level=info msg="Memory available for map entries (0.003% of 67421638656B): 168554096B" subsys=config level=info msg="option bpf-ct-global-tcp-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-ct-global-any-max set by dynamic sizing to 295708" subsys=config level=info msg="option bpf-nat-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-neigh-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-sock-rev-map-max set by dynamic sizing to 295708" subsys=config level=info msg=" --agent-health-port='9879'" subsys=daemon level=info msg=" --agent-labels=''" subsys=daemon level=info msg=" --agent-liveness-update-interval='1s'" subsys=daemon level=info msg=" --agent-not-ready-taint-key='node.cilium.io/agent-not-ready'" subsys=daemon level=info msg=" --allocator-list-timeout='3m0s'" subsys=daemon level=info msg=" --allow-icmp-frag-needed='true'" subsys=daemon level=info msg=" --allow-localhost='auto'" subsys=daemon level=info msg=" --annotate-k8s-node='false'" subsys=daemon level=info msg=" --api-rate-limit=''" subsys=daemon level=info msg=" --arping-refresh-period='30s'" subsys=daemon level=info msg=" --auto-create-cilium-node-resource='true'" subsys=daemon level=info msg=" --auto-direct-node-routes='false'" subsys=daemon level=info msg=" --bgp-announce-lb-ip='false'" subsys=daemon level=info msg=" --bgp-announce-pod-cidr='false'" subsys=daemon level=info msg=" --bgp-config-path='/var/lib/cilium/bgp/config.yaml'" subsys=daemon level=info msg=" --bpf-auth-map-max='524288'" subsys=daemon level=info msg=" --bpf-ct-global-any-max='262144'" subsys=daemon level=info msg=" --bpf-ct-global-tcp-max='524288'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-fin='10s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-syn='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp-grace='1m0s'" subsys=daemon level=info msg=" --bpf-filter-priority='1'" subsys=daemon level=info msg=" --bpf-fragments-map-max='8192'" subsys=daemon level=info msg=" --bpf-lb-acceleration='disabled'" subsys=daemon level=info msg=" --bpf-lb-affinity-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-algorithm='random'" subsys=daemon level=info msg=" --bpf-lb-dev-ip-addr-inherit=''" subsys=daemon level=info msg=" --bpf-lb-dsr-dispatch='opt'" subsys=daemon level=info msg=" --bpf-lb-dsr-l4-xlate='frontend'" subsys=daemon level=info msg=" --bpf-lb-external-clusterip='false'" subsys=daemon level=info msg=" --bpf-lb-maglev-hash-seed='JLfvgnHc2kaSUFaI'" subsys=daemon level=info msg=" --bpf-lb-maglev-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-maglev-table-size='16381'" subsys=daemon level=info msg=" --bpf-lb-map-max='65536'" subsys=daemon level=info msg=" --bpf-lb-mode='snat'" subsys=daemon level=info msg=" --bpf-lb-rev-nat-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-rss-ipv4-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-rss-ipv6-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-service-backend-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-service-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-sock='false'" subsys=daemon level=info msg=" --bpf-lb-sock-hostns-only='false'" subsys=daemon level=info msg=" --bpf-lb-source-range-map-max='0'" subsys=daemon level=info msg=" --bpf-map-dynamic-size-ratio='0.0025'" subsys=daemon level=info msg=" --bpf-map-event-buffers=''" subsys=daemon level=info msg=" --bpf-nat-global-max='524288'" subsys=daemon level=info msg=" --bpf-neigh-global-max='524288'" subsys=daemon level=info msg=" --bpf-policy-map-full-reconciliation-interval='15m0s'" subsys=daemon level=info msg=" --bpf-policy-map-max='16384'" subsys=daemon level=info msg=" --bpf-root='/sys/fs/bpf'" subsys=daemon level=info msg=" --bpf-sock-rev-map-max='262144'" subsys=daemon level=info msg=" --bypass-ip-availability-upon-restore='false'" subsys=daemon level=info msg=" --certificates-directory='/var/run/cilium/certs'" subsys=daemon level=info msg=" --cflags=''" subsys=daemon level=info msg=" --cgroup-root='/run/cilium/cgroupv2'" subsys=daemon level=info msg=" --cilium-endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --cluster-health-port='4240'" subsys=daemon level=info msg=" --cluster-id='0'" subsys=daemon level=info msg=" --cluster-name='default'" subsys=daemon level=info msg=" --cluster-pool-ipv4-cidr='10.0.0.0/8'" subsys=daemon level=info msg=" --cluster-pool-ipv4-mask-size='24'" subsys=daemon level=info msg=" --clustermesh-config='/var/lib/cilium/clustermesh/'" subsys=daemon level=info msg=" --clustermesh-ip-identities-sync-timeout='1m0s'" subsys=daemon level=info msg=" --cmdref=''" subsys=daemon level=info msg=" --cni-chaining-mode='none'" subsys=daemon level=info msg=" --cni-chaining-target=''" subsys=daemon level=info msg=" --cni-exclusive='true'" subsys=daemon level=info msg=" --cni-external-routing='false'" subsys=daemon level=info msg=" --cni-log-file='/var/run/cilium/cilium-cni.log'" subsys=daemon level=info msg=" --cnp-node-status-gc-interval='0s'" subsys=daemon level=info msg=" --config=''" subsys=daemon level=info msg=" --config-dir='/tmp/cilium/config-map'" subsys=daemon level=info msg=" --config-sources='config-map:kube-system/cilium-config'" subsys=daemon level=info msg=" --conntrack-gc-interval='0s'" subsys=daemon level=info msg=" --conntrack-gc-max-interval='0s'" subsys=daemon level=info msg=" --crd-wait-timeout='5m0s'" subsys=daemon level=info msg=" --custom-cni-conf='false'" subsys=daemon level=info msg=" --datapath-mode='veth'" subsys=daemon level=info msg=" --debug='false'" subsys=daemon level=info msg=" --debug-verbose=''" subsys=daemon level=info msg=" --derive-masquerade-ip-addr-from-device=''" subsys=daemon level=info msg=" --devices=''" subsys=daemon level=info msg=" --direct-routing-device=''" subsys=daemon level=info msg=" --disable-cnp-status-updates='true'" subsys=daemon level=info msg=" --disable-endpoint-crd='false'" subsys=daemon level=info msg=" --disable-envoy-version-check='false'" subsys=daemon level=info msg=" --disable-iptables-feeder-rules=''" subsys=daemon level=info msg=" --dns-max-ips-per-restored-rule='1000'" subsys=daemon level=info msg=" --dns-policy-unload-on-shutdown='false'" subsys=daemon level=info msg=" --dnsproxy-concurrency-limit='0'" subsys=daemon level=info msg=" --dnsproxy-concurrency-processing-grace-period='0s'" subsys=daemon level=info msg=" --dnsproxy-enable-transparent-mode='true'" subsys=daemon level=info msg=" --dnsproxy-lock-count='128'" subsys=daemon level=info msg=" --dnsproxy-lock-timeout='500ms'" subsys=daemon level=info msg=" --egress-gateway-policy-map-max='16384'" subsys=daemon level=info msg=" --egress-gateway-reconciliation-trigger-interval='1s'" subsys=daemon level=info msg=" --egress-masquerade-interfaces=''" subsys=daemon level=info msg=" --egress-multi-home-ip-rule-compat='false'" subsys=daemon level=info msg=" --enable-auto-protect-node-port-range='true'" subsys=daemon level=info msg=" --enable-bandwidth-manager='false'" subsys=daemon level=info msg=" --enable-bbr='false'" subsys=daemon level=info msg=" --enable-bgp-control-plane='false'" subsys=daemon level=info msg=" --enable-bpf-clock-probe='false'" subsys=daemon level=info msg=" --enable-bpf-masquerade='false'" subsys=daemon level=info msg=" --enable-bpf-tproxy='false'" subsys=daemon level=info msg=" --enable-cilium-api-server-access='*'" subsys=daemon level=info msg=" --enable-cilium-endpoint-slice='false'" subsys=daemon level=info msg=" --enable-cilium-health-api-server-access='*'" subsys=daemon level=info msg=" --enable-custom-calls='false'" subsys=daemon level=info msg=" --enable-endpoint-health-checking='true'" subsys=daemon level=info msg=" --enable-endpoint-routes='false'" subsys=daemon level=info msg=" --enable-envoy-config='false'" subsys=daemon level=info msg=" --enable-external-ips='false'" subsys=daemon level=info msg=" --enable-health-check-nodeport='true'" subsys=daemon level=info msg=" --enable-health-checking='true'" subsys=daemon level=info msg=" --enable-high-scale-ipcache='false'" subsys=daemon level=info msg=" --enable-host-firewall='false'" subsys=daemon level=info msg=" --enable-host-legacy-routing='false'" subsys=daemon level=info msg=" --enable-host-port='false'" subsys=daemon level=info msg=" --enable-hubble='false'" subsys=daemon level=info msg=" --enable-hubble-recorder-api='true'" subsys=daemon level=info msg=" --enable-icmp-rules='true'" subsys=daemon level=info msg=" --enable-identity-mark='true'" subsys=daemon level=info msg=" --enable-ip-masq-agent='false'" subsys=daemon level=info msg=" --enable-ipsec='false'" subsys=daemon level=info msg=" --enable-ipsec-key-watcher='true'" subsys=daemon level=info msg=" --enable-ipv4='true'" subsys=daemon level=info msg=" --enable-ipv4-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv4-egress-gateway='false'" subsys=daemon level=info msg=" --enable-ipv4-fragment-tracking='true'" subsys=daemon level=info msg=" --enable-ipv4-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6='false'" subsys=daemon level=info msg=" --enable-ipv6-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv6-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6-ndp='false'" subsys=daemon level=info msg=" --enable-k8s='true'" subsys=daemon level=info msg=" --enable-k8s-api-discovery='false'" subsys=daemon level=info msg=" --enable-k8s-endpoint-slice='true'" subsys=daemon level=info msg=" --enable-k8s-event-handover='false'" subsys=daemon level=info msg=" --enable-k8s-networkpolicy='true'" subsys=daemon level=info msg=" --enable-k8s-terminating-endpoint='true'" subsys=daemon level=info msg=" --enable-l2-announcements='false'" subsys=daemon level=info msg=" --enable-l2-neigh-discovery='true'" subsys=daemon level=info msg=" --enable-l2-pod-announcements='false'" subsys=daemon level=info msg=" --enable-l7-proxy='true'" subsys=daemon level=info msg=" --enable-local-node-route='true'" subsys=daemon level=info msg=" --enable-local-redirect-policy='false'" subsys=daemon level=info msg=" --enable-mke='false'" subsys=daemon level=info msg=" --enable-monitor='true'" subsys=daemon level=info msg=" --enable-nat46x64-gateway='false'" subsys=daemon level=info msg=" --enable-node-port='false'" subsys=daemon level=info msg=" --enable-pmtu-discovery='false'" subsys=daemon level=info msg=" --enable-policy='default'" subsys=daemon level=info msg=" --enable-recorder='false'" subsys=daemon level=info msg=" --enable-remote-node-identity='true'" subsys=daemon level=info msg=" --enable-runtime-device-detection='false'" subsys=daemon level=info msg=" --enable-sctp='false'" subsys=daemon level=info msg=" --enable-service-topology='false'" subsys=daemon level=info msg=" --enable-session-affinity='false'" subsys=daemon level=info msg=" --enable-srv6='false'" subsys=daemon level=info msg=" --enable-stale-cilium-endpoint-cleanup='true'" subsys=daemon level=info msg=" --enable-svc-source-range-check='true'" subsys=daemon level=info msg=" --enable-tracing='false'" subsys=daemon level=info msg=" --enable-unreachable-routes='false'" subsys=daemon level=info msg=" --enable-vtep='false'" subsys=daemon level=info msg=" --enable-well-known-identities='false'" subsys=daemon level=info msg=" --enable-wireguard='false'" subsys=daemon level=info msg=" --enable-wireguard-userspace-fallback='false'" subsys=daemon level=info msg=" --enable-xdp-prefilter='false'" subsys=daemon level=info msg=" --enable-xt-socket-fallback='true'" subsys=daemon level=info msg=" --encrypt-interface=''" subsys=daemon level=info msg=" --encrypt-node='false'" subsys=daemon level=info msg=" --endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --endpoint-queue-size='25'" subsys=daemon level=info msg=" --endpoint-status=''" subsys=daemon level=info msg=" --envoy-config-timeout='2m0s'" subsys=daemon level=info msg=" --envoy-log=''" subsys=daemon level=info msg=" --exclude-local-address=''" subsys=daemon level=info msg=" --external-envoy-proxy='false'" subsys=daemon level=info msg=" --fixed-identity-mapping=''" subsys=daemon level=info msg=" --fqdn-regex-compile-lru-size='1024'" subsys=daemon level=info msg=" --gops-port='9890'" subsys=daemon level=info msg=" --http-403-msg=''" subsys=daemon level=info msg=" --http-idle-timeout='0'" subsys=daemon level=info msg=" --http-max-grpc-timeout='0'" subsys=daemon level=info msg=" --http-normalize-path='true'" subsys=daemon level=info msg=" --http-request-timeout='3600'" subsys=daemon level=info msg=" --http-retry-count='3'" subsys=daemon level=info msg=" --http-retry-timeout='0'" subsys=daemon level=info msg=" --hubble-disable-tls='false'" subsys=daemon level=info msg=" --hubble-event-buffer-capacity='4095'" subsys=daemon level=info msg=" --hubble-event-queue-size='0'" subsys=daemon level=info msg=" --hubble-export-file-compress='false'" subsys=daemon level=info msg=" --hubble-export-file-max-backups='5'" subsys=daemon level=info msg=" --hubble-export-file-max-size-mb='10'" subsys=daemon level=info msg=" --hubble-export-file-path=''" subsys=daemon level=info msg=" --hubble-listen-address=''" subsys=daemon level=info msg=" --hubble-metrics=''" subsys=daemon level=info msg=" --hubble-metrics-server=''" subsys=daemon level=info msg=" --hubble-monitor-events=''" subsys=daemon level=info msg=" --hubble-prefer-ipv6='false'" subsys=daemon level=info msg=" --hubble-recorder-sink-queue-size='1024'" subsys=daemon level=info msg=" --hubble-recorder-storage-path='/var/run/cilium/pcaps'" subsys=daemon level=info msg=" --hubble-skip-unknown-cgroup-ids='true'" subsys=daemon level=info msg=" --hubble-socket-path='/var/run/cilium/hubble.sock'" subsys=daemon level=info msg=" --hubble-tls-cert-file=''" subsys=daemon level=info msg=" --hubble-tls-client-ca-files=''" subsys=daemon level=info msg=" --hubble-tls-key-file=''" subsys=daemon level=info msg=" --identity-allocation-mode='crd'" subsys=daemon level=info msg=" --identity-change-grace-period='5s'" subsys=daemon level=info msg=" --identity-gc-interval='15m0s'" subsys=daemon level=info msg=" --identity-heartbeat-timeout='30m0s'" subsys=daemon level=info msg=" --identity-restore-grace-period='10m0s'" subsys=daemon level=info msg=" --install-egress-gateway-routes='false'" subsys=daemon level=info msg=" --install-iptables-rules='true'" subsys=daemon level=info msg=" --install-no-conntrack-iptables-rules='false'" subsys=daemon level=info msg=" --ip-allocation-timeout='2m0s'" subsys=daemon level=info msg=" --ip-masq-agent-config-path='/etc/config/ip-masq-agent'" subsys=daemon level=info msg=" --ipam='cluster-pool'" subsys=daemon level=info msg=" --ipam-cilium-node-update-rate='15s'" subsys=daemon level=info msg=" --ipam-multi-pool-pre-allocation='default=8'" subsys=daemon level=info msg=" --ipsec-key-file=''" subsys=daemon level=info msg=" --ipsec-key-rotation-duration='5m0s'" subsys=daemon level=info msg=" --iptables-lock-timeout='5s'" subsys=daemon level=info msg=" --iptables-random-fully='false'" subsys=daemon level=info msg=" --ipv4-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv4-node='auto'" subsys=daemon level=info msg=" --ipv4-pod-subnets=''" subsys=daemon level=info msg=" --ipv4-range='auto'" subsys=daemon level=info msg=" --ipv4-service-loopback-address='169.254.42.1'" subsys=daemon level=info msg=" --ipv4-service-range='auto'" subsys=daemon level=info msg=" --ipv6-cluster-alloc-cidr='f00d::/64'" subsys=daemon level=info msg=" --ipv6-mcast-device=''" subsys=daemon level=info msg=" --ipv6-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv6-node='auto'" subsys=daemon level=info msg=" --ipv6-pod-subnets=''" subsys=daemon level=info msg=" --ipv6-range='auto'" subsys=daemon level=info msg=" --ipv6-service-range='auto'" subsys=daemon level=info msg=" --join-cluster='false'" subsys=daemon level=info msg=" --k8s-api-server=''" subsys=daemon level=info msg=" --k8s-client-burst='10'" subsys=daemon level=info msg=" --k8s-client-qps='5'" subsys=daemon level=info msg=" --k8s-heartbeat-timeout='30s'" subsys=daemon level=info msg=" --k8s-kubeconfig-path=''" subsys=daemon level=info msg=" --k8s-namespace='kube-system'" subsys=daemon level=info msg=" --k8s-require-ipv4-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-require-ipv6-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-service-cache-size='128'" subsys=daemon level=info msg=" --k8s-service-proxy-name=''" subsys=daemon level=info msg=" --k8s-sync-timeout='3m0s'" subsys=daemon level=info msg=" --k8s-watcher-endpoint-selector='metadata.name!=kube-scheduler,metadata.name!=kube-controller-manager,metadata.name!=etcd-operator,metadata.name!=gcp-controller-manager'" subsys=daemon level=info msg=" --keep-config='false'" subsys=daemon level=info msg=" --kube-proxy-replacement='disabled'" subsys=daemon level=info msg=" --kube-proxy-replacement-healthz-bind-address=''" subsys=daemon level=info msg=" --kvstore=''" subsys=daemon level=info msg=" --kvstore-connectivity-timeout='2m0s'" subsys=daemon level=info msg=" --kvstore-lease-ttl='15m0s'" subsys=daemon level=info msg=" --kvstore-max-consecutive-quorum-errors='2'" subsys=daemon level=info msg=" --kvstore-opt=''" subsys=daemon level=info msg=" --kvstore-periodic-sync='5m0s'" subsys=daemon level=info msg=" --l2-announcements-lease-duration='15s'" subsys=daemon level=info msg=" --l2-announcements-renew-deadline='5s'" subsys=daemon level=info msg=" --l2-announcements-retry-period='2s'" subsys=daemon level=info msg=" --l2-pod-announcements-interface=''" subsys=daemon level=info msg=" --label-prefix-file=''" subsys=daemon level=info msg=" --labels=''" subsys=daemon level=info msg=" --lib-dir='/var/lib/cilium'" subsys=daemon level=info msg=" --local-max-addr-scope='252'" subsys=daemon level=info msg=" --local-router-ipv4=''" subsys=daemon level=info msg=" --local-router-ipv6=''" subsys=daemon level=info msg=" --log-driver=''" subsys=daemon level=info msg=" --log-opt=''" subsys=daemon level=info msg=" --log-system-load='false'" subsys=daemon level=info msg=" --max-controller-interval='0'" subsys=daemon level=info msg=" --mesh-auth-enabled='true'" subsys=daemon level=info msg=" --mesh-auth-gc-interval='5m0s'" subsys=daemon level=info msg=" --mesh-auth-mutual-listener-port='0'" subsys=daemon level=info msg=" --mesh-auth-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-rotated-identities-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-signal-backoff-duration='1s'" subsys=daemon level=info msg=" --mesh-auth-spiffe-trust-domain='spiffe.cilium'" subsys=daemon level=info msg=" --mesh-auth-spire-admin-socket=''" subsys=daemon level=info msg=" --metrics=''" subsys=daemon level=info msg=" --mke-cgroup-mount=''" subsys=daemon level=info msg=" --monitor-aggregation='medium'" subsys=daemon level=info msg=" --monitor-aggregation-flags='all'" subsys=daemon level=info msg=" --monitor-aggregation-interval='5s'" subsys=daemon level=info msg=" --monitor-queue-size='0'" subsys=daemon level=info msg=" --mtu='0'" subsys=daemon level=info msg=" --node-encryption-opt-out-labels='node-role.kubernetes.io/control-plane'" subsys=daemon level=info msg=" --node-port-acceleration='disabled'" subsys=daemon level=info msg=" --node-port-algorithm='random'" subsys=daemon level=info msg=" --node-port-bind-protection='true'" subsys=daemon level=info msg=" --node-port-mode='snat'" subsys=daemon level=info msg=" --node-port-range='30000,32767'" subsys=daemon level=info msg=" --nodes-gc-interval='5m0s'" subsys=daemon level=info msg=" --operator-api-serve-addr='127.0.0.1:9234'" subsys=daemon level=info msg=" --policy-audit-mode='false'" subsys=daemon level=info msg=" --policy-queue-size='100'" subsys=daemon level=info msg=" --policy-trigger-interval='1s'" subsys=daemon level=info msg=" --pprof='false'" subsys=daemon level=info msg=" --pprof-address='localhost'" subsys=daemon level=info msg=" --pprof-port='6060'" subsys=daemon level=info msg=" --preallocate-bpf-maps='false'" subsys=daemon level=info msg=" --prepend-iptables-chains='true'" subsys=daemon level=info msg=" --procfs='/host/proc'" subsys=daemon level=info msg=" --prometheus-serve-addr=':9962'" subsys=daemon level=info msg=" --proxy-connect-timeout='2'" subsys=daemon level=info msg=" --proxy-gid='1337'" subsys=daemon level=info msg=" --proxy-idle-timeout-seconds='60'" subsys=daemon level=info msg=" --proxy-max-connection-duration-seconds='0'" subsys=daemon level=info msg=" --proxy-max-requests-per-connection='0'" subsys=daemon level=info msg=" --proxy-prometheus-port='9964'" subsys=daemon level=info msg=" --read-cni-conf=''" subsys=daemon level=info msg=" --remove-cilium-node-taints='true'" subsys=daemon level=info msg=" --restore='true'" subsys=daemon level=info msg=" --route-metric='0'" subsys=daemon level=info msg=" --routing-mode='tunnel'" subsys=daemon level=info msg=" --set-cilium-is-up-condition='true'" subsys=daemon level=info msg=" --set-cilium-node-taints='true'" subsys=daemon level=info msg=" --sidecar-istio-proxy-image='cilium/istio_proxy'" subsys=daemon level=info msg=" --single-cluster-route='false'" subsys=daemon level=info msg=" --skip-cnp-status-startup-clean='false'" subsys=daemon level=info msg=" --socket-path='/var/run/cilium/cilium.sock'" subsys=daemon level=info msg=" --srv6-encap-mode='reduced'" subsys=daemon level=info msg=" --state-dir='/var/run/cilium'" subsys=daemon level=info msg=" --synchronize-k8s-nodes='true'" subsys=daemon level=info msg=" --tofqdns-dns-reject-response-code='refused'" subsys=daemon level=info msg=" --tofqdns-enable-dns-compression='true'" subsys=daemon level=info msg=" --tofqdns-endpoint-max-ip-per-hostname='50'" subsys=daemon level=info msg=" --tofqdns-idle-connection-grace-period='0s'" subsys=daemon level=info msg=" --tofqdns-max-deferred-connection-deletes='10000'" subsys=daemon level=info msg=" --tofqdns-min-ttl='0'" subsys=daemon level=info msg=" --tofqdns-pre-cache=''" subsys=daemon level=info msg=" --tofqdns-proxy-port='0'" subsys=daemon level=info msg=" --tofqdns-proxy-response-max-delay='100ms'" subsys=daemon level=info msg=" --trace-payloadlen='128'" subsys=daemon level=info msg=" --trace-sock='true'" subsys=daemon level=info msg=" --tunnel=''" subsys=daemon level=info msg=" --tunnel-port='6082'" subsys=daemon level=info msg=" --tunnel-protocol='geneve'" subsys=daemon level=info msg=" --unmanaged-pod-watcher-interval='15'" subsys=daemon level=info msg=" --use-cilium-internal-ip-for-ipsec='false'" subsys=daemon level=info msg=" --version='false'" subsys=daemon level=info msg=" --vlan-bpf-bypass=''" subsys=daemon level=info msg=" --vtep-cidr=''" subsys=daemon level=info msg=" --vtep-endpoint=''" subsys=daemon level=info msg=" --vtep-mac=''" subsys=daemon level=info msg=" --vtep-mask=''" subsys=daemon level=info msg=" --wireguard-encapsulate='false'" subsys=daemon level=info msg=" --write-cni-conf-when-ready='/host/etc/cni/net.d/05-cilium.conflist'" subsys=daemon level=info msg=" _ _ _" subsys=daemon level=info msg=" ___|_| |_|_ _ _____" subsys=daemon level=info msg="| _| | | | | | |" subsys=daemon level=info msg="|___|_|_|_|___|_|_|_|" subsys=daemon level=info msg="Cilium 1.14.8 cf6e022e 2024-03-13T12:23:35-04:00 go version go1.21.8 linux/amd64" subsys=daemon level=info msg="clang (10.0.0) and kernel (5.15.0) versions: OK!" subsys=linux-datapath level=info msg="linking environment: OK!" subsys=linux-datapath level=info msg="Kernel config file not found: if the agent fails to start, check the system requirements at https://docs.cilium.io/en/stable/operations/system_requirements" subsys=probes level=info msg="Detected mounted BPF filesystem at /sys/fs/bpf" subsys=bpf level=info msg="Mounted cgroupv2 filesystem at /run/cilium/cgroupv2" subsys=cgroups level=info msg="Parsing base label prefixes from default label list" subsys=labels-filter level=info msg="Parsing additional label prefixes from user inputs: []" subsys=labels-filter level=info msg="Final label prefixes to be used for identity evaluation:" subsys=labels-filter level=info msg=" - reserved:.*" subsys=labels-filter level=info msg=" - :io\\.kubernetes\\.pod\\.namespace" subsys=labels-filter level=info msg=" - :io\\.cilium\\.k8s\\.namespace\\.labels" subsys=labels-filter level=info msg=" - :app\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:io\\.kubernetes" subsys=labels-filter level=info msg=" - !:kubernetes\\.io" subsys=labels-filter level=info msg=" - !:.*beta\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:k8s\\.io" subsys=labels-filter level=info msg=" - !:pod-template-generation" subsys=labels-filter level=info msg=" - !:pod-template-hash" subsys=labels-filter level=info msg=" - !:controller-revision-hash" subsys=labels-filter level=info msg=" - !:annotation.*" subsys=labels-filter level=info msg=" - !:etcd_node" subsys=labels-filter level=info msg=Invoked duration="827.823µs" function="pprof.glob..func1 (cell.go:50)" subsys=hive level=info msg=Invoked duration="48.712µs" function="gops.registerGopsHooks (cell.go:38)" subsys=hive level=info msg=Invoked duration="829.113µs" function="metrics.NewRegistry (registry.go:65)" subsys=hive level=info msg=Invoked duration="10.05µs" function="metrics.glob..func1 (cell.go:12)" subsys=hive level=info msg="Spire Delegate API Client is disabled as no socket path is configured" subsys=spire-delegate level=info msg="Mutual authentication handler is disabled as no port is configured" subsys=auth level=info msg=Invoked duration=95.185016ms function="cmd.glob..func4 (daemon_main.go:1607)" subsys=hive level=info msg=Invoked duration="17.641µs" function="gc.registerSignalHandler (cell.go:47)" subsys=hive level=info msg=Invoked duration="16.15µs" function="utime.initUtimeSync (cell.go:29)" subsys=hive level=info msg=Invoked duration="56.272µs" function="agentliveness.newAgentLivenessUpdater (agent_liveness.go:43)" subsys=hive level=info msg=Invoked duration="57.491µs" function="l2responder.NewL2ResponderReconciler (l2responder.go:63)" subsys=hive level=info msg=Invoked duration="63.901µs" function="garp.newGARPProcessor (processor.go:27)" subsys=hive level=info msg=Starting subsys=hive level=info msg="Started gops server" address="127.0.0.1:9890" subsys=gops level=info msg="Start hook executed" duration="385.951µs" function="gops.registerGopsHooks.func1 (cell.go:43)" subsys=hive level=info msg="Start hook executed" duration="1.93µs" function="metrics.NewRegistry.func1 (registry.go:86)" subsys=hive level=info msg="Establishing connection to apiserver" host="https://10.96.0.1:443" subsys=k8s-client level=info msg="Serving prometheus metrics on :9962" subsys=metrics level=info msg="Connected to apiserver" subsys=k8s-client level=info msg="Start hook executed" duration=11.230119ms function="client.(*compositeClientset).onStart" subsys=hive level=info msg="Start hook executed" duration=5.948159ms function="authmap.newAuthMap.func1 (cell.go:27)" subsys=hive level=info msg="Start hook executed" duration="38.071µs" function="configmap.newMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="39.111µs" function="signalmap.newMap.func1 (cell.go:44)" subsys=hive level=info msg="Start hook executed" duration="214.556µs" function="nodemap.newNodeMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="91.423µs" function="eventsmap.newEventsMap.func1 (cell.go:35)" subsys=hive level=info msg="Start hook executed" duration="60.312µs" function="*cni.cniConfigManager.Start" subsys=hive level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Wrote CNI configuration file to /host/etc/cni/net.d/05-cilium.conflist" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Start hook executed" duration=50.496096ms function="datapath.newDatapath.func1 (cells.go:113)" subsys=hive level=info msg="Restored 0 node IDs from the BPF map" subsys=linux-datapath level=info msg="Start hook executed" duration="129.083µs" function="datapath.newDatapath.func2 (cells.go:126)" subsys=hive level=info msg="Start hook executed" duration="15.94µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Node].Start" subsys=hive level=info msg="Start hook executed" duration="2.811µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNode].Start" subsys=hive level=info msg="Using autogenerated IPv4 allocation range" subsys=node v4Prefix=10.175.0.0/16 level=info msg="no local ciliumnode found, will not restore cilium internal ips from k8s" subsys=daemon level=info msg="Start hook executed" duration=103.811761ms function="node.NewLocalNodeStore.func1 (local_node_store.go:76)" subsys=hive level=info msg="Start hook executed" duration="11.29µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration=201.060396ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration="4.03µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Using discoveryv1.EndpointSlice" subsys=k8s level=info msg="Start hook executed" duration=200.443567ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Start hook executed" duration="13.211µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Pod].Start" subsys=hive level=info msg="Start hook executed" duration="2.06µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Namespace].Start" subsys=hive level=info msg="Start hook executed" duration="2.381µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="2.5µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumClusterwideNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="1.75µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumCIDRGroup].Start" subsys=hive level=info msg="Start hook executed" duration="26.782µs" function="endpointmanager.newDefaultEndpointManager.func1 (cell.go:203)" subsys=hive level=info msg="Start hook executed" duration="13.89µs" function="cmd.newPolicyTrifecta.func1 (policy.go:135)" subsys=hive level=info msg="Start hook executed" duration="59.812µs" function="*manager.manager.Start" subsys=hive level=info msg="Serving cilium node monitor v1.2 API at unix:///var/run/cilium/monitor1_2.sock" subsys=monitor-agent level=info msg="Start hook executed" duration="313.539µs" function="agent.newMonitorAgent.func1 (cell.go:61)" subsys=hive level=info msg="Start hook executed" duration="2.2µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumL2AnnouncementPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="7.25µs" function="*job.group.Start" subsys=hive level=info msg="Start hook executed" duration="292.197µs" function="proxy.newProxy.func1 (cell.go:55)" subsys=hive level=info msg="Envoy: Starting xDS gRPC server listening on /var/run/cilium/envoy/sockets/xds.sock" subsys=envoy-manager level=info msg="Start hook executed" duration="769.132µs" function="signal.provideSignalManager.func1 (cell.go:25)" subsys=hive level=info msg="Datapath signal listener running" subsys=signal level=info msg="Start hook executed" duration=1.380769ms function="auth.registerAuthManager.func1 (cell.go:109)" subsys=hive level=info msg="Start hook executed" duration="4.52µs" function="auth.registerGCJobs.func1 (cell.go:158)" subsys=hive level=info msg="Start hook executed" duration="31.091µs" function="*job.group.Start" subsys=hive level=warning msg="Deprecated value for --kube-proxy-replacement: disabled (use either \"true\", or \"false\")" subsys=daemon level=info msg="Auto-disabling \"enable-node-port\", \"enable-external-ips\", \"bpf-lb-sock\", \"enable-host-port\" features and falling back to \"enable-host-legacy-routing\"" subsys=daemon level=info msg="Inheriting MTU from external network interface" device=ens3 ipAddr=199.19.213.175 mtu=1500 subsys=mtu level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_ipcache, recreating and re-pinning map cilium_ipcache" file-path=/sys/fs/bpf/tc/globals/cilium_ipcache name=cilium_ipcache subsys=bpf level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_tunnel_map, recreating and re-pinning map cilium_tunnel_map" file-path=/sys/fs/bpf/tc/globals/cilium_tunnel_map name=cilium_tunnel_map subsys=bpf level=info msg="Restored services from maps" failedServices=0 restoredServices=0 subsys=service level=info msg="Restored backends from maps" failedBackends=0 restoredBackends=0 skippedBackends=0 subsys=service level=info msg="Reading old endpoints..." subsys=daemon level=info msg="No old endpoints found." subsys=daemon level=info msg="Waiting until all Cilium CRDs are available" subsys=k8s level=info msg="All Cilium CRDs have been found and are available" subsys=k8s level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=info msg="Successfully created CiliumNode resource" subsys=nodediscovery level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=warning msg="Waiting for k8s node information" error="required IPv4 PodCIDR not available" subsys=k8s level=warning msg="Unable to create CiliumNode resource, will retry" error="ciliumnodes.cilium.io \"instance\" already exists" subsys=nodediscovery level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=warning msg="Waiting for k8s node information" error="required IPv4 PodCIDR not available" subsys=k8s level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=info msg="Received own node information from API server" ipAddr.ipv4=199.19.213.175 ipAddr.ipv6="" k8sNodeIP=199.19.213.175 labels="map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:]" nodeName=instance subsys=k8s v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="k8s mode: Allowing localhost to reach local endpoints" subsys=daemon level=info msg="Detected devices" devices="[]" subsys=linux-datapath level=info msg="Enabling k8s event listener" subsys=k8s-watcher level=info msg="Removing stale endpoint interfaces" subsys=daemon level=info msg="Skipping kvstore configuration" subsys=daemon level=info msg="Waiting until local node addressing before starting watchers depending on it" subsys=k8s-watcher level=info msg="Initializing node addressing" subsys=daemon level=info msg="Initializing cluster-pool IPAM" subsys=ipam v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="Restoring endpoints..." subsys=daemon level=info msg="Endpoints restored" failed=0 restored=0 subsys=daemon level=info msg="Addressing information:" subsys=daemon level=info msg=" Cluster-Name: default" subsys=daemon level=info msg=" Cluster-ID: 0" subsys=daemon level=info msg=" Local node-name: instance" subsys=daemon level=info msg=" Node-IPv6: " subsys=daemon level=info msg=" External-Node IPv4: 199.19.213.175" subsys=daemon level=info msg=" Internal-Node IPv4: 10.0.0.130" subsys=daemon level=info msg=" IPv4 allocation prefix: 10.0.0.0/24" subsys=daemon level=info msg=" Loopback IPv4: 169.254.42.1" subsys=daemon level=info msg=" Local IPv4 addresses:" subsys=daemon level=info msg=" - 199.19.213.175" subsys=daemon level=info msg=" - 172.17.0.100" subsys=daemon level=info msg=" - 10.96.240.200" subsys=daemon level=info msg="Node updated" clusterName=default nodeName=instance subsys=nodemanager level=info msg="Adding local node to cluster" node="{instance default [{InternalIP 199.19.213.175} {CiliumInternalIP 10.0.0.130}] 10.0.0.0/24 [] [] 10.0.0.99 0 local 0 map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:] map[] 1 }" subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Waiting until all pre-existing resources have been received" subsys=k8s-watcher level=info msg="Initializing identity allocator" subsys=identity-cache level=info msg="Allocating identities between range" cluster-id=0 max=65535 min=256 subsys=identity-cache level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.core.bpf_jit_enable sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.all.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.fib_multipath_use_neigh sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.unprivileged_bpf_disabled sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.timer_migration sysParamValue=0 level=info msg="Setting up BPF datapath" bpfClockSource=ktime bpfInsnSet="" subsys=datapath-loader level=info msg="Iptables rules installed" subsys=iptables level=info msg="Adding new proxy port rules for cilium-dns-egress:34389" id=cilium-dns-egress subsys=proxy level=info msg="Iptables proxy rules installed" subsys=iptables level=info msg="Start hook executed" duration=3.091623945s function="cmd.newDaemonPromise.func1 (daemon_main.go:1663)" subsys=hive level=info msg="Starting IP identity watcher" subsys=ipcache level=info msg="Start hook executed" duration="26.831µs" function="utime.initUtimeSync.func1 (cell.go:33)" subsys=hive level=info msg="Initializing daemon" subsys=daemon level=info msg="Start hook executed" duration="7.58µs" function="*job.group.Start" subsys=hive level=info msg="Validating configured node address ranges" subsys=daemon level=info msg="Start hook executed" duration="98.103µs" function="l2respondermap.newMap.func1 (l2_responder_map4.go:44)" subsys=hive level=info msg="Start hook executed" duration="5.66µs" function="*job.group.Start" subsys=hive level=info msg="Starting connection tracking garbage collector" subsys=daemon level=info msg="Initial scan of connection tracking completed" subsys=ct-gc level=info msg="Regenerating restored endpoints" numRestored=0 subsys=daemon level=info msg="Creating host endpoint" subsys=daemon level=info msg="Finished regenerating restored endpoints" regenerated=0 subsys=daemon total=0 level=info msg="Deleted orphan backends" orphanBackends=0 subsys=service level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3269 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3269 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3269 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Launching Cilium health daemon" subsys=daemon level=info msg="Launching Cilium health endpoint" subsys=daemon level=info msg="Started healthz status API server" address="127.0.0.1:9879" subsys=daemon level=info msg="Processing queued endpoint deletion requests from /var/run/cilium/deleteQueue" subsys=daemon level=info msg="processing 0 queued deletion requests" subsys=daemon level=info msg="Initializing Cilium API" subsys=daemon level=info msg="Daemon initialization completed" bootstrapTime=4.24391872s subsys=daemon level=info msg="Hubble server is disabled" subsys=hubble level=info msg="Serving cilium API at unix:///var/run/cilium/cilium.sock" subsys=daemon level=info msg="Compiled new BPF template" BPFCompilationTime=351.516562ms file-path=/var/run/cilium/state/templates/a9084b3a0edac81bec86560f55a7a60d57e40819d96f60fae66fb4f49bcd47dc/bpf_host.o subsys=datapath-loader level=info msg="Create endpoint request" addressing="&{10.0.0.231 00281e95-45f7-41e9-88e9-3c1503d10343 default }" containerID=a2f9647dd2104da8469058e64472684f5fef1f5de29208869e3382b7bb495ce1 datapathConfiguration="&{false false false false false }" interface=lxcc75fbe97a4f8 k8sPodName=kube-system/coredns-7c96b6546b-nwrxg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a2f9647dd2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3662 ipv4=10.0.0.231 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-nwrxg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a2f9647dd2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3662 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.231 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-nwrxg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:kube-system]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=a2f9647dd2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3662 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.231 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-nwrxg line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=coredns;k8s:io.kubernetes.pod.namespace=kube-system;k8s:k8s-app=kube-dns;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a2f9647dd2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3662 identity=13439 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.231 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-nwrxg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a2f9647dd2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3662 identity=13439 ipv4=10.0.0.231 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-nwrxg subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.22 8e245a30-4f99-47a7-bba1-8cdd6ff22a90 default }" containerID=00a62ff11dccf5dfe7ed6fdd053badb92ab764d96218483020a6fd531227e699 datapathConfiguration="&{false false false false false }" interface=lxc2f6919bf8867 k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-dvnmc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=00a62ff11d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3184 ipv4=10.0.0.22 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-dvnmc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=00a62ff11d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3184 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=3f01ab24-5179-4fed-8059-7fb4a11600a1,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=3f01ab24-5179-4fed-8059-7fb4a11600a1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.22 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-dvnmc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=certgen;k8s:batch.kubernetes.io/controller-uid=3f01ab24-5179-4fed-8059-7fb4a11600a1;k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen;k8s:controller-uid=3f01ab24-5179-4fed-8059-7fb4a11600a1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;k8s:job-name=envoy-gateway-gateway-helm-certgen;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=00a62ff11d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3184 identity=44042 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=3f01ab24-5179-4fed-8059-7fb4a11600a1,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=3f01ab24-5179-4fed-8059-7fb4a11600a1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.22 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-dvnmc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=00a62ff11d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3184 identity=44042 ipv4=10.0.0.22 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-dvnmc subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3269 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2239 ipv4=10.0.0.99 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2239 identityLabels="reserved:health" ipv4=10.0.0.99 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2239 identity=4 identityLabels="reserved:health" ipv4=10.0.0.99 ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Compiled new BPF template" BPFCompilationTime=1.11302844s file-path=/var/run/cilium/state/templates/3f5b3986e804ccb7ab0dcf256fa9074bf1fb86044b06eab49124e724a4964570/bpf_lxc.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID=00a62ff11d datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3184 identity=44042 ipv4=10.0.0.22 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-dvnmc subsys=endpoint level=info msg="Successful endpoint creation" containerID=00a62ff11d datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3184 identity=44042 ipv4=10.0.0.22 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-dvnmc subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2239 identity=4 ipv4=10.0.0.99 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a2f9647dd2 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3662 identity=13439 ipv4=10.0.0.231 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-nwrxg subsys=endpoint level=info msg="Successful endpoint creation" containerID=a2f9647dd2 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3662 identity=13439 ipv4=10.0.0.231 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-nwrxg subsys=daemon level=info msg="Serving cilium health API at unix:///var/run/cilium/health.sock" subsys=health-server level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=00a62ff11d endpointID=3184 k8sNamespace=envoy-gateway-system k8sPodName=envoy-gateway-gateway-helm-certgen-dvnmc subsys=daemon level=info msg="Releasing key" key="[k8s:app=certgen k8s:batch.kubernetes.io/controller-uid=3f01ab24-5179-4fed-8059-7fb4a11600a1 k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen k8s:controller-uid=3f01ab24-5179-4fed-8059-7fb4a11600a1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen k8s:io.kubernetes.pod.namespace=envoy-gateway-system k8s:job-name=envoy-gateway-gateway-helm-certgen]" subsys=allocator level=info msg="Removed endpoint" containerID=00a62ff11d datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3184 identity=44042 ipv4=10.0.0.22 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-dvnmc subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.32 a3ddfbf4-34f4-4b1c-a522-0c5f734eabaa default }" containerID=3de0b2e574228a91706b989bfdce99b1bb0f2952fab397f7a73add9001e80091 datapathConfiguration="&{false false false false false }" interface=lxc66ee2f1d2a4d k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-9mq2n labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3de0b2e574 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=405 ipv4=10.0.0.32 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-9mq2n subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3de0b2e574 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=405 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.32 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-9mq2n subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=envoy-gateway;k8s:app.kubernetes.io/name=gateway-helm;k8s:control-plane=envoy-gateway;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3de0b2e574 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=405 identity=47276 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.32 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-9mq2n oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=3de0b2e574 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=405 identity=47276 ipv4=10.0.0.32 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-9mq2n subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3de0b2e574 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=405 identity=47276 ipv4=10.0.0.32 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-9mq2n subsys=endpoint level=info msg="Successful endpoint creation" containerID=3de0b2e574 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=405 identity=47276 ipv4=10.0.0.32 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-9mq2n subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3269 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_03269 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_03269 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_03269 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_03269:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3269 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.135 aebc160f-ce16-4564-b7f8-806169b2276c default }" containerID=a346e3f1b4d5c01d230a54a807e81089da337e65b8ff5eb311475e25aa0b11c9 datapathConfiguration="&{false false false false false }" interface=lxc70b0bd0b4f0a k8sPodName=kube-system/coredns-67659f764b-zqzzp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a346e3f1b4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=386 ipv4=10.0.0.135 ipv6= k8sPodName=kube-system/coredns-67659f764b-zqzzp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a346e3f1b4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=386 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.135 ipv6= k8sPodName=kube-system/coredns-67659f764b-zqzzp subsys=endpoint level=info msg="Identity of endpoint changed" containerID=a346e3f1b4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=386 identity=13439 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.135 ipv6= k8sPodName=kube-system/coredns-67659f764b-zqzzp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a346e3f1b4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=386 identity=13439 ipv4=10.0.0.135 ipv6= k8sPodName=kube-system/coredns-67659f764b-zqzzp subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.106 33397a74-93eb-4b72-a8ff-b0cea486adf9 default }" containerID=dc8711d75acddb438a44f99a49cf8b30239e9a13a217fba4ff14e33de4b08bba datapathConfiguration="&{false false false false false }" interface=lxc38f48b70b5d4 k8sPodName=kube-system/coredns-67659f764b-l8c98 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=dc8711d75a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=530 ipv4=10.0.0.106 ipv6= k8sPodName=kube-system/coredns-67659f764b-l8c98 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=dc8711d75a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=530 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.106 ipv6= k8sPodName=kube-system/coredns-67659f764b-l8c98 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=dc8711d75a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=530 identity=13439 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.106 ipv6= k8sPodName=kube-system/coredns-67659f764b-l8c98 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=dc8711d75a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=530 identity=13439 ipv4=10.0.0.106 ipv6= k8sPodName=kube-system/coredns-67659f764b-l8c98 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a346e3f1b4 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=386 identity=13439 ipv4=10.0.0.135 ipv6= k8sPodName=kube-system/coredns-67659f764b-zqzzp subsys=endpoint level=info msg="Successful endpoint creation" containerID=a346e3f1b4 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=386 identity=13439 ipv4=10.0.0.135 ipv6= k8sPodName=kube-system/coredns-67659f764b-zqzzp subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=dc8711d75a datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=530 identity=13439 ipv4=10.0.0.106 ipv6= k8sPodName=kube-system/coredns-67659f764b-l8c98 subsys=endpoint level=info msg="Successful endpoint creation" containerID=dc8711d75a datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=530 identity=13439 ipv4=10.0.0.106 ipv6= k8sPodName=kube-system/coredns-67659f764b-l8c98 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.127 6ae458a0-a42d-4d38-b7c7-b6d168fc7ec1 default }" containerID=37c65a591d58c1971225ef5f8cc9fa89a433ddb5e1fcbecf2f0605db284a2404 datapathConfiguration="&{false false false false false }" interface=lxca967d51dedc7 k8sPodName=local-path-storage/local-path-provisioner-679c578f5-cmd5b labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=37c65a591d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=742 ipv4=10.0.0.127 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-cmd5b subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=37c65a591d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=742 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.127 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-cmd5b subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=37c65a591d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=742 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.127 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-cmd5b line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=local-path-provisioner;k8s:app.kubernetes.io/name=local-path-provisioner;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=37c65a591d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=742 identity=51218 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.127 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-cmd5b oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=37c65a591d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=742 identity=51218 ipv4=10.0.0.127 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-cmd5b subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=37c65a591d datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=742 identity=51218 ipv4=10.0.0.127 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-cmd5b subsys=endpoint level=info msg="Successful endpoint creation" containerID=37c65a591d datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=742 identity=51218 ipv4=10.0.0.127 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-cmd5b subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=a2f9647dd2 endpointID=3662 k8sNamespace=kube-system k8sPodName=coredns-7c96b6546b-nwrxg subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=coredns k8s:io.kubernetes.pod.namespace=kube-system k8s:k8s-app=kube-dns]" subsys=allocator level=info msg="Removed endpoint" containerID=a2f9647dd2 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3662 identity=13439 ipv4=10.0.0.231 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-nwrxg subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.210 94cdff8a-06ef-45ba-934a-200ae9b5da98 default }" containerID=b6ef81109d52185e697d9f99c1fea73b1b02f0e48524266c9e52705c1e564937 datapathConfiguration="&{false false false false false }" interface=lxca1aeb81906dd k8sPodName=cert-manager/cert-manager-75c4c745bc-zt5mz labels="[]" subsys=daemon sync-build=true level=info msg="Create endpoint request" addressing="&{10.0.0.166 19c33b5b-b0bd-4fee-aed2-9589a76d1b83 default }" containerID=34d26e5de525207f8da57a622e2f0efea9d02900eedc7d3f25e099b231d8988a datapathConfiguration="&{false false false false false }" interface=lxc373467dcfe4c k8sPodName=cert-manager/cert-manager-webhook-548949fc64-gwzfz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b6ef81109d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=740 ipv4=10.0.0.210 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-zt5mz subsys=endpoint level=info msg="New endpoint" containerID=34d26e5de5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1830 ipv4=10.0.0.166 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-gwzfz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b6ef81109d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=740 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.210 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-zt5mz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Resolving identity labels (blocking)" containerID=34d26e5de5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1830 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.166 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-gwzfz subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=34d26e5de5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1830 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.166 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-gwzfz line=611 subsys=endpoint level=info msg="Invalid state transition skipped" containerID=b6ef81109d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=740 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.210 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-zt5mz line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=cert-manager;k8s:app.kubernetes.io/component=controller;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cert-manager;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b6ef81109d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=740 identity=30571 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.210 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-zt5mz oldIdentity="no identity" subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Waiting for endpoint to be generated" containerID=b6ef81109d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=740 identity=30571 ipv4=10.0.0.210 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-zt5mz subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=webhook;k8s:app.kubernetes.io/component=webhook;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=webhook;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=34d26e5de5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1830 identity=48180 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.166 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-gwzfz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=34d26e5de5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1830 identity=48180 ipv4=10.0.0.166 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-gwzfz subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.62 804c1de4-d632-431d-8353-00cb3ef8eb6c default }" containerID=307a0c576ba9dcf803b856f78b88aa98b6556f37bcc04dbcacd7dc178cdae4f6 datapathConfiguration="&{false false false false false }" interface=lxc393a997e8637 k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-nxpkp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=307a0c576b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=275 ipv4=10.0.0.62 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-nxpkp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=307a0c576b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=275 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.62 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-nxpkp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=cainjector;k8s:app.kubernetes.io/component=cainjector;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cainjector;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=307a0c576b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=275 identity=23127 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.62 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-nxpkp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=307a0c576b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=275 identity=23127 ipv4=10.0.0.62 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-nxpkp subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=34d26e5de5 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1830 identity=48180 ipv4=10.0.0.166 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-gwzfz subsys=endpoint level=info msg="Successful endpoint creation" containerID=34d26e5de5 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1830 identity=48180 ipv4=10.0.0.166 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-gwzfz subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=b6ef81109d datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=740 identity=30571 ipv4=10.0.0.210 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-zt5mz subsys=endpoint level=info msg="Successful endpoint creation" containerID=b6ef81109d datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=740 identity=30571 ipv4=10.0.0.210 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-zt5mz subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=307a0c576b datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=275 identity=23127 ipv4=10.0.0.62 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-nxpkp subsys=endpoint level=info msg="Successful endpoint creation" containerID=307a0c576b datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=275 identity=23127 ipv4=10.0.0.62 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-nxpkp subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.12 83293df3-3ffe-4d5d-8b3d-6587160f78d0 default }" containerID=670e214601a7d4022b8643c66999c2f0df40c9833393c52c5e7ea76e3e9f0e65 datapathConfiguration="&{false false false false false }" interface=lxc06f9cb680dd4 k8sPodName=cert-manager/cert-manager-startupapicheck-qfzpp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=670e214601 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3183 ipv4=10.0.0.12 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-qfzpp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=670e214601 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3183 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=2242c66c-7872-458a-8bd8-bd98a9845186,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=2242c66c-7872-458a-8bd8-bd98a9845186,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.12 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-qfzpp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=startupapicheck;k8s:app.kubernetes.io/component=startupapicheck;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=startupapicheck;k8s:app.kubernetes.io/version=v1.11.5;k8s:batch.kubernetes.io/controller-uid=2242c66c-7872-458a-8bd8-bd98a9845186;k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck;k8s:controller-uid=2242c66c-7872-458a-8bd8-bd98a9845186;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck;k8s:io.kubernetes.pod.namespace=cert-manager;k8s:job-name=cert-manager-startupapicheck;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=670e214601 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3183 identity=4602 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=2242c66c-7872-458a-8bd8-bd98a9845186,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=2242c66c-7872-458a-8bd8-bd98a9845186,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.12 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-qfzpp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=670e214601 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3183 identity=4602 ipv4=10.0.0.12 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-qfzpp subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=670e214601 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3183 identity=4602 ipv4=10.0.0.12 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-qfzpp subsys=endpoint level=info msg="Successful endpoint creation" containerID=670e214601 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3183 identity=4602 ipv4=10.0.0.12 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-qfzpp subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=670e214601 endpointID=3183 k8sNamespace=cert-manager k8sPodName=cert-manager-startupapicheck-qfzpp subsys=daemon level=info msg="Releasing key" key="[k8s:app=startupapicheck k8s:app.kubernetes.io/component=startupapicheck k8s:app.kubernetes.io/instance=cert-manager k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=startupapicheck k8s:app.kubernetes.io/version=v1.11.5 k8s:batch.kubernetes.io/controller-uid=2242c66c-7872-458a-8bd8-bd98a9845186 k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck k8s:controller-uid=2242c66c-7872-458a-8bd8-bd98a9845186 k8s:helm.sh/chart=cert-manager-v1.11.5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager k8s:io.cilium.k8s.namespace.labels.name=cert-manager k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck k8s:io.kubernetes.pod.namespace=cert-manager k8s:job-name=cert-manager-startupapicheck]" subsys=allocator level=info msg="Removed endpoint" containerID=670e214601 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3183 identity=4602 ipv4=10.0.0.12 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-qfzpp subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.34 61c57100-6aa7-43b4-983a-03e2be1004ed default }" containerID=9559b0996564918161f787cc3034af1bc17168360a5f2ed457f775db9bfa7647 datapathConfiguration="&{false false false false false }" interface=lxcf5eb8ca102f8 k8sPodName=ingress-nginx/ingress-nginx-admission-create-9rxwf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9559b09965 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3785 ipv4=10.0.0.34 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-9rxwf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9559b09965 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3785 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=55b3a53f-b65d-4996-980b-7037c7f92527,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=55b3a53f-b65d-4996-980b-7037c7f92527,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.34 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-9rxwf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=55b3a53f-b65d-4996-980b-7037c7f92527;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create;k8s:controller-uid=55b3a53f-b65d-4996-980b-7037c7f92527;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-create;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9559b09965 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3785 identity=13614 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=55b3a53f-b65d-4996-980b-7037c7f92527,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=55b3a53f-b65d-4996-980b-7037c7f92527,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.34 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-9rxwf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9559b09965 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3785 identity=13614 ipv4=10.0.0.34 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-9rxwf subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=9559b09965 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3785 identity=13614 ipv4=10.0.0.34 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-9rxwf subsys=endpoint level=info msg="Successful endpoint creation" containerID=9559b09965 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3785 identity=13614 ipv4=10.0.0.34 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-9rxwf subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=9559b09965 endpointID=3785 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-create-9rxwf subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=55b3a53f-b65d-4996-980b-7037c7f92527 k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create k8s:controller-uid=55b3a53f-b65d-4996-980b-7037c7f92527 k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-create]" subsys=allocator level=info msg="Removed endpoint" containerID=9559b09965 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3785 identity=13614 ipv4=10.0.0.34 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-9rxwf subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.185 0e7516b8-b7a1-4cdc-af91-e82b5a6c916a default }" containerID=09b5a5b4df3810f606f78226f3633172e71c42727ef55beb98ddf5a179a64aa3 datapathConfiguration="&{false false false false false }" interface=lxcb1e2f61cc90e k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-w7j68 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=09b5a5b4df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3839 ipv4=10.0.0.185 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-w7j68 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=09b5a5b4df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3839 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.185 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-w7j68 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=default-backend;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend;k8s:io.kubernetes.pod.namespace=ingress-nginx;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=09b5a5b4df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3839 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.185 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-w7j68 line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=09b5a5b4df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3839 identity=5030 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.185 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-w7j68 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=09b5a5b4df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3839 identity=5030 ipv4=10.0.0.185 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-w7j68 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=09b5a5b4df datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3839 identity=5030 ipv4=10.0.0.185 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-w7j68 subsys=endpoint level=info msg="Successful endpoint creation" containerID=09b5a5b4df datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3839 identity=5030 ipv4=10.0.0.185 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-w7j68 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.54 97e57a85-d8f6-4820-8760-df645bc7a5a1 default }" containerID=6e0518ed3afa10d5fdb74396b40d3abf9b3b3a6134276b0e61bf390b281dbd19 datapathConfiguration="&{false false false false false }" interface=lxc70130cd3ffab k8sPodName=ingress-nginx/ingress-nginx-admission-patch-zsrb9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6e0518ed3a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2066 ipv4=10.0.0.54 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-zsrb9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6e0518ed3a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2066 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=a29c0757-1775-41e9-b32f-15cfdf3dd447,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=a29c0757-1775-41e9-b32f-15cfdf3dd447,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.54 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-zsrb9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=a29c0757-1775-41e9-b32f-15cfdf3dd447;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch;k8s:controller-uid=a29c0757-1775-41e9-b32f-15cfdf3dd447;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-patch;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6e0518ed3a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2066 identity=33539 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=a29c0757-1775-41e9-b32f-15cfdf3dd447,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=a29c0757-1775-41e9-b32f-15cfdf3dd447,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.54 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-zsrb9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6e0518ed3a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2066 identity=33539 ipv4=10.0.0.54 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-zsrb9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6e0518ed3a datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2066 identity=33539 ipv4=10.0.0.54 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-zsrb9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=6e0518ed3a datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2066 identity=33539 ipv4=10.0.0.54 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-zsrb9 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=6e0518ed3a endpointID=2066 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-patch-zsrb9 subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=a29c0757-1775-41e9-b32f-15cfdf3dd447 k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch k8s:controller-uid=a29c0757-1775-41e9-b32f-15cfdf3dd447 k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-patch]" subsys=allocator level=info msg="Removed endpoint" containerID=6e0518ed3a datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2066 identity=33539 ipv4=10.0.0.54 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-zsrb9 subsys=endpoint level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"messaging-topology-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9443 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-messaging-topology-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=408062b7-e2d3-40a8-b37c-41874fe1abb9] Description:}]" policyAddRequest=359f3d72-7ea9-4e41-bb3a-321b308f677a subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=359f3d72-7ea9-4e41-bb3a-321b308f677a policyRevision=2 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-messaging-topology-operator subsys=k8s-watcher level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"rabbitmq-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-cluster-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=94608c0a-aee4-4bc1-b3d2-4e24796a0f36] Description:}]" policyAddRequest=4dd741e7-bc8d-41e2-8c12-df8d235a32af subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=4dd741e7-bc8d-41e2-8c12-df8d235a32af policyRevision=3 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-cluster-operator subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.233 4eb200ff-ddbd-4cb8-b377-97bc087347a5 default }" containerID=7e4c8a7c03f9f9d25e6fb1af6d1da5e3f336cfb0d1d0c71ea5a1805a7b2fc515 datapathConfiguration="&{false false false false false }" interface=lxc8e3448efccc1 k8sPodName=openstack/rabbitmq-cluster-operator-5448d56d95-r44rb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7e4c8a7c03 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1174 ipv4=10.0.0.233 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-5448d56d95-r44rb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7e4c8a7c03 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1174 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.9.0,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.233 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-5448d56d95-r44rb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=2.9.0;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7e4c8a7c03 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1174 identity=46256 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.9.0,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.233 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-5448d56d95-r44rb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7e4c8a7c03 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1174 identity=46256 ipv4=10.0.0.233 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-5448d56d95-r44rb subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=7e4c8a7c03 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1174 identity=46256 ipv4=10.0.0.233 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-5448d56d95-r44rb subsys=endpoint level=info msg="Successful endpoint creation" containerID=7e4c8a7c03 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1174 identity=46256 ipv4=10.0.0.233 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-5448d56d95-r44rb subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.132 2a813731-5a80-4442-aca7-110d0b2b5009 default }" containerID=ec3f0eab0cf1d047073ba98d318e81af872942ad2b17a63ecd9928b3630135e8 datapathConfiguration="&{false false false false false }" interface=lxce572eff92dae k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-cwspq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ec3f0eab0c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2729 ipv4=10.0.0.132 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-cwspq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ec3f0eab0c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2729 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.14.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.132 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-cwspq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=messaging-topology-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=1.14.1;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ec3f0eab0c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2729 identity=6324 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.14.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.132 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-cwspq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ec3f0eab0c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2729 identity=6324 ipv4=10.0.0.132 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-cwspq subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ec3f0eab0c datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=2729 identity=6324 ipv4=10.0.0.132 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-cwspq subsys=endpoint level=info msg="Successful endpoint creation" containerID=ec3f0eab0c datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=2729 identity=6324 ipv4=10.0.0.132 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-cwspq subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.31 ec35667e-6ad8-44f4-b1c1-850968efc2c4 default }" containerID=68483dfa16030af67886f86ed8f9d143278bfc9fd78ce37ddb45147fa0b4fb80 datapathConfiguration="&{false false false false false }" interface=lxcf7d70cf1abcc k8sPodName=openstack/pxc-operator-7cff949c8b-zhwtq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=68483dfa16 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=436 ipv4=10.0.0.31 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-zhwtq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=68483dfa16 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=436 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.31 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-zhwtq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=operator;k8s:app.kubernetes.io/instance=pxc-operator;k8s:app.kubernetes.io/name=pxc-operator;k8s:app.kubernetes.io/part-of=pxc-operator;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=68483dfa16 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=436 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.31 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-zhwtq line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=68483dfa16 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=436 identity=52355 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.31 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-zhwtq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=68483dfa16 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=436 identity=52355 ipv4=10.0.0.31 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-zhwtq subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=68483dfa16 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=436 identity=52355 ipv4=10.0.0.31 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-zhwtq subsys=endpoint level=info msg="Successful endpoint creation" containerID=68483dfa16 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=436 identity=52355 ipv4=10.0.0.31 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-zhwtq subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.218 5c1f67b8-f875-4770-8524-f7b29c912606 default }" containerID=71cbd1a17af8f37a6af3743c2d5fe3806e73f042f158b4f1d1b4b21b5b36cbea datapathConfiguration="&{false false false false false }" interface=lxc18c6560126ef k8sPodName=local-path-storage/helper-pod-create-pvc-19417e37-8385-43ab-93bb-a636f74972f1 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=71cbd1a17a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=333 ipv4=10.0.0.218 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-19417e37-8385-43ab-93bb-a636f74972f1 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=71cbd1a17a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=333 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.218 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-19417e37-8385-43ab-93bb-a636f74972f1 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=71cbd1a17a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=333 identity=32209 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.218 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-19417e37-8385-43ab-93bb-a636f74972f1 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=71cbd1a17a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=333 identity=32209 ipv4=10.0.0.218 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-19417e37-8385-43ab-93bb-a636f74972f1 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=71cbd1a17a datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=333 identity=32209 ipv4=10.0.0.218 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-19417e37-8385-43ab-93bb-a636f74972f1 subsys=endpoint level=info msg="Successful endpoint creation" containerID=71cbd1a17a datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=333 identity=32209 ipv4=10.0.0.218 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-19417e37-8385-43ab-93bb-a636f74972f1 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.167 b25c174b-3e73-4cfd-9157-c7398295ddf7 default }" containerID=f9712ecced93b138e92c80cfa65841d9160b00699eba0925911bcdb55871caa8 datapathConfiguration="&{false false false false false }" interface=lxc3c3477434381 k8sPodName=openstack/percona-xtradb-haproxy-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f9712ecced datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=708 ipv4=10.0.0.167 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f9712ecced datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=708 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.167 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=haproxy;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f9712ecced datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=708 identity=633 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.167 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f9712ecced datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=708 identity=633 ipv4=10.0.0.167 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f9712ecced datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=708 identity=633 ipv4=10.0.0.167 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f9712ecced datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=708 identity=633 ipv4=10.0.0.167 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=71cbd1a17a endpointID=333 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-19417e37-8385-43ab-93bb-a636f74972f1 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=71cbd1a17a datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=333 identity=32209 ipv4=10.0.0.218 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-19417e37-8385-43ab-93bb-a636f74972f1 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.41 f013bfb0-1156-495d-8f98-9acbafa3347d default }" containerID=aa7e9f7c5b205d1ce20370183d73850a957817d3e1d47bc4c37a4165e06428ed datapathConfiguration="&{false false false false false }" interface=lxcc3e5dad385f8 k8sPodName=openstack/percona-xtradb-pxc-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=aa7e9f7c5b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3913 ipv4=10.0.0.41 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=aa7e9f7c5b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3913 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.41 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=aa7e9f7c5b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3913 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.41 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=pxc;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=aa7e9f7c5b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3913 identity=39510 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.41 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=aa7e9f7c5b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3913 identity=39510 ipv4=10.0.0.41 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=aa7e9f7c5b datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=3913 identity=39510 ipv4=10.0.0.41 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=aa7e9f7c5b datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=3913 identity=39510 ipv4=10.0.0.41 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/instance\":\"valkey\",\"k8s:app.kubernetes.io/name\":\"valkey\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:6379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:26379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:} {IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9121 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=valkey k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=0e8573ca-6afd-449a-b5a5-e0e12adcaa61] Description:}]" policyAddRequest=8ba21331-005b-4570-97bc-ac2bad3460ee subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=8ba21331-005b-4570-97bc-ac2bad3460ee policyRevision=4 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=valkey subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.197 bf893f82-6bd7-43a2-9b3b-0400b3586ef2 default }" containerID=9b495ec2b1fefaa2f30cb4c57a4ae99c2dc1544bbb1b8c68c84709c968c62507 datapathConfiguration="&{false false false false false }" interface=lxcabe4af747e04 k8sPodName=local-path-storage/helper-pod-create-pvc-2b9d8a0e-3bba-4d35-a5f4-112f52e07123 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9b495ec2b1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=849 ipv4=10.0.0.197 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2b9d8a0e-3bba-4d35-a5f4-112f52e07123 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9b495ec2b1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=849 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.197 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2b9d8a0e-3bba-4d35-a5f4-112f52e07123 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9b495ec2b1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=849 identity=32209 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.197 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2b9d8a0e-3bba-4d35-a5f4-112f52e07123 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9b495ec2b1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=849 identity=32209 ipv4=10.0.0.197 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2b9d8a0e-3bba-4d35-a5f4-112f52e07123 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9b495ec2b1 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=849 identity=32209 ipv4=10.0.0.197 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2b9d8a0e-3bba-4d35-a5f4-112f52e07123 subsys=endpoint level=info msg="Successful endpoint creation" containerID=9b495ec2b1 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=849 identity=32209 ipv4=10.0.0.197 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2b9d8a0e-3bba-4d35-a5f4-112f52e07123 subsys=daemon level=info msg="Delete endpoint request" containerID=9b495ec2b1 endpointID=849 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-2b9d8a0e-3bba-4d35-a5f4-112f52e07123 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=9b495ec2b1 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=849 identity=32209 ipv4=10.0.0.197 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2b9d8a0e-3bba-4d35-a5f4-112f52e07123 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.199 0c280be5-5600-4cbf-9c7b-293b7919170d default }" containerID=a0638f78ce3a1469a69d08e8f4ff420849ee9592792ea170065a4b24ade79e5c datapathConfiguration="&{false false false false false }" interface=lxc8b2fef417e8a k8sPodName=openstack/valkey-node-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a0638f78ce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=303 ipv4=10.0.0.199 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a0638f78ce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=303 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.199 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=node;k8s:app.kubernetes.io/instance=valkey;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=valkey;k8s:app.kubernetes.io/version=8.0.2;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=valkey-2.4.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=valkey;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=valkey-node-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a0638f78ce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=303 identity=3768 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.199 ipv6= k8sPodName=openstack/valkey-node-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a0638f78ce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=303 identity=3768 ipv4=10.0.0.199 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=a0638f78ce datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=303 identity=3768 ipv4=10.0.0.199 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=a0638f78ce datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=303 identity=3768 ipv4=10.0.0.199 ipv6= k8sPodName=openstack/valkey-node-0 subsys=daemon level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"keycloak\",\"k8s:app.kubernetes.io/instance\":\"keycloak\",\"k8s:app.kubernetes.io/name\":\"keycloak\",\"k8s:io.kubernetes.pod.namespace\":\"auth-system\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:7800 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:8080 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=keycloak k8s:io.cilium.k8s.policy.namespace=auth-system k8s:io.cilium.k8s.policy.uid=bd98a40e-3263-4a5f-af37-54f3219147af] Description:}]" policyAddRequest=30df1adc-8805-4045-b9d8-1a517f892a54 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=30df1adc-8805-4045-b9d8-1a517f892a54 policyRevision=5 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=keycloak subsys=k8s-watcher level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.10 30625f1f-e9e9-47cf-9763-5ebbe6eb9d6d default }" containerID=8b5a2bfe9e0d542ebef5ede6ca302da5d154cc2215aa9dedefd39dcb9d35e324 datapathConfiguration="&{false false false false false }" interface=lxce9902ca85f01 k8sPodName=auth-system/keycloak-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8b5a2bfe9e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1640 ipv4=10.0.0.10 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8b5a2bfe9e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1640 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.10 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:auth-system k8s:io.cilium.k8s.namespace.labels.name:auth-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=keycloak;k8s:app.kubernetes.io/instance=keycloak;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=keycloak;k8s:app.kubernetes.io/version=24.0.5;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=keycloak-21.4.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system;k8s:io.cilium.k8s.namespace.labels.name=auth-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keycloak;k8s:io.kubernetes.pod.namespace=auth-system;k8s:statefulset.kubernetes.io/pod-name=keycloak-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8b5a2bfe9e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1640 identity=64985 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.10 ipv6= k8sPodName=auth-system/keycloak-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8b5a2bfe9e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1640 identity=64985 ipv4=10.0.0.10 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8b5a2bfe9e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1640 identity=64985 ipv4=10.0.0.10 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=8b5a2bfe9e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1640 identity=64985 ipv4=10.0.0.10 ipv6= k8sPodName=auth-system/keycloak-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.008944634571942592 newInterval=7m30s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.96 3a798b46-f7ba-4ffc-a771-081ea442f304 default }" containerID=cc20c28fdc431578726c082b12a739994af8b2d12dd5cfdc0dc4b6a26396a026 datapathConfiguration="&{false false false false false }" interface=lxcb1799b2b4f77 k8sPodName=monitoring/node-feature-discovery-worker-99jkj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=cc20c28fdc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=667 ipv4=10.0.0.96 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-99jkj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=cc20c28fdc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=667 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.96 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-99jkj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=worker;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=cc20c28fdc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=667 identity=7527 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.96 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-99jkj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=cc20c28fdc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=667 identity=7527 ipv4=10.0.0.96 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-99jkj subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.57 f579202e-6dd0-4d9f-951b-9115d2b9f7cc default }" containerID=9a1eda39b8db77a4160041977c5eee867f4f09a6176e84f7c38a093883c9c283 datapathConfiguration="&{false false false false false }" interface=lxcdd0824892d37 k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-lm2sf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9a1eda39b8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2382 ipv4=10.0.0.57 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-lm2sf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9a1eda39b8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2382 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.57 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-lm2sf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=master;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9a1eda39b8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2382 identity=13901 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.57 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-lm2sf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9a1eda39b8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2382 identity=13901 ipv4=10.0.0.57 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-lm2sf subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.196 7bee999a-e3fb-4aa4-a754-d071104bb339 default }" containerID=e85d49a27ad520fcdfdff78df3268e93b26457a7b688404e216a10efe1f5779d datapathConfiguration="&{false false false false false }" interface=lxccb685de18d8b k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-qvtz5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e85d49a27a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=59 ipv4=10.0.0.196 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-qvtz5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e85d49a27a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=59 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.196 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-qvtz5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=gc;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e85d49a27a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=59 identity=6479 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.196 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-qvtz5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e85d49a27a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=59 identity=6479 ipv4=10.0.0.196 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-qvtz5 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=cc20c28fdc datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=667 identity=7527 ipv4=10.0.0.96 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-99jkj subsys=endpoint level=info msg="Successful endpoint creation" containerID=cc20c28fdc datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=667 identity=7527 ipv4=10.0.0.96 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-99jkj subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=9a1eda39b8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2382 identity=13901 ipv4=10.0.0.57 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-lm2sf subsys=endpoint level=info msg="Successful endpoint creation" containerID=9a1eda39b8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2382 identity=13901 ipv4=10.0.0.57 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-lm2sf subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=e85d49a27a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=59 identity=6479 ipv4=10.0.0.196 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-qvtz5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=e85d49a27a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=59 identity=6479 ipv4=10.0.0.196 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-qvtz5 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.249 36418b68-0c01-4d91-ab52-f15694eb0312 default }" containerID=d21be97962e8771057245efb3f9edce85875867322aa0b9daab45f08098fa2c1 datapathConfiguration="&{false false false false false }" interface=lxc7ff17ea441aa k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-w68v4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d21be97962 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1871 ipv4=10.0.0.249 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-w68v4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d21be97962 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1871 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.249 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-w68v4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:secretgen-controller]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=secretgen-controller;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa;k8s:io.kubernetes.pod.namespace=secretgen-controller;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d21be97962 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1871 identity=2120 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.249 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-w68v4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d21be97962 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1871 identity=2120 ipv4=10.0.0.249 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-w68v4 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d21be97962 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1871 identity=2120 ipv4=10.0.0.249 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-w68v4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=d21be97962 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1871 identity=2120 ipv4=10.0.0.249 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-w68v4 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3269 identity=1 identityLabels="k8s:feature.node.kubernetes.io/cpu-cpuid.ADX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AESNI=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX2=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CLZERO=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CMPXCHG8=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FMA3=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSROPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.HYPERVISOR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IA32_ARCH_CAP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBPB=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBRS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.LAHF=true,k8s:feature.node.kubernetes.io/cpu-cpuid.MOVBE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.NRIPS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.OSXSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SHA=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SPEC_CTRL_SSBD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SSE4A=true,k8s:feature.node.kubernetes.io/cpu-cpuid.STIBP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVM=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVMNP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSCALL=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSEE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.TOPEXT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.WBNOINVD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.X87=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XGETBV1=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEC=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEOPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVES=true,k8s:feature.node.kubernetes.io/cpu-hardware_multithreading=false,k8s:feature.node.kubernetes.io/cpu-model.family=23,k8s:feature.node.kubernetes.io/cpu-model.id=49,k8s:feature.node.kubernetes.io/cpu-model.vendor_id=AMD,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ=true,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ_IDLE=true,k8s:feature.node.kubernetes.io/kernel-version.full=5.15.0-176-generic,k8s:feature.node.kubernetes.io/kernel-version.major=5,k8s:feature.node.kubernetes.io/kernel-version.minor=15,k8s:feature.node.kubernetes.io/kernel-version.revision=0,k8s:feature.node.kubernetes.io/pci-0300_1af4.present=true,k8s:feature.node.kubernetes.io/system-os_release.ID=ubuntu,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.major=22,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.minor=04,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID=22.04,k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_03269 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_03269 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_03269 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_03269:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3269 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.136 12e78192-292e-45f8-8582-ac89d0158e80 default }" containerID=19a35a19d8c4702ec10eddf99f7ad025cdc6b8fd8afb195890090d9636483b21 datapathConfiguration="&{false false false false false }" interface=lxcadb7ef6b38ea k8sPodName=monitoring/kube-prometheus-stack-admission-create-tjlr4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=19a35a19d8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=327 ipv4=10.0.0.136 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-tjlr4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=19a35a19d8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=327 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=3fede12a-2b5a-44dc-b880-a9d324f5f511,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=3fede12a-2b5a-44dc-b880-a9d324f5f511,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.136 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-tjlr4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-create;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=3fede12a-2b5a-44dc-b880-a9d324f5f511;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=3fede12a-2b5a-44dc-b880-a9d324f5f511;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-create;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=19a35a19d8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=327 identity=30277 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=3fede12a-2b5a-44dc-b880-a9d324f5f511,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=3fede12a-2b5a-44dc-b880-a9d324f5f511,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.136 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-tjlr4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=19a35a19d8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=327 identity=30277 ipv4=10.0.0.136 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-tjlr4 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=19a35a19d8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=327 identity=30277 ipv4=10.0.0.136 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-tjlr4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=19a35a19d8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=327 identity=30277 ipv4=10.0.0.136 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-tjlr4 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=19a35a19d8 endpointID=327 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-create-tjlr4 subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-create k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=3fede12a-2b5a-44dc-b880-a9d324f5f511 k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=3fede12a-2b5a-44dc-b880-a9d324f5f511 k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-create k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=19a35a19d8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=327 identity=30277 ipv4=10.0.0.136 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-tjlr4 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.93 f8903e30-491e-4bbf-961b-45108078a262 default }" containerID=20dc96f5b334d3cf504821d80f2a58ecb89d43dde6ef659bea1e43de12c68aa1 datapathConfiguration="&{false false false false false }" interface=lxcdd7e14d95daf k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-qw8cm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=20dc96f5b3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1543 ipv4=10.0.0.93 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-qw8cm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=20dc96f5b3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1543 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.93 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-qw8cm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=metrics;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-state-metrics;k8s:app.kubernetes.io/part-of=kube-state-metrics;k8s:app.kubernetes.io/version=2.12.0;k8s:helm.sh/chart=kube-state-metrics-5.20.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=20dc96f5b3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1543 identity=64454 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.93 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-qw8cm oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=20dc96f5b3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1543 identity=64454 ipv4=10.0.0.93 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-qw8cm subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.38 bfcb676e-9f0c-41ea-adfa-b7bc146d52f5 default }" containerID=63117369a442a83fb9e627385617c6d77d613d0ca1e3008ec8497e493eef0177 datapathConfiguration="&{false false false false false }" interface=lxc2e1fd95faf0e k8sPodName=monitoring/kube-prometheus-stack-grafana-7997ff6df4-kxgbx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=63117369a4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3445 ipv4=10.0.0.38 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-7997ff6df4-kxgbx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=63117369a4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3445 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.38 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-7997ff6df4-kxgbx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/name=grafana;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=63117369a4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3445 identity=7848 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.38 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-7997ff6df4-kxgbx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=63117369a4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3445 identity=7848 ipv4=10.0.0.38 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-7997ff6df4-kxgbx subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=20dc96f5b3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1543 identity=64454 ipv4=10.0.0.93 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-qw8cm subsys=endpoint level=info msg="Successful endpoint creation" containerID=20dc96f5b3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1543 identity=64454 ipv4=10.0.0.93 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-qw8cm subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.140 ba1bce94-82cf-4953-8569-48e00abe04f1 default }" containerID=187324aedbd02267dfb639eef30ed8229f68d1c35656d9c3d1e6fde9966d1eb6 datapathConfiguration="&{false false false false false }" interface=lxcbdfcc2a1d7b5 k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-j8wzp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=187324aedb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1159 ipv4=10.0.0.140 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-j8wzp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=187324aedb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1159 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.140 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-j8wzp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-operator;k8s:app.kubernetes.io/component=prometheus-operator;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:chart=kube-prometheus-stack-60.2.0;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=187324aedb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1159 identity=20547 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.140 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-j8wzp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=187324aedb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1159 identity=20547 ipv4=10.0.0.140 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-j8wzp subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=63117369a4 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3445 identity=7848 ipv4=10.0.0.38 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-7997ff6df4-kxgbx subsys=endpoint level=info msg="Successful endpoint creation" containerID=63117369a4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3445 identity=7848 ipv4=10.0.0.38 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-7997ff6df4-kxgbx subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=187324aedb datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1159 identity=20547 ipv4=10.0.0.140 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-j8wzp subsys=endpoint level=info msg="Successful endpoint creation" containerID=187324aedb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1159 identity=20547 ipv4=10.0.0.140 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-j8wzp subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.94 2da1243a-7aff-4323-9614-a919328893d8 default }" containerID=7ee880028253d0939d4e92dfaf5842772a1fd597f2a753748b48aeb6489d3129 datapathConfiguration="&{false false false false false }" interface=lxc95c58b7c19ce k8sPodName=monitoring/kube-prometheus-stack-admission-patch-dpk7z labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7ee8800282 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2610 ipv4=10.0.0.94 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-dpk7z subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7ee8800282 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2610 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=7ef78d24-2828-4d5b-a5da-1b0eb176efae,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=7ef78d24-2828-4d5b-a5da-1b0eb176efae,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.94 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-dpk7z subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-patch;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=7ef78d24-2828-4d5b-a5da-1b0eb176efae;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=7ef78d24-2828-4d5b-a5da-1b0eb176efae;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-patch;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7ee8800282 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2610 identity=27405 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=7ef78d24-2828-4d5b-a5da-1b0eb176efae,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=7ef78d24-2828-4d5b-a5da-1b0eb176efae,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.94 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-dpk7z oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7ee8800282 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2610 identity=27405 ipv4=10.0.0.94 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-dpk7z subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7ee8800282 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2610 identity=27405 ipv4=10.0.0.94 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-dpk7z subsys=endpoint level=info msg="Successful endpoint creation" containerID=7ee8800282 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2610 identity=27405 ipv4=10.0.0.94 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-dpk7z subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=7ee8800282 endpointID=2610 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-patch-dpk7z subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-patch k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=7ef78d24-2828-4d5b-a5da-1b0eb176efae k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=7ef78d24-2828-4d5b-a5da-1b0eb176efae k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-patch k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=7ee8800282 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2610 identity=27405 ipv4=10.0.0.94 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-dpk7z subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.42 62ef610d-9875-45c6-ae4a-563f7d978bf4 default }" containerID=6fca4270e465c9860317b4cd9c22edb7664f84b9829ecea94cf1f47e5d52348f datapathConfiguration="&{false false false false false }" interface=lxcb04ede0de15a k8sPodName=local-path-storage/helper-pod-create-pvc-f88002ad-7ed7-42cb-af40-f27c76210004 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6fca4270e4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=192 ipv4=10.0.0.42 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f88002ad-7ed7-42cb-af40-f27c76210004 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6fca4270e4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=192 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.42 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f88002ad-7ed7-42cb-af40-f27c76210004 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6fca4270e4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=192 identity=32209 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.42 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f88002ad-7ed7-42cb-af40-f27c76210004 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6fca4270e4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=192 identity=32209 ipv4=10.0.0.42 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f88002ad-7ed7-42cb-af40-f27c76210004 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6fca4270e4 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=192 identity=32209 ipv4=10.0.0.42 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f88002ad-7ed7-42cb-af40-f27c76210004 subsys=endpoint level=info msg="Successful endpoint creation" containerID=6fca4270e4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=192 identity=32209 ipv4=10.0.0.42 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f88002ad-7ed7-42cb-af40-f27c76210004 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.43 41dbdec8-aba1-4f3f-be9e-437c849fc6c9 default }" containerID=e866f8a2c653099d53eba6c616aa88f35ee8e9f8f9516fb4428cee551286fbf7 datapathConfiguration="&{false false false false false }" interface=lxc85957a978e55 k8sPodName=local-path-storage/helper-pod-create-pvc-325e63be-9449-4f66-a4a2-3078dfa26fb9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e866f8a2c6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=131 ipv4=10.0.0.43 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-325e63be-9449-4f66-a4a2-3078dfa26fb9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e866f8a2c6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=131 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.43 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-325e63be-9449-4f66-a4a2-3078dfa26fb9 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=e866f8a2c6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=131 identity=32209 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.43 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-325e63be-9449-4f66-a4a2-3078dfa26fb9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e866f8a2c6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=131 identity=32209 ipv4=10.0.0.43 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-325e63be-9449-4f66-a4a2-3078dfa26fb9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e866f8a2c6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=131 identity=32209 ipv4=10.0.0.43 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-325e63be-9449-4f66-a4a2-3078dfa26fb9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=e866f8a2c6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=131 identity=32209 ipv4=10.0.0.43 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-325e63be-9449-4f66-a4a2-3078dfa26fb9 subsys=daemon level=info msg="Delete endpoint request" containerID=e866f8a2c6 endpointID=131 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-325e63be-9449-4f66-a4a2-3078dfa26fb9 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Delete endpoint request" containerID=6fca4270e4 endpointID=192 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-f88002ad-7ed7-42cb-af40-f27c76210004 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=6fca4270e4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=192 identity=32209 ipv4=10.0.0.42 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f88002ad-7ed7-42cb-af40-f27c76210004 subsys=endpoint level=info msg="Removed endpoint" containerID=e866f8a2c6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=131 identity=32209 ipv4=10.0.0.43 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-325e63be-9449-4f66-a4a2-3078dfa26fb9 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.154 557912f6-6de3-4036-bac0-4b59a6200463 default }" containerID=f495fed96c57f88eaf553391b2b1a55f86e2a2c9cb1ee90d503aa39bc96be887 datapathConfiguration="&{false false false false false }" interface=lxcfdfdf8cc7e5e k8sPodName=monitoring/loki-results-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f495fed96c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=466 ipv4=10.0.0.154 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f495fed96c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=466 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.154 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-results-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-results-cache;k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f495fed96c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=466 identity=45081 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.154 ipv6= k8sPodName=monitoring/loki-results-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f495fed96c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=466 identity=45081 ipv4=10.0.0.154 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.94 0d700605-f569-44ef-bfb9-25c8f182d430 default }" containerID=5faf37c48a7ad01f919b9094654134abd992b69021e42c81bd8e29bb8bdd9875 datapathConfiguration="&{false false false false false }" interface=lxcb958594b27c1 k8sPodName=monitoring/loki-gateway-cf54cb88c-wfstm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5faf37c48a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=738 ipv4=10.0.0.94 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-wfstm subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.67 4b085ed9-980a-45d4-a602-45f51553bd15 default }" containerID=bf50b459d2703b346592952216ecb7445413d32386a5396733190ce578c0666a datapathConfiguration="&{false false false false false }" interface=lxc5c6913aa83f9 k8sPodName=monitoring/loki-chunks-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bf50b459d2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3138 ipv4=10.0.0.67 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5faf37c48a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=738 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.94 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-wfstm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Resolving identity labels (blocking)" containerID=bf50b459d2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3138 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.67 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=gateway;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5faf37c48a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=738 identity=22943 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.94 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-wfstm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5faf37c48a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=738 identity=22943 ipv4=10.0.0.94 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-wfstm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-chunks-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-chunks-cache;k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=bf50b459d2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3138 identity=27540 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.67 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=bf50b459d2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3138 identity=27540 ipv4=10.0.0.67 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f495fed96c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=466 identity=45081 ipv4=10.0.0.154 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f495fed96c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=466 identity=45081 ipv4=10.0.0.154 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=5faf37c48a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=738 identity=22943 ipv4=10.0.0.94 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-wfstm subsys=endpoint level=info msg="Successful endpoint creation" containerID=5faf37c48a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=738 identity=22943 ipv4=10.0.0.94 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-wfstm subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=bf50b459d2 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3138 identity=27540 ipv4=10.0.0.67 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=bf50b459d2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3138 identity=27540 ipv4=10.0.0.67 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.39 5ef6b735-61a6-4137-99a9-d57c08a2a5f6 default }" containerID=8f8e9a68ee93976d6b6cd862c3c65bf094b09926d06b4f5c3d0c3f058c8584c4 datapathConfiguration="&{false false false false false }" interface=lxc9f212d090699 k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8f8e9a68ee datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=47 ipv4=10.0.0.39 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8f8e9a68ee datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=47 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.39 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=prometheus;k8s:app.kubernetes.io/version=2.51.2;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus;k8s:io.kubernetes.pod.namespace=monitoring;k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus;k8s:operator.prometheus.io/shard=0;k8s:prometheus=kube-prometheus-stack-prometheus;k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8f8e9a68ee datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=47 identity=21831 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.39 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8f8e9a68ee datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=47 identity=21831 ipv4=10.0.0.39 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8f8e9a68ee datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=47 identity=21831 ipv4=10.0.0.39 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=8f8e9a68ee datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=47 identity=21831 ipv4=10.0.0.39 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.155 b96a0e64-0fa1-44c2-8eee-d22c843429a6 default }" containerID=9c77d44e4ddee6e1bf681522be56aca1b3583fe0b80def5e132505c2c89704bf datapathConfiguration="&{false false false false false }" interface=lxccb2e9e930604 k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9c77d44e4d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3774 ipv4=10.0.0.155 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9c77d44e4d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3774 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.155 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:alertmanager=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=alertmanager;k8s:app.kubernetes.io/version=0.27.0;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9c77d44e4d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3774 identity=3741 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.155 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9c77d44e4d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3774 identity=3741 ipv4=10.0.0.155 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9c77d44e4d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3774 identity=3741 ipv4=10.0.0.155 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=9c77d44e4d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3774 identity=3741 ipv4=10.0.0.155 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.87 4c573f1b-5fdd-4ece-b03a-7393dbb07540 default }" containerID=96944f6fb3eabe57b25c339182460f5a38dd6daa566382529103405fe1c6895f datapathConfiguration="&{false false false false false }" interface=lxcc538b7350d8c k8sPodName=local-path-storage/helper-pod-create-pvc-6efe2a83-1baf-4363-bda9-a176a35aeba3 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=96944f6fb3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=697 ipv4=10.0.0.87 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6efe2a83-1baf-4363-bda9-a176a35aeba3 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=96944f6fb3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=697 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.87 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6efe2a83-1baf-4363-bda9-a176a35aeba3 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=96944f6fb3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=697 identity=32209 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.87 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6efe2a83-1baf-4363-bda9-a176a35aeba3 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=96944f6fb3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=697 identity=32209 ipv4=10.0.0.87 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6efe2a83-1baf-4363-bda9-a176a35aeba3 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=96944f6fb3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=697 identity=32209 ipv4=10.0.0.87 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6efe2a83-1baf-4363-bda9-a176a35aeba3 subsys=endpoint level=info msg="Successful endpoint creation" containerID=96944f6fb3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=697 identity=32209 ipv4=10.0.0.87 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6efe2a83-1baf-4363-bda9-a176a35aeba3 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.103 0503578e-cbd4-4d82-9707-0c01223aeddc default }" containerID=4ab3232fb943daf7dc2473decba935290792f3b9093e54c6b6aa7168b2c01700 datapathConfiguration="&{false false false false false }" interface=lxc93e232efda2a k8sPodName=monitoring/vector-fl4kz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4ab3232fb9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3906 ipv4=10.0.0.103 ipv6= k8sPodName=monitoring/vector-fl4kz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4ab3232fb9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3906 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.103 ipv6= k8sPodName=monitoring/vector-fl4kz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=Agent;k8s:app.kubernetes.io/instance=vector;k8s:app.kubernetes.io/name=vector;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=vector;k8s:io.kubernetes.pod.namespace=monitoring;k8s:vector.dev/exclude=true;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4ab3232fb9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3906 identity=46084 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.103 ipv6= k8sPodName=monitoring/vector-fl4kz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4ab3232fb9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3906 identity=46084 ipv4=10.0.0.103 ipv6= k8sPodName=monitoring/vector-fl4kz subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4ab3232fb9 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3906 identity=46084 ipv4=10.0.0.103 ipv6= k8sPodName=monitoring/vector-fl4kz subsys=endpoint level=info msg="Successful endpoint creation" containerID=4ab3232fb9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3906 identity=46084 ipv4=10.0.0.103 ipv6= k8sPodName=monitoring/vector-fl4kz subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=96944f6fb3 endpointID=697 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-6efe2a83-1baf-4363-bda9-a176a35aeba3 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=96944f6fb3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=697 identity=32209 ipv4=10.0.0.87 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6efe2a83-1baf-4363-bda9-a176a35aeba3 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.88 87fb22e7-a96f-4554-ab8b-edc7cd1ef9a0 default }" containerID=a4602b3feff34ebd484a87767233076794ebf04897eae6780bad392ea71a0328 datapathConfiguration="&{false false false false false }" interface=lxcf29395b52348 k8sPodName=monitoring/loki-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a4602b3fef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2122 ipv4=10.0.0.88 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a4602b3fef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2122 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.88 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=single-binary;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:app.kubernetes.io/part-of=memberlist;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=loki-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a4602b3fef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2122 identity=2664 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.88 ipv6= k8sPodName=monitoring/loki-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a4602b3fef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2122 identity=2664 ipv4=10.0.0.88 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=a4602b3fef datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2122 identity=2664 ipv4=10.0.0.88 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=a4602b3fef datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2122 identity=2664 ipv4=10.0.0.88 ipv6= k8sPodName=monitoring/loki-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.87 2419da28-0d07-4126-9acf-fac5b63bc32d default }" containerID=e44a291f561d04d1e1b1d163cc1a69e6e9aeacbadbd9ebe5353a216c564cdf9c datapathConfiguration="&{false false false false false }" interface=lxc0c44baa0d01f k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-vcstw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e44a291f56 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1085 ipv4=10.0.0.87 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-vcstw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e44a291f56 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1085 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.87 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-vcstw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=prometheus-pushgateway;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=prometheus-pushgateway;k8s:app.kubernetes.io/version=v1.8.0;k8s:helm.sh/chart=prometheus-pushgateway-2.13.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e44a291f56 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1085 identity=9553 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.87 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-vcstw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e44a291f56 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1085 identity=9553 ipv4=10.0.0.87 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-vcstw subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e44a291f56 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1085 identity=9553 ipv4=10.0.0.87 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-vcstw subsys=endpoint level=info msg="Successful endpoint creation" containerID=e44a291f56 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1085 identity=9553 ipv4=10.0.0.87 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-vcstw subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.250 9da5421f-810a-4857-89bb-a33af5de3bc6 default }" containerID=ce7c66751d118c0a96173e6a2111e872cce68a64f0a4a277b4361b70d2a3b73f datapathConfiguration="&{false false false false false }" interface=lxc892b8bfc64ed k8sPodName=openstack/memcached-memcached-6479589586-7bchb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ce7c66751d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2055 ipv4=10.0.0.250 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-7bchb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ce7c66751d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2055 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.250 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-7bchb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=memcached;k8s:component=server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=memcached;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ce7c66751d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2055 identity=9106 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.250 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-7bchb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ce7c66751d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2055 identity=9106 ipv4=10.0.0.250 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-7bchb subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=ce7c66751d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2055 identity=9106 ipv4=10.0.0.250 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-7bchb subsys=endpoint level=info msg="Successful endpoint creation" containerID=ce7c66751d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2055 identity=9106 ipv4=10.0.0.250 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-7bchb subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.198 72c46bd6-5d0f-4602-aaf5-938f07a0bbf8 default }" containerID=0d1070612944d41459c4b07e77a448e0b39fa383f54238c3fdbdc8e270671cdb datapathConfiguration="&{false false false false false }" interface=lxc921842d7a7bf k8sPodName=local-path-storage/helper-pod-create-pvc-2f3db750-b9b4-4820-be06-c0aebff6a308 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0d10706129 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3830 ipv4=10.0.0.198 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2f3db750-b9b4-4820-be06-c0aebff6a308 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0d10706129 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3830 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.198 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2f3db750-b9b4-4820-be06-c0aebff6a308 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0d10706129 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3830 identity=32209 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.198 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2f3db750-b9b4-4820-be06-c0aebff6a308 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0d10706129 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3830 identity=32209 ipv4=10.0.0.198 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2f3db750-b9b4-4820-be06-c0aebff6a308 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0d10706129 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3830 identity=32209 ipv4=10.0.0.198 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2f3db750-b9b4-4820-be06-c0aebff6a308 subsys=endpoint level=info msg="Successful endpoint creation" containerID=0d10706129 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3830 identity=32209 ipv4=10.0.0.198 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2f3db750-b9b4-4820-be06-c0aebff6a308 subsys=daemon level=info msg="Delete endpoint request" containerID=0d10706129 endpointID=3830 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-2f3db750-b9b4-4820-be06-c0aebff6a308 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=0d10706129 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3830 identity=32209 ipv4=10.0.0.198 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2f3db750-b9b4-4820-be06-c0aebff6a308 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.7 3d3d7fe4-23f6-4ddb-9128-3e520c0cce2d default }" containerID=d1eb36fdf27262d0a917071194b930389321e8a60c92a1f8b782192c35619e26 datapathConfiguration="&{false false false false false }" interface=lxcf6c9d238729e k8sPodName=openstack/rabbitmq-keystone-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d1eb36fdf2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2444 ipv4=10.0.0.7 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d1eb36fdf2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2444 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.7 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=d1eb36fdf2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2444 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.7 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-keystone;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d1eb36fdf2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2444 identity=28385 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.7 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d1eb36fdf2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2444 identity=28385 ipv4=10.0.0.7 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d1eb36fdf2 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2444 identity=28385 ipv4=10.0.0.7 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=d1eb36fdf2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2444 identity=28385 ipv4=10.0.0.7 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.40 593c9c71-6451-44c4-b0d6-bf29f385929d default }" containerID=1764d59419cb300b665e9d0cf84c3c13bcd79362f8d5031068d9db03c6463526 datapathConfiguration="&{false false false false false }" interface=lxcf08c5cf2613d k8sPodName=openstack/keystone-api-6476d5c4b7-sr5vl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1764d59419 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=610 ipv4=10.0.0.40 ipv6= k8sPodName=openstack/keystone-api-6476d5c4b7-sr5vl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1764d59419 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=610 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.40 ipv6= k8sPodName=openstack/keystone-api-6476d5c4b7-sr5vl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=1764d59419 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=610 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.40 ipv6= k8sPodName=openstack/keystone-api-6476d5c4b7-sr5vl line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1764d59419 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=610 identity=2633 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.40 ipv6= k8sPodName=openstack/keystone-api-6476d5c4b7-sr5vl oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1764d59419 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=610 identity=2633 ipv4=10.0.0.40 ipv6= k8sPodName=openstack/keystone-api-6476d5c4b7-sr5vl subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.136 ee4fa934-5c47-4e4d-9a0c-5fe0dbd0d281 default }" containerID=e6515e85a94853ddd362e49a0d7079fbff587a2fbd7bc34e6b52a9f4402a5444 datapathConfiguration="&{false false false false false }" interface=lxce2af6f35c962 k8sPodName=openstack/keystone-credential-setup-6nkh6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e6515e85a9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=621 ipv4=10.0.0.136 ipv6= k8sPodName=openstack/keystone-credential-setup-6nkh6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e6515e85a9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=621 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=fe58aecd-521d-4132-8c99-7885679cf2b1,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=fe58aecd-521d-4132-8c99-7885679cf2b1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.136 ipv6= k8sPodName=openstack/keystone-credential-setup-6nkh6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=fe58aecd-521d-4132-8c99-7885679cf2b1;k8s:batch.kubernetes.io/job-name=keystone-credential-setup;k8s:component=credential-setup;k8s:controller-uid=fe58aecd-521d-4132-8c99-7885679cf2b1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-credential-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e6515e85a9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=621 identity=36133 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=fe58aecd-521d-4132-8c99-7885679cf2b1,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=fe58aecd-521d-4132-8c99-7885679cf2b1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.136 ipv6= k8sPodName=openstack/keystone-credential-setup-6nkh6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e6515e85a9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=621 identity=36133 ipv4=10.0.0.136 ipv6= k8sPodName=openstack/keystone-credential-setup-6nkh6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1764d59419 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=610 identity=2633 ipv4=10.0.0.40 ipv6= k8sPodName=openstack/keystone-api-6476d5c4b7-sr5vl subsys=endpoint level=info msg="Successful endpoint creation" containerID=1764d59419 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=610 identity=2633 ipv4=10.0.0.40 ipv6= k8sPodName=openstack/keystone-api-6476d5c4b7-sr5vl subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=e6515e85a9 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=621 identity=36133 ipv4=10.0.0.136 ipv6= k8sPodName=openstack/keystone-credential-setup-6nkh6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=e6515e85a9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=621 identity=36133 ipv4=10.0.0.136 ipv6= k8sPodName=openstack/keystone-credential-setup-6nkh6 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=e6515e85a9 endpointID=621 k8sNamespace=openstack k8sPodName=keystone-credential-setup-6nkh6 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=fe58aecd-521d-4132-8c99-7885679cf2b1 k8s:batch.kubernetes.io/job-name=keystone-credential-setup k8s:component=credential-setup k8s:controller-uid=fe58aecd-521d-4132-8c99-7885679cf2b1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-credential-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=e6515e85a9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=621 identity=36133 ipv4=10.0.0.136 ipv6= k8sPodName=openstack/keystone-credential-setup-6nkh6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.183 f83416ba-663f-4e67-b24f-dc03a7a1a5b0 default }" containerID=a9fa8f4e2399cadfee6a85c7bcf4093024c04865afdc758d28c0cf40bd095117 datapathConfiguration="&{false false false false false }" interface=lxc8bb8cb90eec7 k8sPodName=openstack/keystone-db-init-298xx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a9fa8f4e23 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2950 ipv4=10.0.0.183 ipv6= k8sPodName=openstack/keystone-db-init-298xx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a9fa8f4e23 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2950 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=36aed46d-01a1-4ce8-9e06-e04bb710f99c,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=36aed46d-01a1-4ce8-9e06-e04bb710f99c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.183 ipv6= k8sPodName=openstack/keystone-db-init-298xx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=36aed46d-01a1-4ce8-9e06-e04bb710f99c;k8s:batch.kubernetes.io/job-name=keystone-db-init;k8s:component=db-init;k8s:controller-uid=36aed46d-01a1-4ce8-9e06-e04bb710f99c;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a9fa8f4e23 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2950 identity=15460 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=36aed46d-01a1-4ce8-9e06-e04bb710f99c,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=36aed46d-01a1-4ce8-9e06-e04bb710f99c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.183 ipv6= k8sPodName=openstack/keystone-db-init-298xx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a9fa8f4e23 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2950 identity=15460 ipv4=10.0.0.183 ipv6= k8sPodName=openstack/keystone-db-init-298xx subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a9fa8f4e23 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2950 identity=15460 ipv4=10.0.0.183 ipv6= k8sPodName=openstack/keystone-db-init-298xx subsys=endpoint level=info msg="Successful endpoint creation" containerID=a9fa8f4e23 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2950 identity=15460 ipv4=10.0.0.183 ipv6= k8sPodName=openstack/keystone-db-init-298xx subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=a9fa8f4e23 endpointID=2950 k8sNamespace=openstack k8sPodName=keystone-db-init-298xx subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=36aed46d-01a1-4ce8-9e06-e04bb710f99c k8s:batch.kubernetes.io/job-name=keystone-db-init k8s:component=db-init k8s:controller-uid=36aed46d-01a1-4ce8-9e06-e04bb710f99c k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=a9fa8f4e23 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2950 identity=15460 ipv4=10.0.0.183 ipv6= k8sPodName=openstack/keystone-db-init-298xx subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.46 51c5619b-d6a8-4e0c-934c-1403ac0eb17f default }" containerID=26ed002b4c5eee713f053d3c959468fe4d099c7a6ec4753dd93f882033705bdd datapathConfiguration="&{false false false false false }" interface=lxcbc447fdf12c4 k8sPodName=openstack/keystone-fernet-setup-qjwwn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=26ed002b4c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1541 ipv4=10.0.0.46 ipv6= k8sPodName=openstack/keystone-fernet-setup-qjwwn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=26ed002b4c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1541 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=6150abea-9360-4302-82a2-c2abd0f18553,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=6150abea-9360-4302-82a2-c2abd0f18553,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.46 ipv6= k8sPodName=openstack/keystone-fernet-setup-qjwwn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=26ed002b4c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1541 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.46 ipv6= k8sPodName=openstack/keystone-fernet-setup-qjwwn line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=6150abea-9360-4302-82a2-c2abd0f18553;k8s:batch.kubernetes.io/job-name=keystone-fernet-setup;k8s:component=fernet-setup;k8s:controller-uid=6150abea-9360-4302-82a2-c2abd0f18553;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-fernet-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=26ed002b4c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1541 identity=56241 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=6150abea-9360-4302-82a2-c2abd0f18553,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=6150abea-9360-4302-82a2-c2abd0f18553,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.46 ipv6= k8sPodName=openstack/keystone-fernet-setup-qjwwn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=26ed002b4c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1541 identity=56241 ipv4=10.0.0.46 ipv6= k8sPodName=openstack/keystone-fernet-setup-qjwwn subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=26ed002b4c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1541 identity=56241 ipv4=10.0.0.46 ipv6= k8sPodName=openstack/keystone-fernet-setup-qjwwn subsys=endpoint level=info msg="Successful endpoint creation" containerID=26ed002b4c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1541 identity=56241 ipv4=10.0.0.46 ipv6= k8sPodName=openstack/keystone-fernet-setup-qjwwn subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=26ed002b4c endpointID=1541 k8sNamespace=openstack k8sPodName=keystone-fernet-setup-qjwwn subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=6150abea-9360-4302-82a2-c2abd0f18553 k8s:batch.kubernetes.io/job-name=keystone-fernet-setup k8s:component=fernet-setup k8s:controller-uid=6150abea-9360-4302-82a2-c2abd0f18553 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-fernet-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=26ed002b4c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1541 identity=56241 ipv4=10.0.0.46 ipv6= k8sPodName=openstack/keystone-fernet-setup-qjwwn subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.48 93cca2ca-fd2f-4102-8994-0d59f984d922 default }" containerID=9e04d43b538caef2ee7ebc490df303ee43be91b4e0ce7c7e90be46aa6b06536d datapathConfiguration="&{false false false false false }" interface=lxc04a714c20b81 k8sPodName=openstack/keystone-db-sync-9vzp5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9e04d43b53 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2330 ipv4=10.0.0.48 ipv6= k8sPodName=openstack/keystone-db-sync-9vzp5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9e04d43b53 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2330 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=5435312d-b73c-4953-9466-c33bc7866e0a,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=5435312d-b73c-4953-9466-c33bc7866e0a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.48 ipv6= k8sPodName=openstack/keystone-db-sync-9vzp5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=5435312d-b73c-4953-9466-c33bc7866e0a;k8s:batch.kubernetes.io/job-name=keystone-db-sync;k8s:component=db-sync;k8s:controller-uid=5435312d-b73c-4953-9466-c33bc7866e0a;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-sync;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9e04d43b53 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2330 identity=11077 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=5435312d-b73c-4953-9466-c33bc7866e0a,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=5435312d-b73c-4953-9466-c33bc7866e0a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.48 ipv6= k8sPodName=openstack/keystone-db-sync-9vzp5 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=9e04d43b53 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2330 identity=11077 ipv4=10.0.0.48 ipv6= k8sPodName=openstack/keystone-db-sync-9vzp5 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9e04d43b53 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2330 identity=11077 ipv4=10.0.0.48 ipv6= k8sPodName=openstack/keystone-db-sync-9vzp5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=9e04d43b53 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2330 identity=11077 ipv4=10.0.0.48 ipv6= k8sPodName=openstack/keystone-db-sync-9vzp5 subsys=daemon level=info msg="Delete endpoint request" containerID=9e04d43b53 endpointID=2330 k8sNamespace=openstack k8sPodName=keystone-db-sync-9vzp5 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=5435312d-b73c-4953-9466-c33bc7866e0a k8s:batch.kubernetes.io/job-name=keystone-db-sync k8s:component=db-sync k8s:controller-uid=5435312d-b73c-4953-9466-c33bc7866e0a k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-sync k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=9e04d43b53 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2330 identity=11077 ipv4=10.0.0.48 ipv6= k8sPodName=openstack/keystone-db-sync-9vzp5 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.151 9b7d3c82-e993-43c7-81ab-ad915550ecd6 default }" containerID=066b6978b66727a7e1ad56b825e3ae135a5e18f890535b290a98d18c7bb961eb datapathConfiguration="&{false false false false false }" interface=lxcc40f8ff80b2a k8sPodName=openstack/keystone-rabbit-init-cpt2j labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=066b6978b6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2005 ipv4=10.0.0.151 ipv6= k8sPodName=openstack/keystone-rabbit-init-cpt2j subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=066b6978b6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2005 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=da5c6928-f1e6-4fa5-9c97-5032510901e3,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=da5c6928-f1e6-4fa5-9c97-5032510901e3,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.151 ipv6= k8sPodName=openstack/keystone-rabbit-init-cpt2j subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=da5c6928-f1e6-4fa5-9c97-5032510901e3;k8s:batch.kubernetes.io/job-name=keystone-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=da5c6928-f1e6-4fa5-9c97-5032510901e3;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-rabbit-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=066b6978b6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2005 identity=60682 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=da5c6928-f1e6-4fa5-9c97-5032510901e3,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=da5c6928-f1e6-4fa5-9c97-5032510901e3,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.151 ipv6= k8sPodName=openstack/keystone-rabbit-init-cpt2j oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=066b6978b6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2005 identity=60682 ipv4=10.0.0.151 ipv6= k8sPodName=openstack/keystone-rabbit-init-cpt2j subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=066b6978b6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2005 identity=60682 ipv4=10.0.0.151 ipv6= k8sPodName=openstack/keystone-rabbit-init-cpt2j subsys=endpoint level=info msg="Successful endpoint creation" containerID=066b6978b6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2005 identity=60682 ipv4=10.0.0.151 ipv6= k8sPodName=openstack/keystone-rabbit-init-cpt2j subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=066b6978b6 endpointID=2005 k8sNamespace=openstack k8sPodName=keystone-rabbit-init-cpt2j subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=da5c6928-f1e6-4fa5-9c97-5032510901e3 k8s:batch.kubernetes.io/job-name=keystone-rabbit-init k8s:component=rabbit-init k8s:controller-uid=da5c6928-f1e6-4fa5-9c97-5032510901e3 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-rabbit-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=066b6978b6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2005 identity=60682 ipv4=10.0.0.151 ipv6= k8sPodName=openstack/keystone-rabbit-init-cpt2j subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.128 0a6cd83a-4450-4ee4-8c69-c5c674df24fb default }" containerID=fdbcfa95317f565eef71b0291a04138b91bd5285616e2a5e5e34f10193caad3c datapathConfiguration="&{false false false false false }" interface=lxc9e2e7d12e50e k8sPodName=openstack/keystone-domain-manage-579jp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fdbcfa9531 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2496 ipv4=10.0.0.128 ipv6= k8sPodName=openstack/keystone-domain-manage-579jp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fdbcfa9531 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2496 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=c92bb942-fc87-4591-b879-7826a756e121,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=c92bb942-fc87-4591-b879-7826a756e121,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.128 ipv6= k8sPodName=openstack/keystone-domain-manage-579jp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=c92bb942-fc87-4591-b879-7826a756e121;k8s:batch.kubernetes.io/job-name=keystone-domain-manage;k8s:component=domain-manage;k8s:controller-uid=c92bb942-fc87-4591-b879-7826a756e121;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-domain-manage;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fdbcfa9531 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2496 identity=16200 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=c92bb942-fc87-4591-b879-7826a756e121,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=c92bb942-fc87-4591-b879-7826a756e121,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.128 ipv6= k8sPodName=openstack/keystone-domain-manage-579jp oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=fdbcfa9531 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2496 identity=16200 ipv4=10.0.0.128 ipv6= k8sPodName=openstack/keystone-domain-manage-579jp subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=fdbcfa9531 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2496 identity=16200 ipv4=10.0.0.128 ipv6= k8sPodName=openstack/keystone-domain-manage-579jp subsys=endpoint level=info msg="Successful endpoint creation" containerID=fdbcfa9531 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2496 identity=16200 ipv4=10.0.0.128 ipv6= k8sPodName=openstack/keystone-domain-manage-579jp subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=fdbcfa9531 endpointID=2496 k8sNamespace=openstack k8sPodName=keystone-domain-manage-579jp subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=c92bb942-fc87-4591-b879-7826a756e121 k8s:batch.kubernetes.io/job-name=keystone-domain-manage k8s:component=domain-manage k8s:controller-uid=c92bb942-fc87-4591-b879-7826a756e121 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-domain-manage k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=fdbcfa9531 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2496 identity=16200 ipv4=10.0.0.128 ipv6= k8sPodName=openstack/keystone-domain-manage-579jp subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.159 1834bb8e-2aa4-482e-aa9d-c396d2cc026d default }" containerID=4f623d9f3008b708a29cf29538e7f64b60b96f9932f0b68263653784b00d8605 datapathConfiguration="&{false false false false false }" interface=lxcade1981f381c k8sPodName=openstack/keystone-bootstrap-m2xt6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4f623d9f30 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=351 ipv4=10.0.0.159 ipv6= k8sPodName=openstack/keystone-bootstrap-m2xt6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4f623d9f30 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=351 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=1a01cb0d-0354-41b9-a2d7-33c28e5c0cb8,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=1a01cb0d-0354-41b9-a2d7-33c28e5c0cb8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.159 ipv6= k8sPodName=openstack/keystone-bootstrap-m2xt6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=4f623d9f30 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=351 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.159 ipv6= k8sPodName=openstack/keystone-bootstrap-m2xt6 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=1a01cb0d-0354-41b9-a2d7-33c28e5c0cb8;k8s:batch.kubernetes.io/job-name=keystone-bootstrap;k8s:component=bootstrap;k8s:controller-uid=1a01cb0d-0354-41b9-a2d7-33c28e5c0cb8;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-bootstrap;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4f623d9f30 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=351 identity=2780 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=1a01cb0d-0354-41b9-a2d7-33c28e5c0cb8,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=1a01cb0d-0354-41b9-a2d7-33c28e5c0cb8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.159 ipv6= k8sPodName=openstack/keystone-bootstrap-m2xt6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4f623d9f30 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=351 identity=2780 ipv4=10.0.0.159 ipv6= k8sPodName=openstack/keystone-bootstrap-m2xt6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4f623d9f30 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=351 identity=2780 ipv4=10.0.0.159 ipv6= k8sPodName=openstack/keystone-bootstrap-m2xt6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=4f623d9f30 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=351 identity=2780 ipv4=10.0.0.159 ipv6= k8sPodName=openstack/keystone-bootstrap-m2xt6 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=4f623d9f30 endpointID=351 k8sNamespace=openstack k8sPodName=keystone-bootstrap-m2xt6 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=1a01cb0d-0354-41b9-a2d7-33c28e5c0cb8 k8s:batch.kubernetes.io/job-name=keystone-bootstrap k8s:component=bootstrap k8s:controller-uid=1a01cb0d-0354-41b9-a2d7-33c28e5c0cb8 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-bootstrap k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=4f623d9f30 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=351 identity=2780 ipv4=10.0.0.159 ipv6= k8sPodName=openstack/keystone-bootstrap-m2xt6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.252 4243e5f0-274c-46cd-af8a-e7fcff185de5 default }" containerID=7b941156b464f8617de7ae27f6e3242453ac3754912b8f2f30f6eead00b01b91 datapathConfiguration="&{false false false false false }" interface=lxc82a4dc61d92f k8sPodName=local-path-storage/helper-pod-create-pvc-2e376894-8a41-4eb5-bc3c-a6e05df6a618 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7b941156b4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2338 ipv4=10.0.0.252 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2e376894-8a41-4eb5-bc3c-a6e05df6a618 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7b941156b4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2338 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.252 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2e376894-8a41-4eb5-bc3c-a6e05df6a618 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7b941156b4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2338 identity=32209 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.252 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2e376894-8a41-4eb5-bc3c-a6e05df6a618 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7b941156b4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2338 identity=32209 ipv4=10.0.0.252 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2e376894-8a41-4eb5-bc3c-a6e05df6a618 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7b941156b4 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2338 identity=32209 ipv4=10.0.0.252 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2e376894-8a41-4eb5-bc3c-a6e05df6a618 subsys=endpoint level=info msg="Successful endpoint creation" containerID=7b941156b4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2338 identity=32209 ipv4=10.0.0.252 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2e376894-8a41-4eb5-bc3c-a6e05df6a618 subsys=daemon level=info msg="Delete endpoint request" containerID=7b941156b4 endpointID=2338 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-2e376894-8a41-4eb5-bc3c-a6e05df6a618 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=7b941156b4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2338 identity=32209 ipv4=10.0.0.252 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2e376894-8a41-4eb5-bc3c-a6e05df6a618 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.26 87f8542a-ef8a-4e94-a160-2f08a31e9dd7 default }" containerID=017cee24828df6973aeab7df5bda27a03ed7f2a2ab976831e7cc22c367b50496 datapathConfiguration="&{false false false false false }" interface=lxcc4eb455f79de k8sPodName=openstack/rabbitmq-barbican-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=017cee2482 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1908 ipv4=10.0.0.26 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=017cee2482 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1908 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.26 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-barbican;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=017cee2482 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1908 identity=1343 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.26 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=017cee2482 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1908 identity=1343 ipv4=10.0.0.26 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=017cee2482 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1908 identity=1343 ipv4=10.0.0.26 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=017cee2482 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1908 identity=1343 ipv4=10.0.0.26 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.142 e401620b-fcc4-4747-8bda-a5d1481893db default }" containerID=4be8c1ac69d071f4a1e389912c43bedd6c798e8d5ba812de3b5f23f1d9bbd932 datapathConfiguration="&{false false false false false }" interface=lxc32280d039fb2 k8sPodName=openstack/barbican-api-7dccbc7d66-zspzn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4be8c1ac69 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3329 ipv4=10.0.0.142 ipv6= k8sPodName=openstack/barbican-api-7dccbc7d66-zspzn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4be8c1ac69 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3329 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.142 ipv6= k8sPodName=openstack/barbican-api-7dccbc7d66-zspzn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=4be8c1ac69 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3329 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.142 ipv6= k8sPodName=openstack/barbican-api-7dccbc7d66-zspzn line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4be8c1ac69 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3329 identity=29951 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.142 ipv6= k8sPodName=openstack/barbican-api-7dccbc7d66-zspzn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4be8c1ac69 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3329 identity=29951 ipv4=10.0.0.142 ipv6= k8sPodName=openstack/barbican-api-7dccbc7d66-zspzn subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.253 4281dee4-a831-4267-95fa-ffbbc269f203 default }" containerID=573bc0b3594685d5fc6f0a1d5a75fb91c748416fa36c1b284c8717893e4baf1e datapathConfiguration="&{false false false false false }" interface=lxc8b90f23cbee2 k8sPodName=openstack/barbican-db-init-nd5c5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=573bc0b359 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=166 ipv4=10.0.0.253 ipv6= k8sPodName=openstack/barbican-db-init-nd5c5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=573bc0b359 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=166 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=88e44bda-4538-42e6-8df4-5d9513371db2,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=88e44bda-4538-42e6-8df4-5d9513371db2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.253 ipv6= k8sPodName=openstack/barbican-db-init-nd5c5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=88e44bda-4538-42e6-8df4-5d9513371db2;k8s:batch.kubernetes.io/job-name=barbican-db-init;k8s:component=db-init;k8s:controller-uid=88e44bda-4538-42e6-8df4-5d9513371db2;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=573bc0b359 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=166 identity=6627 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=88e44bda-4538-42e6-8df4-5d9513371db2,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=88e44bda-4538-42e6-8df4-5d9513371db2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.253 ipv6= k8sPodName=openstack/barbican-db-init-nd5c5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=573bc0b359 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=166 identity=6627 ipv4=10.0.0.253 ipv6= k8sPodName=openstack/barbican-db-init-nd5c5 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4be8c1ac69 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3329 identity=29951 ipv4=10.0.0.142 ipv6= k8sPodName=openstack/barbican-api-7dccbc7d66-zspzn subsys=endpoint level=info msg="Successful endpoint creation" containerID=4be8c1ac69 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3329 identity=29951 ipv4=10.0.0.142 ipv6= k8sPodName=openstack/barbican-api-7dccbc7d66-zspzn subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=573bc0b359 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=166 identity=6627 ipv4=10.0.0.253 ipv6= k8sPodName=openstack/barbican-db-init-nd5c5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=573bc0b359 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=166 identity=6627 ipv4=10.0.0.253 ipv6= k8sPodName=openstack/barbican-db-init-nd5c5 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=573bc0b359 endpointID=166 k8sNamespace=openstack k8sPodName=barbican-db-init-nd5c5 subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=88e44bda-4538-42e6-8df4-5d9513371db2 k8s:batch.kubernetes.io/job-name=barbican-db-init k8s:component=db-init k8s:controller-uid=88e44bda-4538-42e6-8df4-5d9513371db2 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=573bc0b359 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=166 identity=6627 ipv4=10.0.0.253 ipv6= k8sPodName=openstack/barbican-db-init-nd5c5 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.235 6aadd6de-1d59-4f55-86fb-fa62df4d1568 default }" containerID=deb292562e644a0ff0475f919b55a16e09ef23592acd73213f935e0120faa933 datapathConfiguration="&{false false false false false }" interface=lxceae83bd00fa2 k8sPodName=openstack/barbican-db-sync-jgtw4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=deb292562e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3301 ipv4=10.0.0.235 ipv6= k8sPodName=openstack/barbican-db-sync-jgtw4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=deb292562e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3301 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=fe54053f-165c-41f8-9846-0f5611b72c95,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=fe54053f-165c-41f8-9846-0f5611b72c95,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.235 ipv6= k8sPodName=openstack/barbican-db-sync-jgtw4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=fe54053f-165c-41f8-9846-0f5611b72c95;k8s:batch.kubernetes.io/job-name=barbican-db-sync;k8s:component=db-sync;k8s:controller-uid=fe54053f-165c-41f8-9846-0f5611b72c95;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-sync;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=deb292562e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3301 identity=54279 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=fe54053f-165c-41f8-9846-0f5611b72c95,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=fe54053f-165c-41f8-9846-0f5611b72c95,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.235 ipv6= k8sPodName=openstack/barbican-db-sync-jgtw4 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=deb292562e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3301 identity=54279 ipv4=10.0.0.235 ipv6= k8sPodName=openstack/barbican-db-sync-jgtw4 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=deb292562e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3301 identity=54279 ipv4=10.0.0.235 ipv6= k8sPodName=openstack/barbican-db-sync-jgtw4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=deb292562e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3301 identity=54279 ipv4=10.0.0.235 ipv6= k8sPodName=openstack/barbican-db-sync-jgtw4 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.035876608005194315 newInterval=11m15s subsys=map-ct level=info msg="Delete endpoint request" containerID=deb292562e endpointID=3301 k8sNamespace=openstack k8sPodName=barbican-db-sync-jgtw4 subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=fe54053f-165c-41f8-9846-0f5611b72c95 k8s:batch.kubernetes.io/job-name=barbican-db-sync k8s:component=db-sync k8s:controller-uid=fe54053f-165c-41f8-9846-0f5611b72c95 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-sync k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=deb292562e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3301 identity=54279 ipv4=10.0.0.235 ipv6= k8sPodName=openstack/barbican-db-sync-jgtw4 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.111 c8aecaaf-e475-485b-8957-fb3263a9eb05 default }" containerID=42dcb705fd1fdc2b8ed076ce77ac94e93842326c0e3d20175d5ceb5794c2db70 datapathConfiguration="&{false false false false false }" interface=lxc7459f78e788e k8sPodName=openstack/barbican-rabbit-init-ksc8h labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=42dcb705fd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=950 ipv4=10.0.0.111 ipv6= k8sPodName=openstack/barbican-rabbit-init-ksc8h subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=42dcb705fd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=950 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=500dfcf4-40ac-4b9c-b425-0895cc2ad3e9,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=500dfcf4-40ac-4b9c-b425-0895cc2ad3e9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.111 ipv6= k8sPodName=openstack/barbican-rabbit-init-ksc8h subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=500dfcf4-40ac-4b9c-b425-0895cc2ad3e9;k8s:batch.kubernetes.io/job-name=barbican-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=500dfcf4-40ac-4b9c-b425-0895cc2ad3e9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-rabbit-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=42dcb705fd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=950 identity=848 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=500dfcf4-40ac-4b9c-b425-0895cc2ad3e9,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=500dfcf4-40ac-4b9c-b425-0895cc2ad3e9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.111 ipv6= k8sPodName=openstack/barbican-rabbit-init-ksc8h oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=42dcb705fd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=950 identity=848 ipv4=10.0.0.111 ipv6= k8sPodName=openstack/barbican-rabbit-init-ksc8h subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=42dcb705fd datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=950 identity=848 ipv4=10.0.0.111 ipv6= k8sPodName=openstack/barbican-rabbit-init-ksc8h subsys=endpoint level=info msg="Successful endpoint creation" containerID=42dcb705fd datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=950 identity=848 ipv4=10.0.0.111 ipv6= k8sPodName=openstack/barbican-rabbit-init-ksc8h subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=42dcb705fd endpointID=950 k8sNamespace=openstack k8sPodName=barbican-rabbit-init-ksc8h subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=500dfcf4-40ac-4b9c-b425-0895cc2ad3e9 k8s:batch.kubernetes.io/job-name=barbican-rabbit-init k8s:component=rabbit-init k8s:controller-uid=500dfcf4-40ac-4b9c-b425-0895cc2ad3e9 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-rabbit-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=42dcb705fd datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=950 identity=848 ipv4=10.0.0.111 ipv6= k8sPodName=openstack/barbican-rabbit-init-ksc8h subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.68 38b66131-4ca0-4639-94c5-b30c84b3873a default }" containerID=e6a5fe8be9d7db402cbd81030919a2ef14a4b96c6cf91c9181f489d889535943 datapathConfiguration="&{false false false false false }" interface=lxc85717b91d0b7 k8sPodName=openstack/barbican-ks-service-7ml4q labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e6a5fe8be9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2954 ipv4=10.0.0.68 ipv6= k8sPodName=openstack/barbican-ks-service-7ml4q subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e6a5fe8be9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2954 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=490fe113-0cd9-41cc-b8ae-8d13ea6cff21,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=490fe113-0cd9-41cc-b8ae-8d13ea6cff21,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.68 ipv6= k8sPodName=openstack/barbican-ks-service-7ml4q subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=490fe113-0cd9-41cc-b8ae-8d13ea6cff21;k8s:batch.kubernetes.io/job-name=barbican-ks-service;k8s:component=ks-service;k8s:controller-uid=490fe113-0cd9-41cc-b8ae-8d13ea6cff21;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-service;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e6a5fe8be9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2954 identity=674 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=490fe113-0cd9-41cc-b8ae-8d13ea6cff21,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=490fe113-0cd9-41cc-b8ae-8d13ea6cff21,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.68 ipv6= k8sPodName=openstack/barbican-ks-service-7ml4q oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e6a5fe8be9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2954 identity=674 ipv4=10.0.0.68 ipv6= k8sPodName=openstack/barbican-ks-service-7ml4q subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=e6a5fe8be9 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2954 identity=674 ipv4=10.0.0.68 ipv6= k8sPodName=openstack/barbican-ks-service-7ml4q subsys=endpoint level=info msg="Successful endpoint creation" containerID=e6a5fe8be9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2954 identity=674 ipv4=10.0.0.68 ipv6= k8sPodName=openstack/barbican-ks-service-7ml4q subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=e6a5fe8be9 endpointID=2954 k8sNamespace=openstack k8sPodName=barbican-ks-service-7ml4q subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=490fe113-0cd9-41cc-b8ae-8d13ea6cff21 k8s:batch.kubernetes.io/job-name=barbican-ks-service k8s:component=ks-service k8s:controller-uid=490fe113-0cd9-41cc-b8ae-8d13ea6cff21 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-service k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=e6a5fe8be9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2954 identity=674 ipv4=10.0.0.68 ipv6= k8sPodName=openstack/barbican-ks-service-7ml4q subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.33 ea91324e-a143-4914-b022-8b8e67dc0726 default }" containerID=0bdd5501b34f3d4f11f74b3d2d94a7c409b99ed30a4f5cd9cd5d403346883deb datapathConfiguration="&{false false false false false }" interface=lxca33e75b25243 k8sPodName=openstack/barbican-ks-endpoints-vfkmz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0bdd5501b3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1176 ipv4=10.0.0.33 ipv6= k8sPodName=openstack/barbican-ks-endpoints-vfkmz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0bdd5501b3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1176 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=28eddaba-13eb-491f-adb5-d6f9fd8727ed,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=28eddaba-13eb-491f-adb5-d6f9fd8727ed,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.33 ipv6= k8sPodName=openstack/barbican-ks-endpoints-vfkmz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=28eddaba-13eb-491f-adb5-d6f9fd8727ed;k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=28eddaba-13eb-491f-adb5-d6f9fd8727ed;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-endpoints;k8s:release_group=barbican;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=0bdd5501b3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1176 identity=10072 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=28eddaba-13eb-491f-adb5-d6f9fd8727ed,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=28eddaba-13eb-491f-adb5-d6f9fd8727ed,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.33 ipv6= k8sPodName=openstack/barbican-ks-endpoints-vfkmz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0bdd5501b3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1176 identity=10072 ipv4=10.0.0.33 ipv6= k8sPodName=openstack/barbican-ks-endpoints-vfkmz subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0bdd5501b3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1176 identity=10072 ipv4=10.0.0.33 ipv6= k8sPodName=openstack/barbican-ks-endpoints-vfkmz subsys=endpoint level=info msg="Successful endpoint creation" containerID=0bdd5501b3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1176 identity=10072 ipv4=10.0.0.33 ipv6= k8sPodName=openstack/barbican-ks-endpoints-vfkmz subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=0bdd5501b3 endpointID=1176 k8sNamespace=openstack k8sPodName=barbican-ks-endpoints-vfkmz subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=28eddaba-13eb-491f-adb5-d6f9fd8727ed k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=28eddaba-13eb-491f-adb5-d6f9fd8727ed k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-endpoints k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=0bdd5501b3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1176 identity=10072 ipv4=10.0.0.33 ipv6= k8sPodName=openstack/barbican-ks-endpoints-vfkmz subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.156 61a24e77-2fd4-486b-863c-eb6a4b375d99 default }" containerID=937728b3d9d64db2f96650a319c04b948b1b69ca053d5d7f4155c9ff4a45fd65 datapathConfiguration="&{false false false false false }" interface=lxc97055e77380c k8sPodName=openstack/barbican-ks-user-4bs45 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=937728b3d9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1910 ipv4=10.0.0.156 ipv6= k8sPodName=openstack/barbican-ks-user-4bs45 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=937728b3d9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1910 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=40895d78-d43d-4027-b70a-59828a4c7680,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=40895d78-d43d-4027-b70a-59828a4c7680,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.156 ipv6= k8sPodName=openstack/barbican-ks-user-4bs45 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=40895d78-d43d-4027-b70a-59828a4c7680;k8s:batch.kubernetes.io/job-name=barbican-ks-user;k8s:component=ks-user;k8s:controller-uid=40895d78-d43d-4027-b70a-59828a4c7680;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-user;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=937728b3d9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1910 identity=18786 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=40895d78-d43d-4027-b70a-59828a4c7680,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=40895d78-d43d-4027-b70a-59828a4c7680,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.156 ipv6= k8sPodName=openstack/barbican-ks-user-4bs45 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=937728b3d9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1910 identity=18786 ipv4=10.0.0.156 ipv6= k8sPodName=openstack/barbican-ks-user-4bs45 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=937728b3d9 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1910 identity=18786 ipv4=10.0.0.156 ipv6= k8sPodName=openstack/barbican-ks-user-4bs45 subsys=endpoint level=info msg="Successful endpoint creation" containerID=937728b3d9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1910 identity=18786 ipv4=10.0.0.156 ipv6= k8sPodName=openstack/barbican-ks-user-4bs45 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=937728b3d9 endpointID=1910 k8sNamespace=openstack k8sPodName=barbican-ks-user-4bs45 subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=40895d78-d43d-4027-b70a-59828a4c7680 k8s:batch.kubernetes.io/job-name=barbican-ks-user k8s:component=ks-user k8s:controller-uid=40895d78-d43d-4027-b70a-59828a4c7680 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-user k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=937728b3d9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1910 identity=18786 ipv4=10.0.0.156 ipv6= k8sPodName=openstack/barbican-ks-user-4bs45 subsys=endpoint level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Create endpoint request" addressing="&{10.0.0.242 8fb35f51-741c-4e94-a3b5-e205f283cb1f default }" containerID=27e345136339507258af44cbec3a743c906f782f4d7f672ac44eca323c420760 datapathConfiguration="&{false false false false false }" interface=lxcc07b1859dc8a k8sPodName=rook-ceph/rook-ceph-operator-7b66cfb94c-5r28f labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=27e3451363 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=903 ipv4=10.0.0.242 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-7b66cfb94c-5r28f subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=27e3451363 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=903 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.14.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.242 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-7b66cfb94c-5r28f subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:rook-ceph k8s:io.cilium.k8s.namespace.labels.name:rook-ceph]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app=rook-ceph-operator;k8s:helm.sh/chart=rook-ceph-v1.14.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph;k8s:io.cilium.k8s.namespace.labels.name=rook-ceph;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system;k8s:io.kubernetes.pod.namespace=rook-ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=27e3451363 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=903 identity=16418 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.14.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.242 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-7b66cfb94c-5r28f oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=27e3451363 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=903 identity=16418 ipv4=10.0.0.242 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-7b66cfb94c-5r28f subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=27e3451363 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=903 identity=16418 ipv4=10.0.0.242 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-7b66cfb94c-5r28f subsys=endpoint level=info msg="Successful endpoint creation" containerID=27e3451363 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=903 identity=16418 ipv4=10.0.0.242 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-7b66cfb94c-5r28f subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.191 7e814e28-a76c-4b6f-a29d-cef3fb47ccec default }" containerID=408d15c036ab3c161150bebfc9f26907c30bc99221623b04f40b352955059621 datapathConfiguration="&{false false false false false }" interface=lxc2d7855aecf90 k8sPodName=openstack/rook-ceph-detect-version-dz9lz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=408d15c036 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1415 ipv4=10.0.0.191 ipv6= k8sPodName=openstack/rook-ceph-detect-version-dz9lz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=408d15c036 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1415 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=3e3c7e6c-0c2b-4cb8-8711-0d265d5b4a1b,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=3e3c7e6c-0c2b-4cb8-8711-0d265d5b4a1b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.14.5" ipv4=10.0.0.191 ipv6= k8sPodName=openstack/rook-ceph-detect-version-dz9lz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=408d15c036 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1415 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.191 ipv6= k8sPodName=openstack/rook-ceph-detect-version-dz9lz line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=rook-ceph-detect-version;k8s:batch.kubernetes.io/controller-uid=3e3c7e6c-0c2b-4cb8-8711-0d265d5b4a1b;k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version;k8s:controller-uid=3e3c7e6c-0c2b-4cb8-8711-0d265d5b4a1b;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=rook-ceph-detect-version;k8s:rook-version=v1.14.5;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=408d15c036 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1415 identity=8878 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=3e3c7e6c-0c2b-4cb8-8711-0d265d5b4a1b,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=3e3c7e6c-0c2b-4cb8-8711-0d265d5b4a1b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.14.5" ipv4=10.0.0.191 ipv6= k8sPodName=openstack/rook-ceph-detect-version-dz9lz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=408d15c036 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1415 identity=8878 ipv4=10.0.0.191 ipv6= k8sPodName=openstack/rook-ceph-detect-version-dz9lz subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=408d15c036 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1415 identity=8878 ipv4=10.0.0.191 ipv6= k8sPodName=openstack/rook-ceph-detect-version-dz9lz subsys=endpoint level=info msg="Successful endpoint creation" containerID=408d15c036 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1415 identity=8878 ipv4=10.0.0.191 ipv6= k8sPodName=openstack/rook-ceph-detect-version-dz9lz subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=408d15c036 endpointID=1415 k8sNamespace=openstack k8sPodName=rook-ceph-detect-version-dz9lz subsys=daemon level=info msg="Releasing key" key="[k8s:app=rook-ceph-detect-version k8s:batch.kubernetes.io/controller-uid=3e3c7e6c-0c2b-4cb8-8711-0d265d5b4a1b k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version k8s:controller-uid=3e3c7e6c-0c2b-4cb8-8711-0d265d5b4a1b k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=rook-ceph-detect-version k8s:rook-version=v1.14.5]" subsys=allocator level=info msg="Removed endpoint" containerID=408d15c036 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1415 identity=8878 ipv4=10.0.0.191 ipv6= k8sPodName=openstack/rook-ceph-detect-version-dz9lz subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.45 b1bbde1a-b4d7-4478-9b2b-fae56af2968f default }" containerID=5758282a215f6c27b871bc608bda854913edc446ca54b472a8cf12e46a8e604c datapathConfiguration="&{false false false false false }" interface=lxc7baa94a835dd k8sPodName=openstack/ceph-object-controller-detect-version-vqvzk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5758282a21 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2005 ipv4=10.0.0.45 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-vqvzk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5758282a21 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2005 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=72b778cf-ac49-4d2c-8d17-915b65204934,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=72b778cf-ac49-4d2c-8d17-915b65204934,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.14.5" ipv4=10.0.0.45 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-vqvzk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=5758282a21 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2005 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.45 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-vqvzk line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=ceph-object-controller-detect-version;k8s:batch.kubernetes.io/controller-uid=72b778cf-ac49-4d2c-8d17-915b65204934;k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version;k8s:controller-uid=72b778cf-ac49-4d2c-8d17-915b65204934;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=ceph-object-controller-detect-version;k8s:rook-version=v1.14.5;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5758282a21 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2005 identity=18550 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=72b778cf-ac49-4d2c-8d17-915b65204934,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=72b778cf-ac49-4d2c-8d17-915b65204934,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.14.5" ipv4=10.0.0.45 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-vqvzk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5758282a21 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2005 identity=18550 ipv4=10.0.0.45 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-vqvzk subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5758282a21 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2005 identity=18550 ipv4=10.0.0.45 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-vqvzk subsys=endpoint level=info msg="Successful endpoint creation" containerID=5758282a21 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2005 identity=18550 ipv4=10.0.0.45 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-vqvzk subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=5758282a21 endpointID=2005 k8sNamespace=openstack k8sPodName=ceph-object-controller-detect-version-vqvzk subsys=daemon level=info msg="Releasing key" key="[k8s:app=ceph-object-controller-detect-version k8s:batch.kubernetes.io/controller-uid=72b778cf-ac49-4d2c-8d17-915b65204934 k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version k8s:controller-uid=72b778cf-ac49-4d2c-8d17-915b65204934 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=ceph-object-controller-detect-version k8s:rook-version=v1.14.5]" subsys=allocator level=info msg="Removed endpoint" containerID=5758282a21 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2005 identity=18550 ipv4=10.0.0.45 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-vqvzk subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.100 8423f00d-02ef-4868-bc70-de605c4a76a7 default }" containerID=682ccc33f158fecfa66981f94bd5a15e85b7460f43b226a8f252dde72dfd33b0 datapathConfiguration="&{false false false false false }" interface=lxce53ba6b874b9 k8sPodName=local-path-storage/helper-pod-create-pvc-391c6650-8919-4fb8-857f-d47534371092 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=682ccc33f1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3940 ipv4=10.0.0.100 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-391c6650-8919-4fb8-857f-d47534371092 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=682ccc33f1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3940 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.100 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-391c6650-8919-4fb8-857f-d47534371092 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=682ccc33f1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3940 identity=32209 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.100 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-391c6650-8919-4fb8-857f-d47534371092 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=682ccc33f1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3940 identity=32209 ipv4=10.0.0.100 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-391c6650-8919-4fb8-857f-d47534371092 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=682ccc33f1 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3940 identity=32209 ipv4=10.0.0.100 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-391c6650-8919-4fb8-857f-d47534371092 subsys=endpoint level=info msg="Successful endpoint creation" containerID=682ccc33f1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3940 identity=32209 ipv4=10.0.0.100 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-391c6650-8919-4fb8-857f-d47534371092 subsys=daemon level=info msg="Delete endpoint request" containerID=682ccc33f1 endpointID=3940 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-391c6650-8919-4fb8-857f-d47534371092 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=682ccc33f1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3940 identity=32209 ipv4=10.0.0.100 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-391c6650-8919-4fb8-857f-d47534371092 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.42 b7894122-4aaf-4cf4-9be8-a53a67cdb101 default }" containerID=3676b421bc7b33a0124ffb883ff4c507c6600fcf392f8ec6e54133df837c6182 datapathConfiguration="&{false false false false false }" interface=lxc63620f53e521 k8sPodName=openstack/rabbitmq-glance-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3676b421bc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=634 ipv4=10.0.0.42 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3676b421bc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=634 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.42 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-glance;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=3676b421bc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=634 identity=3013 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.42 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3676b421bc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=634 identity=3013 ipv4=10.0.0.42 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3676b421bc datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=634 identity=3013 ipv4=10.0.0.42 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=3676b421bc datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=634 identity=3013 ipv4=10.0.0.42 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.211 44486fc4-8de3-49e6-949a-dc8957269552 default }" containerID=42e51912e12e71b4e21d0764bcd7560346afe6e9c7a77feea3c5f7bd2a28b57e datapathConfiguration="&{false false false false false }" interface=lxcc44d6fb06d85 k8sPodName=openstack/glance-db-init-jlc2h labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=42e51912e1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3526 ipv4=10.0.0.211 ipv6= k8sPodName=openstack/glance-db-init-jlc2h subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=42e51912e1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3526 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=340026a4-d7e4-4934-afb6-e37ec36bf9ea,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=340026a4-d7e4-4934-afb6-e37ec36bf9ea,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.211 ipv6= k8sPodName=openstack/glance-db-init-jlc2h subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=42e51912e1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3526 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.211 ipv6= k8sPodName=openstack/glance-db-init-jlc2h line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=340026a4-d7e4-4934-afb6-e37ec36bf9ea;k8s:batch.kubernetes.io/job-name=glance-db-init;k8s:component=db-init;k8s:controller-uid=340026a4-d7e4-4934-afb6-e37ec36bf9ea;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=42e51912e1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3526 identity=29180 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=340026a4-d7e4-4934-afb6-e37ec36bf9ea,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=340026a4-d7e4-4934-afb6-e37ec36bf9ea,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.211 ipv6= k8sPodName=openstack/glance-db-init-jlc2h oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=42e51912e1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3526 identity=29180 ipv4=10.0.0.211 ipv6= k8sPodName=openstack/glance-db-init-jlc2h subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=42e51912e1 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3526 identity=29180 ipv4=10.0.0.211 ipv6= k8sPodName=openstack/glance-db-init-jlc2h subsys=endpoint level=info msg="Successful endpoint creation" containerID=42e51912e1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3526 identity=29180 ipv4=10.0.0.211 ipv6= k8sPodName=openstack/glance-db-init-jlc2h subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=42e51912e1 endpointID=3526 k8sNamespace=openstack k8sPodName=glance-db-init-jlc2h subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=340026a4-d7e4-4934-afb6-e37ec36bf9ea k8s:batch.kubernetes.io/job-name=glance-db-init k8s:component=db-init k8s:controller-uid=340026a4-d7e4-4934-afb6-e37ec36bf9ea k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=42e51912e1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3526 identity=29180 ipv4=10.0.0.211 ipv6= k8sPodName=openstack/glance-db-init-jlc2h subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.61 f3be3388-9d4d-4808-bdf0-ab0ee583fc94 default }" containerID=dcac136526589ac124e939cc81594edf8a0be958f950005720d28ec20fc19603 datapathConfiguration="&{false false false false false }" interface=lxc5c2c889b9a27 k8sPodName=openstack/glance-db-sync-rx6tc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=dcac136526 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1316 ipv4=10.0.0.61 ipv6= k8sPodName=openstack/glance-db-sync-rx6tc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=dcac136526 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1316 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=52718538-16a4-41af-8878-724b7e6e1f04,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=52718538-16a4-41af-8878-724b7e6e1f04,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.61 ipv6= k8sPodName=openstack/glance-db-sync-rx6tc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=52718538-16a4-41af-8878-724b7e6e1f04;k8s:batch.kubernetes.io/job-name=glance-db-sync;k8s:component=db-sync;k8s:controller-uid=52718538-16a4-41af-8878-724b7e6e1f04;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-sync;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=dcac136526 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1316 identity=6438 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=52718538-16a4-41af-8878-724b7e6e1f04,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=52718538-16a4-41af-8878-724b7e6e1f04,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.61 ipv6= k8sPodName=openstack/glance-db-sync-rx6tc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=dcac136526 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1316 identity=6438 ipv4=10.0.0.61 ipv6= k8sPodName=openstack/glance-db-sync-rx6tc subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=dcac136526 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1316 identity=6438 ipv4=10.0.0.61 ipv6= k8sPodName=openstack/glance-db-sync-rx6tc subsys=endpoint level=info msg="Successful endpoint creation" containerID=dcac136526 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1316 identity=6438 ipv4=10.0.0.61 ipv6= k8sPodName=openstack/glance-db-sync-rx6tc subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=dcac136526 endpointID=1316 k8sNamespace=openstack k8sPodName=glance-db-sync-rx6tc subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=52718538-16a4-41af-8878-724b7e6e1f04 k8s:batch.kubernetes.io/job-name=glance-db-sync k8s:component=db-sync k8s:controller-uid=52718538-16a4-41af-8878-724b7e6e1f04 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-sync k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=dcac136526 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1316 identity=6438 ipv4=10.0.0.61 ipv6= k8sPodName=openstack/glance-db-sync-rx6tc subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.174 2550a4a9-16ef-4abc-b8f4-bb7e2fc56e68 default }" containerID=fb3717970ce595ee45eb5c0ee5ba1396237808992ebcfadaf993a70108265ee9 datapathConfiguration="&{false false false false false }" interface=lxc48ecd470e853 k8sPodName=openstack/glance-rabbit-init-fs9cp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fb3717970c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=792 ipv4=10.0.0.174 ipv6= k8sPodName=openstack/glance-rabbit-init-fs9cp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fb3717970c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=792 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=c9c374de-12ee-409c-ac58-744b9643e071,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=c9c374de-12ee-409c-ac58-744b9643e071,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.174 ipv6= k8sPodName=openstack/glance-rabbit-init-fs9cp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=c9c374de-12ee-409c-ac58-744b9643e071;k8s:batch.kubernetes.io/job-name=glance-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=c9c374de-12ee-409c-ac58-744b9643e071;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-rabbit-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fb3717970c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=792 identity=8940 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=c9c374de-12ee-409c-ac58-744b9643e071,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=c9c374de-12ee-409c-ac58-744b9643e071,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.174 ipv6= k8sPodName=openstack/glance-rabbit-init-fs9cp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fb3717970c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=792 identity=8940 ipv4=10.0.0.174 ipv6= k8sPodName=openstack/glance-rabbit-init-fs9cp subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=fb3717970c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=792 identity=8940 ipv4=10.0.0.174 ipv6= k8sPodName=openstack/glance-rabbit-init-fs9cp subsys=endpoint level=info msg="Successful endpoint creation" containerID=fb3717970c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=792 identity=8940 ipv4=10.0.0.174 ipv6= k8sPodName=openstack/glance-rabbit-init-fs9cp subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=fb3717970c endpointID=792 k8sNamespace=openstack k8sPodName=glance-rabbit-init-fs9cp subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=c9c374de-12ee-409c-ac58-744b9643e071 k8s:batch.kubernetes.io/job-name=glance-rabbit-init k8s:component=rabbit-init k8s:controller-uid=c9c374de-12ee-409c-ac58-744b9643e071 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-rabbit-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=fb3717970c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=792 identity=8940 ipv4=10.0.0.174 ipv6= k8sPodName=openstack/glance-rabbit-init-fs9cp subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.33 c5b1a3f2-90f2-4122-91a6-32e16b0948f9 default }" containerID=c58c19ec3bf11b253a236192c09f9804eeac42d564e59d0b590316557efd623c datapathConfiguration="&{false false false false false }" interface=lxcab429d56fb6d k8sPodName=openstack/glance-ks-service-96zhc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c58c19ec3b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2264 ipv4=10.0.0.33 ipv6= k8sPodName=openstack/glance-ks-service-96zhc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c58c19ec3b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2264 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=9b94d911-14ca-4b1a-b9aa-bc1254c2ebfa,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=9b94d911-14ca-4b1a-b9aa-bc1254c2ebfa,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.33 ipv6= k8sPodName=openstack/glance-ks-service-96zhc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=c58c19ec3b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2264 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.33 ipv6= k8sPodName=openstack/glance-ks-service-96zhc line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=9b94d911-14ca-4b1a-b9aa-bc1254c2ebfa;k8s:batch.kubernetes.io/job-name=glance-ks-service;k8s:component=ks-service;k8s:controller-uid=9b94d911-14ca-4b1a-b9aa-bc1254c2ebfa;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-service;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c58c19ec3b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2264 identity=445 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=9b94d911-14ca-4b1a-b9aa-bc1254c2ebfa,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=9b94d911-14ca-4b1a-b9aa-bc1254c2ebfa,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.33 ipv6= k8sPodName=openstack/glance-ks-service-96zhc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c58c19ec3b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2264 identity=445 ipv4=10.0.0.33 ipv6= k8sPodName=openstack/glance-ks-service-96zhc subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.225 792e5a0e-4c1b-454e-8d4f-4fb2186dc52b default }" containerID=59c75d5d27845812a423228d1efbea169d26b8a1cba3ea0665fb01d0a1474799 datapathConfiguration="&{false false false false false }" interface=lxc56d27adee17a k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-9bttl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=59c75d5d27 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=910 ipv4=10.0.0.225 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-9bttl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=59c75d5d27 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=910 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.225 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-9bttl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-rgw;k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io;k8s:app.kubernetes.io/created-by=rook-ceph-operator;k8s:app.kubernetes.io/instance=ceph;k8s:app.kubernetes.io/managed-by=rook-ceph-operator;k8s:app.kubernetes.io/name=ceph-rgw;k8s:app.kubernetes.io/part-of=ceph;k8s:ceph_daemon_id=ceph;k8s:ceph_daemon_type=rgw;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw;k8s:io.kubernetes.pod.namespace=openstack;k8s:rgw=ceph;k8s:rook.io/operator-namespace=rook-ceph;k8s:rook_cluster=openstack;k8s:rook_object_store=ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=59c75d5d27 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=910 identity=55491 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.225 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-9bttl oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=59c75d5d27 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=910 identity=55491 ipv4=10.0.0.225 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-9bttl subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c58c19ec3b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2264 identity=445 ipv4=10.0.0.33 ipv6= k8sPodName=openstack/glance-ks-service-96zhc subsys=endpoint level=info msg="Successful endpoint creation" containerID=c58c19ec3b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2264 identity=445 ipv4=10.0.0.33 ipv6= k8sPodName=openstack/glance-ks-service-96zhc subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=59c75d5d27 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=910 identity=55491 ipv4=10.0.0.225 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-9bttl subsys=endpoint level=info msg="Successful endpoint creation" containerID=59c75d5d27 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=910 identity=55491 ipv4=10.0.0.225 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-9bttl subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.92 3bbdfe0d-a34f-493e-a75c-57c369ee6c65 default }" containerID=f1a1deeb6882b5421766d60fcc186e8679640dd6c8848726213ebfdd3e15ed12 datapathConfiguration="&{false false false false false }" interface=lxc61bb09b827b2 k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-hjsmq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f1a1deeb68 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1025 ipv4=10.0.0.92 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-hjsmq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f1a1deeb68 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1025 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.92 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-hjsmq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-crashcollector;k8s:ceph-version=18.2.7-0;k8s:ceph_daemon_id=crash;k8s:crashcollector=crash;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default;k8s:io.kubernetes.pod.namespace=openstack;k8s:node_name=instance;k8s:rook_cluster=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f1a1deeb68 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1025 identity=51824 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.92 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-hjsmq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f1a1deeb68 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1025 identity=51824 ipv4=10.0.0.92 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-hjsmq subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f1a1deeb68 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1025 identity=51824 ipv4=10.0.0.92 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-hjsmq subsys=endpoint level=info msg="Successful endpoint creation" containerID=f1a1deeb68 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1025 identity=51824 ipv4=10.0.0.92 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-hjsmq subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=c58c19ec3b endpointID=2264 k8sNamespace=openstack k8sPodName=glance-ks-service-96zhc subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=9b94d911-14ca-4b1a-b9aa-bc1254c2ebfa k8s:batch.kubernetes.io/job-name=glance-ks-service k8s:component=ks-service k8s:controller-uid=9b94d911-14ca-4b1a-b9aa-bc1254c2ebfa k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-service k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=c58c19ec3b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2264 identity=445 ipv4=10.0.0.33 ipv6= k8sPodName=openstack/glance-ks-service-96zhc subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.176 aa29513c-7b60-4648-af4a-f70845a01c34 default }" containerID=a54b4ee60b68decaf7f631fd407cff8fab20e19ad68576ecc160c3ebae358b4a datapathConfiguration="&{false false false false false }" interface=lxcbe43c50e836b k8sPodName=openstack/glance-ks-endpoints-9rbks labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a54b4ee60b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1029 ipv4=10.0.0.176 ipv6= k8sPodName=openstack/glance-ks-endpoints-9rbks subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a54b4ee60b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1029 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=ece59b67-e6f1-4130-a6a7-c64f81a72d70,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=ece59b67-e6f1-4130-a6a7-c64f81a72d70,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.176 ipv6= k8sPodName=openstack/glance-ks-endpoints-9rbks subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=ece59b67-e6f1-4130-a6a7-c64f81a72d70;k8s:batch.kubernetes.io/job-name=glance-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=ece59b67-e6f1-4130-a6a7-c64f81a72d70;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-endpoints;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a54b4ee60b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1029 identity=50169 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=ece59b67-e6f1-4130-a6a7-c64f81a72d70,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=ece59b67-e6f1-4130-a6a7-c64f81a72d70,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.176 ipv6= k8sPodName=openstack/glance-ks-endpoints-9rbks oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a54b4ee60b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1029 identity=50169 ipv4=10.0.0.176 ipv6= k8sPodName=openstack/glance-ks-endpoints-9rbks subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=a54b4ee60b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1029 identity=50169 ipv4=10.0.0.176 ipv6= k8sPodName=openstack/glance-ks-endpoints-9rbks subsys=endpoint level=info msg="Successful endpoint creation" containerID=a54b4ee60b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1029 identity=50169 ipv4=10.0.0.176 ipv6= k8sPodName=openstack/glance-ks-endpoints-9rbks subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.71 1f5ff1c6-1b3f-45ce-87fe-e6090aaf324e default }" containerID=f371701248f2ecaaaac96be1ab01b9cc2121a47553c2fca31d9c6a9262ad3927 datapathConfiguration="&{false false false false false }" interface=lxc90d9bfcd352a k8sPodName=openstack/ceph-object-controller-detect-version-wg7p4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f371701248 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2610 ipv4=10.0.0.71 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-wg7p4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f371701248 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2610 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=e431dabe-a0de-48ab-9aed-9e5ab2fa63d5,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=e431dabe-a0de-48ab-9aed-9e5ab2fa63d5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.14.5" ipv4=10.0.0.71 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-wg7p4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=ceph-object-controller-detect-version;k8s:batch.kubernetes.io/controller-uid=e431dabe-a0de-48ab-9aed-9e5ab2fa63d5;k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version;k8s:controller-uid=e431dabe-a0de-48ab-9aed-9e5ab2fa63d5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=ceph-object-controller-detect-version;k8s:rook-version=v1.14.5;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f371701248 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2610 identity=7455 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=e431dabe-a0de-48ab-9aed-9e5ab2fa63d5,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=e431dabe-a0de-48ab-9aed-9e5ab2fa63d5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.14.5" ipv4=10.0.0.71 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-wg7p4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f371701248 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2610 identity=7455 ipv4=10.0.0.71 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-wg7p4 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=f371701248 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2610 identity=7455 ipv4=10.0.0.71 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-wg7p4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f371701248 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2610 identity=7455 ipv4=10.0.0.71 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-wg7p4 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=f371701248 endpointID=2610 k8sNamespace=openstack k8sPodName=ceph-object-controller-detect-version-wg7p4 subsys=daemon level=info msg="Releasing key" key="[k8s:app=ceph-object-controller-detect-version k8s:batch.kubernetes.io/controller-uid=e431dabe-a0de-48ab-9aed-9e5ab2fa63d5 k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version k8s:controller-uid=e431dabe-a0de-48ab-9aed-9e5ab2fa63d5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=ceph-object-controller-detect-version k8s:rook-version=v1.14.5]" subsys=allocator level=info msg="Removed endpoint" containerID=f371701248 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2610 identity=7455 ipv4=10.0.0.71 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-wg7p4 subsys=endpoint level=info msg="Delete endpoint request" containerID=a54b4ee60b endpointID=1029 k8sNamespace=openstack k8sPodName=glance-ks-endpoints-9rbks subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=ece59b67-e6f1-4130-a6a7-c64f81a72d70 k8s:batch.kubernetes.io/job-name=glance-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=ece59b67-e6f1-4130-a6a7-c64f81a72d70 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-endpoints k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=a54b4ee60b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1029 identity=50169 ipv4=10.0.0.176 ipv6= k8sPodName=openstack/glance-ks-endpoints-9rbks subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.169 4794d5ec-8b80-4c64-aabe-08afb091abcf default }" containerID=efad2fdfa281157550f0216856b7e228fb723ea86984581ee3f20cdbc0c7f667 datapathConfiguration="&{false false false false false }" interface=lxc240a4b0a0e93 k8sPodName=openstack/glance-ks-user-q52f5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=efad2fdfa2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3082 ipv4=10.0.0.169 ipv6= k8sPodName=openstack/glance-ks-user-q52f5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=efad2fdfa2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3082 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=d03c321a-c4d3-4091-ab8c-9bd10cda69a0,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=d03c321a-c4d3-4091-ab8c-9bd10cda69a0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.169 ipv6= k8sPodName=openstack/glance-ks-user-q52f5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=d03c321a-c4d3-4091-ab8c-9bd10cda69a0;k8s:batch.kubernetes.io/job-name=glance-ks-user;k8s:component=ks-user;k8s:controller-uid=d03c321a-c4d3-4091-ab8c-9bd10cda69a0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-user;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=efad2fdfa2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3082 identity=12729 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=d03c321a-c4d3-4091-ab8c-9bd10cda69a0,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=d03c321a-c4d3-4091-ab8c-9bd10cda69a0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.169 ipv6= k8sPodName=openstack/glance-ks-user-q52f5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=efad2fdfa2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3082 identity=12729 ipv4=10.0.0.169 ipv6= k8sPodName=openstack/glance-ks-user-q52f5 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=efad2fdfa2 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3082 identity=12729 ipv4=10.0.0.169 ipv6= k8sPodName=openstack/glance-ks-user-q52f5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=efad2fdfa2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3082 identity=12729 ipv4=10.0.0.169 ipv6= k8sPodName=openstack/glance-ks-user-q52f5 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=efad2fdfa2 endpointID=3082 k8sNamespace=openstack k8sPodName=glance-ks-user-q52f5 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=d03c321a-c4d3-4091-ab8c-9bd10cda69a0 k8s:batch.kubernetes.io/job-name=glance-ks-user k8s:component=ks-user k8s:controller-uid=d03c321a-c4d3-4091-ab8c-9bd10cda69a0 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-user k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=efad2fdfa2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3082 identity=12729 ipv4=10.0.0.169 ipv6= k8sPodName=openstack/glance-ks-user-q52f5 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.33 678ffcb2-e797-43ce-b480-4df14832a262 default }" containerID=91effab06b66b02e597999234610347702ef1d24cd001479a18d1f31acc349f7 datapathConfiguration="&{false false false false false }" interface=lxc74c21ee68978 k8sPodName=openstack/glance-metadefs-load-prkxb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=91effab06b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=398 ipv4=10.0.0.33 ipv6= k8sPodName=openstack/glance-metadefs-load-prkxb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=91effab06b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=398 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=f5296afc-0f4a-44a6-96cb-8afa382636b1,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=f5296afc-0f4a-44a6-96cb-8afa382636b1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.33 ipv6= k8sPodName=openstack/glance-metadefs-load-prkxb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=f5296afc-0f4a-44a6-96cb-8afa382636b1;k8s:batch.kubernetes.io/job-name=glance-metadefs-load;k8s:component=metadefs_load;k8s:controller-uid=f5296afc-0f4a-44a6-96cb-8afa382636b1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-metadefs-load;k8s:release_group=glance;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=91effab06b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=398 identity=32925 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=f5296afc-0f4a-44a6-96cb-8afa382636b1,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=f5296afc-0f4a-44a6-96cb-8afa382636b1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.33 ipv6= k8sPodName=openstack/glance-metadefs-load-prkxb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=91effab06b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=398 identity=32925 ipv4=10.0.0.33 ipv6= k8sPodName=openstack/glance-metadefs-load-prkxb subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=91effab06b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=398 identity=32925 ipv4=10.0.0.33 ipv6= k8sPodName=openstack/glance-metadefs-load-prkxb subsys=endpoint level=info msg="Successful endpoint creation" containerID=91effab06b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=398 identity=32925 ipv4=10.0.0.33 ipv6= k8sPodName=openstack/glance-metadefs-load-prkxb subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=91effab06b endpointID=398 k8sNamespace=openstack k8sPodName=glance-metadefs-load-prkxb subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=f5296afc-0f4a-44a6-96cb-8afa382636b1 k8s:batch.kubernetes.io/job-name=glance-metadefs-load k8s:component=metadefs_load k8s:controller-uid=f5296afc-0f4a-44a6-96cb-8afa382636b1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-metadefs-load k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=91effab06b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=398 identity=32925 ipv4=10.0.0.33 ipv6= k8sPodName=openstack/glance-metadefs-load-prkxb subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.248 db3c83e7-f113-44fd-9bb3-aa10cef785a7 default }" containerID=cfb0827f0faec5c4fea5ab9137b24342f00392af5a3bc3d0c646c736c1813db1 datapathConfiguration="&{false false false false false }" interface=lxcaaa6aa170986 k8sPodName=openstack/glance-storage-init-98fgc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=cfb0827f0f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1355 ipv4=10.0.0.248 ipv6= k8sPodName=openstack/glance-storage-init-98fgc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=cfb0827f0f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1355 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=c4eeb12c-d28e-4103-ad68-b1d95a02c058,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=c4eeb12c-d28e-4103-ad68-b1d95a02c058,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.248 ipv6= k8sPodName=openstack/glance-storage-init-98fgc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=cfb0827f0f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1355 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.248 ipv6= k8sPodName=openstack/glance-storage-init-98fgc line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=c4eeb12c-d28e-4103-ad68-b1d95a02c058;k8s:batch.kubernetes.io/job-name=glance-storage-init;k8s:component=storage-init;k8s:controller-uid=c4eeb12c-d28e-4103-ad68-b1d95a02c058;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-storage-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=cfb0827f0f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1355 identity=29361 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=c4eeb12c-d28e-4103-ad68-b1d95a02c058,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=c4eeb12c-d28e-4103-ad68-b1d95a02c058,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.248 ipv6= k8sPodName=openstack/glance-storage-init-98fgc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=cfb0827f0f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1355 identity=29361 ipv4=10.0.0.248 ipv6= k8sPodName=openstack/glance-storage-init-98fgc subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=cfb0827f0f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1355 identity=29361 ipv4=10.0.0.248 ipv6= k8sPodName=openstack/glance-storage-init-98fgc subsys=endpoint level=info msg="Successful endpoint creation" containerID=cfb0827f0f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1355 identity=29361 ipv4=10.0.0.248 ipv6= k8sPodName=openstack/glance-storage-init-98fgc subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=cfb0827f0f endpointID=1355 k8sNamespace=openstack k8sPodName=glance-storage-init-98fgc subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=c4eeb12c-d28e-4103-ad68-b1d95a02c058 k8s:batch.kubernetes.io/job-name=glance-storage-init k8s:component=storage-init k8s:controller-uid=c4eeb12c-d28e-4103-ad68-b1d95a02c058 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-storage-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=cfb0827f0f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1355 identity=29361 ipv4=10.0.0.248 ipv6= k8sPodName=openstack/glance-storage-init-98fgc subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.25 8aa6ace4-2319-4926-873b-e3ba37fb976b default }" containerID=6a43bde5e2c3314d0f18a3d798ab0fd230843b32f48ca8be0563279fcee99f36 datapathConfiguration="&{false false false false false }" interface=lxc4ffd117a9445 k8sPodName=openstack/glance-api-7b46b86b4-6snn5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6a43bde5e2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4062 ipv4=10.0.0.25 ipv6= k8sPodName=openstack/glance-api-7b46b86b4-6snn5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6a43bde5e2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4062 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.25 ipv6= k8sPodName=openstack/glance-api-7b46b86b4-6snn5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6a43bde5e2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4062 identity=4567 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.25 ipv6= k8sPodName=openstack/glance-api-7b46b86b4-6snn5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6a43bde5e2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4062 identity=4567 ipv4=10.0.0.25 ipv6= k8sPodName=openstack/glance-api-7b46b86b4-6snn5 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6a43bde5e2 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=4062 identity=4567 ipv4=10.0.0.25 ipv6= k8sPodName=openstack/glance-api-7b46b86b4-6snn5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=6a43bde5e2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=4062 identity=4567 ipv4=10.0.0.25 ipv6= k8sPodName=openstack/glance-api-7b46b86b4-6snn5 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.240 2c8a0bee-ba55-46ee-911f-ec499836e340 default }" containerID=9c173744a371407c9aa67dda1518169b2fbbb8daacac550e4b3084c3cf2d7b97 datapathConfiguration="&{false false false false false }" interface=lxcb988b76b9d27 k8sPodName=openstack/staffeln-conductor-54dd8f7c76-lxf75 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9c173744a3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1973 ipv4=10.0.0.240 ipv6= k8sPodName=openstack/staffeln-conductor-54dd8f7c76-lxf75 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9c173744a3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1973 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.240 ipv6= k8sPodName=openstack/staffeln-conductor-54dd8f7c76-lxf75 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=conductor;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9c173744a3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1973 identity=21326 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.240 ipv6= k8sPodName=openstack/staffeln-conductor-54dd8f7c76-lxf75 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9c173744a3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1973 identity=21326 ipv4=10.0.0.240 ipv6= k8sPodName=openstack/staffeln-conductor-54dd8f7c76-lxf75 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.100 5224c262-ffce-4bf3-b49a-a60a567f100b default }" containerID=a19116e1a681094ed7d3c456260440088302c28cf221e2e375c517b258426bbb datapathConfiguration="&{false false false false false }" interface=lxc242616ddffda k8sPodName=openstack/staffeln-api-97d7445cf-s88mb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a19116e1a6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1697 ipv4=10.0.0.100 ipv6= k8sPodName=openstack/staffeln-api-97d7445cf-s88mb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a19116e1a6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1697 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.100 ipv6= k8sPodName=openstack/staffeln-api-97d7445cf-s88mb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a19116e1a6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1697 identity=59804 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.100 ipv6= k8sPodName=openstack/staffeln-api-97d7445cf-s88mb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a19116e1a6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1697 identity=59804 ipv4=10.0.0.100 ipv6= k8sPodName=openstack/staffeln-api-97d7445cf-s88mb subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.34 37bc0948-d6a4-4548-ad2f-74e265a2290f default }" containerID=5ef505cda477e37121c9a23f5be2b3fd17241b5c356ab78069c768c57c8a0dc9 datapathConfiguration="&{false false false false false }" interface=lxc98352d234854 k8sPodName=openstack/staffeln-db-init-ctt2v labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5ef505cda4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=582 ipv4=10.0.0.34 ipv6= k8sPodName=openstack/staffeln-db-init-ctt2v subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5ef505cda4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=582 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=e097f93b-284d-4ce0-83d7-6c62a25b9627,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=e097f93b-284d-4ce0-83d7-6c62a25b9627,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.34 ipv6= k8sPodName=openstack/staffeln-db-init-ctt2v subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=e097f93b-284d-4ce0-83d7-6c62a25b9627;k8s:batch.kubernetes.io/job-name=staffeln-db-init;k8s:component=db-init;k8s:controller-uid=e097f93b-284d-4ce0-83d7-6c62a25b9627;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-init;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5ef505cda4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=582 identity=4440 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=e097f93b-284d-4ce0-83d7-6c62a25b9627,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=e097f93b-284d-4ce0-83d7-6c62a25b9627,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.34 ipv6= k8sPodName=openstack/staffeln-db-init-ctt2v oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5ef505cda4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=582 identity=4440 ipv4=10.0.0.34 ipv6= k8sPodName=openstack/staffeln-db-init-ctt2v subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9c173744a3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1973 identity=21326 ipv4=10.0.0.240 ipv6= k8sPodName=openstack/staffeln-conductor-54dd8f7c76-lxf75 subsys=endpoint level=info msg="Successful endpoint creation" containerID=9c173744a3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1973 identity=21326 ipv4=10.0.0.240 ipv6= k8sPodName=openstack/staffeln-conductor-54dd8f7c76-lxf75 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=a19116e1a6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1697 identity=59804 ipv4=10.0.0.100 ipv6= k8sPodName=openstack/staffeln-api-97d7445cf-s88mb subsys=endpoint level=info msg="Successful endpoint creation" containerID=a19116e1a6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1697 identity=59804 ipv4=10.0.0.100 ipv6= k8sPodName=openstack/staffeln-api-97d7445cf-s88mb subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=5ef505cda4 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=582 identity=4440 ipv4=10.0.0.34 ipv6= k8sPodName=openstack/staffeln-db-init-ctt2v subsys=endpoint level=info msg="Successful endpoint creation" containerID=5ef505cda4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=582 identity=4440 ipv4=10.0.0.34 ipv6= k8sPodName=openstack/staffeln-db-init-ctt2v subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=5ef505cda4 endpointID=582 k8sNamespace=openstack k8sPodName=staffeln-db-init-ctt2v subsys=daemon level=info msg="Releasing key" key="[k8s:application=staffeln k8s:batch.kubernetes.io/controller-uid=e097f93b-284d-4ce0-83d7-6c62a25b9627 k8s:batch.kubernetes.io/job-name=staffeln-db-init k8s:component=db-init k8s:controller-uid=e097f93b-284d-4ce0-83d7-6c62a25b9627 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=staffeln-db-init k8s:release_group=staffeln]" subsys=allocator level=info msg="Removed endpoint" containerID=5ef505cda4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=582 identity=4440 ipv4=10.0.0.34 ipv6= k8sPodName=openstack/staffeln-db-init-ctt2v subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.121 ca858c9b-e700-4903-be15-32796fed1b00 default }" containerID=5f291811ce09c4316029e05fb832efa3f943a570c8117f3fc4a09eb8133a3b96 datapathConfiguration="&{false false false false false }" interface=lxcf7093d7beb1b k8sPodName=openstack/staffeln-db-sync-nzvxk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5f291811ce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=665 ipv4=10.0.0.121 ipv6= k8sPodName=openstack/staffeln-db-sync-nzvxk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5f291811ce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=665 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=0de3c9ab-31de-4a0a-909f-e34e932465d5,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=0de3c9ab-31de-4a0a-909f-e34e932465d5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.121 ipv6= k8sPodName=openstack/staffeln-db-sync-nzvxk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=5f291811ce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=665 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.121 ipv6= k8sPodName=openstack/staffeln-db-sync-nzvxk line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=0de3c9ab-31de-4a0a-909f-e34e932465d5;k8s:batch.kubernetes.io/job-name=staffeln-db-sync;k8s:component=db-sync;k8s:controller-uid=0de3c9ab-31de-4a0a-909f-e34e932465d5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-sync;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5f291811ce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=665 identity=15737 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=0de3c9ab-31de-4a0a-909f-e34e932465d5,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=0de3c9ab-31de-4a0a-909f-e34e932465d5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.121 ipv6= k8sPodName=openstack/staffeln-db-sync-nzvxk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5f291811ce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=665 identity=15737 ipv4=10.0.0.121 ipv6= k8sPodName=openstack/staffeln-db-sync-nzvxk subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5f291811ce datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=665 identity=15737 ipv4=10.0.0.121 ipv6= k8sPodName=openstack/staffeln-db-sync-nzvxk subsys=endpoint level=info msg="Successful endpoint creation" containerID=5f291811ce datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=665 identity=15737 ipv4=10.0.0.121 ipv6= k8sPodName=openstack/staffeln-db-sync-nzvxk subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager