level=info msg="Memory available for map entries (0.003% of 67421638656B): 168554096B" subsys=config level=info msg="option bpf-ct-global-tcp-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-ct-global-any-max set by dynamic sizing to 295708" subsys=config level=info msg="option bpf-nat-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-neigh-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-sock-rev-map-max set by dynamic sizing to 295708" subsys=config level=info msg=" --agent-health-port='9879'" subsys=daemon level=info msg=" --agent-labels=''" subsys=daemon level=info msg=" --agent-liveness-update-interval='1s'" subsys=daemon level=info msg=" --agent-not-ready-taint-key='node.cilium.io/agent-not-ready'" subsys=daemon level=info msg=" --allocator-list-timeout='3m0s'" subsys=daemon level=info msg=" --allow-icmp-frag-needed='true'" subsys=daemon level=info msg=" --allow-localhost='auto'" subsys=daemon level=info msg=" --annotate-k8s-node='false'" subsys=daemon level=info msg=" --api-rate-limit=''" subsys=daemon level=info msg=" --arping-refresh-period='30s'" subsys=daemon level=info msg=" --auto-create-cilium-node-resource='true'" subsys=daemon level=info msg=" --auto-direct-node-routes='false'" subsys=daemon level=info msg=" --bgp-announce-lb-ip='false'" subsys=daemon level=info msg=" --bgp-announce-pod-cidr='false'" subsys=daemon level=info msg=" --bgp-config-path='/var/lib/cilium/bgp/config.yaml'" subsys=daemon level=info msg=" --bpf-auth-map-max='524288'" subsys=daemon level=info msg=" --bpf-ct-global-any-max='262144'" subsys=daemon level=info msg=" --bpf-ct-global-tcp-max='524288'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-fin='10s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-syn='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp-grace='1m0s'" subsys=daemon level=info msg=" --bpf-filter-priority='1'" subsys=daemon level=info msg=" --bpf-fragments-map-max='8192'" subsys=daemon level=info msg=" --bpf-lb-acceleration='disabled'" subsys=daemon level=info msg=" --bpf-lb-affinity-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-algorithm='random'" subsys=daemon level=info msg=" --bpf-lb-dev-ip-addr-inherit=''" subsys=daemon level=info msg=" --bpf-lb-dsr-dispatch='opt'" subsys=daemon level=info msg=" --bpf-lb-dsr-l4-xlate='frontend'" subsys=daemon level=info msg=" --bpf-lb-external-clusterip='false'" subsys=daemon level=info msg=" --bpf-lb-maglev-hash-seed='JLfvgnHc2kaSUFaI'" subsys=daemon level=info msg=" --bpf-lb-maglev-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-maglev-table-size='16381'" subsys=daemon level=info msg=" --bpf-lb-map-max='65536'" subsys=daemon level=info msg=" --bpf-lb-mode='snat'" subsys=daemon level=info msg=" --bpf-lb-rev-nat-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-rss-ipv4-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-rss-ipv6-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-service-backend-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-service-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-sock='false'" subsys=daemon level=info msg=" --bpf-lb-sock-hostns-only='false'" subsys=daemon level=info msg=" --bpf-lb-source-range-map-max='0'" subsys=daemon level=info msg=" --bpf-map-dynamic-size-ratio='0.0025'" subsys=daemon level=info msg=" --bpf-map-event-buffers=''" subsys=daemon level=info msg=" --bpf-nat-global-max='524288'" subsys=daemon level=info msg=" --bpf-neigh-global-max='524288'" subsys=daemon level=info msg=" --bpf-policy-map-full-reconciliation-interval='15m0s'" subsys=daemon level=info msg=" --bpf-policy-map-max='16384'" subsys=daemon level=info msg=" --bpf-root='/sys/fs/bpf'" subsys=daemon level=info msg=" --bpf-sock-rev-map-max='262144'" subsys=daemon level=info msg=" --bypass-ip-availability-upon-restore='false'" subsys=daemon level=info msg=" --certificates-directory='/var/run/cilium/certs'" subsys=daemon level=info msg=" --cflags=''" subsys=daemon level=info msg=" --cgroup-root='/run/cilium/cgroupv2'" subsys=daemon level=info msg=" --cilium-endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --cluster-health-port='4240'" subsys=daemon level=info msg=" --cluster-id='0'" subsys=daemon level=info msg=" --cluster-name='default'" subsys=daemon level=info msg=" --cluster-pool-ipv4-cidr='10.0.0.0/8'" subsys=daemon level=info msg=" --cluster-pool-ipv4-mask-size='24'" subsys=daemon level=info msg=" --clustermesh-config='/var/lib/cilium/clustermesh/'" subsys=daemon level=info msg=" --clustermesh-ip-identities-sync-timeout='1m0s'" subsys=daemon level=info msg=" --cmdref=''" subsys=daemon level=info msg=" --cni-chaining-mode='none'" subsys=daemon level=info msg=" --cni-chaining-target=''" subsys=daemon level=info msg=" --cni-exclusive='true'" subsys=daemon level=info msg=" --cni-external-routing='false'" subsys=daemon level=info msg=" --cni-log-file='/var/run/cilium/cilium-cni.log'" subsys=daemon level=info msg=" --cnp-node-status-gc-interval='0s'" subsys=daemon level=info msg=" --config=''" subsys=daemon level=info msg=" --config-dir='/tmp/cilium/config-map'" subsys=daemon level=info msg=" --config-sources='config-map:kube-system/cilium-config'" subsys=daemon level=info msg=" --conntrack-gc-interval='0s'" subsys=daemon level=info msg=" --conntrack-gc-max-interval='0s'" subsys=daemon level=info msg=" --crd-wait-timeout='5m0s'" subsys=daemon level=info msg=" --custom-cni-conf='false'" subsys=daemon level=info msg=" --datapath-mode='veth'" subsys=daemon level=info msg=" --debug='false'" subsys=daemon level=info msg=" --debug-verbose=''" subsys=daemon level=info msg=" --derive-masquerade-ip-addr-from-device=''" subsys=daemon level=info msg=" --devices=''" subsys=daemon level=info msg=" --direct-routing-device=''" subsys=daemon level=info msg=" --disable-cnp-status-updates='true'" subsys=daemon level=info msg=" --disable-endpoint-crd='false'" subsys=daemon level=info msg=" --disable-envoy-version-check='false'" subsys=daemon level=info msg=" --disable-iptables-feeder-rules=''" subsys=daemon level=info msg=" --dns-max-ips-per-restored-rule='1000'" subsys=daemon level=info msg=" --dns-policy-unload-on-shutdown='false'" subsys=daemon level=info msg=" --dnsproxy-concurrency-limit='0'" subsys=daemon level=info msg=" --dnsproxy-concurrency-processing-grace-period='0s'" subsys=daemon level=info msg=" --dnsproxy-enable-transparent-mode='true'" subsys=daemon level=info msg=" --dnsproxy-lock-count='128'" subsys=daemon level=info msg=" --dnsproxy-lock-timeout='500ms'" subsys=daemon level=info msg=" --egress-gateway-policy-map-max='16384'" subsys=daemon level=info msg=" --egress-gateway-reconciliation-trigger-interval='1s'" subsys=daemon level=info msg=" --egress-masquerade-interfaces=''" subsys=daemon level=info msg=" --egress-multi-home-ip-rule-compat='false'" subsys=daemon level=info msg=" --enable-auto-protect-node-port-range='true'" subsys=daemon level=info msg=" --enable-bandwidth-manager='false'" subsys=daemon level=info msg=" --enable-bbr='false'" subsys=daemon level=info msg=" --enable-bgp-control-plane='false'" subsys=daemon level=info msg=" --enable-bpf-clock-probe='false'" subsys=daemon level=info msg=" --enable-bpf-masquerade='false'" subsys=daemon level=info msg=" --enable-bpf-tproxy='false'" subsys=daemon level=info msg=" --enable-cilium-api-server-access='*'" subsys=daemon level=info msg=" --enable-cilium-endpoint-slice='false'" subsys=daemon level=info msg=" --enable-cilium-health-api-server-access='*'" subsys=daemon level=info msg=" --enable-custom-calls='false'" subsys=daemon level=info msg=" --enable-endpoint-health-checking='true'" subsys=daemon level=info msg=" --enable-endpoint-routes='false'" subsys=daemon level=info msg=" --enable-envoy-config='false'" subsys=daemon level=info msg=" --enable-external-ips='false'" subsys=daemon level=info msg=" --enable-health-check-nodeport='true'" subsys=daemon level=info msg=" --enable-health-checking='true'" subsys=daemon level=info msg=" --enable-high-scale-ipcache='false'" subsys=daemon level=info msg=" --enable-host-firewall='false'" subsys=daemon level=info msg=" --enable-host-legacy-routing='false'" subsys=daemon level=info msg=" --enable-host-port='false'" subsys=daemon level=info msg=" --enable-hubble='false'" subsys=daemon level=info msg=" --enable-hubble-recorder-api='true'" subsys=daemon level=info msg=" --enable-icmp-rules='true'" subsys=daemon level=info msg=" --enable-identity-mark='true'" subsys=daemon level=info msg=" --enable-ip-masq-agent='false'" subsys=daemon level=info msg=" --enable-ipsec='false'" subsys=daemon level=info msg=" --enable-ipsec-key-watcher='true'" subsys=daemon level=info msg=" --enable-ipv4='true'" subsys=daemon level=info msg=" --enable-ipv4-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv4-egress-gateway='false'" subsys=daemon level=info msg=" --enable-ipv4-fragment-tracking='true'" subsys=daemon level=info msg=" --enable-ipv4-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6='false'" subsys=daemon level=info msg=" --enable-ipv6-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv6-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6-ndp='false'" subsys=daemon level=info msg=" --enable-k8s='true'" subsys=daemon level=info msg=" --enable-k8s-api-discovery='false'" subsys=daemon level=info msg=" --enable-k8s-endpoint-slice='true'" subsys=daemon level=info msg=" --enable-k8s-event-handover='false'" subsys=daemon level=info msg=" --enable-k8s-networkpolicy='true'" subsys=daemon level=info msg=" --enable-k8s-terminating-endpoint='true'" subsys=daemon level=info msg=" --enable-l2-announcements='false'" subsys=daemon level=info msg=" --enable-l2-neigh-discovery='true'" subsys=daemon level=info msg=" --enable-l2-pod-announcements='false'" subsys=daemon level=info msg=" --enable-l7-proxy='true'" subsys=daemon level=info msg=" --enable-local-node-route='true'" subsys=daemon level=info msg=" --enable-local-redirect-policy='false'" subsys=daemon level=info msg=" --enable-mke='false'" subsys=daemon level=info msg=" --enable-monitor='true'" subsys=daemon level=info msg=" --enable-nat46x64-gateway='false'" subsys=daemon level=info msg=" --enable-node-port='false'" subsys=daemon level=info msg=" --enable-pmtu-discovery='false'" subsys=daemon level=info msg=" --enable-policy='default'" subsys=daemon level=info msg=" --enable-recorder='false'" subsys=daemon level=info msg=" --enable-remote-node-identity='true'" subsys=daemon level=info msg=" --enable-runtime-device-detection='false'" subsys=daemon level=info msg=" --enable-sctp='false'" subsys=daemon level=info msg=" --enable-service-topology='false'" subsys=daemon level=info msg=" --enable-session-affinity='false'" subsys=daemon level=info msg=" --enable-srv6='false'" subsys=daemon level=info msg=" --enable-stale-cilium-endpoint-cleanup='true'" subsys=daemon level=info msg=" --enable-svc-source-range-check='true'" subsys=daemon level=info msg=" --enable-tracing='false'" subsys=daemon level=info msg=" --enable-unreachable-routes='false'" subsys=daemon level=info msg=" --enable-vtep='false'" subsys=daemon level=info msg=" --enable-well-known-identities='false'" subsys=daemon level=info msg=" --enable-wireguard='false'" subsys=daemon level=info msg=" --enable-wireguard-userspace-fallback='false'" subsys=daemon level=info msg=" --enable-xdp-prefilter='false'" subsys=daemon level=info msg=" --enable-xt-socket-fallback='true'" subsys=daemon level=info msg=" --encrypt-interface=''" subsys=daemon level=info msg=" --encrypt-node='false'" subsys=daemon level=info msg=" --endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --endpoint-queue-size='25'" subsys=daemon level=info msg=" --endpoint-status=''" subsys=daemon level=info msg=" --envoy-config-timeout='2m0s'" subsys=daemon level=info msg=" --envoy-log=''" subsys=daemon level=info msg=" --exclude-local-address=''" subsys=daemon level=info msg=" --external-envoy-proxy='false'" subsys=daemon level=info msg=" --fixed-identity-mapping=''" subsys=daemon level=info msg=" --fqdn-regex-compile-lru-size='1024'" subsys=daemon level=info msg=" --gops-port='9890'" subsys=daemon level=info msg=" --http-403-msg=''" subsys=daemon level=info msg=" --http-idle-timeout='0'" subsys=daemon level=info msg=" --http-max-grpc-timeout='0'" subsys=daemon level=info msg=" --http-normalize-path='true'" subsys=daemon level=info msg=" --http-request-timeout='3600'" subsys=daemon level=info msg=" --http-retry-count='3'" subsys=daemon level=info msg=" --http-retry-timeout='0'" subsys=daemon level=info msg=" --hubble-disable-tls='false'" subsys=daemon level=info msg=" --hubble-event-buffer-capacity='4095'" subsys=daemon level=info msg=" --hubble-event-queue-size='0'" subsys=daemon level=info msg=" --hubble-export-file-compress='false'" subsys=daemon level=info msg=" --hubble-export-file-max-backups='5'" subsys=daemon level=info msg=" --hubble-export-file-max-size-mb='10'" subsys=daemon level=info msg=" --hubble-export-file-path=''" subsys=daemon level=info msg=" --hubble-listen-address=''" subsys=daemon level=info msg=" --hubble-metrics=''" subsys=daemon level=info msg=" --hubble-metrics-server=''" subsys=daemon level=info msg=" --hubble-monitor-events=''" subsys=daemon level=info msg=" --hubble-prefer-ipv6='false'" subsys=daemon level=info msg=" --hubble-recorder-sink-queue-size='1024'" subsys=daemon level=info msg=" --hubble-recorder-storage-path='/var/run/cilium/pcaps'" subsys=daemon level=info msg=" --hubble-skip-unknown-cgroup-ids='true'" subsys=daemon level=info msg=" --hubble-socket-path='/var/run/cilium/hubble.sock'" subsys=daemon level=info msg=" --hubble-tls-cert-file=''" subsys=daemon level=info msg=" --hubble-tls-client-ca-files=''" subsys=daemon level=info msg=" --hubble-tls-key-file=''" subsys=daemon level=info msg=" --identity-allocation-mode='crd'" subsys=daemon level=info msg=" --identity-change-grace-period='5s'" subsys=daemon level=info msg=" --identity-gc-interval='15m0s'" subsys=daemon level=info msg=" --identity-heartbeat-timeout='30m0s'" subsys=daemon level=info msg=" --identity-restore-grace-period='10m0s'" subsys=daemon level=info msg=" --install-egress-gateway-routes='false'" subsys=daemon level=info msg=" --install-iptables-rules='true'" subsys=daemon level=info msg=" --install-no-conntrack-iptables-rules='false'" subsys=daemon level=info msg=" --ip-allocation-timeout='2m0s'" subsys=daemon level=info msg=" --ip-masq-agent-config-path='/etc/config/ip-masq-agent'" subsys=daemon level=info msg=" --ipam='cluster-pool'" subsys=daemon level=info msg=" --ipam-cilium-node-update-rate='15s'" subsys=daemon level=info msg=" --ipam-multi-pool-pre-allocation='default=8'" subsys=daemon level=info msg=" --ipsec-key-file=''" subsys=daemon level=info msg=" --ipsec-key-rotation-duration='5m0s'" subsys=daemon level=info msg=" --iptables-lock-timeout='5s'" subsys=daemon level=info msg=" --iptables-random-fully='false'" subsys=daemon level=info msg=" --ipv4-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv4-node='auto'" subsys=daemon level=info msg=" --ipv4-pod-subnets=''" subsys=daemon level=info msg=" --ipv4-range='auto'" subsys=daemon level=info msg=" --ipv4-service-loopback-address='169.254.42.1'" subsys=daemon level=info msg=" --ipv4-service-range='auto'" subsys=daemon level=info msg=" --ipv6-cluster-alloc-cidr='f00d::/64'" subsys=daemon level=info msg=" --ipv6-mcast-device=''" subsys=daemon level=info msg=" --ipv6-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv6-node='auto'" subsys=daemon level=info msg=" --ipv6-pod-subnets=''" subsys=daemon level=info msg=" --ipv6-range='auto'" subsys=daemon level=info msg=" --ipv6-service-range='auto'" subsys=daemon level=info msg=" --join-cluster='false'" subsys=daemon level=info msg=" --k8s-api-server=''" subsys=daemon level=info msg=" --k8s-client-burst='10'" subsys=daemon level=info msg=" --k8s-client-qps='5'" subsys=daemon level=info msg=" --k8s-heartbeat-timeout='30s'" subsys=daemon level=info msg=" --k8s-kubeconfig-path=''" subsys=daemon level=info msg=" --k8s-namespace='kube-system'" subsys=daemon level=info msg=" --k8s-require-ipv4-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-require-ipv6-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-service-cache-size='128'" subsys=daemon level=info msg=" --k8s-service-proxy-name=''" subsys=daemon level=info msg=" --k8s-sync-timeout='3m0s'" subsys=daemon level=info msg=" --k8s-watcher-endpoint-selector='metadata.name!=kube-scheduler,metadata.name!=kube-controller-manager,metadata.name!=etcd-operator,metadata.name!=gcp-controller-manager'" subsys=daemon level=info msg=" --keep-config='false'" subsys=daemon level=info msg=" --kube-proxy-replacement='disabled'" subsys=daemon level=info msg=" --kube-proxy-replacement-healthz-bind-address=''" subsys=daemon level=info msg=" --kvstore=''" subsys=daemon level=info msg=" --kvstore-connectivity-timeout='2m0s'" subsys=daemon level=info msg=" --kvstore-lease-ttl='15m0s'" subsys=daemon level=info msg=" --kvstore-max-consecutive-quorum-errors='2'" subsys=daemon level=info msg=" --kvstore-opt=''" subsys=daemon level=info msg=" --kvstore-periodic-sync='5m0s'" subsys=daemon level=info msg=" --l2-announcements-lease-duration='15s'" subsys=daemon level=info msg=" --l2-announcements-renew-deadline='5s'" subsys=daemon level=info msg=" --l2-announcements-retry-period='2s'" subsys=daemon level=info msg=" --l2-pod-announcements-interface=''" subsys=daemon level=info msg=" --label-prefix-file=''" subsys=daemon level=info msg=" --labels=''" subsys=daemon level=info msg=" --lib-dir='/var/lib/cilium'" subsys=daemon level=info msg=" --local-max-addr-scope='252'" subsys=daemon level=info msg=" --local-router-ipv4=''" subsys=daemon level=info msg=" --local-router-ipv6=''" subsys=daemon level=info msg=" --log-driver=''" subsys=daemon level=info msg=" --log-opt=''" subsys=daemon level=info msg=" --log-system-load='false'" subsys=daemon level=info msg=" --max-controller-interval='0'" subsys=daemon level=info msg=" --mesh-auth-enabled='true'" subsys=daemon level=info msg=" --mesh-auth-gc-interval='5m0s'" subsys=daemon level=info msg=" --mesh-auth-mutual-listener-port='0'" subsys=daemon level=info msg=" --mesh-auth-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-rotated-identities-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-signal-backoff-duration='1s'" subsys=daemon level=info msg=" --mesh-auth-spiffe-trust-domain='spiffe.cilium'" subsys=daemon level=info msg=" --mesh-auth-spire-admin-socket=''" subsys=daemon level=info msg=" --metrics=''" subsys=daemon level=info msg=" --mke-cgroup-mount=''" subsys=daemon level=info msg=" --monitor-aggregation='medium'" subsys=daemon level=info msg=" --monitor-aggregation-flags='all'" subsys=daemon level=info msg=" --monitor-aggregation-interval='5s'" subsys=daemon level=info msg=" --monitor-queue-size='0'" subsys=daemon level=info msg=" --mtu='0'" subsys=daemon level=info msg=" --node-encryption-opt-out-labels='node-role.kubernetes.io/control-plane'" subsys=daemon level=info msg=" --node-port-acceleration='disabled'" subsys=daemon level=info msg=" --node-port-algorithm='random'" subsys=daemon level=info msg=" --node-port-bind-protection='true'" subsys=daemon level=info msg=" --node-port-mode='snat'" subsys=daemon level=info msg=" --node-port-range='30000,32767'" subsys=daemon level=info msg=" --nodes-gc-interval='5m0s'" subsys=daemon level=info msg=" --operator-api-serve-addr='127.0.0.1:9234'" subsys=daemon level=info msg=" --policy-audit-mode='false'" subsys=daemon level=info msg=" --policy-queue-size='100'" subsys=daemon level=info msg=" --policy-trigger-interval='1s'" subsys=daemon level=info msg=" --pprof='false'" subsys=daemon level=info msg=" --pprof-address='localhost'" subsys=daemon level=info msg=" --pprof-port='6060'" subsys=daemon level=info msg=" --preallocate-bpf-maps='false'" subsys=daemon level=info msg=" --prepend-iptables-chains='true'" subsys=daemon level=info msg=" --procfs='/host/proc'" subsys=daemon level=info msg=" --prometheus-serve-addr=':9962'" subsys=daemon level=info msg=" --proxy-connect-timeout='2'" subsys=daemon level=info msg=" --proxy-gid='1337'" subsys=daemon level=info msg=" --proxy-idle-timeout-seconds='60'" subsys=daemon level=info msg=" --proxy-max-connection-duration-seconds='0'" subsys=daemon level=info msg=" --proxy-max-requests-per-connection='0'" subsys=daemon level=info msg=" --proxy-prometheus-port='9964'" subsys=daemon level=info msg=" --read-cni-conf=''" subsys=daemon level=info msg=" --remove-cilium-node-taints='true'" subsys=daemon level=info msg=" --restore='true'" subsys=daemon level=info msg=" --route-metric='0'" subsys=daemon level=info msg=" --routing-mode='tunnel'" subsys=daemon level=info msg=" --set-cilium-is-up-condition='true'" subsys=daemon level=info msg=" --set-cilium-node-taints='true'" subsys=daemon level=info msg=" --sidecar-istio-proxy-image='cilium/istio_proxy'" subsys=daemon level=info msg=" --single-cluster-route='false'" subsys=daemon level=info msg=" --skip-cnp-status-startup-clean='false'" subsys=daemon level=info msg=" --socket-path='/var/run/cilium/cilium.sock'" subsys=daemon level=info msg=" --srv6-encap-mode='reduced'" subsys=daemon level=info msg=" --state-dir='/var/run/cilium'" subsys=daemon level=info msg=" --synchronize-k8s-nodes='true'" subsys=daemon level=info msg=" --tofqdns-dns-reject-response-code='refused'" subsys=daemon level=info msg=" --tofqdns-enable-dns-compression='true'" subsys=daemon level=info msg=" --tofqdns-endpoint-max-ip-per-hostname='50'" subsys=daemon level=info msg=" --tofqdns-idle-connection-grace-period='0s'" subsys=daemon level=info msg=" --tofqdns-max-deferred-connection-deletes='10000'" subsys=daemon level=info msg=" --tofqdns-min-ttl='0'" subsys=daemon level=info msg=" --tofqdns-pre-cache=''" subsys=daemon level=info msg=" --tofqdns-proxy-port='0'" subsys=daemon level=info msg=" --tofqdns-proxy-response-max-delay='100ms'" subsys=daemon level=info msg=" --trace-payloadlen='128'" subsys=daemon level=info msg=" --trace-sock='true'" subsys=daemon level=info msg=" --tunnel=''" subsys=daemon level=info msg=" --tunnel-port='6082'" subsys=daemon level=info msg=" --tunnel-protocol='geneve'" subsys=daemon level=info msg=" --unmanaged-pod-watcher-interval='15'" subsys=daemon level=info msg=" --use-cilium-internal-ip-for-ipsec='false'" subsys=daemon level=info msg=" --version='false'" subsys=daemon level=info msg=" --vlan-bpf-bypass=''" subsys=daemon level=info msg=" --vtep-cidr=''" subsys=daemon level=info msg=" --vtep-endpoint=''" subsys=daemon level=info msg=" --vtep-mac=''" subsys=daemon level=info msg=" --vtep-mask=''" subsys=daemon level=info msg=" --wireguard-encapsulate='false'" subsys=daemon level=info msg=" --write-cni-conf-when-ready='/host/etc/cni/net.d/05-cilium.conflist'" subsys=daemon level=info msg=" _ _ _" subsys=daemon level=info msg=" ___|_| |_|_ _ _____" subsys=daemon level=info msg="| _| | | | | | |" subsys=daemon level=info msg="|___|_|_|_|___|_|_|_|" subsys=daemon level=info msg="Cilium 1.14.8 cf6e022e 2024-03-13T12:23:35-04:00 go version go1.21.8 linux/amd64" subsys=daemon level=info msg="clang (10.0.0) and kernel (5.15.0) versions: OK!" subsys=linux-datapath level=info msg="linking environment: OK!" subsys=linux-datapath level=info msg="Kernel config file not found: if the agent fails to start, check the system requirements at https://docs.cilium.io/en/stable/operations/system_requirements" subsys=probes level=info msg="Detected mounted BPF filesystem at /sys/fs/bpf" subsys=bpf level=info msg="Mounted cgroupv2 filesystem at /run/cilium/cgroupv2" subsys=cgroups level=info msg="Parsing base label prefixes from default label list" subsys=labels-filter level=info msg="Parsing additional label prefixes from user inputs: []" subsys=labels-filter level=info msg="Final label prefixes to be used for identity evaluation:" subsys=labels-filter level=info msg=" - reserved:.*" subsys=labels-filter level=info msg=" - :io\\.kubernetes\\.pod\\.namespace" subsys=labels-filter level=info msg=" - :io\\.cilium\\.k8s\\.namespace\\.labels" subsys=labels-filter level=info msg=" - :app\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:io\\.kubernetes" subsys=labels-filter level=info msg=" - !:kubernetes\\.io" subsys=labels-filter level=info msg=" - !:.*beta\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:k8s\\.io" subsys=labels-filter level=info msg=" - !:pod-template-generation" subsys=labels-filter level=info msg=" - !:pod-template-hash" subsys=labels-filter level=info msg=" - !:controller-revision-hash" subsys=labels-filter level=info msg=" - !:annotation.*" subsys=labels-filter level=info msg=" - !:etcd_node" subsys=labels-filter level=info msg=Invoked duration="796.237µs" function="pprof.glob..func1 (cell.go:50)" subsys=hive level=info msg=Invoked duration="45.341µs" function="gops.registerGopsHooks (cell.go:38)" subsys=hive level=info msg=Invoked duration=1.360469ms function="metrics.NewRegistry (registry.go:65)" subsys=hive level=info msg=Invoked duration="453.791µs" function="metrics.glob..func1 (cell.go:12)" subsys=hive level=info msg="Spire Delegate API Client is disabled as no socket path is configured" subsys=spire-delegate level=info msg="Mutual authentication handler is disabled as no port is configured" subsys=auth level=info msg=Invoked duration=125.814161ms function="cmd.glob..func4 (daemon_main.go:1607)" subsys=hive level=info msg=Invoked duration="14.42µs" function="gc.registerSignalHandler (cell.go:47)" subsys=hive level=info msg=Invoked duration="14.37µs" function="utime.initUtimeSync (cell.go:29)" subsys=hive level=info msg=Invoked duration="61.351µs" function="agentliveness.newAgentLivenessUpdater (agent_liveness.go:43)" subsys=hive level=info msg=Invoked duration="64.651µs" function="l2responder.NewL2ResponderReconciler (l2responder.go:63)" subsys=hive level=info msg=Invoked duration="86.142µs" function="garp.newGARPProcessor (processor.go:27)" subsys=hive level=info msg=Starting subsys=hive level=info msg="Started gops server" address="127.0.0.1:9890" subsys=gops level=info msg="Start hook executed" duration="531.791µs" function="gops.registerGopsHooks.func1 (cell.go:43)" subsys=hive level=info msg="Start hook executed" duration="2.31µs" function="metrics.NewRegistry.func1 (registry.go:86)" subsys=hive level=info msg="Establishing connection to apiserver" host="https://10.96.0.1:443" subsys=k8s-client level=info msg="Serving prometheus metrics on :9962" subsys=metrics level=info msg="Connected to apiserver" subsys=k8s-client level=info msg="Start hook executed" duration=14.243017ms function="client.(*compositeClientset).onStart" subsys=hive level=info msg="Start hook executed" duration=8.976593ms function="authmap.newAuthMap.func1 (cell.go:27)" subsys=hive level=info msg="Start hook executed" duration="37.04µs" function="configmap.newMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="38.011µs" function="signalmap.newMap.func1 (cell.go:44)" subsys=hive level=info msg="Start hook executed" duration="210.484µs" function="nodemap.newNodeMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="103.572µs" function="eventsmap.newEventsMap.func1 (cell.go:35)" subsys=hive level=info msg="Start hook executed" duration="74.031µs" function="*cni.cniConfigManager.Start" subsys=hive level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Wrote CNI configuration file to /host/etc/cni/net.d/05-cilium.conflist" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Start hook executed" duration=63.467558ms function="datapath.newDatapath.func1 (cells.go:113)" subsys=hive level=info msg="Restored 0 node IDs from the BPF map" subsys=linux-datapath level=info msg="Start hook executed" duration="129.323µs" function="datapath.newDatapath.func2 (cells.go:126)" subsys=hive level=info msg="Start hook executed" duration="14.09µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Node].Start" subsys=hive level=info msg="Start hook executed" duration="2.52µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNode].Start" subsys=hive level=info msg="Using autogenerated IPv4 allocation range" subsys=node v4Prefix=10.155.0.0/16 level=info msg="no local ciliumnode found, will not restore cilium internal ips from k8s" subsys=daemon level=info msg="Start hook executed" duration=104.290738ms function="node.NewLocalNodeStore.func1 (local_node_store.go:76)" subsys=hive level=info msg="Start hook executed" duration="11.61µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration=100.618899ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration="14.77µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Using discoveryv1.EndpointSlice" subsys=k8s level=info msg="Start hook executed" duration=100.977037ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Start hook executed" duration="18.731µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Pod].Start" subsys=hive level=info msg="Start hook executed" duration="3.881µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Namespace].Start" subsys=hive level=info msg="Start hook executed" duration="3.23µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="2.74µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumClusterwideNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="2.39µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumCIDRGroup].Start" subsys=hive level=info msg="Start hook executed" duration="41.612µs" function="endpointmanager.newDefaultEndpointManager.func1 (cell.go:203)" subsys=hive level=info msg="Start hook executed" duration="25.791µs" function="cmd.newPolicyTrifecta.func1 (policy.go:135)" subsys=hive level=info msg="Start hook executed" duration="71.762µs" function="*manager.manager.Start" subsys=hive level=info msg="Serving cilium node monitor v1.2 API at unix:///var/run/cilium/monitor1_2.sock" subsys=monitor-agent level=info msg="Start hook executed" duration="594.863µs" function="agent.newMonitorAgent.func1 (cell.go:61)" subsys=hive level=info msg="Start hook executed" duration="4.01µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumL2AnnouncementPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="130.103µs" function="*job.group.Start" subsys=hive level=info msg="Start hook executed" duration="417.219µs" function="proxy.newProxy.func1 (cell.go:55)" subsys=hive level=info msg="Envoy: Starting xDS gRPC server listening on /var/run/cilium/envoy/sockets/xds.sock" subsys=envoy-manager level=info msg="Start hook executed" duration=1.170056ms function="signal.provideSignalManager.func1 (cell.go:25)" subsys=hive level=info msg="Datapath signal listener running" subsys=signal level=info msg="Start hook executed" duration=1.596013ms function="auth.registerAuthManager.func1 (cell.go:109)" subsys=hive level=info msg="Start hook executed" duration="6.321µs" function="auth.registerGCJobs.func1 (cell.go:158)" subsys=hive level=info msg="Start hook executed" duration="27.411µs" function="*job.group.Start" subsys=hive level=warning msg="Deprecated value for --kube-proxy-replacement: disabled (use either \"true\", or \"false\")" subsys=daemon level=info msg="Auto-disabling \"enable-node-port\", \"enable-external-ips\", \"bpf-lb-sock\", \"enable-host-port\" features and falling back to \"enable-host-legacy-routing\"" subsys=daemon level=info msg="Inheriting MTU from external network interface" device=ens3 ipAddr=199.204.45.155 mtu=1500 subsys=mtu level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_ipcache, recreating and re-pinning map cilium_ipcache" file-path=/sys/fs/bpf/tc/globals/cilium_ipcache name=cilium_ipcache subsys=bpf level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_tunnel_map, recreating and re-pinning map cilium_tunnel_map" file-path=/sys/fs/bpf/tc/globals/cilium_tunnel_map name=cilium_tunnel_map subsys=bpf level=info msg="Restored services from maps" failedServices=0 restoredServices=0 subsys=service level=info msg="Restored backends from maps" failedBackends=0 restoredBackends=0 skippedBackends=0 subsys=service level=info msg="Reading old endpoints..." subsys=daemon level=info msg="No old endpoints found." subsys=daemon level=info msg="Waiting until all Cilium CRDs are available" subsys=k8s level=info msg="All Cilium CRDs have been found and are available" subsys=k8s level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=info msg="Successfully created CiliumNode resource" subsys=nodediscovery level=warning msg="Unable to create CiliumNode resource, will retry" error="ciliumnodes.cilium.io \"instance\" already exists" subsys=nodediscovery level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=info msg="Received own node information from API server" ipAddr.ipv4=199.204.45.155 ipAddr.ipv6="" k8sNodeIP=199.204.45.155 labels="map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:]" nodeName=instance subsys=k8s v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="k8s mode: Allowing localhost to reach local endpoints" subsys=daemon level=info msg="Detected devices" devices="[]" subsys=linux-datapath level=info msg="Enabling k8s event listener" subsys=k8s-watcher level=info msg="Removing stale endpoint interfaces" subsys=daemon level=info msg="Waiting until local node addressing before starting watchers depending on it" subsys=k8s-watcher level=info msg="Skipping kvstore configuration" subsys=daemon level=info msg="Initializing node addressing" subsys=daemon level=info msg="Initializing cluster-pool IPAM" subsys=ipam v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="Restoring endpoints..." subsys=daemon level=info msg="Endpoints restored" failed=0 restored=0 subsys=daemon level=info msg="Addressing information:" subsys=daemon level=info msg=" Cluster-Name: default" subsys=daemon level=info msg=" Cluster-ID: 0" subsys=daemon level=info msg=" Local node-name: instance" subsys=daemon level=info msg=" Node-IPv6: " subsys=daemon level=info msg=" External-Node IPv4: 199.204.45.155" subsys=daemon level=info msg=" Internal-Node IPv4: 10.0.0.117" subsys=daemon level=info msg=" IPv4 allocation prefix: 10.0.0.0/24" subsys=daemon level=info msg=" Loopback IPv4: 169.254.42.1" subsys=daemon level=info msg=" Local IPv4 addresses:" subsys=daemon level=info msg=" - 199.204.45.155" subsys=daemon level=info msg=" - 172.17.0.100" subsys=daemon level=info msg=" - 10.96.240.200" subsys=daemon level=info msg="Node updated" clusterName=default nodeName=instance subsys=nodemanager level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Waiting until all pre-existing resources have been received" subsys=k8s-watcher level=info msg="Adding local node to cluster" node="{instance default [{InternalIP 199.204.45.155} {CiliumInternalIP 10.0.0.117}] 10.0.0.0/24 [] [] 10.0.0.236 0 local 0 map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:] map[] 1 }" subsys=nodediscovery level=info msg="Initializing identity allocator" subsys=identity-cache level=info msg="Allocating identities between range" cluster-id=0 max=65535 min=256 subsys=identity-cache level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.core.bpf_jit_enable sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.all.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.fib_multipath_use_neigh sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.unprivileged_bpf_disabled sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.timer_migration sysParamValue=0 level=info msg="Setting up BPF datapath" bpfClockSource=ktime bpfInsnSet="" subsys=datapath-loader level=info msg="Iptables rules installed" subsys=iptables level=info msg="Adding new proxy port rules for cilium-dns-egress:41725" id=cilium-dns-egress subsys=proxy level=info msg="Iptables proxy rules installed" subsys=iptables level=info msg="Start hook executed" duration=2.691935832s function="cmd.newDaemonPromise.func1 (daemon_main.go:1663)" subsys=hive level=info msg="Starting IP identity watcher" subsys=ipcache level=info msg="Start hook executed" duration="20.05µs" function="utime.initUtimeSync.func1 (cell.go:33)" subsys=hive level=info msg="Start hook executed" duration="7.13µs" function="*job.group.Start" subsys=hive level=info msg="Initializing daemon" subsys=daemon level=info msg="Validating configured node address ranges" subsys=daemon level=info msg="Starting connection tracking garbage collector" subsys=daemon level=info msg="Start hook executed" duration="153.974µs" function="l2respondermap.newMap.func1 (l2_responder_map4.go:44)" subsys=hive level=info msg="Start hook executed" duration="11.461µs" function="*job.group.Start" subsys=hive level=info msg="Initial scan of connection tracking completed" subsys=ct-gc level=info msg="Regenerating restored endpoints" numRestored=0 subsys=daemon level=info msg="Creating host endpoint" subsys=daemon level=info msg="Finished regenerating restored endpoints" regenerated=0 subsys=daemon total=0 level=info msg="Deleted orphan backends" orphanBackends=0 subsys=service level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=889 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=889 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=889 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Launching Cilium health daemon" subsys=daemon level=info msg="Launching Cilium health endpoint" subsys=daemon level=info msg="Started healthz status API server" address="127.0.0.1:9879" subsys=daemon level=info msg="Processing queued endpoint deletion requests from /var/run/cilium/deleteQueue" subsys=daemon level=info msg="processing 0 queued deletion requests" subsys=daemon level=info msg="Initializing Cilium API" subsys=daemon level=info msg="Daemon initialization completed" bootstrapTime=3.714152288s subsys=daemon level=info msg="Hubble server is disabled" subsys=hubble level=info msg="Serving cilium API at unix:///var/run/cilium/cilium.sock" subsys=daemon level=info msg="Compiled new BPF template" BPFCompilationTime=302.8921ms file-path=/var/run/cilium/state/templates/c077c489609f3c705d2ab8df613d985973bdea0a4c81d4694857b2712a3e4736/bpf_host.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=889 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2501 ipv4=10.0.0.236 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2501 identityLabels="reserved:health" ipv4=10.0.0.236 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2501 identity=4 identityLabels="reserved:health" ipv4=10.0.0.236 ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.132 aaa42cb7-1512-494c-959a-4f173ef9d7fe default }" containerID=6d64d0269e5ab3302c252d83f713259ab9fdb51e56a8524196f7e5fc188163b8 datapathConfiguration="&{false false false false false }" interface=lxc7d5fad21418c k8sPodName=kube-system/coredns-7c96b6546b-kpgnt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6d64d0269e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1046 ipv4=10.0.0.132 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-kpgnt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6d64d0269e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1046 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.132 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-kpgnt subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:kube-system]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.214 7d61ffb4-a017-4608-bb43-fd7465594f19 default }" containerID=a340bc4eeeb179ed0bddc950aaa469a26c1807a0349dcc49967ce953ed1e28ea datapathConfiguration="&{false false false false false }" interface=lxc628d61792f2b k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-v4qpv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a340bc4eee datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2535 ipv4=10.0.0.214 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-v4qpv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a340bc4eee datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2535 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=24ca40ab-27fe-4fa5-9f5f-28dca5521587,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=24ca40ab-27fe-4fa5-9f5f-28dca5521587,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.214 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-v4qpv subsys=endpoint level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=coredns;k8s:io.kubernetes.pod.namespace=kube-system;k8s:k8s-app=kube-dns;" subsys=allocator level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="Identity of endpoint changed" containerID=6d64d0269e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1046 identity=13864 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.132 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-kpgnt oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6d64d0269e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1046 identity=13864 ipv4=10.0.0.132 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-kpgnt subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=a340bc4eee datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2535 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.214 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-v4qpv line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=certgen;k8s:batch.kubernetes.io/controller-uid=24ca40ab-27fe-4fa5-9f5f-28dca5521587;k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen;k8s:controller-uid=24ca40ab-27fe-4fa5-9f5f-28dca5521587;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;k8s:job-name=envoy-gateway-gateway-helm-certgen;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a340bc4eee datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2535 identity=3952 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=24ca40ab-27fe-4fa5-9f5f-28dca5521587,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=24ca40ab-27fe-4fa5-9f5f-28dca5521587,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.214 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-v4qpv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a340bc4eee datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2535 identity=3952 ipv4=10.0.0.214 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-v4qpv subsys=endpoint level=info msg="Serving cilium health API at unix:///var/run/cilium/health.sock" subsys=health-server level=info msg="Compiled new BPF template" BPFCompilationTime=1.11052573s file-path=/var/run/cilium/state/templates/1e8460a6b4a8941ab4bf66d6ceb18632eb6ce18cc4eea9f87df683ae87b67538/bpf_lxc.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2501 identity=4 ipv4=10.0.0.236 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6d64d0269e datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1046 identity=13864 ipv4=10.0.0.132 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-kpgnt subsys=endpoint level=info msg="Successful endpoint creation" containerID=6d64d0269e datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1046 identity=13864 ipv4=10.0.0.132 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-kpgnt subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=a340bc4eee datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2535 identity=3952 ipv4=10.0.0.214 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-v4qpv subsys=endpoint level=info msg="Successful endpoint creation" containerID=a340bc4eee datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2535 identity=3952 ipv4=10.0.0.214 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-v4qpv subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=a340bc4eee endpointID=2535 k8sNamespace=envoy-gateway-system k8sPodName=envoy-gateway-gateway-helm-certgen-v4qpv subsys=daemon level=info msg="Releasing key" key="[k8s:app=certgen k8s:batch.kubernetes.io/controller-uid=24ca40ab-27fe-4fa5-9f5f-28dca5521587 k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen k8s:controller-uid=24ca40ab-27fe-4fa5-9f5f-28dca5521587 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen k8s:io.kubernetes.pod.namespace=envoy-gateway-system k8s:job-name=envoy-gateway-gateway-helm-certgen]" subsys=allocator level=info msg="Removed endpoint" containerID=a340bc4eee datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2535 identity=3952 ipv4=10.0.0.214 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-v4qpv subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.185 a904f2dc-d8c4-446a-88c5-6c559c56c811 default }" containerID=ae94160b7a9fe428e36b6e4e6ffa9514a934dda51b19a0b9f98656333ebe1b8f datapathConfiguration="&{false false false false false }" interface=lxcdd767c474c40 k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-bbdh2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ae94160b7a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=413 ipv4=10.0.0.185 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-bbdh2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ae94160b7a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=413 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.185 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-bbdh2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=envoy-gateway;k8s:app.kubernetes.io/name=gateway-helm;k8s:control-plane=envoy-gateway;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ae94160b7a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=413 identity=27020 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.185 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-bbdh2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ae94160b7a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=413 identity=27020 ipv4=10.0.0.185 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-bbdh2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ae94160b7a datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=413 identity=27020 ipv4=10.0.0.185 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-bbdh2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=ae94160b7a datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=413 identity=27020 ipv4=10.0.0.185 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-bbdh2 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=889 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_00889 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_00889 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_00889 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_00889:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=889 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.49 3e3f98fc-edee-49f8-a75f-c411e8939c23 default }" containerID=ac8a57482512792b690e56c214fa4044a26f28a698602c1b5a39d5c71293efd9 datapathConfiguration="&{false false false false false }" interface=lxc99f265ff8d2b k8sPodName=kube-system/coredns-67659f764b-tnn2h labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ac8a574825 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=639 ipv4=10.0.0.49 ipv6= k8sPodName=kube-system/coredns-67659f764b-tnn2h subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ac8a574825 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=639 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.49 ipv6= k8sPodName=kube-system/coredns-67659f764b-tnn2h subsys=endpoint level=info msg="Identity of endpoint changed" containerID=ac8a574825 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=639 identity=13864 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.49 ipv6= k8sPodName=kube-system/coredns-67659f764b-tnn2h oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ac8a574825 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=639 identity=13864 ipv4=10.0.0.49 ipv6= k8sPodName=kube-system/coredns-67659f764b-tnn2h subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ac8a574825 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=639 identity=13864 ipv4=10.0.0.49 ipv6= k8sPodName=kube-system/coredns-67659f764b-tnn2h subsys=endpoint level=info msg="Successful endpoint creation" containerID=ac8a574825 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=639 identity=13864 ipv4=10.0.0.49 ipv6= k8sPodName=kube-system/coredns-67659f764b-tnn2h subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.46 b0509bab-1899-4287-b0bc-596ed06b9872 default }" containerID=ca4bbdba77d6aac9f57134173f79fb92f93b084898fbf4fac22b4f8868682235 datapathConfiguration="&{false false false false false }" interface=lxcc8bd3f03545e k8sPodName=kube-system/coredns-67659f764b-v7s2v labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ca4bbdba77 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=203 ipv4=10.0.0.46 ipv6= k8sPodName=kube-system/coredns-67659f764b-v7s2v subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ca4bbdba77 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=203 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.46 ipv6= k8sPodName=kube-system/coredns-67659f764b-v7s2v subsys=endpoint level=info msg="Identity of endpoint changed" containerID=ca4bbdba77 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=203 identity=13864 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.46 ipv6= k8sPodName=kube-system/coredns-67659f764b-v7s2v oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ca4bbdba77 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=203 identity=13864 ipv4=10.0.0.46 ipv6= k8sPodName=kube-system/coredns-67659f764b-v7s2v subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ca4bbdba77 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=203 identity=13864 ipv4=10.0.0.46 ipv6= k8sPodName=kube-system/coredns-67659f764b-v7s2v subsys=endpoint level=info msg="Successful endpoint creation" containerID=ca4bbdba77 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=203 identity=13864 ipv4=10.0.0.46 ipv6= k8sPodName=kube-system/coredns-67659f764b-v7s2v subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.81 ec4685a4-134e-4811-975d-a0415efd3e69 default }" containerID=830d20db017f29c3dfaab018f9f2f578a792fe32e646d6ebb894ae3c5c232a69 datapathConfiguration="&{false false false false false }" interface=lxcea78b46b2b02 k8sPodName=local-path-storage/local-path-provisioner-679c578f5-qfs9z labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=830d20db01 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=771 ipv4=10.0.0.81 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-qfs9z subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=830d20db01 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=771 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.81 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-qfs9z subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=830d20db01 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=771 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.81 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-qfs9z line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=local-path-provisioner;k8s:app.kubernetes.io/name=local-path-provisioner;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=830d20db01 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=771 identity=10631 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.81 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-qfs9z oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=830d20db01 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=771 identity=10631 ipv4=10.0.0.81 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-qfs9z subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=830d20db01 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=771 identity=10631 ipv4=10.0.0.81 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-qfs9z subsys=endpoint level=info msg="Successful endpoint creation" containerID=830d20db01 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=771 identity=10631 ipv4=10.0.0.81 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-qfs9z subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=6d64d0269e endpointID=1046 k8sNamespace=kube-system k8sPodName=coredns-7c96b6546b-kpgnt subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=coredns k8s:io.kubernetes.pod.namespace=kube-system k8s:k8s-app=kube-dns]" subsys=allocator level=info msg="Removed endpoint" containerID=6d64d0269e datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1046 identity=13864 ipv4=10.0.0.132 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-kpgnt subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.252 c1bb3f12-8b54-466d-aa58-bafaef0b8a81 default }" containerID=9b2ad1feca373e749175586001289abd9945dee429164b89b99e7fc19929aa58 datapathConfiguration="&{false false false false false }" interface=lxc3bb70b509c4b k8sPodName=cert-manager/cert-manager-webhook-548949fc64-d4w6d labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9b2ad1feca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2588 ipv4=10.0.0.252 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-d4w6d subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9b2ad1feca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2588 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.252 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-d4w6d subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.175 6c34baaf-381a-46d0-9c05-620bd88d5658 default }" containerID=fd3a786ef543b34631f3fce3e1cdd9a6ba2fe0ae3b1a7c7504757248cb115172 datapathConfiguration="&{false false false false false }" interface=lxc285325a36fb7 k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-mmtgm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fd3a786ef5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=410 ipv4=10.0.0.175 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-mmtgm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fd3a786ef5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=410 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.175 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-mmtgm subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=fd3a786ef5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=410 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.175 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-mmtgm line=611 subsys=endpoint level=info msg="Invalid state transition skipped" containerID=9b2ad1feca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2588 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.252 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-d4w6d line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=webhook;k8s:app.kubernetes.io/component=webhook;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=webhook;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9b2ad1feca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2588 identity=4310 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.252 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-d4w6d oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9b2ad1feca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2588 identity=4310 ipv4=10.0.0.252 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-d4w6d subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=cainjector;k8s:app.kubernetes.io/component=cainjector;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cainjector;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fd3a786ef5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=410 identity=31431 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.175 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-mmtgm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fd3a786ef5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=410 identity=31431 ipv4=10.0.0.175 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-mmtgm subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=fd3a786ef5 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=410 identity=31431 ipv4=10.0.0.175 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-mmtgm subsys=endpoint level=info msg="Successful endpoint creation" containerID=fd3a786ef5 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=410 identity=31431 ipv4=10.0.0.175 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-mmtgm subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=9b2ad1feca datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2588 identity=4310 ipv4=10.0.0.252 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-d4w6d subsys=endpoint level=info msg="Successful endpoint creation" containerID=9b2ad1feca datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2588 identity=4310 ipv4=10.0.0.252 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-d4w6d subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.65 7b2781d0-f1d4-4df9-b937-3ecf040c4c6c default }" containerID=1dcd29f32d1c2eb56e437a02135a12537fca9790cfa6ca28bac1d15959f6bda1 datapathConfiguration="&{false false false false false }" interface=lxca7a0c9fb813c k8sPodName=cert-manager/cert-manager-75c4c745bc-5msm9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1dcd29f32d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=282 ipv4=10.0.0.65 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-5msm9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1dcd29f32d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=282 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.65 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-5msm9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=cert-manager;k8s:app.kubernetes.io/component=controller;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cert-manager;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1dcd29f32d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=282 identity=33011 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.65 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-5msm9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1dcd29f32d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=282 identity=33011 ipv4=10.0.0.65 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-5msm9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1dcd29f32d datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=282 identity=33011 ipv4=10.0.0.65 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-5msm9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=1dcd29f32d datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=282 identity=33011 ipv4=10.0.0.65 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-5msm9 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.99 d70ca5ec-9f80-44bd-a520-93c211634c4f default }" containerID=1a83e43a552669c958601ba56fbeef76c3f8c29fc578dfeb53a5bd5389d33f30 datapathConfiguration="&{false false false false false }" interface=lxca4072372ee83 k8sPodName=cert-manager/cert-manager-startupapicheck-lddcn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1a83e43a55 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=435 ipv4=10.0.0.99 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-lddcn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1a83e43a55 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=435 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=cbec6873-25ab-417d-b0de-85b057e6944d,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=cbec6873-25ab-417d-b0de-85b057e6944d,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.99 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-lddcn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=startupapicheck;k8s:app.kubernetes.io/component=startupapicheck;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=startupapicheck;k8s:app.kubernetes.io/version=v1.11.5;k8s:batch.kubernetes.io/controller-uid=cbec6873-25ab-417d-b0de-85b057e6944d;k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck;k8s:controller-uid=cbec6873-25ab-417d-b0de-85b057e6944d;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck;k8s:io.kubernetes.pod.namespace=cert-manager;k8s:job-name=cert-manager-startupapicheck;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1a83e43a55 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=435 identity=20902 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=cbec6873-25ab-417d-b0de-85b057e6944d,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=cbec6873-25ab-417d-b0de-85b057e6944d,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.99 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-lddcn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1a83e43a55 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=435 identity=20902 ipv4=10.0.0.99 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-lddcn subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1a83e43a55 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=435 identity=20902 ipv4=10.0.0.99 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-lddcn subsys=endpoint level=info msg="Successful endpoint creation" containerID=1a83e43a55 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=435 identity=20902 ipv4=10.0.0.99 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-lddcn subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=1a83e43a55 endpointID=435 k8sNamespace=cert-manager k8sPodName=cert-manager-startupapicheck-lddcn subsys=daemon level=info msg="Releasing key" key="[k8s:app=startupapicheck k8s:app.kubernetes.io/component=startupapicheck k8s:app.kubernetes.io/instance=cert-manager k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=startupapicheck k8s:app.kubernetes.io/version=v1.11.5 k8s:batch.kubernetes.io/controller-uid=cbec6873-25ab-417d-b0de-85b057e6944d k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck k8s:controller-uid=cbec6873-25ab-417d-b0de-85b057e6944d k8s:helm.sh/chart=cert-manager-v1.11.5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager k8s:io.cilium.k8s.namespace.labels.name=cert-manager k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck k8s:io.kubernetes.pod.namespace=cert-manager k8s:job-name=cert-manager-startupapicheck]" subsys=allocator level=info msg="Removed endpoint" containerID=1a83e43a55 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=435 identity=20902 ipv4=10.0.0.99 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-lddcn subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.188 92daa678-cd5c-43d3-86cb-77fd0fd3d970 default }" containerID=556f96f76fb75dd2bc6ade71f56ee526fcefe4fbafbfbd3387f6dfb09b2460fa datapathConfiguration="&{false false false false false }" interface=lxc8a667b643e7a k8sPodName=ingress-nginx/ingress-nginx-admission-create-drv2l labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=556f96f76f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2540 ipv4=10.0.0.188 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-drv2l subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=556f96f76f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2540 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=1a71a85e-f4fe-4bad-b338-1cf530c6edb3,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=1a71a85e-f4fe-4bad-b338-1cf530c6edb3,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.188 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-drv2l subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=1a71a85e-f4fe-4bad-b338-1cf530c6edb3;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create;k8s:controller-uid=1a71a85e-f4fe-4bad-b338-1cf530c6edb3;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-create;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=556f96f76f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2540 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.188 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-drv2l line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=556f96f76f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2540 identity=1742 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=1a71a85e-f4fe-4bad-b338-1cf530c6edb3,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=1a71a85e-f4fe-4bad-b338-1cf530c6edb3,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.188 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-drv2l oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=556f96f76f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2540 identity=1742 ipv4=10.0.0.188 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-drv2l subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=556f96f76f datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2540 identity=1742 ipv4=10.0.0.188 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-drv2l subsys=endpoint level=info msg="Successful endpoint creation" containerID=556f96f76f datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2540 identity=1742 ipv4=10.0.0.188 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-drv2l subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=556f96f76f endpointID=2540 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-create-drv2l subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=1a71a85e-f4fe-4bad-b338-1cf530c6edb3 k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create k8s:controller-uid=1a71a85e-f4fe-4bad-b338-1cf530c6edb3 k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-create]" subsys=allocator level=info msg="Removed endpoint" containerID=556f96f76f datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2540 identity=1742 ipv4=10.0.0.188 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-drv2l subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.24 2ed93fa8-4fe8-419a-9413-d519f2a03fdf default }" containerID=245b9afd03b0aba10532480b20d00df3e20973ac4d8b9e8c09ca1bfdb9af81fc datapathConfiguration="&{false false false false false }" interface=lxcc80fc30a7a03 k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-7hwqh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=245b9afd03 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1597 ipv4=10.0.0.24 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-7hwqh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=245b9afd03 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1597 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.24 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-7hwqh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=default-backend;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend;k8s:io.kubernetes.pod.namespace=ingress-nginx;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=245b9afd03 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1597 identity=65282 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.24 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-7hwqh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=245b9afd03 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1597 identity=65282 ipv4=10.0.0.24 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-7hwqh subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=245b9afd03 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1597 identity=65282 ipv4=10.0.0.24 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-7hwqh subsys=endpoint level=info msg="Successful endpoint creation" containerID=245b9afd03 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1597 identity=65282 ipv4=10.0.0.24 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-7hwqh subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.214 0740f7ee-f231-4410-8df2-1cc8f3c4a0c4 default }" containerID=6622cf4ec67e12403fc149e6b79d97536ed04fe0c02d2e0e2f23c3b48390c0c1 datapathConfiguration="&{false false false false false }" interface=lxc02a28cf4bbab k8sPodName=ingress-nginx/ingress-nginx-admission-patch-wfsf7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6622cf4ec6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2961 ipv4=10.0.0.214 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-wfsf7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6622cf4ec6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2961 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=5e9f2ea1-eaf1-4d32-8fe3-5f0a4bd0e3e4,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=5e9f2ea1-eaf1-4d32-8fe3-5f0a4bd0e3e4,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.214 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-wfsf7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=5e9f2ea1-eaf1-4d32-8fe3-5f0a4bd0e3e4;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch;k8s:controller-uid=5e9f2ea1-eaf1-4d32-8fe3-5f0a4bd0e3e4;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-patch;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6622cf4ec6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2961 identity=9607 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=5e9f2ea1-eaf1-4d32-8fe3-5f0a4bd0e3e4,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=5e9f2ea1-eaf1-4d32-8fe3-5f0a4bd0e3e4,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.214 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-wfsf7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6622cf4ec6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2961 identity=9607 ipv4=10.0.0.214 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-wfsf7 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6622cf4ec6 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2961 identity=9607 ipv4=10.0.0.214 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-wfsf7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=6622cf4ec6 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2961 identity=9607 ipv4=10.0.0.214 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-wfsf7 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=6622cf4ec6 endpointID=2961 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-patch-wfsf7 subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=5e9f2ea1-eaf1-4d32-8fe3-5f0a4bd0e3e4 k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch k8s:controller-uid=5e9f2ea1-eaf1-4d32-8fe3-5f0a4bd0e3e4 k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-patch]" subsys=allocator level=info msg="Removed endpoint" containerID=6622cf4ec6 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2961 identity=9607 ipv4=10.0.0.214 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-wfsf7 subsys=endpoint level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"messaging-topology-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9443 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-messaging-topology-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=0d5d5ead-dd1c-463e-bae4-8fc482c73346] Description:}]" policyAddRequest=621eeac4-9b66-4389-98bc-309b3aa50008 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=621eeac4-9b66-4389-98bc-309b3aa50008 policyRevision=2 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-messaging-topology-operator subsys=k8s-watcher level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"rabbitmq-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-cluster-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=6db06cdf-ea70-4e1d-ba31-965af181d001] Description:}]" policyAddRequest=5f1c972c-44e7-4ddc-9dd4-2c79de17d653 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-cluster-operator subsys=k8s-watcher level=info msg="Policy imported via API, recalculating..." policyAddRequest=5f1c972c-44e7-4ddc-9dd4-2c79de17d653 policyRevision=3 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.36 4bb1bfb2-87be-4635-9ad7-714bfaf92d69 default }" containerID=dc6565e996e3bb35897b7d7487c59237c49d7c13546f9c6f64a953f9f411a335 datapathConfiguration="&{false false false false false }" interface=lxc63a8f8f617d3 k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-jjsgn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=dc6565e996 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1072 ipv4=10.0.0.36 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-jjsgn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=dc6565e996 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1072 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.9.0,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.36 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-jjsgn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=2.9.0;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=dc6565e996 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1072 identity=41924 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.9.0,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.36 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-jjsgn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=dc6565e996 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1072 identity=41924 ipv4=10.0.0.36 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-jjsgn subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=dc6565e996 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1072 identity=41924 ipv4=10.0.0.36 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-jjsgn subsys=endpoint level=info msg="Successful endpoint creation" containerID=dc6565e996 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1072 identity=41924 ipv4=10.0.0.36 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-jjsgn subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.207 8d3a1ddf-a35a-40d1-9149-e15c22ac0e4c default }" containerID=520504a4b8b454ee3e454d844a094f33757bf9d64a895e982d62ef614aef0411 datapathConfiguration="&{false false false false false }" interface=lxc835538b6e872 k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-z7sc9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=520504a4b8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1183 ipv4=10.0.0.207 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-z7sc9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=520504a4b8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1183 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.14.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.207 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-z7sc9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=messaging-topology-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=1.14.1;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=520504a4b8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1183 identity=11625 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.14.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.207 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-z7sc9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=520504a4b8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1183 identity=11625 ipv4=10.0.0.207 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-z7sc9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=520504a4b8 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1183 identity=11625 ipv4=10.0.0.207 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-z7sc9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=520504a4b8 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1183 identity=11625 ipv4=10.0.0.207 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-z7sc9 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.194 f3744ad3-f83a-4b3d-a471-5d3cdcc61aaf default }" containerID=5862591f2ced3ecb8284b5f0d4c5ca5f8201daa3f7ccad444d355704764e2ea2 datapathConfiguration="&{false false false false false }" interface=lxc5341ed87eeea k8sPodName=openstack/pxc-operator-7cff949c8b-5n5vk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5862591f2c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1811 ipv4=10.0.0.194 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-5n5vk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5862591f2c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1811 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.194 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-5n5vk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=operator;k8s:app.kubernetes.io/instance=pxc-operator;k8s:app.kubernetes.io/name=pxc-operator;k8s:app.kubernetes.io/part-of=pxc-operator;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5862591f2c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1811 identity=40858 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.194 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-5n5vk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5862591f2c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1811 identity=40858 ipv4=10.0.0.194 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-5n5vk subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=5862591f2c datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1811 identity=40858 ipv4=10.0.0.194 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-5n5vk subsys=endpoint level=info msg="Successful endpoint creation" containerID=5862591f2c datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1811 identity=40858 ipv4=10.0.0.194 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-5n5vk subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.230 a1347488-ee16-4431-89c9-3a88a9066e2d default }" containerID=39030769dbb4796ec94991ccdbf7e2ee2639478a848fee0d02e747298613c6c9 datapathConfiguration="&{false false false false false }" interface=lxcf5137070cd2e k8sPodName=local-path-storage/helper-pod-create-pvc-3956db5c-e5e6-4df8-ba7e-a94fcfcf9a71 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=39030769db datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2967 ipv4=10.0.0.230 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3956db5c-e5e6-4df8-ba7e-a94fcfcf9a71 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=39030769db datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2967 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.230 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3956db5c-e5e6-4df8-ba7e-a94fcfcf9a71 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=39030769db datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2967 identity=43561 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.230 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3956db5c-e5e6-4df8-ba7e-a94fcfcf9a71 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=39030769db datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2967 identity=43561 ipv4=10.0.0.230 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3956db5c-e5e6-4df8-ba7e-a94fcfcf9a71 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.176 339a4f0e-46c0-4c52-8f73-87cb0ac5900a default }" containerID=32ad85fa664bec88aef9f13eb259004758d29004d566ce018e3003338a88551d datapathConfiguration="&{false false false false false }" interface=lxc85506c7b9b28 k8sPodName=openstack/percona-xtradb-haproxy-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=32ad85fa66 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=146 ipv4=10.0.0.176 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=32ad85fa66 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=146 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.176 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=haproxy;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=32ad85fa66 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=146 identity=3027 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.176 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=32ad85fa66 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=146 identity=3027 ipv4=10.0.0.176 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=39030769db datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=2967 identity=43561 ipv4=10.0.0.230 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3956db5c-e5e6-4df8-ba7e-a94fcfcf9a71 subsys=endpoint level=info msg="Successful endpoint creation" containerID=39030769db datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=2967 identity=43561 ipv4=10.0.0.230 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3956db5c-e5e6-4df8-ba7e-a94fcfcf9a71 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=32ad85fa66 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=146 identity=3027 ipv4=10.0.0.176 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=32ad85fa66 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=146 identity=3027 ipv4=10.0.0.176 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=39030769db endpointID=2967 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-3956db5c-e5e6-4df8-ba7e-a94fcfcf9a71 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=39030769db datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=2967 identity=43561 ipv4=10.0.0.230 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3956db5c-e5e6-4df8-ba7e-a94fcfcf9a71 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.190 02226f76-7778-4df7-9017-f04cba48ebaf default }" containerID=418ad742447670464f7dfff7d5825426090757b799735b4d2a643a0bb0f4c288 datapathConfiguration="&{false false false false false }" interface=lxc5de9b265fb78 k8sPodName=openstack/percona-xtradb-pxc-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=418ad74244 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2138 ipv4=10.0.0.190 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=418ad74244 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2138 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.190 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=pxc;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=418ad74244 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2138 identity=64672 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.190 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=418ad74244 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2138 identity=64672 ipv4=10.0.0.190 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=418ad74244 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=2138 identity=64672 ipv4=10.0.0.190 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=418ad74244 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=2138 identity=64672 ipv4=10.0.0.190 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/instance\":\"valkey\",\"k8s:app.kubernetes.io/name\":\"valkey\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:6379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:26379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:} {IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9121 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=valkey k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=3e463fb9-fe2c-4b8c-830b-ce98d05bd7ef] Description:}]" policyAddRequest=5bcab815-a77e-40fb-8a81-420f76d7b4f9 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=5bcab815-a77e-40fb-8a81-420f76d7b4f9 policyRevision=4 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=valkey subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.110 2750a29a-288e-4e33-8700-0fa0033ea775 default }" containerID=2182646061d5bc7d0528e6e8c2ff66703031f9d3782ab89bca2a474874e3b879 datapathConfiguration="&{false false false false false }" interface=lxccaec6913df05 k8sPodName=local-path-storage/helper-pod-create-pvc-4ba29b6d-3204-4728-8b77-02a4738deb56 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2182646061 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3137 ipv4=10.0.0.110 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4ba29b6d-3204-4728-8b77-02a4738deb56 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2182646061 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3137 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.110 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4ba29b6d-3204-4728-8b77-02a4738deb56 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2182646061 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3137 identity=43561 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.110 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4ba29b6d-3204-4728-8b77-02a4738deb56 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2182646061 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3137 identity=43561 ipv4=10.0.0.110 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4ba29b6d-3204-4728-8b77-02a4738deb56 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2182646061 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3137 identity=43561 ipv4=10.0.0.110 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4ba29b6d-3204-4728-8b77-02a4738deb56 subsys=endpoint level=info msg="Successful endpoint creation" containerID=2182646061 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3137 identity=43561 ipv4=10.0.0.110 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4ba29b6d-3204-4728-8b77-02a4738deb56 subsys=daemon level=info msg="Delete endpoint request" containerID=2182646061 endpointID=3137 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-4ba29b6d-3204-4728-8b77-02a4738deb56 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=2182646061 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3137 identity=43561 ipv4=10.0.0.110 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4ba29b6d-3204-4728-8b77-02a4738deb56 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.93 6b80a729-401b-47ff-9bac-1ce22f643c5b default }" containerID=6eb7ca2c85cb348c6452285d1e34131b0a263c19e6915b3dd587c413e433895a datapathConfiguration="&{false false false false false }" interface=lxc0b0c1b40c08e k8sPodName=openstack/valkey-node-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6eb7ca2c85 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1403 ipv4=10.0.0.93 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6eb7ca2c85 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1403 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.93 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=6eb7ca2c85 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1403 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.93 ipv6= k8sPodName=openstack/valkey-node-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=node;k8s:app.kubernetes.io/instance=valkey;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=valkey;k8s:app.kubernetes.io/version=8.0.2;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=valkey-2.4.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=valkey;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=valkey-node-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6eb7ca2c85 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1403 identity=10431 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.93 ipv6= k8sPodName=openstack/valkey-node-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6eb7ca2c85 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1403 identity=10431 ipv4=10.0.0.93 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6eb7ca2c85 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1403 identity=10431 ipv4=10.0.0.93 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=6eb7ca2c85 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1403 identity=10431 ipv4=10.0.0.93 ipv6= k8sPodName=openstack/valkey-node-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"keycloak\",\"k8s:app.kubernetes.io/instance\":\"keycloak\",\"k8s:app.kubernetes.io/name\":\"keycloak\",\"k8s:io.kubernetes.pod.namespace\":\"auth-system\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:7800 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:8080 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=keycloak k8s:io.cilium.k8s.policy.namespace=auth-system k8s:io.cilium.k8s.policy.uid=54844066-f139-404c-a3b0-136a92e4224f] Description:}]" policyAddRequest=18c08d48-49f5-4ae1-9235-8694c60a1479 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=18c08d48-49f5-4ae1-9235-8694c60a1479 policyRevision=5 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=keycloak subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.133 ba616da5-769c-47b2-b2a9-7257eac89b5b default }" containerID=488d91485ec346a3310c08680c1febe0ecdcd6d13000ce28d0c27c768a34d493 datapathConfiguration="&{false false false false false }" interface=lxc651048b13853 k8sPodName=auth-system/keycloak-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=488d91485e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1182 ipv4=10.0.0.133 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=488d91485e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1182 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.133 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:auth-system k8s:io.cilium.k8s.namespace.labels.name:auth-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=keycloak;k8s:app.kubernetes.io/instance=keycloak;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=keycloak;k8s:app.kubernetes.io/version=24.0.5;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=keycloak-21.4.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system;k8s:io.cilium.k8s.namespace.labels.name=auth-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keycloak;k8s:io.kubernetes.pod.namespace=auth-system;k8s:statefulset.kubernetes.io/pod-name=keycloak-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=488d91485e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1182 identity=7924 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.133 ipv6= k8sPodName=auth-system/keycloak-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=488d91485e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1182 identity=7924 ipv4=10.0.0.133 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=488d91485e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1182 identity=7924 ipv4=10.0.0.133 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=488d91485e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1182 identity=7924 ipv4=10.0.0.133 ipv6= k8sPodName=auth-system/keycloak-0 subsys=daemon level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.008691005992397907 newInterval=7m30s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.211 ce8f8e63-926d-44c6-80d2-49cda3a69bc0 default }" containerID=18528e0d96647b1afff52424672ddd79b4177e2ba73939d72a49ede9f05b595e datapathConfiguration="&{false false false false false }" interface=lxcb473cbfc1f68 k8sPodName=monitoring/node-feature-discovery-worker-8rgbk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=18528e0d96 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=479 ipv4=10.0.0.211 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-8rgbk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=18528e0d96 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=479 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.211 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-8rgbk subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.7 824749bf-d023-4814-8057-04651ef2e7e4 default }" containerID=bae60c35ba67e25fa2155ea70fc7e2e1da86df3a121c6349e4479f700ee24e9e datapathConfiguration="&{false false false false false }" interface=lxce5cbbce6e7e4 k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-vlkvv labels="[]" subsys=daemon sync-build=true level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="New endpoint" containerID=bae60c35ba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3132 ipv4=10.0.0.7 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-vlkvv subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.206 a7faea4d-6d4f-447b-ab60-0ae61c45566c default }" containerID=98051624b903e6f3aef329442f08241609d2bdfab9b4e9d5a10cad3e67b13fdf datapathConfiguration="&{false false false false false }" interface=lxc715b245297ad k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-bfhzb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=98051624b9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3204 ipv4=10.0.0.206 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-bfhzb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bae60c35ba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3132 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.7 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-vlkvv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=98051624b9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3204 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.206 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-bfhzb subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=worker;" subsys=allocator level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Identity of endpoint changed" containerID=18528e0d96 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=479 identity=40974 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.211 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-8rgbk oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=18528e0d96 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=479 identity=40974 ipv4=10.0.0.211 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-8rgbk subsys=endpoint level=info msg="Invalid state transition skipped" containerID=98051624b9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3204 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.206 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-bfhzb line=611 subsys=endpoint level=info msg="Invalid state transition skipped" containerID=bae60c35ba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3132 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.7 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-vlkvv line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=master;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=bae60c35ba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3132 identity=7120 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.7 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-vlkvv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=bae60c35ba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3132 identity=7120 ipv4=10.0.0.7 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-vlkvv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=gc;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=98051624b9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3204 identity=4146 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.206 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-bfhzb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=98051624b9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3204 identity=4146 ipv4=10.0.0.206 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-bfhzb subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=18528e0d96 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=479 identity=40974 ipv4=10.0.0.211 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-8rgbk subsys=endpoint level=info msg="Successful endpoint creation" containerID=18528e0d96 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=479 identity=40974 ipv4=10.0.0.211 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-8rgbk subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=bae60c35ba datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3132 identity=7120 ipv4=10.0.0.7 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-vlkvv subsys=endpoint level=info msg="Successful endpoint creation" containerID=bae60c35ba datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3132 identity=7120 ipv4=10.0.0.7 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-vlkvv subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=98051624b9 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3204 identity=4146 ipv4=10.0.0.206 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-bfhzb subsys=endpoint level=info msg="Successful endpoint creation" containerID=98051624b9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3204 identity=4146 ipv4=10.0.0.206 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-bfhzb subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.139 6f5a2db7-00ea-4540-a744-19c7baa0a88a default }" containerID=f9fbbaefb654ad0568641837d544a7cc9ed0b8b1824333a7fd6caa506be69654 datapathConfiguration="&{false false false false false }" interface=lxc930995e1e389 k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-r4twn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f9fbbaefb6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1357 ipv4=10.0.0.139 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-r4twn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f9fbbaefb6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1357 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.139 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-r4twn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:secretgen-controller]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=secretgen-controller;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa;k8s:io.kubernetes.pod.namespace=secretgen-controller;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f9fbbaefb6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1357 identity=64427 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.139 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-r4twn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f9fbbaefb6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1357 identity=64427 ipv4=10.0.0.139 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-r4twn subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f9fbbaefb6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1357 identity=64427 ipv4=10.0.0.139 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-r4twn subsys=endpoint level=info msg="Successful endpoint creation" containerID=f9fbbaefb6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1357 identity=64427 ipv4=10.0.0.139 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-r4twn subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=889 identity=1 identityLabels="k8s:feature.node.kubernetes.io/cpu-cpuid.ADX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AESNI=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX2=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CLZERO=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CMPXCHG8=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FMA3=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSROPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.HYPERVISOR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IA32_ARCH_CAP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBPB=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBRS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.LAHF=true,k8s:feature.node.kubernetes.io/cpu-cpuid.MOVBE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.NRIPS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.OSXSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SHA=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SPEC_CTRL_SSBD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SSE4A=true,k8s:feature.node.kubernetes.io/cpu-cpuid.STIBP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVM=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVMNP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSCALL=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSEE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.TOPEXT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.WBNOINVD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.X87=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XGETBV1=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEC=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEOPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVES=true,k8s:feature.node.kubernetes.io/cpu-hardware_multithreading=false,k8s:feature.node.kubernetes.io/cpu-model.family=23,k8s:feature.node.kubernetes.io/cpu-model.id=49,k8s:feature.node.kubernetes.io/cpu-model.vendor_id=AMD,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ=true,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ_IDLE=true,k8s:feature.node.kubernetes.io/kernel-version.full=5.15.0-174-generic,k8s:feature.node.kubernetes.io/kernel-version.major=5,k8s:feature.node.kubernetes.io/kernel-version.minor=15,k8s:feature.node.kubernetes.io/kernel-version.revision=0,k8s:feature.node.kubernetes.io/pci-0300_1af4.present=true,k8s:feature.node.kubernetes.io/system-os_release.ID=ubuntu,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.major=22,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.minor=04,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID=22.04,k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_00889 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_00889 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_00889 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_00889:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=889 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.187 69709512-7f14-4923-be28-0322431bf7e5 default }" containerID=62c7b19269036bb9690c93fea0f29969e3eac8b214cf220f272fdfbd93c7263f datapathConfiguration="&{false false false false false }" interface=lxcef1f192803ef k8sPodName=monitoring/kube-prometheus-stack-admission-create-nttls labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=62c7b19269 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2967 ipv4=10.0.0.187 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-nttls subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=62c7b19269 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2967 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=0763f211-bc84-41f1-a427-2ec3666fd604,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=0763f211-bc84-41f1-a427-2ec3666fd604,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.187 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-nttls subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-create;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=0763f211-bc84-41f1-a427-2ec3666fd604;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=0763f211-bc84-41f1-a427-2ec3666fd604;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-create;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=62c7b19269 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2967 identity=12421 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=0763f211-bc84-41f1-a427-2ec3666fd604,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=0763f211-bc84-41f1-a427-2ec3666fd604,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.187 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-nttls oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=62c7b19269 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2967 identity=12421 ipv4=10.0.0.187 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-nttls subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=62c7b19269 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2967 identity=12421 ipv4=10.0.0.187 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-nttls subsys=endpoint level=info msg="Successful endpoint creation" containerID=62c7b19269 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2967 identity=12421 ipv4=10.0.0.187 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-nttls subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=62c7b19269 endpointID=2967 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-create-nttls subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-create k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=0763f211-bc84-41f1-a427-2ec3666fd604 k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=0763f211-bc84-41f1-a427-2ec3666fd604 k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-create k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=62c7b19269 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2967 identity=12421 ipv4=10.0.0.187 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-nttls subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.16 e94698aa-9b83-4bde-a850-fe24a77ad794 default }" containerID=4b465aa02d6e4d905655fb9adadfea66de3b06e932af0df7996f2da96ce3fa17 datapathConfiguration="&{false false false false false }" interface=lxc44c231a846f0 k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-trjjd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4b465aa02d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=497 ipv4=10.0.0.16 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-trjjd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4b465aa02d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=497 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.16 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-trjjd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-operator;k8s:app.kubernetes.io/component=prometheus-operator;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:chart=kube-prometheus-stack-60.2.0;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=4b465aa02d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=497 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.16 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-trjjd line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=4b465aa02d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=497 identity=57286 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.16 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-trjjd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4b465aa02d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=497 identity=57286 ipv4=10.0.0.16 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-trjjd subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.92 e180733b-02eb-42bd-a8a8-295db80524f8 default }" containerID=c36ab9251ca7fbb3cad95872288f8c552a08ede870e9ba18f485c26e498e8b53 datapathConfiguration="&{false false false false false }" interface=lxce1c787a1f4fe k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-2b44r labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c36ab9251c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1719 ipv4=10.0.0.92 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-2b44r subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c36ab9251c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1719 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.92 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-2b44r subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=metrics;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-state-metrics;k8s:app.kubernetes.io/part-of=kube-state-metrics;k8s:app.kubernetes.io/version=2.12.0;k8s:helm.sh/chart=kube-state-metrics-5.20.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c36ab9251c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1719 identity=43175 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.92 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-2b44r oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c36ab9251c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1719 identity=43175 ipv4=10.0.0.92 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-2b44r subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4b465aa02d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=497 identity=57286 ipv4=10.0.0.16 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-trjjd subsys=endpoint level=info msg="Successful endpoint creation" containerID=4b465aa02d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=497 identity=57286 ipv4=10.0.0.16 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-trjjd subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=c36ab9251c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1719 identity=43175 ipv4=10.0.0.92 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-2b44r subsys=endpoint level=info msg="Successful endpoint creation" containerID=c36ab9251c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1719 identity=43175 ipv4=10.0.0.92 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-2b44r subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.143 766f4541-8c08-4ba7-bb43-4c45b6db3682 default }" containerID=b0371ee39bd9ac33ded2d51d84c5156b681bd2b27ca9c9cab38061d3433af497 datapathConfiguration="&{false false false false false }" interface=lxc935dd0aa31c5 k8sPodName=monitoring/kube-prometheus-stack-grafana-76bc9ccbbb-mspbm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b0371ee39b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2404 ipv4=10.0.0.143 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-76bc9ccbbb-mspbm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b0371ee39b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2404 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.143 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-76bc9ccbbb-mspbm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/name=grafana;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b0371ee39b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2404 identity=28070 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.143 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-76bc9ccbbb-mspbm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b0371ee39b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2404 identity=28070 ipv4=10.0.0.143 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-76bc9ccbbb-mspbm subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b0371ee39b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2404 identity=28070 ipv4=10.0.0.143 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-76bc9ccbbb-mspbm subsys=endpoint level=info msg="Successful endpoint creation" containerID=b0371ee39b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2404 identity=28070 ipv4=10.0.0.143 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-76bc9ccbbb-mspbm subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.234 3bcf76df-7571-4f74-92d9-ce9c44f4f940 default }" containerID=0fe2bdcf40f54a31c0983590179b443c926a691f7a9fccba82eefd30f7b83f93 datapathConfiguration="&{false false false false false }" interface=lxc6ed3385170d8 k8sPodName=monitoring/kube-prometheus-stack-admission-patch-rlz92 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0fe2bdcf40 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=798 ipv4=10.0.0.234 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-rlz92 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0fe2bdcf40 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=798 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=6b8d1ef7-50f2-4b8a-9021-18eca68471d7,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=6b8d1ef7-50f2-4b8a-9021-18eca68471d7,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.234 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-rlz92 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-patch;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=6b8d1ef7-50f2-4b8a-9021-18eca68471d7;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=6b8d1ef7-50f2-4b8a-9021-18eca68471d7;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-patch;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0fe2bdcf40 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=798 identity=26452 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=6b8d1ef7-50f2-4b8a-9021-18eca68471d7,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=6b8d1ef7-50f2-4b8a-9021-18eca68471d7,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.234 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-rlz92 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0fe2bdcf40 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=798 identity=26452 ipv4=10.0.0.234 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-rlz92 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0fe2bdcf40 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=798 identity=26452 ipv4=10.0.0.234 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-rlz92 subsys=endpoint level=info msg="Successful endpoint creation" containerID=0fe2bdcf40 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=798 identity=26452 ipv4=10.0.0.234 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-rlz92 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.4 bd3f3342-61f8-4611-97c9-4556e92b8019 default }" containerID=b4d5204a26a1ef57fb8f76462442dd4de7f2f44b7ada0e658d1b2865791542c9 datapathConfiguration="&{false false false false false }" interface=lxc05f97d5a5626 k8sPodName=local-path-storage/helper-pod-create-pvc-af1b9f62-0cf4-4c5a-afd2-383a96071043 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b4d5204a26 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2469 ipv4=10.0.0.4 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-af1b9f62-0cf4-4c5a-afd2-383a96071043 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b4d5204a26 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2469 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.4 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-af1b9f62-0cf4-4c5a-afd2-383a96071043 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b4d5204a26 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2469 identity=43561 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.4 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-af1b9f62-0cf4-4c5a-afd2-383a96071043 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b4d5204a26 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2469 identity=43561 ipv4=10.0.0.4 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-af1b9f62-0cf4-4c5a-afd2-383a96071043 subsys=endpoint level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=b4d5204a26 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2469 identity=43561 ipv4=10.0.0.4 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-af1b9f62-0cf4-4c5a-afd2-383a96071043 subsys=endpoint level=info msg="Successful endpoint creation" containerID=b4d5204a26 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2469 identity=43561 ipv4=10.0.0.4 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-af1b9f62-0cf4-4c5a-afd2-383a96071043 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.199 0448578f-1a86-450e-adaf-c0200b31c274 default }" containerID=d42823f53e0076be6a96fe848a472ce9669920177e33a4a849f0c313d1a8402e datapathConfiguration="&{false false false false false }" interface=lxcc7cab8d4a8f8 k8sPodName=local-path-storage/helper-pod-create-pvc-1c1b29eb-3aec-4700-b427-1ed64bbfd2a1 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d42823f53e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=327 ipv4=10.0.0.199 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1c1b29eb-3aec-4700-b427-1ed64bbfd2a1 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d42823f53e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=327 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.199 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1c1b29eb-3aec-4700-b427-1ed64bbfd2a1 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=d42823f53e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=327 identity=43561 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.199 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1c1b29eb-3aec-4700-b427-1ed64bbfd2a1 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d42823f53e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=327 identity=43561 ipv4=10.0.0.199 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1c1b29eb-3aec-4700-b427-1ed64bbfd2a1 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d42823f53e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=327 identity=43561 ipv4=10.0.0.199 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1c1b29eb-3aec-4700-b427-1ed64bbfd2a1 subsys=endpoint level=info msg="Successful endpoint creation" containerID=d42823f53e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=327 identity=43561 ipv4=10.0.0.199 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1c1b29eb-3aec-4700-b427-1ed64bbfd2a1 subsys=daemon level=info msg="Delete endpoint request" containerID=0fe2bdcf40 endpointID=798 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-patch-rlz92 subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-patch k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=6b8d1ef7-50f2-4b8a-9021-18eca68471d7 k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=6b8d1ef7-50f2-4b8a-9021-18eca68471d7 k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-patch k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=0fe2bdcf40 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=798 identity=26452 ipv4=10.0.0.234 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-rlz92 subsys=endpoint level=info msg="Delete endpoint request" containerID=d42823f53e endpointID=327 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-1c1b29eb-3aec-4700-b427-1ed64bbfd2a1 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Delete endpoint request" containerID=b4d5204a26 endpointID=2469 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-af1b9f62-0cf4-4c5a-afd2-383a96071043 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=d42823f53e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=327 identity=43561 ipv4=10.0.0.199 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1c1b29eb-3aec-4700-b427-1ed64bbfd2a1 subsys=endpoint level=info msg="Removed endpoint" containerID=b4d5204a26 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2469 identity=43561 ipv4=10.0.0.4 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-af1b9f62-0cf4-4c5a-afd2-383a96071043 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.142 faf670f8-e623-4e50-aed3-54f7d5675a2a default }" containerID=7b8b6e0255d333c19707aa2d99c60985322aa8c320ff76744fddfad97d7381ba datapathConfiguration="&{false false false false false }" interface=lxcd4132616066d k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7b8b6e0255 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3 ipv4=10.0.0.142 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7b8b6e0255 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.142 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:alertmanager=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=alertmanager;k8s:app.kubernetes.io/version=0.27.0;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=7b8b6e0255 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.142 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=7b8b6e0255 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3 identity=18021 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.142 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7b8b6e0255 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3 identity=18021 ipv4=10.0.0.142 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.212 4a5546da-4140-4967-9fc8-f5e4266f2ea5 default }" containerID=3de177b97c3fc01ff1179ebd453b20c75aff0ed0bbeb8b92e9096390aa9ceb89 datapathConfiguration="&{false false false false false }" interface=lxc0d20aef80f2c k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3de177b97c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1188 ipv4=10.0.0.212 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3de177b97c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1188 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.212 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=prometheus;k8s:app.kubernetes.io/version=2.51.2;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus;k8s:io.kubernetes.pod.namespace=monitoring;k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus;k8s:operator.prometheus.io/shard=0;k8s:prometheus=kube-prometheus-stack-prometheus;k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3de177b97c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1188 identity=380 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.212 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3de177b97c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1188 identity=380 ipv4=10.0.0.212 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7b8b6e0255 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3 identity=18021 ipv4=10.0.0.142 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=7b8b6e0255 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3 identity=18021 ipv4=10.0.0.142 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=3de177b97c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1188 identity=380 ipv4=10.0.0.212 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=3de177b97c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1188 identity=380 ipv4=10.0.0.212 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.223 3911dbc2-a69a-43d1-b779-762f20af73c2 default }" containerID=405b35b2f6ab606b374a658927969212f6e1693e0edc9506bb0a372542226c7c datapathConfiguration="&{false false false false false }" interface=lxc81452c54699a k8sPodName=monitoring/loki-gateway-cf54cb88c-v5pxd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=405b35b2f6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=478 ipv4=10.0.0.223 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-v5pxd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=405b35b2f6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=478 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.223 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-v5pxd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=gateway;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=405b35b2f6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=478 identity=30679 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.223 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-v5pxd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=405b35b2f6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=478 identity=30679 ipv4=10.0.0.223 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-v5pxd subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.155 f2d39136-b21c-4a97-86e2-d352aaaf4e88 default }" containerID=b5e5aa87c8429c1f4944e61c6c3a5926795509985186abca1afd05a5ad0ee8f5 datapathConfiguration="&{false false false false false }" interface=lxc13936c783524 k8sPodName=monitoring/loki-chunks-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b5e5aa87c8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=653 ipv4=10.0.0.155 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b5e5aa87c8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=653 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.155 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-chunks-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-chunks-cache;k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b5e5aa87c8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=653 identity=20577 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.155 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b5e5aa87c8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=653 identity=20577 ipv4=10.0.0.155 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=405b35b2f6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=478 identity=30679 ipv4=10.0.0.223 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-v5pxd subsys=endpoint level=info msg="Successful endpoint creation" containerID=405b35b2f6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=478 identity=30679 ipv4=10.0.0.223 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-v5pxd subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.122 aad0862e-eb45-4b25-ae99-a128833e7c39 default }" containerID=2b5a82d12979de8632dc99224da4fd048f9837fd000e5aea609418f4f052a749 datapathConfiguration="&{false false false false false }" interface=lxc8bb79c8865a9 k8sPodName=monitoring/loki-results-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2b5a82d129 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1622 ipv4=10.0.0.122 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2b5a82d129 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1622 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.122 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.140 12405565-f63d-4b69-a7cd-8479265705dd default }" containerID=99de7a27ef544551951732088a479ccae6e72e320d78a721d4f4ba74a97cc625 datapathConfiguration="&{false false false false false }" interface=lxc2142d5af61b1 k8sPodName=local-path-storage/helper-pod-create-pvc-57707d18-9473-4f45-be99-265a8c887bee labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=99de7a27ef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1015 ipv4=10.0.0.140 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-57707d18-9473-4f45-be99-265a8c887bee subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=99de7a27ef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1015 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.140 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-57707d18-9473-4f45-be99-265a8c887bee subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-results-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-results-cache;k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2b5a82d129 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1622 identity=5541 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.122 ipv6= k8sPodName=monitoring/loki-results-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2b5a82d129 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1622 identity=5541 ipv4=10.0.0.122 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=99de7a27ef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1015 identity=43561 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.140 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-57707d18-9473-4f45-be99-265a8c887bee oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=99de7a27ef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1015 identity=43561 ipv4=10.0.0.140 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-57707d18-9473-4f45-be99-265a8c887bee subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=b5e5aa87c8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=653 identity=20577 ipv4=10.0.0.155 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=b5e5aa87c8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=653 identity=20577 ipv4=10.0.0.155 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=2b5a82d129 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1622 identity=5541 ipv4=10.0.0.122 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=2b5a82d129 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1622 identity=5541 ipv4=10.0.0.122 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=99de7a27ef datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1015 identity=43561 ipv4=10.0.0.140 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-57707d18-9473-4f45-be99-265a8c887bee subsys=endpoint level=info msg="Successful endpoint creation" containerID=99de7a27ef datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1015 identity=43561 ipv4=10.0.0.140 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-57707d18-9473-4f45-be99-265a8c887bee subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.21 b65bc2e3-0418-48fc-8b68-3f158dd9a4cc default }" containerID=fbea209379b6c20188b2d5a44dcd40237901787e12986e6df69d4f9d58604fc0 datapathConfiguration="&{false false false false false }" interface=lxc36076de96372 k8sPodName=monitoring/vector-c2mkq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fbea209379 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2127 ipv4=10.0.0.21 ipv6= k8sPodName=monitoring/vector-c2mkq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fbea209379 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2127 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.21 ipv6= k8sPodName=monitoring/vector-c2mkq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=Agent;k8s:app.kubernetes.io/instance=vector;k8s:app.kubernetes.io/name=vector;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=vector;k8s:io.kubernetes.pod.namespace=monitoring;k8s:vector.dev/exclude=true;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fbea209379 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2127 identity=32538 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.21 ipv6= k8sPodName=monitoring/vector-c2mkq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fbea209379 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2127 identity=32538 ipv4=10.0.0.21 ipv6= k8sPodName=monitoring/vector-c2mkq subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=fbea209379 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2127 identity=32538 ipv4=10.0.0.21 ipv6= k8sPodName=monitoring/vector-c2mkq subsys=endpoint level=info msg="Successful endpoint creation" containerID=fbea209379 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2127 identity=32538 ipv4=10.0.0.21 ipv6= k8sPodName=monitoring/vector-c2mkq subsys=daemon level=info msg="Delete endpoint request" containerID=99de7a27ef endpointID=1015 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-57707d18-9473-4f45-be99-265a8c887bee subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=99de7a27ef datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1015 identity=43561 ipv4=10.0.0.140 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-57707d18-9473-4f45-be99-265a8c887bee subsys=endpoint level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.237 3ddc1e63-88db-4cd1-b1c7-9a84f709d933 default }" containerID=70277f2a4ae66b68d5d8c454ce62f59bf53f311ffe1ef49220ec00d8a98abf8e datapathConfiguration="&{false false false false false }" interface=lxce1102b4fd205 k8sPodName=monitoring/loki-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=70277f2a4a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2278 ipv4=10.0.0.237 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=70277f2a4a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2278 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.237 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=70277f2a4a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2278 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.237 ipv6= k8sPodName=monitoring/loki-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=single-binary;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:app.kubernetes.io/part-of=memberlist;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=loki-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=70277f2a4a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2278 identity=16578 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.237 ipv6= k8sPodName=monitoring/loki-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=70277f2a4a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2278 identity=16578 ipv4=10.0.0.237 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=70277f2a4a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2278 identity=16578 ipv4=10.0.0.237 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=70277f2a4a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2278 identity=16578 ipv4=10.0.0.237 ipv6= k8sPodName=monitoring/loki-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.138 7339d519-4b30-4021-9d22-eaddfdb4fe0d default }" containerID=4d0e748358993439b276bf89d53925f7d785e9e70041f55e277cddef6a3331e2 datapathConfiguration="&{false false false false false }" interface=lxc0589761f55e7 k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-kdwwd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4d0e748358 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1854 ipv4=10.0.0.138 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-kdwwd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4d0e748358 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1854 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.138 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-kdwwd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=prometheus-pushgateway;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=prometheus-pushgateway;k8s:app.kubernetes.io/version=v1.8.0;k8s:helm.sh/chart=prometheus-pushgateway-2.13.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4d0e748358 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1854 identity=23340 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.138 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-kdwwd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4d0e748358 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1854 identity=23340 ipv4=10.0.0.138 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-kdwwd subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=4d0e748358 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1854 identity=23340 ipv4=10.0.0.138 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-kdwwd subsys=endpoint level=info msg="Successful endpoint creation" containerID=4d0e748358 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1854 identity=23340 ipv4=10.0.0.138 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-kdwwd subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.246 43231d4f-2b14-4c12-9596-fae50ebf98a4 default }" containerID=c5d4f585b16d156e1fd65ac94d6ff82e190f38bfb1d948e78f6e74cbfe8c1b9f datapathConfiguration="&{false false false false false }" interface=lxc4e7e54c08caf k8sPodName=openstack/memcached-memcached-6479589586-nfnkg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c5d4f585b1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=972 ipv4=10.0.0.246 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-nfnkg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c5d4f585b1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=972 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.246 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-nfnkg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=memcached;k8s:component=server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=memcached;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c5d4f585b1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=972 identity=10554 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.246 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-nfnkg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c5d4f585b1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=972 identity=10554 ipv4=10.0.0.246 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-nfnkg subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=c5d4f585b1 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=972 identity=10554 ipv4=10.0.0.246 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-nfnkg subsys=endpoint level=info msg="Successful endpoint creation" containerID=c5d4f585b1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=972 identity=10554 ipv4=10.0.0.246 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-nfnkg subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.80 a1b90a5e-5921-45f3-8133-1f316bc68584 default }" containerID=11bdfa4c1d1b2f47f715babbaf9225822ea88111fb1296f17c202106e07929e2 datapathConfiguration="&{false false false false false }" interface=lxc97e9a5e339df k8sPodName=local-path-storage/helper-pod-create-pvc-51a7ec49-cd91-4157-9a34-fb95de7f5fc3 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=11bdfa4c1d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1463 ipv4=10.0.0.80 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-51a7ec49-cd91-4157-9a34-fb95de7f5fc3 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=11bdfa4c1d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1463 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.80 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-51a7ec49-cd91-4157-9a34-fb95de7f5fc3 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=11bdfa4c1d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1463 identity=43561 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.80 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-51a7ec49-cd91-4157-9a34-fb95de7f5fc3 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=11bdfa4c1d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1463 identity=43561 ipv4=10.0.0.80 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-51a7ec49-cd91-4157-9a34-fb95de7f5fc3 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=11bdfa4c1d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1463 identity=43561 ipv4=10.0.0.80 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-51a7ec49-cd91-4157-9a34-fb95de7f5fc3 subsys=endpoint level=info msg="Successful endpoint creation" containerID=11bdfa4c1d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1463 identity=43561 ipv4=10.0.0.80 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-51a7ec49-cd91-4157-9a34-fb95de7f5fc3 subsys=daemon level=info msg="Delete endpoint request" containerID=11bdfa4c1d endpointID=1463 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-51a7ec49-cd91-4157-9a34-fb95de7f5fc3 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=11bdfa4c1d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1463 identity=43561 ipv4=10.0.0.80 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-51a7ec49-cd91-4157-9a34-fb95de7f5fc3 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.238 074042de-b67d-464b-9a8d-83f75989531f default }" containerID=35ba47ca7e5fdec4c736edc9fbe2d10993f76cb2e0fcb7fe7c64756b6f8ee526 datapathConfiguration="&{false false false false false }" interface=lxc860bb06ce4bb k8sPodName=openstack/rabbitmq-keystone-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=35ba47ca7e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2050 ipv4=10.0.0.238 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=35ba47ca7e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2050 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.238 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-keystone;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=35ba47ca7e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2050 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.238 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=35ba47ca7e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2050 identity=22546 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.238 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=35ba47ca7e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2050 identity=22546 ipv4=10.0.0.238 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=35ba47ca7e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2050 identity=22546 ipv4=10.0.0.238 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=35ba47ca7e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2050 identity=22546 ipv4=10.0.0.238 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.103 a5d8c650-7384-41f8-b9ca-2b45d5ce9f0c default }" containerID=502c9fe2df4eb5eb6f7cc06a1dc3bf97f80135ad4fdec935803ff9621ef1051b datapathConfiguration="&{false false false false false }" interface=lxc7a2a9276c75d k8sPodName=openstack/keystone-api-568cb78459-7qwhp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=502c9fe2df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1667 ipv4=10.0.0.103 ipv6= k8sPodName=openstack/keystone-api-568cb78459-7qwhp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=502c9fe2df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1667 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.103 ipv6= k8sPodName=openstack/keystone-api-568cb78459-7qwhp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=502c9fe2df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1667 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.103 ipv6= k8sPodName=openstack/keystone-api-568cb78459-7qwhp line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=502c9fe2df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1667 identity=13157 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.103 ipv6= k8sPodName=openstack/keystone-api-568cb78459-7qwhp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=502c9fe2df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1667 identity=13157 ipv4=10.0.0.103 ipv6= k8sPodName=openstack/keystone-api-568cb78459-7qwhp subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.239 31a8d2b7-366f-487f-a88e-403add541ae1 default }" containerID=e4680495ea28a7a30b70e39b5d62284663338a0a78be4459328c8fe87a490553 datapathConfiguration="&{false false false false false }" interface=lxc4a9b533be05f k8sPodName=openstack/keystone-credential-setup-8gpdk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e4680495ea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=60 ipv4=10.0.0.239 ipv6= k8sPodName=openstack/keystone-credential-setup-8gpdk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e4680495ea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=60 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=a684614b-903b-4fb1-95a0-d108c8277e4a,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=a684614b-903b-4fb1-95a0-d108c8277e4a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.239 ipv6= k8sPodName=openstack/keystone-credential-setup-8gpdk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=a684614b-903b-4fb1-95a0-d108c8277e4a;k8s:batch.kubernetes.io/job-name=keystone-credential-setup;k8s:component=credential-setup;k8s:controller-uid=a684614b-903b-4fb1-95a0-d108c8277e4a;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-credential-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e4680495ea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=60 identity=6120 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=a684614b-903b-4fb1-95a0-d108c8277e4a,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=a684614b-903b-4fb1-95a0-d108c8277e4a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.239 ipv6= k8sPodName=openstack/keystone-credential-setup-8gpdk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e4680495ea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=60 identity=6120 ipv4=10.0.0.239 ipv6= k8sPodName=openstack/keystone-credential-setup-8gpdk subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=502c9fe2df datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1667 identity=13157 ipv4=10.0.0.103 ipv6= k8sPodName=openstack/keystone-api-568cb78459-7qwhp subsys=endpoint level=info msg="Successful endpoint creation" containerID=502c9fe2df datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1667 identity=13157 ipv4=10.0.0.103 ipv6= k8sPodName=openstack/keystone-api-568cb78459-7qwhp subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=e4680495ea datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=60 identity=6120 ipv4=10.0.0.239 ipv6= k8sPodName=openstack/keystone-credential-setup-8gpdk subsys=endpoint level=info msg="Successful endpoint creation" containerID=e4680495ea datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=60 identity=6120 ipv4=10.0.0.239 ipv6= k8sPodName=openstack/keystone-credential-setup-8gpdk subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=e4680495ea endpointID=60 k8sNamespace=openstack k8sPodName=keystone-credential-setup-8gpdk subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=a684614b-903b-4fb1-95a0-d108c8277e4a k8s:batch.kubernetes.io/job-name=keystone-credential-setup k8s:component=credential-setup k8s:controller-uid=a684614b-903b-4fb1-95a0-d108c8277e4a k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-credential-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=e4680495ea datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=60 identity=6120 ipv4=10.0.0.239 ipv6= k8sPodName=openstack/keystone-credential-setup-8gpdk subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.67 f39293fd-3983-4f2a-a649-e8c126573029 default }" containerID=f49108dc8b27c1af69083a85d603ecaf2f9626b2a3d7a896cdb30d2342930bc5 datapathConfiguration="&{false false false false false }" interface=lxcff9576c4caea k8sPodName=openstack/keystone-db-init-gcxzn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f49108dc8b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2012 ipv4=10.0.0.67 ipv6= k8sPodName=openstack/keystone-db-init-gcxzn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f49108dc8b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2012 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=c0db9b88-b34d-4f3c-bf73-3bc415992194,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=c0db9b88-b34d-4f3c-bf73-3bc415992194,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.67 ipv6= k8sPodName=openstack/keystone-db-init-gcxzn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=f49108dc8b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2012 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.67 ipv6= k8sPodName=openstack/keystone-db-init-gcxzn line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=c0db9b88-b34d-4f3c-bf73-3bc415992194;k8s:batch.kubernetes.io/job-name=keystone-db-init;k8s:component=db-init;k8s:controller-uid=c0db9b88-b34d-4f3c-bf73-3bc415992194;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f49108dc8b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2012 identity=24724 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=c0db9b88-b34d-4f3c-bf73-3bc415992194,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=c0db9b88-b34d-4f3c-bf73-3bc415992194,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.67 ipv6= k8sPodName=openstack/keystone-db-init-gcxzn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f49108dc8b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2012 identity=24724 ipv4=10.0.0.67 ipv6= k8sPodName=openstack/keystone-db-init-gcxzn subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f49108dc8b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2012 identity=24724 ipv4=10.0.0.67 ipv6= k8sPodName=openstack/keystone-db-init-gcxzn subsys=endpoint level=info msg="Successful endpoint creation" containerID=f49108dc8b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2012 identity=24724 ipv4=10.0.0.67 ipv6= k8sPodName=openstack/keystone-db-init-gcxzn subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=f49108dc8b endpointID=2012 k8sNamespace=openstack k8sPodName=keystone-db-init-gcxzn subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=c0db9b88-b34d-4f3c-bf73-3bc415992194 k8s:batch.kubernetes.io/job-name=keystone-db-init k8s:component=db-init k8s:controller-uid=c0db9b88-b34d-4f3c-bf73-3bc415992194 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=f49108dc8b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2012 identity=24724 ipv4=10.0.0.67 ipv6= k8sPodName=openstack/keystone-db-init-gcxzn subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.226 b607d69a-e3a7-434c-b99a-62a0f2382a33 default }" containerID=1b86c9980dea3494f98495a3968aad41a3c8d2b94885f3a231681aa86f18ac58 datapathConfiguration="&{false false false false false }" interface=lxcbf948056a2dd k8sPodName=openstack/keystone-fernet-setup-xw7h6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1b86c9980d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=192 ipv4=10.0.0.226 ipv6= k8sPodName=openstack/keystone-fernet-setup-xw7h6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1b86c9980d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=192 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=14eb0b21-5fa2-4808-867b-40997a2f5af4,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=14eb0b21-5fa2-4808-867b-40997a2f5af4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.226 ipv6= k8sPodName=openstack/keystone-fernet-setup-xw7h6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=14eb0b21-5fa2-4808-867b-40997a2f5af4;k8s:batch.kubernetes.io/job-name=keystone-fernet-setup;k8s:component=fernet-setup;k8s:controller-uid=14eb0b21-5fa2-4808-867b-40997a2f5af4;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-fernet-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=1b86c9980d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=192 identity=8849 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=14eb0b21-5fa2-4808-867b-40997a2f5af4,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=14eb0b21-5fa2-4808-867b-40997a2f5af4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.226 ipv6= k8sPodName=openstack/keystone-fernet-setup-xw7h6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1b86c9980d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=192 identity=8849 ipv4=10.0.0.226 ipv6= k8sPodName=openstack/keystone-fernet-setup-xw7h6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1b86c9980d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=192 identity=8849 ipv4=10.0.0.226 ipv6= k8sPodName=openstack/keystone-fernet-setup-xw7h6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=1b86c9980d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=192 identity=8849 ipv4=10.0.0.226 ipv6= k8sPodName=openstack/keystone-fernet-setup-xw7h6 subsys=daemon level=info msg="Delete endpoint request" containerID=1b86c9980d endpointID=192 k8sNamespace=openstack k8sPodName=keystone-fernet-setup-xw7h6 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=14eb0b21-5fa2-4808-867b-40997a2f5af4 k8s:batch.kubernetes.io/job-name=keystone-fernet-setup k8s:component=fernet-setup k8s:controller-uid=14eb0b21-5fa2-4808-867b-40997a2f5af4 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-fernet-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=1b86c9980d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=192 identity=8849 ipv4=10.0.0.226 ipv6= k8sPodName=openstack/keystone-fernet-setup-xw7h6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.28 ac9a22b5-8bcf-4ea1-9e8d-b3b0e741a80f default }" containerID=5aa87e18f9963f9a63cd6311942543f05dd8879e2c0e31c4fb8009a810aa0d8f datapathConfiguration="&{false false false false false }" interface=lxc790626dd81ff k8sPodName=openstack/keystone-db-sync-594n7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5aa87e18f9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1258 ipv4=10.0.0.28 ipv6= k8sPodName=openstack/keystone-db-sync-594n7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5aa87e18f9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1258 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=4470a783-e195-4192-801c-3d0fcc876a8c,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=4470a783-e195-4192-801c-3d0fcc876a8c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.28 ipv6= k8sPodName=openstack/keystone-db-sync-594n7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=4470a783-e195-4192-801c-3d0fcc876a8c;k8s:batch.kubernetes.io/job-name=keystone-db-sync;k8s:component=db-sync;k8s:controller-uid=4470a783-e195-4192-801c-3d0fcc876a8c;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-sync;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5aa87e18f9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1258 identity=7400 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=4470a783-e195-4192-801c-3d0fcc876a8c,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=4470a783-e195-4192-801c-3d0fcc876a8c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.28 ipv6= k8sPodName=openstack/keystone-db-sync-594n7 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=5aa87e18f9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1258 identity=7400 ipv4=10.0.0.28 ipv6= k8sPodName=openstack/keystone-db-sync-594n7 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5aa87e18f9 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1258 identity=7400 ipv4=10.0.0.28 ipv6= k8sPodName=openstack/keystone-db-sync-594n7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=5aa87e18f9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1258 identity=7400 ipv4=10.0.0.28 ipv6= k8sPodName=openstack/keystone-db-sync-594n7 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=5aa87e18f9 endpointID=1258 k8sNamespace=openstack k8sPodName=keystone-db-sync-594n7 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=4470a783-e195-4192-801c-3d0fcc876a8c k8s:batch.kubernetes.io/job-name=keystone-db-sync k8s:component=db-sync k8s:controller-uid=4470a783-e195-4192-801c-3d0fcc876a8c k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-sync k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=5aa87e18f9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1258 identity=7400 ipv4=10.0.0.28 ipv6= k8sPodName=openstack/keystone-db-sync-594n7 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.70 a96bac65-1e7f-40e9-a54d-fdda58f6c8e8 default }" containerID=78e7b47b422d474a69c3c2d6e09b45ca2d02ffae46688b1551d0455e68470337 datapathConfiguration="&{false false false false false }" interface=lxc9ac008cbfb46 k8sPodName=openstack/keystone-rabbit-init-qczhc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=78e7b47b42 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1193 ipv4=10.0.0.70 ipv6= k8sPodName=openstack/keystone-rabbit-init-qczhc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=78e7b47b42 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1193 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=25f294c0-ce0c-4fea-93b2-5130492333e0,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=25f294c0-ce0c-4fea-93b2-5130492333e0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.70 ipv6= k8sPodName=openstack/keystone-rabbit-init-qczhc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=25f294c0-ce0c-4fea-93b2-5130492333e0;k8s:batch.kubernetes.io/job-name=keystone-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=25f294c0-ce0c-4fea-93b2-5130492333e0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-rabbit-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=78e7b47b42 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1193 identity=9326 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=25f294c0-ce0c-4fea-93b2-5130492333e0,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=25f294c0-ce0c-4fea-93b2-5130492333e0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.70 ipv6= k8sPodName=openstack/keystone-rabbit-init-qczhc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=78e7b47b42 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1193 identity=9326 ipv4=10.0.0.70 ipv6= k8sPodName=openstack/keystone-rabbit-init-qczhc subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=78e7b47b42 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1193 identity=9326 ipv4=10.0.0.70 ipv6= k8sPodName=openstack/keystone-rabbit-init-qczhc subsys=endpoint level=info msg="Successful endpoint creation" containerID=78e7b47b42 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1193 identity=9326 ipv4=10.0.0.70 ipv6= k8sPodName=openstack/keystone-rabbit-init-qczhc subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=78e7b47b42 endpointID=1193 k8sNamespace=openstack k8sPodName=keystone-rabbit-init-qczhc subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=25f294c0-ce0c-4fea-93b2-5130492333e0 k8s:batch.kubernetes.io/job-name=keystone-rabbit-init k8s:component=rabbit-init k8s:controller-uid=25f294c0-ce0c-4fea-93b2-5130492333e0 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-rabbit-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=78e7b47b42 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1193 identity=9326 ipv4=10.0.0.70 ipv6= k8sPodName=openstack/keystone-rabbit-init-qczhc subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.136 b250aec5-e233-4161-8e84-b841972d2454 default }" containerID=72ecede571c5ff55e6890fe59ffead565154ab25caebb14fe2cf1fe9c940569f datapathConfiguration="&{false false false false false }" interface=lxc908ef5d6d712 k8sPodName=openstack/keystone-domain-manage-hw5pc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=72ecede571 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=675 ipv4=10.0.0.136 ipv6= k8sPodName=openstack/keystone-domain-manage-hw5pc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=72ecede571 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=675 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=f6e3653d-dfc6-4250-a981-839ccf88802a,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=f6e3653d-dfc6-4250-a981-839ccf88802a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.136 ipv6= k8sPodName=openstack/keystone-domain-manage-hw5pc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=f6e3653d-dfc6-4250-a981-839ccf88802a;k8s:batch.kubernetes.io/job-name=keystone-domain-manage;k8s:component=domain-manage;k8s:controller-uid=f6e3653d-dfc6-4250-a981-839ccf88802a;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-domain-manage;k8s:release_group=keystone;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=72ecede571 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=675 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.136 ipv6= k8sPodName=openstack/keystone-domain-manage-hw5pc line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=72ecede571 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=675 identity=46142 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=f6e3653d-dfc6-4250-a981-839ccf88802a,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=f6e3653d-dfc6-4250-a981-839ccf88802a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.136 ipv6= k8sPodName=openstack/keystone-domain-manage-hw5pc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=72ecede571 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=675 identity=46142 ipv4=10.0.0.136 ipv6= k8sPodName=openstack/keystone-domain-manage-hw5pc subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=72ecede571 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=675 identity=46142 ipv4=10.0.0.136 ipv6= k8sPodName=openstack/keystone-domain-manage-hw5pc subsys=endpoint level=info msg="Successful endpoint creation" containerID=72ecede571 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=675 identity=46142 ipv4=10.0.0.136 ipv6= k8sPodName=openstack/keystone-domain-manage-hw5pc subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=72ecede571 endpointID=675 k8sNamespace=openstack k8sPodName=keystone-domain-manage-hw5pc subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=f6e3653d-dfc6-4250-a981-839ccf88802a k8s:batch.kubernetes.io/job-name=keystone-domain-manage k8s:component=domain-manage k8s:controller-uid=f6e3653d-dfc6-4250-a981-839ccf88802a k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-domain-manage k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=72ecede571 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=675 identity=46142 ipv4=10.0.0.136 ipv6= k8sPodName=openstack/keystone-domain-manage-hw5pc subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.33 259cf39f-f01b-4e5a-af41-ed670e7f7d84 default }" containerID=23354724f8f5cea28f5252413a71116667cfeddc73a61f21b914c1ae5c16fc41 datapathConfiguration="&{false false false false false }" interface=lxc04ff93fc2ec2 k8sPodName=openstack/keystone-bootstrap-2vn6q labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=23354724f8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3330 ipv4=10.0.0.33 ipv6= k8sPodName=openstack/keystone-bootstrap-2vn6q subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=23354724f8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3330 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=9a49b7fd-7f58-4893-b688-2763c9562986,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=9a49b7fd-7f58-4893-b688-2763c9562986,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.33 ipv6= k8sPodName=openstack/keystone-bootstrap-2vn6q subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=9a49b7fd-7f58-4893-b688-2763c9562986;k8s:batch.kubernetes.io/job-name=keystone-bootstrap;k8s:component=bootstrap;k8s:controller-uid=9a49b7fd-7f58-4893-b688-2763c9562986;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-bootstrap;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=23354724f8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3330 identity=809 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=9a49b7fd-7f58-4893-b688-2763c9562986,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=9a49b7fd-7f58-4893-b688-2763c9562986,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.33 ipv6= k8sPodName=openstack/keystone-bootstrap-2vn6q oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=23354724f8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3330 identity=809 ipv4=10.0.0.33 ipv6= k8sPodName=openstack/keystone-bootstrap-2vn6q subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=23354724f8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3330 identity=809 ipv4=10.0.0.33 ipv6= k8sPodName=openstack/keystone-bootstrap-2vn6q subsys=endpoint level=info msg="Successful endpoint creation" containerID=23354724f8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3330 identity=809 ipv4=10.0.0.33 ipv6= k8sPodName=openstack/keystone-bootstrap-2vn6q subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=23354724f8 endpointID=3330 k8sNamespace=openstack k8sPodName=keystone-bootstrap-2vn6q subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=9a49b7fd-7f58-4893-b688-2763c9562986 k8s:batch.kubernetes.io/job-name=keystone-bootstrap k8s:component=bootstrap k8s:controller-uid=9a49b7fd-7f58-4893-b688-2763c9562986 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-bootstrap k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=23354724f8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3330 identity=809 ipv4=10.0.0.33 ipv6= k8sPodName=openstack/keystone-bootstrap-2vn6q subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.74 31cafbfe-2bfb-4ff5-94f6-331412b37caf default }" containerID=04a78b596b5c8158a54ae2f56fe647284376d2c41e034d51b4252354e92d7e15 datapathConfiguration="&{false false false false false }" interface=lxcaebb86e48014 k8sPodName=local-path-storage/helper-pod-create-pvc-99503292-4dae-414e-9d41-7c0dc527ad1b labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=04a78b596b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=553 ipv4=10.0.0.74 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-99503292-4dae-414e-9d41-7c0dc527ad1b subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=04a78b596b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=553 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.74 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-99503292-4dae-414e-9d41-7c0dc527ad1b subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=04a78b596b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=553 identity=43561 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.74 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-99503292-4dae-414e-9d41-7c0dc527ad1b oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=04a78b596b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=553 identity=43561 ipv4=10.0.0.74 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-99503292-4dae-414e-9d41-7c0dc527ad1b subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=04a78b596b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=553 identity=43561 ipv4=10.0.0.74 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-99503292-4dae-414e-9d41-7c0dc527ad1b subsys=endpoint level=info msg="Successful endpoint creation" containerID=04a78b596b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=553 identity=43561 ipv4=10.0.0.74 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-99503292-4dae-414e-9d41-7c0dc527ad1b subsys=daemon level=info msg="Delete endpoint request" containerID=04a78b596b endpointID=553 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-99503292-4dae-414e-9d41-7c0dc527ad1b subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=04a78b596b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=553 identity=43561 ipv4=10.0.0.74 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-99503292-4dae-414e-9d41-7c0dc527ad1b subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.115 835a8a72-872c-451d-acc9-7ccd6c7de630 default }" containerID=21c60d5f2505797c25b774a6b9a473f336a17aa803d5f129291cbdde62cf26db datapathConfiguration="&{false false false false false }" interface=lxc9f6c82708f05 k8sPodName=openstack/rabbitmq-barbican-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=21c60d5f25 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=934 ipv4=10.0.0.115 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=21c60d5f25 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=934 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.115 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-barbican;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=21c60d5f25 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=934 identity=8382 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.115 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=21c60d5f25 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=934 identity=8382 ipv4=10.0.0.115 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=21c60d5f25 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=934 identity=8382 ipv4=10.0.0.115 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=21c60d5f25 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=934 identity=8382 ipv4=10.0.0.115 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.132 75e4dd6b-862d-4d8b-8de3-7075d0b7bcd0 default }" containerID=cb395edc8f26cbd1725a75ae8e825cad048bb39ab9c8bd3916c901a667239708 datapathConfiguration="&{false false false false false }" interface=lxc7e54f2ac54eb k8sPodName=openstack/barbican-api-6bdcc9bd6c-wxkxc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=cb395edc8f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3656 ipv4=10.0.0.132 ipv6= k8sPodName=openstack/barbican-api-6bdcc9bd6c-wxkxc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=cb395edc8f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3656 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.132 ipv6= k8sPodName=openstack/barbican-api-6bdcc9bd6c-wxkxc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=barbican;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=cb395edc8f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3656 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.132 ipv6= k8sPodName=openstack/barbican-api-6bdcc9bd6c-wxkxc line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=cb395edc8f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3656 identity=57922 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.132 ipv6= k8sPodName=openstack/barbican-api-6bdcc9bd6c-wxkxc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=cb395edc8f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3656 identity=57922 ipv4=10.0.0.132 ipv6= k8sPodName=openstack/barbican-api-6bdcc9bd6c-wxkxc subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.89 212a2aec-9096-41b5-9eb0-b1a4446f2721 default }" containerID=24b93b2e829ceea75307cf16e2c989c9be6bd09676a1bee101170b48dcbad4b1 datapathConfiguration="&{false false false false false }" interface=lxc145cf3d5d354 k8sPodName=openstack/barbican-db-init-42p78 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=24b93b2e82 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3607 ipv4=10.0.0.89 ipv6= k8sPodName=openstack/barbican-db-init-42p78 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=24b93b2e82 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3607 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=a68a2298-2307-4004-b8bf-1256972837fe,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=a68a2298-2307-4004-b8bf-1256972837fe,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.89 ipv6= k8sPodName=openstack/barbican-db-init-42p78 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=a68a2298-2307-4004-b8bf-1256972837fe;k8s:batch.kubernetes.io/job-name=barbican-db-init;k8s:component=db-init;k8s:controller-uid=a68a2298-2307-4004-b8bf-1256972837fe;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=24b93b2e82 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3607 identity=21481 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=a68a2298-2307-4004-b8bf-1256972837fe,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=a68a2298-2307-4004-b8bf-1256972837fe,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.89 ipv6= k8sPodName=openstack/barbican-db-init-42p78 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=24b93b2e82 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3607 identity=21481 ipv4=10.0.0.89 ipv6= k8sPodName=openstack/barbican-db-init-42p78 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=cb395edc8f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3656 identity=57922 ipv4=10.0.0.132 ipv6= k8sPodName=openstack/barbican-api-6bdcc9bd6c-wxkxc subsys=endpoint level=info msg="Successful endpoint creation" containerID=cb395edc8f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3656 identity=57922 ipv4=10.0.0.132 ipv6= k8sPodName=openstack/barbican-api-6bdcc9bd6c-wxkxc subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=24b93b2e82 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3607 identity=21481 ipv4=10.0.0.89 ipv6= k8sPodName=openstack/barbican-db-init-42p78 subsys=endpoint level=info msg="Successful endpoint creation" containerID=24b93b2e82 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3607 identity=21481 ipv4=10.0.0.89 ipv6= k8sPodName=openstack/barbican-db-init-42p78 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.03593409714989111 newInterval=11m15s subsys=map-ct level=info msg="Delete endpoint request" containerID=24b93b2e82 endpointID=3607 k8sNamespace=openstack k8sPodName=barbican-db-init-42p78 subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=a68a2298-2307-4004-b8bf-1256972837fe k8s:batch.kubernetes.io/job-name=barbican-db-init k8s:component=db-init k8s:controller-uid=a68a2298-2307-4004-b8bf-1256972837fe k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=24b93b2e82 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3607 identity=21481 ipv4=10.0.0.89 ipv6= k8sPodName=openstack/barbican-db-init-42p78 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.25 cf01c3ae-ba8d-42b4-b911-6379aee40207 default }" containerID=00f8d9dbfe6f3e87a489cf4194f5771c889773091743a79fb4ec4979d1c3f9af datapathConfiguration="&{false false false false false }" interface=lxc2f504d72abe9 k8sPodName=openstack/barbican-db-sync-nr74n labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=00f8d9dbfe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3160 ipv4=10.0.0.25 ipv6= k8sPodName=openstack/barbican-db-sync-nr74n subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=00f8d9dbfe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3160 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=a2aba87a-f295-496e-91c7-24b4c01e4881,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=a2aba87a-f295-496e-91c7-24b4c01e4881,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.25 ipv6= k8sPodName=openstack/barbican-db-sync-nr74n subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=a2aba87a-f295-496e-91c7-24b4c01e4881;k8s:batch.kubernetes.io/job-name=barbican-db-sync;k8s:component=db-sync;k8s:controller-uid=a2aba87a-f295-496e-91c7-24b4c01e4881;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-sync;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=00f8d9dbfe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3160 identity=465 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=a2aba87a-f295-496e-91c7-24b4c01e4881,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=a2aba87a-f295-496e-91c7-24b4c01e4881,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.25 ipv6= k8sPodName=openstack/barbican-db-sync-nr74n oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=00f8d9dbfe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3160 identity=465 ipv4=10.0.0.25 ipv6= k8sPodName=openstack/barbican-db-sync-nr74n subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=00f8d9dbfe datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3160 identity=465 ipv4=10.0.0.25 ipv6= k8sPodName=openstack/barbican-db-sync-nr74n subsys=endpoint level=info msg="Successful endpoint creation" containerID=00f8d9dbfe datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3160 identity=465 ipv4=10.0.0.25 ipv6= k8sPodName=openstack/barbican-db-sync-nr74n subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=00f8d9dbfe endpointID=3160 k8sNamespace=openstack k8sPodName=barbican-db-sync-nr74n subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=a2aba87a-f295-496e-91c7-24b4c01e4881 k8s:batch.kubernetes.io/job-name=barbican-db-sync k8s:component=db-sync k8s:controller-uid=a2aba87a-f295-496e-91c7-24b4c01e4881 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-sync k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=00f8d9dbfe datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3160 identity=465 ipv4=10.0.0.25 ipv6= k8sPodName=openstack/barbican-db-sync-nr74n subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.140 60ebf12f-b32b-4eaa-bd3d-a130dea84b15 default }" containerID=ce6360c36e2fc057baf7f811e2697ab8968afd27c3e7f57348153a2af4965738 datapathConfiguration="&{false false false false false }" interface=lxc4ec0783232af k8sPodName=openstack/barbican-rabbit-init-zr6lf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ce6360c36e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1685 ipv4=10.0.0.140 ipv6= k8sPodName=openstack/barbican-rabbit-init-zr6lf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ce6360c36e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1685 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=714da46f-7e7f-4eca-a3f0-13fc512b7919,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=714da46f-7e7f-4eca-a3f0-13fc512b7919,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.140 ipv6= k8sPodName=openstack/barbican-rabbit-init-zr6lf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=714da46f-7e7f-4eca-a3f0-13fc512b7919;k8s:batch.kubernetes.io/job-name=barbican-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=714da46f-7e7f-4eca-a3f0-13fc512b7919;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-rabbit-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ce6360c36e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1685 identity=32780 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=714da46f-7e7f-4eca-a3f0-13fc512b7919,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=714da46f-7e7f-4eca-a3f0-13fc512b7919,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.140 ipv6= k8sPodName=openstack/barbican-rabbit-init-zr6lf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ce6360c36e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1685 identity=32780 ipv4=10.0.0.140 ipv6= k8sPodName=openstack/barbican-rabbit-init-zr6lf subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ce6360c36e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1685 identity=32780 ipv4=10.0.0.140 ipv6= k8sPodName=openstack/barbican-rabbit-init-zr6lf subsys=endpoint level=info msg="Successful endpoint creation" containerID=ce6360c36e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1685 identity=32780 ipv4=10.0.0.140 ipv6= k8sPodName=openstack/barbican-rabbit-init-zr6lf subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=ce6360c36e endpointID=1685 k8sNamespace=openstack k8sPodName=barbican-rabbit-init-zr6lf subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=714da46f-7e7f-4eca-a3f0-13fc512b7919 k8s:batch.kubernetes.io/job-name=barbican-rabbit-init k8s:component=rabbit-init k8s:controller-uid=714da46f-7e7f-4eca-a3f0-13fc512b7919 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-rabbit-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=ce6360c36e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1685 identity=32780 ipv4=10.0.0.140 ipv6= k8sPodName=openstack/barbican-rabbit-init-zr6lf subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.52 33008624-741f-4bd4-a390-d63cb11742e0 default }" containerID=41da7d99d2be8e1f1b6e56c190b6de30c3f99769131a2d06ba7449c3f7f4b1b8 datapathConfiguration="&{false false false false false }" interface=lxc01da4298c114 k8sPodName=openstack/barbican-ks-service-fgx6d labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=41da7d99d2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=971 ipv4=10.0.0.52 ipv6= k8sPodName=openstack/barbican-ks-service-fgx6d subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=41da7d99d2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=971 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=657eee01-d2c4-4899-9cd7-b6ab6be3628c,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=657eee01-d2c4-4899-9cd7-b6ab6be3628c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.52 ipv6= k8sPodName=openstack/barbican-ks-service-fgx6d subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=657eee01-d2c4-4899-9cd7-b6ab6be3628c;k8s:batch.kubernetes.io/job-name=barbican-ks-service;k8s:component=ks-service;k8s:controller-uid=657eee01-d2c4-4899-9cd7-b6ab6be3628c;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-service;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=41da7d99d2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=971 identity=6273 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=657eee01-d2c4-4899-9cd7-b6ab6be3628c,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=657eee01-d2c4-4899-9cd7-b6ab6be3628c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.52 ipv6= k8sPodName=openstack/barbican-ks-service-fgx6d oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=41da7d99d2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=971 identity=6273 ipv4=10.0.0.52 ipv6= k8sPodName=openstack/barbican-ks-service-fgx6d subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=41da7d99d2 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=971 identity=6273 ipv4=10.0.0.52 ipv6= k8sPodName=openstack/barbican-ks-service-fgx6d subsys=endpoint level=info msg="Successful endpoint creation" containerID=41da7d99d2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=971 identity=6273 ipv4=10.0.0.52 ipv6= k8sPodName=openstack/barbican-ks-service-fgx6d subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=41da7d99d2 endpointID=971 k8sNamespace=openstack k8sPodName=barbican-ks-service-fgx6d subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=657eee01-d2c4-4899-9cd7-b6ab6be3628c k8s:batch.kubernetes.io/job-name=barbican-ks-service k8s:component=ks-service k8s:controller-uid=657eee01-d2c4-4899-9cd7-b6ab6be3628c k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-service k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=41da7d99d2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=971 identity=6273 ipv4=10.0.0.52 ipv6= k8sPodName=openstack/barbican-ks-service-fgx6d subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.90 cc1ccd29-9ddc-4969-8691-d26ed4cfc34b default }" containerID=09acd5de82466d86d5fcd8ba48cd1676f7ea8c92d9986bf052e69f88f0f97c17 datapathConfiguration="&{false false false false false }" interface=lxcf0f5aeed7077 k8sPodName=openstack/barbican-ks-endpoints-w4nkk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=09acd5de82 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=152 ipv4=10.0.0.90 ipv6= k8sPodName=openstack/barbican-ks-endpoints-w4nkk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=09acd5de82 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=152 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=20ca1f88-ff35-454e-9785-5d8b645703c9,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=20ca1f88-ff35-454e-9785-5d8b645703c9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.90 ipv6= k8sPodName=openstack/barbican-ks-endpoints-w4nkk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=20ca1f88-ff35-454e-9785-5d8b645703c9;k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=20ca1f88-ff35-454e-9785-5d8b645703c9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-endpoints;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=09acd5de82 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=152 identity=2622 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=20ca1f88-ff35-454e-9785-5d8b645703c9,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=20ca1f88-ff35-454e-9785-5d8b645703c9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.90 ipv6= k8sPodName=openstack/barbican-ks-endpoints-w4nkk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=09acd5de82 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=152 identity=2622 ipv4=10.0.0.90 ipv6= k8sPodName=openstack/barbican-ks-endpoints-w4nkk subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=09acd5de82 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=152 identity=2622 ipv4=10.0.0.90 ipv6= k8sPodName=openstack/barbican-ks-endpoints-w4nkk subsys=endpoint level=info msg="Successful endpoint creation" containerID=09acd5de82 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=152 identity=2622 ipv4=10.0.0.90 ipv6= k8sPodName=openstack/barbican-ks-endpoints-w4nkk subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=09acd5de82 endpointID=152 k8sNamespace=openstack k8sPodName=barbican-ks-endpoints-w4nkk subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=20ca1f88-ff35-454e-9785-5d8b645703c9 k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=20ca1f88-ff35-454e-9785-5d8b645703c9 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-endpoints k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=09acd5de82 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=152 identity=2622 ipv4=10.0.0.90 ipv6= k8sPodName=openstack/barbican-ks-endpoints-w4nkk subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.20 772c3081-c52f-442f-9382-e2a7ec099d30 default }" containerID=85917aba92f9a0ee6bd09ff7e427f8e836d6943aaed2ce653d61814bd1939ab9 datapathConfiguration="&{false false false false false }" interface=lxc101ee202fa13 k8sPodName=openstack/barbican-ks-user-8xbw9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=85917aba92 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=359 ipv4=10.0.0.20 ipv6= k8sPodName=openstack/barbican-ks-user-8xbw9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=85917aba92 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=359 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=399aa25f-c76e-44dc-b9fc-838426ca61ff,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=399aa25f-c76e-44dc-b9fc-838426ca61ff,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.20 ipv6= k8sPodName=openstack/barbican-ks-user-8xbw9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=399aa25f-c76e-44dc-b9fc-838426ca61ff;k8s:batch.kubernetes.io/job-name=barbican-ks-user;k8s:component=ks-user;k8s:controller-uid=399aa25f-c76e-44dc-b9fc-838426ca61ff;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-user;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=85917aba92 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=359 identity=2066 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=399aa25f-c76e-44dc-b9fc-838426ca61ff,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=399aa25f-c76e-44dc-b9fc-838426ca61ff,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.20 ipv6= k8sPodName=openstack/barbican-ks-user-8xbw9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=85917aba92 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=359 identity=2066 ipv4=10.0.0.20 ipv6= k8sPodName=openstack/barbican-ks-user-8xbw9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=85917aba92 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=359 identity=2066 ipv4=10.0.0.20 ipv6= k8sPodName=openstack/barbican-ks-user-8xbw9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=85917aba92 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=359 identity=2066 ipv4=10.0.0.20 ipv6= k8sPodName=openstack/barbican-ks-user-8xbw9 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=85917aba92 endpointID=359 k8sNamespace=openstack k8sPodName=barbican-ks-user-8xbw9 subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=399aa25f-c76e-44dc-b9fc-838426ca61ff k8s:batch.kubernetes.io/job-name=barbican-ks-user k8s:component=ks-user k8s:controller-uid=399aa25f-c76e-44dc-b9fc-838426ca61ff k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-user k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=85917aba92 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=359 identity=2066 ipv4=10.0.0.20 ipv6= k8sPodName=openstack/barbican-ks-user-8xbw9 subsys=endpoint level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Create endpoint request" addressing="&{10.0.0.210 1c144e2a-95dd-4684-bc9b-6696aa716288 default }" containerID=3ac4488eff27b9f09055d757e4925b2b296393b0a909198fa26afae9b135a7f3 datapathConfiguration="&{false false false false false }" interface=lxc11f65ad79387 k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-zst9f labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3ac4488eff datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2334 ipv4=10.0.0.210 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-zst9f subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3ac4488eff datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2334 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.15.9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.210 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-zst9f subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:rook-ceph k8s:io.cilium.k8s.namespace.labels.name:rook-ceph]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-operator;k8s:helm.sh/chart=rook-ceph-v1.15.9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph;k8s:io.cilium.k8s.namespace.labels.name=rook-ceph;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system;k8s:io.kubernetes.pod.namespace=rook-ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3ac4488eff datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2334 identity=33600 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.15.9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.210 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-zst9f oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3ac4488eff datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2334 identity=33600 ipv4=10.0.0.210 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-zst9f subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=3ac4488eff datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2334 identity=33600 ipv4=10.0.0.210 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-zst9f subsys=endpoint level=info msg="Successful endpoint creation" containerID=3ac4488eff datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2334 identity=33600 ipv4=10.0.0.210 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-zst9f subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.135 fc2e05c7-ca0f-4c3d-9024-376874f954c9 default }" containerID=00cd36680aa7e9c49031e309ba6b3737126088370cdee7a84867d356ad68d80a datapathConfiguration="&{false false false false false }" interface=lxcff1ec3c986d8 k8sPodName=openstack/rook-ceph-detect-version-dzhbn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=00cd36680a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3925 ipv4=10.0.0.135 ipv6= k8sPodName=openstack/rook-ceph-detect-version-dzhbn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=00cd36680a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3925 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=ca6766df-3dc3-4759-9b8c-fe30b3e37d18,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=ca6766df-3dc3-4759-9b8c-fe30b3e37d18,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.135 ipv6= k8sPodName=openstack/rook-ceph-detect-version-dzhbn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app=rook-ceph-detect-version;k8s:batch.kubernetes.io/controller-uid=ca6766df-3dc3-4759-9b8c-fe30b3e37d18;k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version;k8s:controller-uid=ca6766df-3dc3-4759-9b8c-fe30b3e37d18;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=rook-ceph-detect-version;k8s:rook-version=v1.15.9;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=00cd36680a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3925 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.135 ipv6= k8sPodName=openstack/rook-ceph-detect-version-dzhbn line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=00cd36680a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3925 identity=707 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=ca6766df-3dc3-4759-9b8c-fe30b3e37d18,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=ca6766df-3dc3-4759-9b8c-fe30b3e37d18,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.135 ipv6= k8sPodName=openstack/rook-ceph-detect-version-dzhbn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=00cd36680a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3925 identity=707 ipv4=10.0.0.135 ipv6= k8sPodName=openstack/rook-ceph-detect-version-dzhbn subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=00cd36680a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3925 identity=707 ipv4=10.0.0.135 ipv6= k8sPodName=openstack/rook-ceph-detect-version-dzhbn subsys=endpoint level=info msg="Successful endpoint creation" containerID=00cd36680a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3925 identity=707 ipv4=10.0.0.135 ipv6= k8sPodName=openstack/rook-ceph-detect-version-dzhbn subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=00cd36680a endpointID=3925 k8sNamespace=openstack k8sPodName=rook-ceph-detect-version-dzhbn subsys=daemon level=info msg="Releasing key" key="[k8s:app=rook-ceph-detect-version k8s:batch.kubernetes.io/controller-uid=ca6766df-3dc3-4759-9b8c-fe30b3e37d18 k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version k8s:controller-uid=ca6766df-3dc3-4759-9b8c-fe30b3e37d18 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=rook-ceph-detect-version k8s:rook-version=v1.15.9]" subsys=allocator level=info msg="Removed endpoint" containerID=00cd36680a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3925 identity=707 ipv4=10.0.0.135 ipv6= k8sPodName=openstack/rook-ceph-detect-version-dzhbn subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.224 28c3f063-510a-44af-a981-2139057225d6 default }" containerID=3d28c569edbe582adbf8dbb2b6d95bee38dd3d93ac853351af91fba43dad8759 datapathConfiguration="&{false false false false false }" interface=lxcb51dddc8739d k8sPodName=openstack/ceph-object-controller-detect-version-bhlwr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3d28c569ed datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3947 ipv4=10.0.0.224 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-bhlwr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3d28c569ed datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3947 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=24531ad0-d7eb-4ad0-8db2-dde46e4586dd,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=24531ad0-d7eb-4ad0-8db2-dde46e4586dd,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.224 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-bhlwr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=ceph-object-controller-detect-version;k8s:batch.kubernetes.io/controller-uid=24531ad0-d7eb-4ad0-8db2-dde46e4586dd;k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version;k8s:controller-uid=24531ad0-d7eb-4ad0-8db2-dde46e4586dd;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=ceph-object-controller-detect-version;k8s:rook-version=v1.15.9;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3d28c569ed datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3947 identity=46623 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=24531ad0-d7eb-4ad0-8db2-dde46e4586dd,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=24531ad0-d7eb-4ad0-8db2-dde46e4586dd,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.224 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-bhlwr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3d28c569ed datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3947 identity=46623 ipv4=10.0.0.224 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-bhlwr subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=3d28c569ed datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3947 identity=46623 ipv4=10.0.0.224 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-bhlwr subsys=endpoint level=info msg="Successful endpoint creation" containerID=3d28c569ed datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3947 identity=46623 ipv4=10.0.0.224 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-bhlwr subsys=daemon level=info msg="Delete endpoint request" containerID=3d28c569ed endpointID=3947 k8sNamespace=openstack k8sPodName=ceph-object-controller-detect-version-bhlwr subsys=daemon level=info msg="Releasing key" key="[k8s:app=ceph-object-controller-detect-version k8s:batch.kubernetes.io/controller-uid=24531ad0-d7eb-4ad0-8db2-dde46e4586dd k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version k8s:controller-uid=24531ad0-d7eb-4ad0-8db2-dde46e4586dd k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=ceph-object-controller-detect-version k8s:rook-version=v1.15.9]" subsys=allocator level=info msg="Removed endpoint" containerID=3d28c569ed datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3947 identity=46623 ipv4=10.0.0.224 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-bhlwr subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.89 565e6799-f3c0-4fb5-a048-aa68b05c33c9 default }" containerID=1159ffdc8f2cb127344149d03a277b6eb6ed98f127945a81320ca1271a587f00 datapathConfiguration="&{false false false false false }" interface=lxcae35290abd22 k8sPodName=local-path-storage/helper-pod-create-pvc-414f5c54-e4d1-4e78-ac51-2c4844e063bf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1159ffdc8f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=630 ipv4=10.0.0.89 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-414f5c54-e4d1-4e78-ac51-2c4844e063bf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1159ffdc8f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=630 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.89 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-414f5c54-e4d1-4e78-ac51-2c4844e063bf subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1159ffdc8f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=630 identity=43561 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.89 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-414f5c54-e4d1-4e78-ac51-2c4844e063bf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1159ffdc8f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=630 identity=43561 ipv4=10.0.0.89 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-414f5c54-e4d1-4e78-ac51-2c4844e063bf subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1159ffdc8f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=630 identity=43561 ipv4=10.0.0.89 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-414f5c54-e4d1-4e78-ac51-2c4844e063bf subsys=endpoint level=info msg="Successful endpoint creation" containerID=1159ffdc8f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=630 identity=43561 ipv4=10.0.0.89 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-414f5c54-e4d1-4e78-ac51-2c4844e063bf subsys=daemon level=info msg="Delete endpoint request" containerID=1159ffdc8f endpointID=630 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-414f5c54-e4d1-4e78-ac51-2c4844e063bf subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=1159ffdc8f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=630 identity=43561 ipv4=10.0.0.89 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-414f5c54-e4d1-4e78-ac51-2c4844e063bf subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.77 3adb74c4-a34b-439d-8a8e-4b48a8d2a230 default }" containerID=d83d2eaff03f82ad1444ff233518224fb499e86e636282d6ef59a6d01304e32d datapathConfiguration="&{false false false false false }" interface=lxc94b60f57c7d5 k8sPodName=openstack/rabbitmq-glance-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d83d2eaff0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2752 ipv4=10.0.0.77 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d83d2eaff0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2752 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.77 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=d83d2eaff0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2752 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.77 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-glance;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d83d2eaff0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2752 identity=19768 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.77 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d83d2eaff0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2752 identity=19768 ipv4=10.0.0.77 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d83d2eaff0 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2752 identity=19768 ipv4=10.0.0.77 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=d83d2eaff0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2752 identity=19768 ipv4=10.0.0.77 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.10 13c7a778-c034-4de5-b97d-a0b1d6365fa5 default }" containerID=346594e6939d901edd98f91ec481b29c08dc8506dfee22fe1feb77d8eebd341c datapathConfiguration="&{false false false false false }" interface=lxc02f5c7f2afae k8sPodName=openstack/glance-db-init-wmbsw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=346594e693 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1179 ipv4=10.0.0.10 ipv6= k8sPodName=openstack/glance-db-init-wmbsw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=346594e693 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1179 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=271fd59f-1adf-46dc-9324-c7ce1554f382,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=271fd59f-1adf-46dc-9324-c7ce1554f382,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.10 ipv6= k8sPodName=openstack/glance-db-init-wmbsw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=271fd59f-1adf-46dc-9324-c7ce1554f382;k8s:batch.kubernetes.io/job-name=glance-db-init;k8s:component=db-init;k8s:controller-uid=271fd59f-1adf-46dc-9324-c7ce1554f382;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=346594e693 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1179 identity=43945 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=271fd59f-1adf-46dc-9324-c7ce1554f382,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=271fd59f-1adf-46dc-9324-c7ce1554f382,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.10 ipv6= k8sPodName=openstack/glance-db-init-wmbsw oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=346594e693 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1179 identity=43945 ipv4=10.0.0.10 ipv6= k8sPodName=openstack/glance-db-init-wmbsw subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=346594e693 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1179 identity=43945 ipv4=10.0.0.10 ipv6= k8sPodName=openstack/glance-db-init-wmbsw subsys=endpoint level=info msg="Successful endpoint creation" containerID=346594e693 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1179 identity=43945 ipv4=10.0.0.10 ipv6= k8sPodName=openstack/glance-db-init-wmbsw subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=346594e693 endpointID=1179 k8sNamespace=openstack k8sPodName=glance-db-init-wmbsw subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=271fd59f-1adf-46dc-9324-c7ce1554f382 k8s:batch.kubernetes.io/job-name=glance-db-init k8s:component=db-init k8s:controller-uid=271fd59f-1adf-46dc-9324-c7ce1554f382 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=346594e693 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1179 identity=43945 ipv4=10.0.0.10 ipv6= k8sPodName=openstack/glance-db-init-wmbsw subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.113 3a05a5c8-a3cf-4bb8-9a87-98e056798a61 default }" containerID=d2f6ab0e1dc2f4627f5d2742e9a18342d77b491b3d6896ea47da425850b47ffd datapathConfiguration="&{false false false false false }" interface=lxca89f6e7c4909 k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-rdhn2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d2f6ab0e1d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1317 ipv4=10.0.0.113 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-rdhn2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d2f6ab0e1d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1317 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.113 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-rdhn2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=d2f6ab0e1d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1317 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.113 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-rdhn2 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=rook-ceph-rgw;k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io;k8s:app.kubernetes.io/created-by=rook-ceph-operator;k8s:app.kubernetes.io/instance=ceph;k8s:app.kubernetes.io/managed-by=rook-ceph-operator;k8s:app.kubernetes.io/name=ceph-rgw;k8s:app.kubernetes.io/part-of=ceph;k8s:ceph_daemon_id=ceph;k8s:ceph_daemon_type=rgw;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw;k8s:io.kubernetes.pod.namespace=openstack;k8s:rgw=ceph;k8s:rook.io/operator-namespace=rook-ceph;k8s:rook_cluster=openstack;k8s:rook_object_store=ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d2f6ab0e1d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1317 identity=27274 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.113 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-rdhn2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d2f6ab0e1d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1317 identity=27274 ipv4=10.0.0.113 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-rdhn2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.19 f133c7a3-a7b7-41c7-943a-4681a6b55796 default }" containerID=d7f364d8a9cee43e5dbfaec08ba89d91d79f9929175aa06a38da5096ffe3170c datapathConfiguration="&{false false false false false }" interface=lxc408b2749bce2 k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-rxpkb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d7f364d8a9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=133 ipv4=10.0.0.19 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-rxpkb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d7f364d8a9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=133 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.19 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-rxpkb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-crashcollector;k8s:ceph-version=18.2.7-0;k8s:ceph_daemon_id=crash;k8s:crashcollector=crash;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default;k8s:io.kubernetes.pod.namespace=openstack;k8s:node_name=instance;k8s:rook_cluster=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d7f364d8a9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=133 identity=8453 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.19 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-rxpkb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d7f364d8a9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=133 identity=8453 ipv4=10.0.0.19 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-rxpkb subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d2f6ab0e1d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1317 identity=27274 ipv4=10.0.0.113 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-rdhn2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=d2f6ab0e1d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1317 identity=27274 ipv4=10.0.0.113 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-rdhn2 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.11 1728dde8-9667-4e13-9ea9-ecc11bde1904 default }" containerID=3ca6b617cbdde0264e3676c2bb45912b00dedda87b8c563d4e870f386c881df7 datapathConfiguration="&{false false false false false }" interface=lxc8410efa0693f k8sPodName=openstack/glance-db-sync-jz5tj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3ca6b617cb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=752 ipv4=10.0.0.11 ipv6= k8sPodName=openstack/glance-db-sync-jz5tj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3ca6b617cb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=752 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=0a89c64c-9df5-407b-bade-3f85e5005148,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=0a89c64c-9df5-407b-bade-3f85e5005148,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.11 ipv6= k8sPodName=openstack/glance-db-sync-jz5tj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=0a89c64c-9df5-407b-bade-3f85e5005148;k8s:batch.kubernetes.io/job-name=glance-db-sync;k8s:component=db-sync;k8s:controller-uid=0a89c64c-9df5-407b-bade-3f85e5005148;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-sync;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3ca6b617cb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=752 identity=15162 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=0a89c64c-9df5-407b-bade-3f85e5005148,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=0a89c64c-9df5-407b-bade-3f85e5005148,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.11 ipv6= k8sPodName=openstack/glance-db-sync-jz5tj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3ca6b617cb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=752 identity=15162 ipv4=10.0.0.11 ipv6= k8sPodName=openstack/glance-db-sync-jz5tj subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d7f364d8a9 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=133 identity=8453 ipv4=10.0.0.19 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-rxpkb subsys=endpoint level=info msg="Successful endpoint creation" containerID=d7f364d8a9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=133 identity=8453 ipv4=10.0.0.19 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-rxpkb subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=3ca6b617cb datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=752 identity=15162 ipv4=10.0.0.11 ipv6= k8sPodName=openstack/glance-db-sync-jz5tj subsys=endpoint level=info msg="Successful endpoint creation" containerID=3ca6b617cb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=752 identity=15162 ipv4=10.0.0.11 ipv6= k8sPodName=openstack/glance-db-sync-jz5tj subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=3ca6b617cb endpointID=752 k8sNamespace=openstack k8sPodName=glance-db-sync-jz5tj subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=0a89c64c-9df5-407b-bade-3f85e5005148 k8s:batch.kubernetes.io/job-name=glance-db-sync k8s:component=db-sync k8s:controller-uid=0a89c64c-9df5-407b-bade-3f85e5005148 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-sync k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=3ca6b617cb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=752 identity=15162 ipv4=10.0.0.11 ipv6= k8sPodName=openstack/glance-db-sync-jz5tj subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.241 5c619e46-51df-4c79-b39a-6b521073a70a default }" containerID=b0e6f0cecbd5b44cea619398703e677c1b1dfac9ae80b3512f8f868956a5b9e0 datapathConfiguration="&{false false false false false }" interface=lxc7dcb5698d124 k8sPodName=openstack/glance-rabbit-init-t67c2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b0e6f0cecb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=712 ipv4=10.0.0.241 ipv6= k8sPodName=openstack/glance-rabbit-init-t67c2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b0e6f0cecb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=712 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=c852590f-bb05-4da3-9738-c481950a1757,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=c852590f-bb05-4da3-9738-c481950a1757,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.241 ipv6= k8sPodName=openstack/glance-rabbit-init-t67c2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=c852590f-bb05-4da3-9738-c481950a1757;k8s:batch.kubernetes.io/job-name=glance-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=c852590f-bb05-4da3-9738-c481950a1757;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-rabbit-init;k8s:release_group=glance;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=b0e6f0cecb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=712 identity=2085 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=c852590f-bb05-4da3-9738-c481950a1757,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=c852590f-bb05-4da3-9738-c481950a1757,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.241 ipv6= k8sPodName=openstack/glance-rabbit-init-t67c2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b0e6f0cecb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=712 identity=2085 ipv4=10.0.0.241 ipv6= k8sPodName=openstack/glance-rabbit-init-t67c2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b0e6f0cecb datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=712 identity=2085 ipv4=10.0.0.241 ipv6= k8sPodName=openstack/glance-rabbit-init-t67c2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=b0e6f0cecb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=712 identity=2085 ipv4=10.0.0.241 ipv6= k8sPodName=openstack/glance-rabbit-init-t67c2 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=b0e6f0cecb endpointID=712 k8sNamespace=openstack k8sPodName=glance-rabbit-init-t67c2 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=c852590f-bb05-4da3-9738-c481950a1757 k8s:batch.kubernetes.io/job-name=glance-rabbit-init k8s:component=rabbit-init k8s:controller-uid=c852590f-bb05-4da3-9738-c481950a1757 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-rabbit-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=b0e6f0cecb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=712 identity=2085 ipv4=10.0.0.241 ipv6= k8sPodName=openstack/glance-rabbit-init-t67c2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.213 bf1e76ea-edd1-4f2c-aafd-9582733888ab default }" containerID=9788f76b0c0c4826908e1069683eb2235f8de7bdd8bf401054d0a2a5e47e7e00 datapathConfiguration="&{false false false false false }" interface=lxc08e0b15952b2 k8sPodName=openstack/glance-ks-service-hkzwj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9788f76b0c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2296 ipv4=10.0.0.213 ipv6= k8sPodName=openstack/glance-ks-service-hkzwj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9788f76b0c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2296 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=a5cd0a45-fc0a-43e9-9b17-9dddbcf287ff,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=a5cd0a45-fc0a-43e9-9b17-9dddbcf287ff,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.213 ipv6= k8sPodName=openstack/glance-ks-service-hkzwj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=9788f76b0c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2296 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.213 ipv6= k8sPodName=openstack/glance-ks-service-hkzwj line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=a5cd0a45-fc0a-43e9-9b17-9dddbcf287ff;k8s:batch.kubernetes.io/job-name=glance-ks-service;k8s:component=ks-service;k8s:controller-uid=a5cd0a45-fc0a-43e9-9b17-9dddbcf287ff;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-service;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9788f76b0c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2296 identity=579 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=a5cd0a45-fc0a-43e9-9b17-9dddbcf287ff,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=a5cd0a45-fc0a-43e9-9b17-9dddbcf287ff,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.213 ipv6= k8sPodName=openstack/glance-ks-service-hkzwj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9788f76b0c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2296 identity=579 ipv4=10.0.0.213 ipv6= k8sPodName=openstack/glance-ks-service-hkzwj subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9788f76b0c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2296 identity=579 ipv4=10.0.0.213 ipv6= k8sPodName=openstack/glance-ks-service-hkzwj subsys=endpoint level=info msg="Successful endpoint creation" containerID=9788f76b0c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2296 identity=579 ipv4=10.0.0.213 ipv6= k8sPodName=openstack/glance-ks-service-hkzwj subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=9788f76b0c endpointID=2296 k8sNamespace=openstack k8sPodName=glance-ks-service-hkzwj subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=a5cd0a45-fc0a-43e9-9b17-9dddbcf287ff k8s:batch.kubernetes.io/job-name=glance-ks-service k8s:component=ks-service k8s:controller-uid=a5cd0a45-fc0a-43e9-9b17-9dddbcf287ff k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-service k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=9788f76b0c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2296 identity=579 ipv4=10.0.0.213 ipv6= k8sPodName=openstack/glance-ks-service-hkzwj subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.100 d0477a8d-e364-4869-aaa6-375298782029 default }" containerID=f2639b6af3fdf1d66dc57d1f0dbec1c6870543cda0f0e724c1678e0bae129a44 datapathConfiguration="&{false false false false false }" interface=lxc66b4383ad706 k8sPodName=openstack/glance-ks-endpoints-zk4th labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f2639b6af3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1223 ipv4=10.0.0.100 ipv6= k8sPodName=openstack/glance-ks-endpoints-zk4th subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f2639b6af3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1223 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=32e7e9df-7d70-48ed-989e-127f69d2ba65,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=32e7e9df-7d70-48ed-989e-127f69d2ba65,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.100 ipv6= k8sPodName=openstack/glance-ks-endpoints-zk4th subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=32e7e9df-7d70-48ed-989e-127f69d2ba65;k8s:batch.kubernetes.io/job-name=glance-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=32e7e9df-7d70-48ed-989e-127f69d2ba65;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-endpoints;k8s:release_group=glance;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=f2639b6af3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1223 identity=49643 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=32e7e9df-7d70-48ed-989e-127f69d2ba65,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=32e7e9df-7d70-48ed-989e-127f69d2ba65,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.100 ipv6= k8sPodName=openstack/glance-ks-endpoints-zk4th oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f2639b6af3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1223 identity=49643 ipv4=10.0.0.100 ipv6= k8sPodName=openstack/glance-ks-endpoints-zk4th subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f2639b6af3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1223 identity=49643 ipv4=10.0.0.100 ipv6= k8sPodName=openstack/glance-ks-endpoints-zk4th subsys=endpoint level=info msg="Successful endpoint creation" containerID=f2639b6af3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1223 identity=49643 ipv4=10.0.0.100 ipv6= k8sPodName=openstack/glance-ks-endpoints-zk4th subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=f2639b6af3 endpointID=1223 k8sNamespace=openstack k8sPodName=glance-ks-endpoints-zk4th subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=32e7e9df-7d70-48ed-989e-127f69d2ba65 k8s:batch.kubernetes.io/job-name=glance-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=32e7e9df-7d70-48ed-989e-127f69d2ba65 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-endpoints k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=f2639b6af3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1223 identity=49643 ipv4=10.0.0.100 ipv6= k8sPodName=openstack/glance-ks-endpoints-zk4th subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.72 47e537d8-638a-4e94-b7e4-64b01b62655a default }" containerID=2f9f2f85d1f2d420ab2ba515d06fd631a516ad7c660359afc4bd3ca96dec4076 datapathConfiguration="&{false false false false false }" interface=lxcdc698537660d k8sPodName=openstack/glance-ks-user-f5cb2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2f9f2f85d1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1917 ipv4=10.0.0.72 ipv6= k8sPodName=openstack/glance-ks-user-f5cb2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2f9f2f85d1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1917 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=e3c393e9-0aff-4e8b-aa2b-62a40dfa3dc7,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=e3c393e9-0aff-4e8b-aa2b-62a40dfa3dc7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.72 ipv6= k8sPodName=openstack/glance-ks-user-f5cb2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=e3c393e9-0aff-4e8b-aa2b-62a40dfa3dc7;k8s:batch.kubernetes.io/job-name=glance-ks-user;k8s:component=ks-user;k8s:controller-uid=e3c393e9-0aff-4e8b-aa2b-62a40dfa3dc7;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-user;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2f9f2f85d1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1917 identity=10597 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=e3c393e9-0aff-4e8b-aa2b-62a40dfa3dc7,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=e3c393e9-0aff-4e8b-aa2b-62a40dfa3dc7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.72 ipv6= k8sPodName=openstack/glance-ks-user-f5cb2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2f9f2f85d1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1917 identity=10597 ipv4=10.0.0.72 ipv6= k8sPodName=openstack/glance-ks-user-f5cb2 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=2f9f2f85d1 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1917 identity=10597 ipv4=10.0.0.72 ipv6= k8sPodName=openstack/glance-ks-user-f5cb2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=2f9f2f85d1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1917 identity=10597 ipv4=10.0.0.72 ipv6= k8sPodName=openstack/glance-ks-user-f5cb2 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=2f9f2f85d1 endpointID=1917 k8sNamespace=openstack k8sPodName=glance-ks-user-f5cb2 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=e3c393e9-0aff-4e8b-aa2b-62a40dfa3dc7 k8s:batch.kubernetes.io/job-name=glance-ks-user k8s:component=ks-user k8s:controller-uid=e3c393e9-0aff-4e8b-aa2b-62a40dfa3dc7 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-user k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=2f9f2f85d1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1917 identity=10597 ipv4=10.0.0.72 ipv6= k8sPodName=openstack/glance-ks-user-f5cb2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.192 90bda54e-b6be-48ee-8b02-df57f28c8d37 default }" containerID=a0106cbf4a632ba956d00c83d16f6c20674e7e5b125b22e6623439e7c983d37e datapathConfiguration="&{false false false false false }" interface=lxc7733f656240d k8sPodName=openstack/glance-metadefs-load-29v55 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a0106cbf4a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=336 ipv4=10.0.0.192 ipv6= k8sPodName=openstack/glance-metadefs-load-29v55 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a0106cbf4a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=336 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=48ee1748-18df-4ed1-b57a-2dcc882777d0,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=48ee1748-18df-4ed1-b57a-2dcc882777d0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.192 ipv6= k8sPodName=openstack/glance-metadefs-load-29v55 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=48ee1748-18df-4ed1-b57a-2dcc882777d0;k8s:batch.kubernetes.io/job-name=glance-metadefs-load;k8s:component=metadefs_load;k8s:controller-uid=48ee1748-18df-4ed1-b57a-2dcc882777d0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-metadefs-load;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a0106cbf4a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=336 identity=19148 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=48ee1748-18df-4ed1-b57a-2dcc882777d0,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=48ee1748-18df-4ed1-b57a-2dcc882777d0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.192 ipv6= k8sPodName=openstack/glance-metadefs-load-29v55 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=a0106cbf4a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=336 identity=19148 ipv4=10.0.0.192 ipv6= k8sPodName=openstack/glance-metadefs-load-29v55 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a0106cbf4a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=336 identity=19148 ipv4=10.0.0.192 ipv6= k8sPodName=openstack/glance-metadefs-load-29v55 subsys=endpoint level=info msg="Successful endpoint creation" containerID=a0106cbf4a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=336 identity=19148 ipv4=10.0.0.192 ipv6= k8sPodName=openstack/glance-metadefs-load-29v55 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=a0106cbf4a endpointID=336 k8sNamespace=openstack k8sPodName=glance-metadefs-load-29v55 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=48ee1748-18df-4ed1-b57a-2dcc882777d0 k8s:batch.kubernetes.io/job-name=glance-metadefs-load k8s:component=metadefs_load k8s:controller-uid=48ee1748-18df-4ed1-b57a-2dcc882777d0 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-metadefs-load k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=a0106cbf4a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=336 identity=19148 ipv4=10.0.0.192 ipv6= k8sPodName=openstack/glance-metadefs-load-29v55 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.70 f5bf83be-36e9-4e61-b938-e7f08dfee16e default }" containerID=e115eeafd84e8aeda1eb2087cffc3005964cf7714f7fd26c2927d937c77a5323 datapathConfiguration="&{false false false false false }" interface=lxc1db721c86991 k8sPodName=openstack/glance-storage-init-nw6bb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e115eeafd8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3828 ipv4=10.0.0.70 ipv6= k8sPodName=openstack/glance-storage-init-nw6bb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e115eeafd8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3828 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=b60ad6fa-3fa5-4162-afe1-0704922203c8,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=b60ad6fa-3fa5-4162-afe1-0704922203c8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.70 ipv6= k8sPodName=openstack/glance-storage-init-nw6bb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=b60ad6fa-3fa5-4162-afe1-0704922203c8;k8s:batch.kubernetes.io/job-name=glance-storage-init;k8s:component=storage-init;k8s:controller-uid=b60ad6fa-3fa5-4162-afe1-0704922203c8;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-storage-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e115eeafd8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3828 identity=63019 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=b60ad6fa-3fa5-4162-afe1-0704922203c8,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=b60ad6fa-3fa5-4162-afe1-0704922203c8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.70 ipv6= k8sPodName=openstack/glance-storage-init-nw6bb oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=e115eeafd8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3828 identity=63019 ipv4=10.0.0.70 ipv6= k8sPodName=openstack/glance-storage-init-nw6bb subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e115eeafd8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3828 identity=63019 ipv4=10.0.0.70 ipv6= k8sPodName=openstack/glance-storage-init-nw6bb subsys=endpoint level=info msg="Successful endpoint creation" containerID=e115eeafd8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3828 identity=63019 ipv4=10.0.0.70 ipv6= k8sPodName=openstack/glance-storage-init-nw6bb subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=e115eeafd8 endpointID=3828 k8sNamespace=openstack k8sPodName=glance-storage-init-nw6bb subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=b60ad6fa-3fa5-4162-afe1-0704922203c8 k8s:batch.kubernetes.io/job-name=glance-storage-init k8s:component=storage-init k8s:controller-uid=b60ad6fa-3fa5-4162-afe1-0704922203c8 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-storage-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=e115eeafd8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3828 identity=63019 ipv4=10.0.0.70 ipv6= k8sPodName=openstack/glance-storage-init-nw6bb subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.158 d14b91ea-2803-490b-bd3f-d015d3a1d39e default }" containerID=3befadd26b31fbba64692fb2f135bf328e7f086cedaab9f8bea3ced394f48d7c datapathConfiguration="&{false false false false false }" interface=lxcc8a0e1aa7568 k8sPodName=openstack/glance-api-64875987cd-26hz9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3befadd26b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=838 ipv4=10.0.0.158 ipv6= k8sPodName=openstack/glance-api-64875987cd-26hz9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3befadd26b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=838 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.158 ipv6= k8sPodName=openstack/glance-api-64875987cd-26hz9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3befadd26b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=838 identity=63649 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.158 ipv6= k8sPodName=openstack/glance-api-64875987cd-26hz9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3befadd26b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=838 identity=63649 ipv4=10.0.0.158 ipv6= k8sPodName=openstack/glance-api-64875987cd-26hz9 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=3befadd26b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=838 identity=63649 ipv4=10.0.0.158 ipv6= k8sPodName=openstack/glance-api-64875987cd-26hz9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=3befadd26b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=838 identity=63649 ipv4=10.0.0.158 ipv6= k8sPodName=openstack/glance-api-64875987cd-26hz9 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.144 2af89fb7-88f0-4dfe-a661-b2825818f8b0 default }" containerID=7dc2f8f577a8a99614c68070f5edd62d2e4dc30945c4f21c0864dfb071463261 datapathConfiguration="&{false false false false false }" interface=lxc6cf13b78ea88 k8sPodName=openstack/staffeln-api-59f45f6c77-xkgtw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7dc2f8f577 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3578 ipv4=10.0.0.144 ipv6= k8sPodName=openstack/staffeln-api-59f45f6c77-xkgtw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7dc2f8f577 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3578 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.144 ipv6= k8sPodName=openstack/staffeln-api-59f45f6c77-xkgtw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7dc2f8f577 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3578 identity=12576 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.144 ipv6= k8sPodName=openstack/staffeln-api-59f45f6c77-xkgtw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7dc2f8f577 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3578 identity=12576 ipv4=10.0.0.144 ipv6= k8sPodName=openstack/staffeln-api-59f45f6c77-xkgtw subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.110 9dc35cd1-79b3-466c-bdaa-f1c764f634f4 default }" containerID=2c1c9d7452aed5334ee83b78396c9b78ccec9ad9847ddb924d8c88f52e5d7da1 datapathConfiguration="&{false false false false false }" interface=lxc3342adb72638 k8sPodName=openstack/staffeln-conductor-694b748f86-xxps7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2c1c9d7452 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=670 ipv4=10.0.0.110 ipv6= k8sPodName=openstack/staffeln-conductor-694b748f86-xxps7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2c1c9d7452 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=670 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.110 ipv6= k8sPodName=openstack/staffeln-conductor-694b748f86-xxps7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=conductor;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2c1c9d7452 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=670 identity=14806 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.110 ipv6= k8sPodName=openstack/staffeln-conductor-694b748f86-xxps7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2c1c9d7452 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=670 identity=14806 ipv4=10.0.0.110 ipv6= k8sPodName=openstack/staffeln-conductor-694b748f86-xxps7 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.177 31157dc3-ff5d-4058-b889-a18023bc3ff9 default }" containerID=9f3b46bdf247639f707a66ce24bb0e8451088075f828d1a7899def3fde4f9f0f datapathConfiguration="&{false false false false false }" interface=lxca64dcab0a2a9 k8sPodName=openstack/staffeln-db-init-rhndp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9f3b46bdf2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1974 ipv4=10.0.0.177 ipv6= k8sPodName=openstack/staffeln-db-init-rhndp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9f3b46bdf2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1974 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=141e122d-0434-4e6f-ac72-ebf2ce09a46f,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=141e122d-0434-4e6f-ac72-ebf2ce09a46f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.177 ipv6= k8sPodName=openstack/staffeln-db-init-rhndp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=141e122d-0434-4e6f-ac72-ebf2ce09a46f;k8s:batch.kubernetes.io/job-name=staffeln-db-init;k8s:component=db-init;k8s:controller-uid=141e122d-0434-4e6f-ac72-ebf2ce09a46f;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-init;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9f3b46bdf2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1974 identity=23549 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=141e122d-0434-4e6f-ac72-ebf2ce09a46f,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=141e122d-0434-4e6f-ac72-ebf2ce09a46f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.177 ipv6= k8sPodName=openstack/staffeln-db-init-rhndp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9f3b46bdf2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1974 identity=23549 ipv4=10.0.0.177 ipv6= k8sPodName=openstack/staffeln-db-init-rhndp subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7dc2f8f577 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3578 identity=12576 ipv4=10.0.0.144 ipv6= k8sPodName=openstack/staffeln-api-59f45f6c77-xkgtw subsys=endpoint level=info msg="Successful endpoint creation" containerID=7dc2f8f577 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3578 identity=12576 ipv4=10.0.0.144 ipv6= k8sPodName=openstack/staffeln-api-59f45f6c77-xkgtw subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=2c1c9d7452 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=670 identity=14806 ipv4=10.0.0.110 ipv6= k8sPodName=openstack/staffeln-conductor-694b748f86-xxps7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=2c1c9d7452 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=670 identity=14806 ipv4=10.0.0.110 ipv6= k8sPodName=openstack/staffeln-conductor-694b748f86-xxps7 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=9f3b46bdf2 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1974 identity=23549 ipv4=10.0.0.177 ipv6= k8sPodName=openstack/staffeln-db-init-rhndp subsys=endpoint level=info msg="Successful endpoint creation" containerID=9f3b46bdf2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1974 identity=23549 ipv4=10.0.0.177 ipv6= k8sPodName=openstack/staffeln-db-init-rhndp subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=9f3b46bdf2 endpointID=1974 k8sNamespace=openstack k8sPodName=staffeln-db-init-rhndp subsys=daemon level=info msg="Releasing key" key="[k8s:application=staffeln k8s:batch.kubernetes.io/controller-uid=141e122d-0434-4e6f-ac72-ebf2ce09a46f k8s:batch.kubernetes.io/job-name=staffeln-db-init k8s:component=db-init k8s:controller-uid=141e122d-0434-4e6f-ac72-ebf2ce09a46f k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=staffeln-db-init k8s:release_group=staffeln]" subsys=allocator level=info msg="Removed endpoint" containerID=9f3b46bdf2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1974 identity=23549 ipv4=10.0.0.177 ipv6= k8sPodName=openstack/staffeln-db-init-rhndp subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.191 1464dc3a-2e2f-47ba-96f1-27f12dc6b8aa default }" containerID=3c2a357ee2edcb7fdf8bd3a395ba554007bade3efb18e179a18b2436fbedc6cc datapathConfiguration="&{false false false false false }" interface=lxcd8378ea84415 k8sPodName=openstack/staffeln-db-sync-x68gf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3c2a357ee2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1113 ipv4=10.0.0.191 ipv6= k8sPodName=openstack/staffeln-db-sync-x68gf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3c2a357ee2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1113 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=fafa9f3c-76d0-49e2-bd40-259687125098,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=fafa9f3c-76d0-49e2-bd40-259687125098,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.191 ipv6= k8sPodName=openstack/staffeln-db-sync-x68gf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=fafa9f3c-76d0-49e2-bd40-259687125098;k8s:batch.kubernetes.io/job-name=staffeln-db-sync;k8s:component=db-sync;k8s:controller-uid=fafa9f3c-76d0-49e2-bd40-259687125098;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-sync;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3c2a357ee2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1113 identity=16529 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=fafa9f3c-76d0-49e2-bd40-259687125098,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=fafa9f3c-76d0-49e2-bd40-259687125098,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.191 ipv6= k8sPodName=openstack/staffeln-db-sync-x68gf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3c2a357ee2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1113 identity=16529 ipv4=10.0.0.191 ipv6= k8sPodName=openstack/staffeln-db-sync-x68gf subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=3c2a357ee2 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1113 identity=16529 ipv4=10.0.0.191 ipv6= k8sPodName=openstack/staffeln-db-sync-x68gf subsys=endpoint level=info msg="Successful endpoint creation" containerID=3c2a357ee2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1113 identity=16529 ipv4=10.0.0.191 ipv6= k8sPodName=openstack/staffeln-db-sync-x68gf subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager