="Successful endpoint creation" containerID=246c460ffc datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2946 identity=19906 ipv4=10.0.0.76 ipv6= k8sPodName=openstack/glance-ks-user-cxlck subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=14e1789240 endpointID=55 k8sNamespace=openstack k8sPodName=ceph-object-controller-detect-version-wpmt7 subsys=daemon level=info msg="Releasing key" key="[k8s:app=ceph-object-controller-detect-version k8s:batch.kubernetes.io/controller-uid=9c38ca2b-a679-414b-8d93-8f2b13e5cea6 k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version k8s:controller-uid=9c38ca2b-a679-414b-8d93-8f2b13e5cea6 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=ceph-object-controller-detect-version k8s:rook-version=v1.14.2]" subsys=allocator level=info msg="Removed endpoint" containerID=14e1789240 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=55 identity=13862 ipv4=10.0.0.107 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-wpmt7 subsys=endpoint level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=246c460ffc endpointID=2946 k8sNamespace=openstack k8sPodName=glance-ks-user-cxlck subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=5556b0cf-1ce7-425a-ae86-3afa7e3e2b14 k8s:batch.kubernetes.io/job-name=glance-ks-user k8s:component=ks-user k8s:controller-uid=5556b0cf-1ce7-425a-ae86-3afa7e3e2b14 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-user k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=246c460ffc datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2946 identity=19906 ipv4=10.0.0.76 ipv6= k8sPodName=openstack/glance-ks-user-cxlck subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.136 34fcaa33-9c38-4a1b-93bd-f8d3ad8850d3 default }" containerID=6ff34a49a830dfbbccb1fb0195422626b67193364787aab8641bcf015f4f4236 datapathConfiguration="&{false false false false false }" interface=lxc754c142b71b7 k8sPodName=openstack/glance-metadefs-load-c8vh5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6ff34a49a8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4067 ipv4=10.0.0.136 ipv6= k8sPodName=openstack/glance-metadefs-load-c8vh5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6ff34a49a8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4067 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=3a99f90d-7a7b-450d-90e8-e0e9de8ce441,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=3a99f90d-7a7b-450d-90e8-e0e9de8ce441,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.136 ipv6= k8sPodName=openstack/glance-metadefs-load-c8vh5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=3a99f90d-7a7b-450d-90e8-e0e9de8ce441;k8s:batch.kubernetes.io/job-name=glance-metadefs-load;k8s:component=metadefs_load;k8s:controller-uid=3a99f90d-7a7b-450d-90e8-e0e9de8ce441;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-metadefs-load;k8s:release_group=glance;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=6ff34a49a8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4067 identity=575 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=3a99f90d-7a7b-450d-90e8-e0e9de8ce441,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=3a99f90d-7a7b-450d-90e8-e0e9de8ce441,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.136 ipv6= k8sPodName=openstack/glance-metadefs-load-c8vh5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6ff34a49a8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4067 identity=575 ipv4=10.0.0.136 ipv6= k8sPodName=openstack/glance-metadefs-load-c8vh5 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6ff34a49a8 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=4067 identity=575 ipv4=10.0.0.136 ipv6= k8sPodName=openstack/glance-metadefs-load-c8vh5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=6ff34a49a8 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=4067 identity=575 ipv4=10.0.0.136 ipv6= k8sPodName=openstack/glance-metadefs-load-c8vh5 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=6ff34a49a8 endpointID=4067 k8sNamespace=openstack k8sPodName=glance-metadefs-load-c8vh5 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=3a99f90d-7a7b-450d-90e8-e0e9de8ce441 k8s:batch.kubernetes.io/job-name=glance-metadefs-load k8s:component=metadefs_load k8s:controller-uid=3a99f90d-7a7b-450d-90e8-e0e9de8ce441 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-metadefs-load k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=6ff34a49a8 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=4067 identity=575 ipv4=10.0.0.136 ipv6= k8sPodName=openstack/glance-metadefs-load-c8vh5 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.78 b03c5e73-5b38-4fd2-b2b0-bb1d58f28022 default }" containerID=cc58caa9ef93c76f39b351ad1f76deadc112149a4d6ce795d2a8a315048c7d49 datapathConfiguration="&{false false false false false }" interface=lxc3c7e0e7b8ffa k8sPodName=openstack/glance-storage-init-w4ttq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=cc58caa9ef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=755 ipv4=10.0.0.78 ipv6= k8sPodName=openstack/glance-storage-init-w4ttq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=cc58caa9ef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=755 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=a5bcf2b5-0bfd-4283-9795-69b9f1246ab2,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=a5bcf2b5-0bfd-4283-9795-69b9f1246ab2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.78 ipv6= k8sPodName=openstack/glance-storage-init-w4ttq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=a5bcf2b5-0bfd-4283-9795-69b9f1246ab2;k8s:batch.kubernetes.io/job-name=glance-storage-init;k8s:component=storage-init;k8s:controller-uid=a5bcf2b5-0bfd-4283-9795-69b9f1246ab2;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-storage-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=cc58caa9ef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=755 identity=6125 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=a5bcf2b5-0bfd-4283-9795-69b9f1246ab2,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=a5bcf2b5-0bfd-4283-9795-69b9f1246ab2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.78 ipv6= k8sPodName=openstack/glance-storage-init-w4ttq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=cc58caa9ef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=755 identity=6125 ipv4=10.0.0.78 ipv6= k8sPodName=openstack/glance-storage-init-w4ttq subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=cc58caa9ef datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=755 identity=6125 ipv4=10.0.0.78 ipv6= k8sPodName=openstack/glance-storage-init-w4ttq subsys=endpoint level=info msg="Successful endpoint creation" containerID=cc58caa9ef datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=755 identity=6125 ipv4=10.0.0.78 ipv6= k8sPodName=openstack/glance-storage-init-w4ttq subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=cc58caa9ef endpointID=755 k8sNamespace=openstack k8sPodName=glance-storage-init-w4ttq subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=a5bcf2b5-0bfd-4283-9795-69b9f1246ab2 k8s:batch.kubernetes.io/job-name=glance-storage-init k8s:component=storage-init k8s:controller-uid=a5bcf2b5-0bfd-4283-9795-69b9f1246ab2 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-storage-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=cc58caa9ef datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=755 identity=6125 ipv4=10.0.0.78 ipv6= k8sPodName=openstack/glance-storage-init-w4ttq subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.205 f8a60126-2644-4fee-b448-a825332f1dd0 default }" containerID=bf7a7225c5c536617a78018b1d979bd22df7c277e413a67247dadd5e6e30ad79 datapathConfiguration="&{false false false false false }" interface=lxcf041b973b124 k8sPodName=openstack/glance-api-7bfddfc999-gtjqv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bf7a7225c5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1151 ipv4=10.0.0.205 ipv6= k8sPodName=openstack/glance-api-7bfddfc999-gtjqv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bf7a7225c5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1151 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.205 ipv6= k8sPodName=openstack/glance-api-7bfddfc999-gtjqv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=bf7a7225c5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1151 identity=35425 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.205 ipv6= k8sPodName=openstack/glance-api-7bfddfc999-gtjqv oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=bf7a7225c5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1151 identity=35425 ipv4=10.0.0.205 ipv6= k8sPodName=openstack/glance-api-7bfddfc999-gtjqv subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=bf7a7225c5 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1151 identity=35425 ipv4=10.0.0.205 ipv6= k8sPodName=openstack/glance-api-7bfddfc999-gtjqv subsys=endpoint level=info msg="Successful endpoint creation" containerID=bf7a7225c5 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1151 identity=35425 ipv4=10.0.0.205 ipv6= k8sPodName=openstack/glance-api-7bfddfc999-gtjqv subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.230 88ef48bb-b0e9-46c1-a5b9-47938deeeabc default }" containerID=41a781587a0c0f48e884508b68b24565b336f727eb30a32a0563060b246ef82b datapathConfiguration="&{false false false false false }" interface=lxced85145876be k8sPodName=openstack/staffeln-api-5c97bd9c86-t4k55 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=41a781587a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1821 ipv4=10.0.0.230 ipv6= k8sPodName=openstack/staffeln-api-5c97bd9c86-t4k55 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=41a781587a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1821 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.230 ipv6= k8sPodName=openstack/staffeln-api-5c97bd9c86-t4k55 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=41a781587a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1821 identity=697 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.230 ipv6= k8sPodName=openstack/staffeln-api-5c97bd9c86-t4k55 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=41a781587a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1821 identity=697 ipv4=10.0.0.230 ipv6= k8sPodName=openstack/staffeln-api-5c97bd9c86-t4k55 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.19 d57481c9-bb14-4f29-a662-5355cade07ac default }" containerID=3b00f723947be83307b774df93bac88382fec346bb5a0485605f61d8451f7762 datapathConfiguration="&{false false false false false }" interface=lxc0e12d87be8a3 k8sPodName=openstack/staffeln-conductor-6dbcf5f985-sjszl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3b00f72394 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3818 ipv4=10.0.0.19 ipv6= k8sPodName=openstack/staffeln-conductor-6dbcf5f985-sjszl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3b00f72394 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3818 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.19 ipv6= k8sPodName=openstack/staffeln-conductor-6dbcf5f985-sjszl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=conductor;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3b00f72394 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3818 identity=35739 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.19 ipv6= k8sPodName=openstack/staffeln-conductor-6dbcf5f985-sjszl oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3b00f72394 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3818 identity=35739 ipv4=10.0.0.19 ipv6= k8sPodName=openstack/staffeln-conductor-6dbcf5f985-sjszl subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=41a781587a datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1821 identity=697 ipv4=10.0.0.230 ipv6= k8sPodName=openstack/staffeln-api-5c97bd9c86-t4k55 subsys=endpoint level=info msg="Successful endpoint creation" containerID=41a781587a datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1821 identity=697 ipv4=10.0.0.230 ipv6= k8sPodName=openstack/staffeln-api-5c97bd9c86-t4k55 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.64 34d2a2c7-88a0-47bb-91d4-1eafa93be20e default }" containerID=3e16c13883ffd39b3b142fd29ca568e9131e2c18b394238fc908f38aacba5766 datapathConfiguration="&{false false false false false }" interface=lxc0df498a15fd0 k8sPodName=openstack/staffeln-db-init-vmtrg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3e16c13883 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=492 ipv4=10.0.0.64 ipv6= k8sPodName=openstack/staffeln-db-init-vmtrg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3e16c13883 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=492 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=52210bb7-8f47-4b88-858e-63d65ed2a602,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=52210bb7-8f47-4b88-858e-63d65ed2a602,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.64 ipv6= k8sPodName=openstack/staffeln-db-init-vmtrg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=52210bb7-8f47-4b88-858e-63d65ed2a602;k8s:batch.kubernetes.io/job-name=staffeln-db-init;k8s:component=db-init;k8s:controller-uid=52210bb7-8f47-4b88-858e-63d65ed2a602;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-init;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3e16c13883 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=492 identity=59699 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=52210bb7-8f47-4b88-858e-63d65ed2a602,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=52210bb7-8f47-4b88-858e-63d65ed2a602,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.64 ipv6= k8sPodName=openstack/staffeln-db-init-vmtrg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3e16c13883 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=492 identity=59699 ipv4=10.0.0.64 ipv6= k8sPodName=openstack/staffeln-db-init-vmtrg subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3b00f72394 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3818 identity=35739 ipv4=10.0.0.19 ipv6= k8sPodName=openstack/staffeln-conductor-6dbcf5f985-sjszl subsys=endpoint level=info msg="Successful endpoint creation" containerID=3b00f72394 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3818 identity=35739 ipv4=10.0.0.19 ipv6= k8sPodName=openstack/staffeln-conductor-6dbcf5f985-sjszl subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=3e16c13883 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=492 identity=59699 ipv4=10.0.0.64 ipv6= k8sPodName=openstack/staffeln-db-init-vmtrg subsys=endpoint level=info msg="Successful endpoint creation" containerID=3e16c13883 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=492 identity=59699 ipv4=10.0.0.64 ipv6= k8sPodName=openstack/staffeln-db-init-vmtrg subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=3e16c13883 endpointID=492 k8sNamespace=openstack k8sPodName=staffeln-db-init-vmtrg subsys=daemon level=info msg="Releasing key" key="[k8s:application=staffeln k8s:batch.kubernetes.io/controller-uid=52210bb7-8f47-4b88-858e-63d65ed2a602 k8s:batch.kubernetes.io/job-name=staffeln-db-init k8s:component=db-init k8s:controller-uid=52210bb7-8f47-4b88-858e-63d65ed2a602 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=staffeln-db-init k8s:release_group=staffeln]" subsys=allocator level=info msg="Removed endpoint" containerID=3e16c13883 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=492 identity=59699 ipv4=10.0.0.64 ipv6= k8sPodName=openstack/staffeln-db-init-vmtrg subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.123 dd58951a-6aca-426f-b7b9-6f2cdd33ea18 default }" containerID=7798c195fa17a84e361a8adc95ec84f920089c4b9a1b886a1be8e7f95c0f54a9 datapathConfiguration="&{false false false false false }" interface=lxcec474b043d52 k8sPodName=openstack/staffeln-db-sync-wv92t labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7798c195fa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1848 ipv4=10.0.0.123 ipv6= k8sPodName=openstack/staffeln-db-sync-wv92t subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7798c195fa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1848 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=4529a325-b14e-466b-8a4f-5176a4941265,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=4529a325-b14e-466b-8a4f-5176a4941265,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.123 ipv6= k8sPodName=openstack/staffeln-db-sync-wv92t subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=7798c195fa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1848 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.123 ipv6= k8sPodName=openstack/staffeln-db-sync-wv92t line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=4529a325-b14e-466b-8a4f-5176a4941265;k8s:batch.kubernetes.io/job-name=staffeln-db-sync;k8s:component=db-sync;k8s:controller-uid=4529a325-b14e-466b-8a4f-5176a4941265;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-sync;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7798c195fa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1848 identity=39782 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=4529a325-b14e-466b-8a4f-5176a4941265,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=4529a325-b14e-466b-8a4f-5176a4941265,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.123 ipv6= k8sPodName=openstack/staffeln-db-sync-wv92t oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7798c195fa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1848 identity=39782 ipv4=10.0.0.123 ipv6= k8sPodName=openstack/staffeln-db-sync-wv92t subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7798c195fa datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1848 identity=39782 ipv4=10.0.0.123 ipv6= k8sPodName=openstack/staffeln-db-sync-wv92t subsys=endpoint level=info msg="Successful endpoint creation" containerID=7798c195fa datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1848 identity=39782 ipv4=10.0.0.123 ipv6= k8sPodName=openstack/staffeln-db-sync-wv92t subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager