level=info msg="Memory available for map entries (0.003% of 16764956672B): 41912391B" subsys=config level=info msg="option bpf-ct-global-tcp-max set by dynamic sizing to 147061" subsys=config level=info msg="option bpf-ct-global-any-max set by dynamic sizing to 73530" subsys=config level=info msg="option bpf-nat-global-max set by dynamic sizing to 147061" subsys=config level=info msg="option bpf-neigh-global-max set by dynamic sizing to 147061" subsys=config level=info msg="option bpf-sock-rev-map-max set by dynamic sizing to 73530" subsys=config level=info msg=" --agent-health-port='9879'" subsys=daemon level=info msg=" --agent-labels=''" subsys=daemon level=info msg=" --agent-liveness-update-interval='1s'" subsys=daemon level=info msg=" --agent-not-ready-taint-key='node.cilium.io/agent-not-ready'" subsys=daemon level=info msg=" --allocator-list-timeout='3m0s'" subsys=daemon level=info msg=" --allow-icmp-frag-needed='true'" subsys=daemon level=info msg=" --allow-localhost='auto'" subsys=daemon level=info msg=" --annotate-k8s-node='false'" subsys=daemon level=info msg=" --api-rate-limit=''" subsys=daemon level=info msg=" --arping-refresh-period='30s'" subsys=daemon level=info msg=" --auto-create-cilium-node-resource='true'" subsys=daemon level=info msg=" --auto-direct-node-routes='false'" subsys=daemon level=info msg=" --bgp-announce-lb-ip='false'" subsys=daemon level=info msg=" --bgp-announce-pod-cidr='false'" subsys=daemon level=info msg=" --bgp-config-path='/var/lib/cilium/bgp/config.yaml'" subsys=daemon level=info msg=" --bpf-auth-map-max='524288'" subsys=daemon level=info msg=" --bpf-ct-global-any-max='262144'" subsys=daemon level=info msg=" --bpf-ct-global-tcp-max='524288'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-fin='10s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-syn='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp-grace='1m0s'" subsys=daemon level=info msg=" --bpf-filter-priority='1'" subsys=daemon level=info msg=" --bpf-fragments-map-max='8192'" subsys=daemon level=info msg=" --bpf-lb-acceleration='disabled'" subsys=daemon level=info msg=" --bpf-lb-affinity-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-algorithm='random'" subsys=daemon level=info msg=" --bpf-lb-dev-ip-addr-inherit=''" subsys=daemon level=info msg=" --bpf-lb-dsr-dispatch='opt'" subsys=daemon level=info msg=" --bpf-lb-dsr-l4-xlate='frontend'" subsys=daemon level=info msg=" --bpf-lb-external-clusterip='false'" subsys=daemon level=info msg=" --bpf-lb-maglev-hash-seed='JLfvgnHc2kaSUFaI'" subsys=daemon level=info msg=" --bpf-lb-maglev-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-maglev-table-size='16381'" subsys=daemon level=info msg=" --bpf-lb-map-max='65536'" subsys=daemon level=info msg=" --bpf-lb-mode='snat'" subsys=daemon level=info msg=" --bpf-lb-rev-nat-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-rss-ipv4-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-rss-ipv6-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-service-backend-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-service-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-sock='false'" subsys=daemon level=info msg=" --bpf-lb-sock-hostns-only='false'" subsys=daemon level=info msg=" --bpf-lb-source-range-map-max='0'" subsys=daemon level=info msg=" --bpf-map-dynamic-size-ratio='0.0025'" subsys=daemon level=info msg=" --bpf-map-event-buffers=''" subsys=daemon level=info msg=" --bpf-nat-global-max='524288'" subsys=daemon level=info msg=" --bpf-neigh-global-max='524288'" subsys=daemon level=info msg=" --bpf-policy-map-full-reconciliation-interval='15m0s'" subsys=daemon level=info msg=" --bpf-policy-map-max='16384'" subsys=daemon level=info msg=" --bpf-root='/sys/fs/bpf'" subsys=daemon level=info msg=" --bpf-sock-rev-map-max='262144'" subsys=daemon level=info msg=" --bypass-ip-availability-upon-restore='false'" subsys=daemon level=info msg=" --certificates-directory='/var/run/cilium/certs'" subsys=daemon level=info msg=" --cflags=''" subsys=daemon level=info msg=" --cgroup-root='/run/cilium/cgroupv2'" subsys=daemon level=info msg=" --cilium-endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --cluster-health-port='4240'" subsys=daemon level=info msg=" --cluster-id='0'" subsys=daemon level=info msg=" --cluster-name='default'" subsys=daemon level=info msg=" --cluster-pool-ipv4-cidr='10.0.0.0/8'" subsys=daemon level=info msg=" --cluster-pool-ipv4-mask-size='24'" subsys=daemon level=info msg=" --clustermesh-config='/var/lib/cilium/clustermesh/'" subsys=daemon level=info msg=" --clustermesh-ip-identities-sync-timeout='1m0s'" subsys=daemon level=info msg=" --cmdref=''" subsys=daemon level=info msg=" --cni-chaining-mode='none'" subsys=daemon level=info msg=" --cni-chaining-target=''" subsys=daemon level=info msg=" --cni-exclusive='true'" subsys=daemon level=info msg=" --cni-external-routing='false'" subsys=daemon level=info msg=" --cni-log-file='/var/run/cilium/cilium-cni.log'" subsys=daemon level=info msg=" --cnp-node-status-gc-interval='0s'" subsys=daemon level=info msg=" --config=''" subsys=daemon level=info msg=" --config-dir='/tmp/cilium/config-map'" subsys=daemon level=info msg=" --config-sources='config-map:kube-system/cilium-config'" subsys=daemon level=info msg=" --conntrack-gc-interval='0s'" subsys=daemon level=info msg=" --conntrack-gc-max-interval='0s'" subsys=daemon level=info msg=" --crd-wait-timeout='5m0s'" subsys=daemon level=info msg=" --custom-cni-conf='false'" subsys=daemon level=info msg=" --datapath-mode='veth'" subsys=daemon level=info msg=" --debug='false'" subsys=daemon level=info msg=" --debug-verbose=''" subsys=daemon level=info msg=" --derive-masquerade-ip-addr-from-device=''" subsys=daemon level=info msg=" --devices=''" subsys=daemon level=info msg=" --direct-routing-device=''" subsys=daemon level=info msg=" --disable-cnp-status-updates='true'" subsys=daemon level=info msg=" --disable-endpoint-crd='false'" subsys=daemon level=info msg=" --disable-envoy-version-check='false'" subsys=daemon level=info msg=" --disable-iptables-feeder-rules=''" subsys=daemon level=info msg=" --dns-max-ips-per-restored-rule='1000'" subsys=daemon level=info msg=" --dns-policy-unload-on-shutdown='false'" subsys=daemon level=info msg=" --dnsproxy-concurrency-limit='0'" subsys=daemon level=info msg=" --dnsproxy-concurrency-processing-grace-period='0s'" subsys=daemon level=info msg=" --dnsproxy-enable-transparent-mode='true'" subsys=daemon level=info msg=" --dnsproxy-lock-count='128'" subsys=daemon level=info msg=" --dnsproxy-lock-timeout='500ms'" subsys=daemon level=info msg=" --egress-gateway-policy-map-max='16384'" subsys=daemon level=info msg=" --egress-gateway-reconciliation-trigger-interval='1s'" subsys=daemon level=info msg=" --egress-masquerade-interfaces=''" subsys=daemon level=info msg=" --egress-multi-home-ip-rule-compat='false'" subsys=daemon level=info msg=" --enable-auto-protect-node-port-range='true'" subsys=daemon level=info msg=" --enable-bandwidth-manager='false'" subsys=daemon level=info msg=" --enable-bbr='false'" subsys=daemon level=info msg=" --enable-bgp-control-plane='false'" subsys=daemon level=info msg=" --enable-bpf-clock-probe='false'" subsys=daemon level=info msg=" --enable-bpf-masquerade='false'" subsys=daemon level=info msg=" --enable-bpf-tproxy='false'" subsys=daemon level=info msg=" --enable-cilium-api-server-access='*'" subsys=daemon level=info msg=" --enable-cilium-endpoint-slice='false'" subsys=daemon level=info msg=" --enable-cilium-health-api-server-access='*'" subsys=daemon level=info msg=" --enable-custom-calls='false'" subsys=daemon level=info msg=" --enable-endpoint-health-checking='true'" subsys=daemon level=info msg=" --enable-endpoint-routes='false'" subsys=daemon level=info msg=" --enable-envoy-config='false'" subsys=daemon level=info msg=" --enable-external-ips='false'" subsys=daemon level=info msg=" --enable-health-check-nodeport='true'" subsys=daemon level=info msg=" --enable-health-checking='true'" subsys=daemon level=info msg=" --enable-high-scale-ipcache='false'" subsys=daemon level=info msg=" --enable-host-firewall='false'" subsys=daemon level=info msg=" --enable-host-legacy-routing='false'" subsys=daemon level=info msg=" --enable-host-port='false'" subsys=daemon level=info msg=" --enable-hubble='false'" subsys=daemon level=info msg=" --enable-hubble-recorder-api='true'" subsys=daemon level=info msg=" --enable-icmp-rules='true'" subsys=daemon level=info msg=" --enable-identity-mark='true'" subsys=daemon level=info msg=" --enable-ip-masq-agent='false'" subsys=daemon level=info msg=" --enable-ipsec='false'" subsys=daemon level=info msg=" --enable-ipsec-key-watcher='true'" subsys=daemon level=info msg=" --enable-ipv4='true'" subsys=daemon level=info msg=" --enable-ipv4-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv4-egress-gateway='false'" subsys=daemon level=info msg=" --enable-ipv4-fragment-tracking='true'" subsys=daemon level=info msg=" --enable-ipv4-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6='false'" subsys=daemon level=info msg=" --enable-ipv6-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv6-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6-ndp='false'" subsys=daemon level=info msg=" --enable-k8s='true'" subsys=daemon level=info msg=" --enable-k8s-api-discovery='false'" subsys=daemon level=info msg=" --enable-k8s-endpoint-slice='true'" subsys=daemon level=info msg=" --enable-k8s-event-handover='false'" subsys=daemon level=info msg=" --enable-k8s-networkpolicy='true'" subsys=daemon level=info msg=" --enable-k8s-terminating-endpoint='true'" subsys=daemon level=info msg=" --enable-l2-announcements='false'" subsys=daemon level=info msg=" --enable-l2-neigh-discovery='true'" subsys=daemon level=info msg=" --enable-l2-pod-announcements='false'" subsys=daemon level=info msg=" --enable-l7-proxy='true'" subsys=daemon level=info msg=" --enable-local-node-route='true'" subsys=daemon level=info msg=" --enable-local-redirect-policy='false'" subsys=daemon level=info msg=" --enable-mke='false'" subsys=daemon level=info msg=" --enable-monitor='true'" subsys=daemon level=info msg=" --enable-nat46x64-gateway='false'" subsys=daemon level=info msg=" --enable-node-port='false'" subsys=daemon level=info msg=" --enable-pmtu-discovery='false'" subsys=daemon level=info msg=" --enable-policy='default'" subsys=daemon level=info msg=" --enable-recorder='false'" subsys=daemon level=info msg=" --enable-remote-node-identity='true'" subsys=daemon level=info msg=" --enable-runtime-device-detection='false'" subsys=daemon level=info msg=" --enable-sctp='false'" subsys=daemon level=info msg=" --enable-service-topology='false'" subsys=daemon level=info msg=" --enable-session-affinity='false'" subsys=daemon level=info msg=" --enable-srv6='false'" subsys=daemon level=info msg=" --enable-stale-cilium-endpoint-cleanup='true'" subsys=daemon level=info msg=" --enable-svc-source-range-check='true'" subsys=daemon level=info msg=" --enable-tracing='false'" subsys=daemon level=info msg=" --enable-unreachable-routes='false'" subsys=daemon level=info msg=" --enable-vtep='false'" subsys=daemon level=info msg=" --enable-well-known-identities='false'" subsys=daemon level=info msg=" --enable-wireguard='false'" subsys=daemon level=info msg=" --enable-wireguard-userspace-fallback='false'" subsys=daemon level=info msg=" --enable-xdp-prefilter='false'" subsys=daemon level=info msg=" --enable-xt-socket-fallback='true'" subsys=daemon level=info msg=" --encrypt-interface=''" subsys=daemon level=info msg=" --encrypt-node='false'" subsys=daemon level=info msg=" --endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --endpoint-queue-size='25'" subsys=daemon level=info msg=" --endpoint-status=''" subsys=daemon level=info msg=" --envoy-config-timeout='2m0s'" subsys=daemon level=info msg=" --envoy-log=''" subsys=daemon level=info msg=" --exclude-local-address=''" subsys=daemon level=info msg=" --external-envoy-proxy='false'" subsys=daemon level=info msg=" --fixed-identity-mapping=''" subsys=daemon level=info msg=" --fqdn-regex-compile-lru-size='1024'" subsys=daemon level=info msg=" --gops-port='9890'" subsys=daemon level=info msg=" --http-403-msg=''" subsys=daemon level=info msg=" --http-idle-timeout='0'" subsys=daemon level=info msg=" --http-max-grpc-timeout='0'" subsys=daemon level=info msg=" --http-normalize-path='true'" subsys=daemon level=info msg=" --http-request-timeout='3600'" subsys=daemon level=info msg=" --http-retry-count='3'" subsys=daemon level=info msg=" --http-retry-timeout='0'" subsys=daemon level=info msg=" --hubble-disable-tls='false'" subsys=daemon level=info msg=" --hubble-event-buffer-capacity='4095'" subsys=daemon level=info msg=" --hubble-event-queue-size='0'" subsys=daemon level=info msg=" --hubble-export-file-compress='false'" subsys=daemon level=info msg=" --hubble-export-file-max-backups='5'" subsys=daemon level=info msg=" --hubble-export-file-max-size-mb='10'" subsys=daemon level=info msg=" --hubble-export-file-path=''" subsys=daemon level=info msg=" --hubble-listen-address=''" subsys=daemon level=info msg=" --hubble-metrics=''" subsys=daemon level=info msg=" --hubble-metrics-server=''" subsys=daemon level=info msg=" --hubble-monitor-events=''" subsys=daemon level=info msg=" --hubble-prefer-ipv6='false'" subsys=daemon level=info msg=" --hubble-recorder-sink-queue-size='1024'" subsys=daemon level=info msg=" --hubble-recorder-storage-path='/var/run/cilium/pcaps'" subsys=daemon level=info msg=" --hubble-skip-unknown-cgroup-ids='true'" subsys=daemon level=info msg=" --hubble-socket-path='/var/run/cilium/hubble.sock'" subsys=daemon level=info msg=" --hubble-tls-cert-file=''" subsys=daemon level=info msg=" --hubble-tls-client-ca-files=''" subsys=daemon level=info msg=" --hubble-tls-key-file=''" subsys=daemon level=info msg=" --identity-allocation-mode='crd'" subsys=daemon level=info msg=" --identity-change-grace-period='5s'" subsys=daemon level=info msg=" --identity-gc-interval='15m0s'" subsys=daemon level=info msg=" --identity-heartbeat-timeout='30m0s'" subsys=daemon level=info msg=" --identity-restore-grace-period='10m0s'" subsys=daemon level=info msg=" --install-egress-gateway-routes='false'" subsys=daemon level=info msg=" --install-iptables-rules='true'" subsys=daemon level=info msg=" --install-no-conntrack-iptables-rules='false'" subsys=daemon level=info msg=" --ip-allocation-timeout='2m0s'" subsys=daemon level=info msg=" --ip-masq-agent-config-path='/etc/config/ip-masq-agent'" subsys=daemon level=info msg=" --ipam='cluster-pool'" subsys=daemon level=info msg=" --ipam-cilium-node-update-rate='15s'" subsys=daemon level=info msg=" --ipam-multi-pool-pre-allocation='default=8'" subsys=daemon level=info msg=" --ipsec-key-file=''" subsys=daemon level=info msg=" --ipsec-key-rotation-duration='5m0s'" subsys=daemon level=info msg=" --iptables-lock-timeout='5s'" subsys=daemon level=info msg=" --iptables-random-fully='false'" subsys=daemon level=info msg=" --ipv4-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv4-node='auto'" subsys=daemon level=info msg=" --ipv4-pod-subnets=''" subsys=daemon level=info msg=" --ipv4-range='auto'" subsys=daemon level=info msg=" --ipv4-service-loopback-address='169.254.42.1'" subsys=daemon level=info msg=" --ipv4-service-range='auto'" subsys=daemon level=info msg=" --ipv6-cluster-alloc-cidr='f00d::/64'" subsys=daemon level=info msg=" --ipv6-mcast-device=''" subsys=daemon level=info msg=" --ipv6-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv6-node='auto'" subsys=daemon level=info msg=" --ipv6-pod-subnets=''" subsys=daemon level=info msg=" --ipv6-range='auto'" subsys=daemon level=info msg=" --ipv6-service-range='auto'" subsys=daemon level=info msg=" --join-cluster='false'" subsys=daemon level=info msg=" --k8s-api-server=''" subsys=daemon level=info msg=" --k8s-client-burst='10'" subsys=daemon level=info msg=" --k8s-client-qps='5'" subsys=daemon level=info msg=" --k8s-heartbeat-timeout='30s'" subsys=daemon level=info msg=" --k8s-kubeconfig-path=''" subsys=daemon level=info msg=" --k8s-namespace='kube-system'" subsys=daemon level=info msg=" --k8s-require-ipv4-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-require-ipv6-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-service-cache-size='128'" subsys=daemon level=info msg=" --k8s-service-proxy-name=''" subsys=daemon level=info msg=" --k8s-sync-timeout='3m0s'" subsys=daemon level=info msg=" --k8s-watcher-endpoint-selector='metadata.name!=kube-scheduler,metadata.name!=kube-controller-manager,metadata.name!=etcd-operator,metadata.name!=gcp-controller-manager'" subsys=daemon level=info msg=" --keep-config='false'" subsys=daemon level=info msg=" --kube-proxy-replacement='disabled'" subsys=daemon level=info msg=" --kube-proxy-replacement-healthz-bind-address=''" subsys=daemon level=info msg=" --kvstore=''" subsys=daemon level=info msg=" --kvstore-connectivity-timeout='2m0s'" subsys=daemon level=info msg=" --kvstore-lease-ttl='15m0s'" subsys=daemon level=info msg=" --kvstore-max-consecutive-quorum-errors='2'" subsys=daemon level=info msg=" --kvstore-opt=''" subsys=daemon level=info msg=" --kvstore-periodic-sync='5m0s'" subsys=daemon level=info msg=" --l2-announcements-lease-duration='15s'" subsys=daemon level=info msg=" --l2-announcements-renew-deadline='5s'" subsys=daemon level=info msg=" --l2-announcements-retry-period='2s'" subsys=daemon level=info msg=" --l2-pod-announcements-interface=''" subsys=daemon level=info msg=" --label-prefix-file=''" subsys=daemon level=info msg=" --labels=''" subsys=daemon level=info msg=" --lib-dir='/var/lib/cilium'" subsys=daemon level=info msg=" --local-max-addr-scope='252'" subsys=daemon level=info msg=" --local-router-ipv4=''" subsys=daemon level=info msg=" --local-router-ipv6=''" subsys=daemon level=info msg=" --log-driver=''" subsys=daemon level=info msg=" --log-opt=''" subsys=daemon level=info msg=" --log-system-load='false'" subsys=daemon level=info msg=" --max-controller-interval='0'" subsys=daemon level=info msg=" --mesh-auth-enabled='true'" subsys=daemon level=info msg=" --mesh-auth-gc-interval='5m0s'" subsys=daemon level=info msg=" --mesh-auth-mutual-listener-port='0'" subsys=daemon level=info msg=" --mesh-auth-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-rotated-identities-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-signal-backoff-duration='1s'" subsys=daemon level=info msg=" --mesh-auth-spiffe-trust-domain='spiffe.cilium'" subsys=daemon level=info msg=" --mesh-auth-spire-admin-socket=''" subsys=daemon level=info msg=" --metrics=''" subsys=daemon level=info msg=" --mke-cgroup-mount=''" subsys=daemon level=info msg=" --monitor-aggregation='medium'" subsys=daemon level=info msg=" --monitor-aggregation-flags='all'" subsys=daemon level=info msg=" --monitor-aggregation-interval='5s'" subsys=daemon level=info msg=" --monitor-queue-size='0'" subsys=daemon level=info msg=" --mtu='0'" subsys=daemon level=info msg=" --node-encryption-opt-out-labels='node-role.kubernetes.io/control-plane'" subsys=daemon level=info msg=" --node-port-acceleration='disabled'" subsys=daemon level=info msg=" --node-port-algorithm='random'" subsys=daemon level=info msg=" --node-port-bind-protection='true'" subsys=daemon level=info msg=" --node-port-mode='snat'" subsys=daemon level=info msg=" --node-port-range='30000,32767'" subsys=daemon level=info msg=" --nodes-gc-interval='5m0s'" subsys=daemon level=info msg=" --operator-api-serve-addr='127.0.0.1:9234'" subsys=daemon level=info msg=" --policy-audit-mode='false'" subsys=daemon level=info msg=" --policy-queue-size='100'" subsys=daemon level=info msg=" --policy-trigger-interval='1s'" subsys=daemon level=info msg=" --pprof='false'" subsys=daemon level=info msg=" --pprof-address='localhost'" subsys=daemon level=info msg=" --pprof-port='6060'" subsys=daemon level=info msg=" --preallocate-bpf-maps='false'" subsys=daemon level=info msg=" --prepend-iptables-chains='true'" subsys=daemon level=info msg=" --procfs='/host/proc'" subsys=daemon level=info msg=" --prometheus-serve-addr=':9962'" subsys=daemon level=info msg=" --proxy-connect-timeout='2'" subsys=daemon level=info msg=" --proxy-gid='1337'" subsys=daemon level=info msg=" --proxy-idle-timeout-seconds='60'" subsys=daemon level=info msg=" --proxy-max-connection-duration-seconds='0'" subsys=daemon level=info msg=" --proxy-max-requests-per-connection='0'" subsys=daemon level=info msg=" --proxy-prometheus-port='9964'" subsys=daemon level=info msg=" --read-cni-conf=''" subsys=daemon level=info msg=" --remove-cilium-node-taints='true'" subsys=daemon level=info msg=" --restore='true'" subsys=daemon level=info msg=" --route-metric='0'" subsys=daemon level=info msg=" --routing-mode='tunnel'" subsys=daemon level=info msg=" --set-cilium-is-up-condition='true'" subsys=daemon level=info msg=" --set-cilium-node-taints='true'" subsys=daemon level=info msg=" --sidecar-istio-proxy-image='cilium/istio_proxy'" subsys=daemon level=info msg=" --single-cluster-route='false'" subsys=daemon level=info msg=" --skip-cnp-status-startup-clean='false'" subsys=daemon level=info msg=" --socket-path='/var/run/cilium/cilium.sock'" subsys=daemon level=info msg=" --srv6-encap-mode='reduced'" subsys=daemon level=info msg=" --state-dir='/var/run/cilium'" subsys=daemon level=info msg=" --synchronize-k8s-nodes='true'" subsys=daemon level=info msg=" --tofqdns-dns-reject-response-code='refused'" subsys=daemon level=info msg=" --tofqdns-enable-dns-compression='true'" subsys=daemon level=info msg=" --tofqdns-endpoint-max-ip-per-hostname='50'" subsys=daemon level=info msg=" --tofqdns-idle-connection-grace-period='0s'" subsys=daemon level=info msg=" --tofqdns-max-deferred-connection-deletes='10000'" subsys=daemon level=info msg=" --tofqdns-min-ttl='0'" subsys=daemon level=info msg=" --tofqdns-pre-cache=''" subsys=daemon level=info msg=" --tofqdns-proxy-port='0'" subsys=daemon level=info msg=" --tofqdns-proxy-response-max-delay='100ms'" subsys=daemon level=info msg=" --trace-payloadlen='128'" subsys=daemon level=info msg=" --trace-sock='true'" subsys=daemon level=info msg=" --tunnel=''" subsys=daemon level=info msg=" --tunnel-port='6082'" subsys=daemon level=info msg=" --tunnel-protocol='geneve'" subsys=daemon level=info msg=" --unmanaged-pod-watcher-interval='15'" subsys=daemon level=info msg=" --use-cilium-internal-ip-for-ipsec='false'" subsys=daemon level=info msg=" --version='false'" subsys=daemon level=info msg=" --vlan-bpf-bypass=''" subsys=daemon level=info msg=" --vtep-cidr=''" subsys=daemon level=info msg=" --vtep-endpoint=''" subsys=daemon level=info msg=" --vtep-mac=''" subsys=daemon level=info msg=" --vtep-mask=''" subsys=daemon level=info msg=" --wireguard-encapsulate='false'" subsys=daemon level=info msg=" --write-cni-conf-when-ready='/host/etc/cni/net.d/05-cilium.conflist'" subsys=daemon level=info msg=" _ _ _" subsys=daemon level=info msg=" ___|_| |_|_ _ _____" subsys=daemon level=info msg="| _| | | | | | |" subsys=daemon level=info msg="|___|_|_|_|___|_|_|_|" subsys=daemon level=info msg="Cilium 1.14.8 cf6e022e 2024-03-13T12:23:35-04:00 go version go1.21.8 linux/amd64" subsys=daemon level=info msg="clang (10.0.0) and kernel (5.15.0) versions: OK!" subsys=linux-datapath level=info msg="linking environment: OK!" subsys=linux-datapath level=info msg="Kernel config file not found: if the agent fails to start, check the system requirements at https://docs.cilium.io/en/stable/operations/system_requirements" subsys=probes level=info msg="Detected mounted BPF filesystem at /sys/fs/bpf" subsys=bpf level=info msg="Mounted cgroupv2 filesystem at /run/cilium/cgroupv2" subsys=cgroups level=info msg="Parsing base label prefixes from default label list" subsys=labels-filter level=info msg="Parsing additional label prefixes from user inputs: []" subsys=labels-filter level=info msg="Final label prefixes to be used for identity evaluation:" subsys=labels-filter level=info msg=" - reserved:.*" subsys=labels-filter level=info msg=" - :io\\.kubernetes\\.pod\\.namespace" subsys=labels-filter level=info msg=" - :io\\.cilium\\.k8s\\.namespace\\.labels" subsys=labels-filter level=info msg=" - :app\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:io\\.kubernetes" subsys=labels-filter level=info msg=" - !:kubernetes\\.io" subsys=labels-filter level=info msg=" - !:.*beta\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:k8s\\.io" subsys=labels-filter level=info msg=" - !:pod-template-generation" subsys=labels-filter level=info msg=" - !:pod-template-hash" subsys=labels-filter level=info msg=" - !:controller-revision-hash" subsys=labels-filter level=info msg=" - !:annotation.*" subsys=labels-filter level=info msg=" - !:etcd_node" subsys=labels-filter level=info msg=Invoked duration=1.361476ms function="pprof.glob..func1 (cell.go:50)" subsys=hive level=info msg=Invoked duration="63.742µs" function="gops.registerGopsHooks (cell.go:38)" subsys=hive level=info msg=Invoked duration="899.077µs" function="metrics.NewRegistry (registry.go:65)" subsys=hive level=info msg=Invoked duration="9.49µs" function="metrics.glob..func1 (cell.go:12)" subsys=hive level=info msg="Spire Delegate API Client is disabled as no socket path is configured" subsys=spire-delegate level=info msg="Mutual authentication handler is disabled as no port is configured" subsys=auth level=info msg=Invoked duration=111.163693ms function="cmd.glob..func4 (daemon_main.go:1607)" subsys=hive level=info msg=Invoked duration="54.301µs" function="gc.registerSignalHandler (cell.go:47)" subsys=hive level=info msg=Invoked duration="22.25µs" function="utime.initUtimeSync (cell.go:29)" subsys=hive level=info msg=Invoked duration="106.013µs" function="agentliveness.newAgentLivenessUpdater (agent_liveness.go:43)" subsys=hive level=info msg=Invoked duration="113.942µs" function="l2responder.NewL2ResponderReconciler (l2responder.go:63)" subsys=hive level=info msg=Invoked duration="254.235µs" function="garp.newGARPProcessor (processor.go:27)" subsys=hive level=info msg=Starting subsys=hive level=info msg="Started gops server" address="127.0.0.1:9890" subsys=gops level=info msg="Start hook executed" duration="523.819µs" function="gops.registerGopsHooks.func1 (cell.go:43)" subsys=hive level=info msg="Start hook executed" duration="3.61µs" function="metrics.NewRegistry.func1 (registry.go:86)" subsys=hive level=info msg="Establishing connection to apiserver" host="https://10.96.0.1:443" subsys=k8s-client level=info msg="Serving prometheus metrics on :9962" subsys=metrics level=info msg="Connected to apiserver" subsys=k8s-client level=info msg="Start hook executed" duration=9.583923ms function="client.(*compositeClientset).onStart" subsys=hive level=info msg="Start hook executed" duration=7.798669ms function="authmap.newAuthMap.func1 (cell.go:27)" subsys=hive level=info msg="Start hook executed" duration="84.172µs" function="configmap.newMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="70.392µs" function="signalmap.newMap.func1 (cell.go:44)" subsys=hive level=info msg="Start hook executed" duration="288.406µs" function="nodemap.newNodeMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="122.763µs" function="eventsmap.newEventsMap.func1 (cell.go:35)" subsys=hive level=info msg="Start hook executed" duration="110.962µs" function="*cni.cniConfigManager.Start" subsys=hive level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Wrote CNI configuration file to /host/etc/cni/net.d/05-cilium.conflist" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Start hook executed" duration=48.456764ms function="datapath.newDatapath.func1 (cells.go:113)" subsys=hive level=info msg="Restored 0 node IDs from the BPF map" subsys=linux-datapath level=info msg="Start hook executed" duration="65.401µs" function="datapath.newDatapath.func2 (cells.go:126)" subsys=hive level=info msg="Start hook executed" duration="8.98µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Node].Start" subsys=hive level=info msg="Start hook executed" duration="3.09µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNode].Start" subsys=hive level=info msg="Using autogenerated IPv4 allocation range" subsys=node v4Prefix=10.108.0.0/16 level=info msg="no local ciliumnode found, will not restore cilium internal ips from k8s" subsys=daemon level=info msg="Start hook executed" duration=103.760742ms function="node.NewLocalNodeStore.func1 (local_node_store.go:76)" subsys=hive level=info msg="Start hook executed" duration="6.91µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration=100.868416ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration="4.07µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Using discoveryv1.EndpointSlice" subsys=k8s level=info msg="Start hook executed" duration=101.152703ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Start hook executed" duration="6.321µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Pod].Start" subsys=hive level=info msg="Start hook executed" duration="54.021µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Namespace].Start" subsys=hive level=info msg="Start hook executed" duration="2.3µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="5.04µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumClusterwideNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="3.82µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumCIDRGroup].Start" subsys=hive level=info msg="Start hook executed" duration="116.362µs" function="endpointmanager.newDefaultEndpointManager.func1 (cell.go:203)" subsys=hive level=info msg="Start hook executed" duration="60.501µs" function="cmd.newPolicyTrifecta.func1 (policy.go:135)" subsys=hive level=info msg="Start hook executed" duration="64.952µs" function="*manager.manager.Start" subsys=hive level=info msg="Serving cilium node monitor v1.2 API at unix:///var/run/cilium/monitor1_2.sock" subsys=monitor-agent level=info msg="Start hook executed" duration="320.386µs" function="agent.newMonitorAgent.func1 (cell.go:61)" subsys=hive level=info msg="Start hook executed" duration="3.25µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumL2AnnouncementPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="9.26µs" function="*job.group.Start" subsys=hive level=info msg="Start hook executed" duration="219.084µs" function="proxy.newProxy.func1 (cell.go:55)" subsys=hive level=info msg="Start hook executed" duration="450.949µs" function="signal.provideSignalManager.func1 (cell.go:25)" subsys=hive level=info msg="Datapath signal listener running" subsys=signal level=info msg="Envoy: Starting xDS gRPC server listening on /var/run/cilium/envoy/sockets/xds.sock" subsys=envoy-manager level=info msg="Start hook executed" duration=1.388596ms function="auth.registerAuthManager.func1 (cell.go:109)" subsys=hive level=info msg="Start hook executed" duration="9.2µs" function="auth.registerGCJobs.func1 (cell.go:158)" subsys=hive level=info msg="Start hook executed" duration="25.13µs" function="*job.group.Start" subsys=hive level=warning msg="Deprecated value for --kube-proxy-replacement: disabled (use either \"true\", or \"false\")" subsys=daemon level=info msg="Auto-disabling \"enable-node-port\", \"enable-external-ips\", \"bpf-lb-sock\", \"enable-host-port\" features and falling back to \"enable-host-legacy-routing\"" subsys=daemon level=info msg="Inheriting MTU from external network interface" device=ens3 ipAddr=199.19.213.108 mtu=1500 subsys=mtu level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_ipcache, recreating and re-pinning map cilium_ipcache" file-path=/sys/fs/bpf/tc/globals/cilium_ipcache name=cilium_ipcache subsys=bpf level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_tunnel_map, recreating and re-pinning map cilium_tunnel_map" file-path=/sys/fs/bpf/tc/globals/cilium_tunnel_map name=cilium_tunnel_map subsys=bpf level=info msg="Restored services from maps" failedServices=0 restoredServices=0 subsys=service level=info msg="Restored backends from maps" failedBackends=0 restoredBackends=0 skippedBackends=0 subsys=service level=info msg="Reading old endpoints..." subsys=daemon level=info msg="No old endpoints found." subsys=daemon level=info msg="Waiting until all Cilium CRDs are available" subsys=k8s level=info msg="All Cilium CRDs have been found and are available" subsys=k8s level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=info msg="Successfully created CiliumNode resource" subsys=nodediscovery level=warning msg="Unable to create CiliumNode resource, will retry" error="ciliumnodes.cilium.io \"instance\" already exists" subsys=nodediscovery level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=warning msg="Waiting for k8s node information" error="required IPv4 PodCIDR not available" subsys=k8s level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=info msg="Received own node information from API server" ipAddr.ipv4=199.19.213.108 ipAddr.ipv6="" k8sNodeIP=199.19.213.108 labels="map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:]" nodeName=instance subsys=k8s v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="k8s mode: Allowing localhost to reach local endpoints" subsys=daemon level=info msg="Detected devices" devices="[]" subsys=linux-datapath level=info msg="Enabling k8s event listener" subsys=k8s-watcher level=info msg="Removing stale endpoint interfaces" subsys=daemon level=info msg="Waiting until local node addressing before starting watchers depending on it" subsys=k8s-watcher level=info msg="Skipping kvstore configuration" subsys=daemon level=info msg="Initializing node addressing" subsys=daemon level=info msg="Initializing cluster-pool IPAM" subsys=ipam v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="Restoring endpoints..." subsys=daemon level=info msg="Endpoints restored" failed=0 restored=0 subsys=daemon level=info msg="Addressing information:" subsys=daemon level=info msg=" Cluster-Name: default" subsys=daemon level=info msg=" Cluster-ID: 0" subsys=daemon level=info msg=" Local node-name: instance" subsys=daemon level=info msg=" Node-IPv6: " subsys=daemon level=info msg=" External-Node IPv4: 199.19.213.108" subsys=daemon level=info msg=" Internal-Node IPv4: 10.0.0.72" subsys=daemon level=info msg=" IPv4 allocation prefix: 10.0.0.0/24" subsys=daemon level=info msg=" Loopback IPv4: 169.254.42.1" subsys=daemon level=info msg=" Local IPv4 addresses:" subsys=daemon level=info msg=" - 199.19.213.108" subsys=daemon level=info msg=" - 172.17.0.100" subsys=daemon level=info msg="Node updated" clusterName=default nodeName=instance subsys=nodemanager level=info msg="Adding local node to cluster" node="{instance default [{InternalIP 199.19.213.108} {CiliumInternalIP 10.0.0.72}] 10.0.0.0/24 [] [] 10.0.0.112 0 local 0 map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:] map[] 1 }" subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Waiting until all pre-existing resources have been received" subsys=k8s-watcher level=info msg="Initializing identity allocator" subsys=identity-cache level=info msg="Allocating identities between range" cluster-id=0 max=65535 min=256 subsys=identity-cache level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.core.bpf_jit_enable sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.all.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.fib_multipath_use_neigh sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.unprivileged_bpf_disabled sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.timer_migration sysParamValue=0 level=info msg="Setting up BPF datapath" bpfClockSource=ktime bpfInsnSet="" subsys=datapath-loader level=info msg="Iptables rules installed" subsys=iptables level=info msg="Adding new proxy port rules for cilium-dns-egress:39065" id=cilium-dns-egress subsys=proxy level=info msg="Iptables proxy rules installed" subsys=iptables level=info msg="Start hook executed" duration=2.381532912s function="cmd.newDaemonPromise.func1 (daemon_main.go:1663)" subsys=hive level=info msg="Starting IP identity watcher" subsys=ipcache level=info msg="Initializing daemon" subsys=daemon level=info msg="Validating configured node address ranges" subsys=daemon level=info msg="Starting connection tracking garbage collector" subsys=daemon level=info msg="Start hook executed" duration="22.671µs" function="utime.initUtimeSync.func1 (cell.go:33)" subsys=hive level=info msg="Start hook executed" duration="13.381µs" function="*job.group.Start" subsys=hive level=info msg="Start hook executed" duration="47.361µs" function="l2respondermap.newMap.func1 (l2_responder_map4.go:44)" subsys=hive level=info msg="Start hook executed" duration="5.13µs" function="*job.group.Start" subsys=hive level=info msg="Initial scan of connection tracking completed" subsys=ct-gc level=info msg="Regenerating restored endpoints" numRestored=0 subsys=daemon level=info msg="Creating host endpoint" subsys=daemon level=info msg="Finished regenerating restored endpoints" regenerated=0 subsys=daemon total=0 level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3975 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Deleted orphan backends" orphanBackends=0 subsys=service level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3975 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3975 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Launching Cilium health daemon" subsys=daemon level=info msg="Launching Cilium health endpoint" subsys=daemon level=info msg="Started healthz status API server" address="127.0.0.1:9879" subsys=daemon level=info msg="Processing queued endpoint deletion requests from /var/run/cilium/deleteQueue" subsys=daemon level=info msg="processing 0 queued deletion requests" subsys=daemon level=info msg="Initializing Cilium API" subsys=daemon level=info msg="Daemon initialization completed" bootstrapTime=3.358004067s subsys=daemon level=info msg="Hubble server is disabled" subsys=hubble level=info msg="Serving cilium API at unix:///var/run/cilium/cilium.sock" subsys=daemon level=info msg="Compiled new BPF template" BPFCompilationTime=319.548628ms file-path=/var/run/cilium/state/templates/c96476dcae2765824efa48d346191ab9293ff8dba1e1403f0d4bf024530285e4/bpf_host.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3975 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1931 ipv4=10.0.0.112 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1931 identityLabels="reserved:health" ipv4=10.0.0.112 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1931 identity=4 identityLabels="reserved:health" ipv4=10.0.0.112 ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.151 2c0ffaad-39c3-47bf-ad13-929f37b59ace default }" containerID=c490b3333f75f64235f67b68101ab7615935822a6da4fdfc1acf9f7acf889495 datapathConfiguration="&{false false false false false }" interface=lxc3f3240b0c4b1 k8sPodName=kube-system/coredns-7c96b6546b-wnmwp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c490b3333f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1321 ipv4=10.0.0.151 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-wnmwp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c490b3333f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1321 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.151 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-wnmwp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:kube-system]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.244 eb4f91f9-0261-4e2d-b531-402a450ebf91 default }" containerID=da0e267c23dd224d27ef5ad2bc75ee56d77b4a1107964f3fa09f9d0fe685ce04 datapathConfiguration="&{false false false false false }" interface=lxcfb423a0e702f k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-5rf5z labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=da0e267c23 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2448 ipv4=10.0.0.244 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-5rf5z subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=da0e267c23 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2448 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=d02310c7-c5f3-4429-9e4f-7d5c29ec4bb1,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=d02310c7-c5f3-4429-9e4f-7d5c29ec4bb1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.244 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-5rf5z subsys=endpoint level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=coredns;k8s:io.kubernetes.pod.namespace=kube-system;k8s:k8s-app=kube-dns;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=c490b3333f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1321 identity=60032 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.151 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-wnmwp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c490b3333f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1321 identity=60032 ipv4=10.0.0.151 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-wnmwp subsys=endpoint level=info msg="Invalid state transition skipped" containerID=da0e267c23 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2448 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.244 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-5rf5z line=611 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=certgen;k8s:batch.kubernetes.io/controller-uid=d02310c7-c5f3-4429-9e4f-7d5c29ec4bb1;k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen;k8s:controller-uid=d02310c7-c5f3-4429-9e4f-7d5c29ec4bb1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;k8s:job-name=envoy-gateway-gateway-helm-certgen;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=da0e267c23 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2448 identity=26604 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=d02310c7-c5f3-4429-9e4f-7d5c29ec4bb1,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=d02310c7-c5f3-4429-9e4f-7d5c29ec4bb1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.244 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-5rf5z oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=da0e267c23 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2448 identity=26604 ipv4=10.0.0.244 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-5rf5z subsys=endpoint level=info msg="Serving cilium health API at unix:///var/run/cilium/health.sock" subsys=health-server level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Compiled new BPF template" BPFCompilationTime=1.048479941s file-path=/var/run/cilium/state/templates/e8c27da45ff6ebcfe28e401021550f53dd2613dabda839e209031c809cf63182/bpf_lxc.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1931 identity=4 ipv4=10.0.0.112 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c490b3333f datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1321 identity=60032 ipv4=10.0.0.151 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-wnmwp subsys=endpoint level=info msg="Successful endpoint creation" containerID=c490b3333f datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1321 identity=60032 ipv4=10.0.0.151 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-wnmwp subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=da0e267c23 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2448 identity=26604 ipv4=10.0.0.244 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-5rf5z subsys=endpoint level=info msg="Successful endpoint creation" containerID=da0e267c23 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2448 identity=26604 ipv4=10.0.0.244 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-5rf5z subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=da0e267c23 endpointID=2448 k8sNamespace=envoy-gateway-system k8sPodName=envoy-gateway-gateway-helm-certgen-5rf5z subsys=daemon level=info msg="Releasing key" key="[k8s:app=certgen k8s:batch.kubernetes.io/controller-uid=d02310c7-c5f3-4429-9e4f-7d5c29ec4bb1 k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen k8s:controller-uid=d02310c7-c5f3-4429-9e4f-7d5c29ec4bb1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen k8s:io.kubernetes.pod.namespace=envoy-gateway-system k8s:job-name=envoy-gateway-gateway-helm-certgen]" subsys=allocator level=info msg="Removed endpoint" containerID=da0e267c23 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2448 identity=26604 ipv4=10.0.0.244 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-5rf5z subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.150 6d32b03f-8219-4495-af14-cd81402f304b default }" containerID=60aeb8d5b4d511e8ed4d8a269f0ee4aca72765ed9c8f9025c7d26d1e929cad3a datapathConfiguration="&{false false false false false }" interface=lxc0607f5b3500e k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-57wj9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=60aeb8d5b4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3634 ipv4=10.0.0.150 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-57wj9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=60aeb8d5b4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3634 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.150 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-57wj9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=60aeb8d5b4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3634 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.150 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-57wj9 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=envoy-gateway;k8s:app.kubernetes.io/name=gateway-helm;k8s:control-plane=envoy-gateway;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=60aeb8d5b4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3634 identity=3512 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.150 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-57wj9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=60aeb8d5b4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3634 identity=3512 ipv4=10.0.0.150 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-57wj9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=60aeb8d5b4 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3634 identity=3512 ipv4=10.0.0.150 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-57wj9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=60aeb8d5b4 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3634 identity=3512 ipv4=10.0.0.150 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-57wj9 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3975 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_03975 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_03975 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_03975 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_03975:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00003 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00003 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00003 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00003:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3975 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.61 c0ccf22c-14f6-4442-b64a-3bb8ed0c6ee9 default }" containerID=b43caf569382f493fb4cd69352d4e263b2253a273d4ade266fe2e119a96340b6 datapathConfiguration="&{false false false false false }" interface=lxc013e88ccf77a k8sPodName=kube-system/coredns-67659f764b-wwswk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b43caf5693 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1832 ipv4=10.0.0.61 ipv6= k8sPodName=kube-system/coredns-67659f764b-wwswk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b43caf5693 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1832 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.61 ipv6= k8sPodName=kube-system/coredns-67659f764b-wwswk subsys=endpoint level=info msg="Identity of endpoint changed" containerID=b43caf5693 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1832 identity=60032 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.61 ipv6= k8sPodName=kube-system/coredns-67659f764b-wwswk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b43caf5693 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1832 identity=60032 ipv4=10.0.0.61 ipv6= k8sPodName=kube-system/coredns-67659f764b-wwswk subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.230 c10280e7-5998-4a18-a482-e855c50f73b5 default }" containerID=dc7ac998a4d297c107325ec51e4b2e00df4b5d975991f26976fdf57e8b860dbf datapathConfiguration="&{false false false false false }" interface=lxcb95698e45315 k8sPodName=kube-system/coredns-67659f764b-d8l5r labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=dc7ac998a4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=482 ipv4=10.0.0.230 ipv6= k8sPodName=kube-system/coredns-67659f764b-d8l5r subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=dc7ac998a4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=482 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.230 ipv6= k8sPodName=kube-system/coredns-67659f764b-d8l5r subsys=endpoint level=info msg="Identity of endpoint changed" containerID=dc7ac998a4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=482 identity=60032 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.230 ipv6= k8sPodName=kube-system/coredns-67659f764b-d8l5r oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=dc7ac998a4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=482 identity=60032 ipv4=10.0.0.230 ipv6= k8sPodName=kube-system/coredns-67659f764b-d8l5r subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b43caf5693 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1832 identity=60032 ipv4=10.0.0.61 ipv6= k8sPodName=kube-system/coredns-67659f764b-wwswk subsys=endpoint level=info msg="Successful endpoint creation" containerID=b43caf5693 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1832 identity=60032 ipv4=10.0.0.61 ipv6= k8sPodName=kube-system/coredns-67659f764b-wwswk subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=dc7ac998a4 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=482 identity=60032 ipv4=10.0.0.230 ipv6= k8sPodName=kube-system/coredns-67659f764b-d8l5r subsys=endpoint level=info msg="Successful endpoint creation" containerID=dc7ac998a4 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=482 identity=60032 ipv4=10.0.0.230 ipv6= k8sPodName=kube-system/coredns-67659f764b-d8l5r subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.186 1fefcc35-fee1-439d-a196-d5361d1ba377 default }" containerID=55a8d8c3026ac54318df046ca7884353e9fd09ff247feaaa1b20b7aedb44ee3c datapathConfiguration="&{false false false false false }" interface=lxc78e9535a9494 k8sPodName=local-path-storage/local-path-provisioner-679c578f5-w5pl8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=55a8d8c302 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=938 ipv4=10.0.0.186 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-w5pl8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=55a8d8c302 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=938 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.186 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-w5pl8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=local-path-provisioner;k8s:app.kubernetes.io/name=local-path-provisioner;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=55a8d8c302 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=938 identity=12383 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.186 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-w5pl8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=55a8d8c302 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=938 identity=12383 ipv4=10.0.0.186 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-w5pl8 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=55a8d8c302 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=938 identity=12383 ipv4=10.0.0.186 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-w5pl8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=55a8d8c302 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=938 identity=12383 ipv4=10.0.0.186 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-w5pl8 subsys=daemon level=info msg="Delete endpoint request" containerID=c490b3333f endpointID=1321 k8sNamespace=kube-system k8sPodName=coredns-7c96b6546b-wnmwp subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=coredns k8s:io.kubernetes.pod.namespace=kube-system k8s:k8s-app=kube-dns]" subsys=allocator level=info msg="Removed endpoint" containerID=c490b3333f datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1321 identity=60032 ipv4=10.0.0.151 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-wnmwp subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.7 b55b41cd-3422-4070-bfe4-169d8be78d3c default }" containerID=36afeed1ec82cebab94af9e827378b788b7b6b1dd2df1c2518b2dd7bdca2108b datapathConfiguration="&{false false false false false }" interface=lxc02c30428942d k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-txzhn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=36afeed1ec datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=942 ipv4=10.0.0.7 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-txzhn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=36afeed1ec datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=942 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.7 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-txzhn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.4 c05b6dd9-d344-412e-819f-83606e8de617 default }" containerID=9d3deb7eac2b6c01975c2b49a16e769763a7c53f1ad4cd62438d3925f1ee8dfd datapathConfiguration="&{false false false false false }" interface=lxc7ea024759937 k8sPodName=cert-manager/cert-manager-75c4c745bc-rwbfb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9d3deb7eac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=198 ipv4=10.0.0.4 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-rwbfb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9d3deb7eac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=198 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.4 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-rwbfb subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app=cainjector;k8s:app.kubernetes.io/component=cainjector;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cainjector;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=36afeed1ec datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=942 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.7 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-txzhn line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=36afeed1ec datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=942 identity=35524 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.7 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-txzhn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=36afeed1ec datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=942 identity=35524 ipv4=10.0.0.7 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-txzhn subsys=endpoint level=info msg="Invalid state transition skipped" containerID=9d3deb7eac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=198 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.4 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-rwbfb line=611 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=cert-manager;k8s:app.kubernetes.io/component=controller;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cert-manager;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9d3deb7eac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=198 identity=22146 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.4 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-rwbfb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9d3deb7eac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=198 identity=22146 ipv4=10.0.0.4 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-rwbfb subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.223 c51c4c9f-1753-4e64-91fb-2bbc8a58bd6a default }" containerID=be4bee7d4416a4e77f64b4e21a0c9300f9d51149d8cf269f2e0d44ddbcb974dc datapathConfiguration="&{false false false false false }" interface=lxc49bc93c3012a k8sPodName=cert-manager/cert-manager-webhook-548949fc64-9k9zz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=be4bee7d44 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=505 ipv4=10.0.0.223 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-9k9zz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=be4bee7d44 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=505 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.223 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-9k9zz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=webhook;k8s:app.kubernetes.io/component=webhook;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=webhook;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=be4bee7d44 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=505 identity=12497 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.223 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-9k9zz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=be4bee7d44 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=505 identity=12497 ipv4=10.0.0.223 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-9k9zz subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9d3deb7eac datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=198 identity=22146 ipv4=10.0.0.4 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-rwbfb subsys=endpoint level=info msg="Successful endpoint creation" containerID=9d3deb7eac datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=198 identity=22146 ipv4=10.0.0.4 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-rwbfb subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=be4bee7d44 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=505 identity=12497 ipv4=10.0.0.223 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-9k9zz subsys=endpoint level=info msg="Successful endpoint creation" containerID=be4bee7d44 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=505 identity=12497 ipv4=10.0.0.223 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-9k9zz subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=36afeed1ec datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=942 identity=35524 ipv4=10.0.0.7 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-txzhn subsys=endpoint level=info msg="Successful endpoint creation" containerID=36afeed1ec datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=942 identity=35524 ipv4=10.0.0.7 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-txzhn subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.121 dab9fd24-311b-42f5-98d0-254d740cc162 default }" containerID=36209abeb557e2a4836710a0e2acfbd210296edaa436aaa9e5957c4ed9fa3db9 datapathConfiguration="&{false false false false false }" interface=lxc556264b9fa91 k8sPodName=cert-manager/cert-manager-startupapicheck-vzss9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=36209abeb5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3808 ipv4=10.0.0.121 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-vzss9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=36209abeb5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3808 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=c5b18c42-1409-43a5-8da2-e2730d0d01f8,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=c5b18c42-1409-43a5-8da2-e2730d0d01f8,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.121 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-vzss9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=startupapicheck;k8s:app.kubernetes.io/component=startupapicheck;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=startupapicheck;k8s:app.kubernetes.io/version=v1.11.5;k8s:batch.kubernetes.io/controller-uid=c5b18c42-1409-43a5-8da2-e2730d0d01f8;k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck;k8s:controller-uid=c5b18c42-1409-43a5-8da2-e2730d0d01f8;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck;k8s:io.kubernetes.pod.namespace=cert-manager;k8s:job-name=cert-manager-startupapicheck;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=36209abeb5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3808 identity=11476 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=c5b18c42-1409-43a5-8da2-e2730d0d01f8,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=c5b18c42-1409-43a5-8da2-e2730d0d01f8,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.121 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-vzss9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=36209abeb5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3808 identity=11476 ipv4=10.0.0.121 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-vzss9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=36209abeb5 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3808 identity=11476 ipv4=10.0.0.121 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-vzss9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=36209abeb5 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3808 identity=11476 ipv4=10.0.0.121 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-vzss9 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=36209abeb5 endpointID=3808 k8sNamespace=cert-manager k8sPodName=cert-manager-startupapicheck-vzss9 subsys=daemon level=info msg="Releasing key" key="[k8s:app=startupapicheck k8s:app.kubernetes.io/component=startupapicheck k8s:app.kubernetes.io/instance=cert-manager k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=startupapicheck k8s:app.kubernetes.io/version=v1.11.5 k8s:batch.kubernetes.io/controller-uid=c5b18c42-1409-43a5-8da2-e2730d0d01f8 k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck k8s:controller-uid=c5b18c42-1409-43a5-8da2-e2730d0d01f8 k8s:helm.sh/chart=cert-manager-v1.11.5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager k8s:io.cilium.k8s.namespace.labels.name=cert-manager k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck k8s:io.kubernetes.pod.namespace=cert-manager k8s:job-name=cert-manager-startupapicheck]" subsys=allocator level=info msg="Removed endpoint" containerID=36209abeb5 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3808 identity=11476 ipv4=10.0.0.121 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-vzss9 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.67 c5c70983-c00e-4e23-a543-03e0567e6af6 default }" containerID=7c4867bc4272b49df6a7bcc6ff6272c6508c5709f922ffedab7aac70c7aafc37 datapathConfiguration="&{false false false false false }" interface=lxcfe67408833f1 k8sPodName=ingress-nginx/ingress-nginx-admission-create-t2r5p labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7c4867bc42 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3679 ipv4=10.0.0.67 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-t2r5p subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7c4867bc42 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3679 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=bc8df972-1386-4f36-8e66-84a1d65ddba6,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=bc8df972-1386-4f36-8e66-84a1d65ddba6,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.67 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-t2r5p subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=bc8df972-1386-4f36-8e66-84a1d65ddba6;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create;k8s:controller-uid=bc8df972-1386-4f36-8e66-84a1d65ddba6;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-create;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=7c4867bc42 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3679 identity=43238 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=bc8df972-1386-4f36-8e66-84a1d65ddba6,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=bc8df972-1386-4f36-8e66-84a1d65ddba6,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.67 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-t2r5p oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7c4867bc42 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3679 identity=43238 ipv4=10.0.0.67 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-t2r5p subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7c4867bc42 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3679 identity=43238 ipv4=10.0.0.67 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-t2r5p subsys=endpoint level=info msg="Successful endpoint creation" containerID=7c4867bc42 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3679 identity=43238 ipv4=10.0.0.67 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-t2r5p subsys=daemon level=info msg="Delete endpoint request" containerID=7c4867bc42 endpointID=3679 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-create-t2r5p subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=bc8df972-1386-4f36-8e66-84a1d65ddba6 k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create k8s:controller-uid=bc8df972-1386-4f36-8e66-84a1d65ddba6 k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-create]" subsys=allocator level=info msg="Removed endpoint" containerID=7c4867bc42 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3679 identity=43238 ipv4=10.0.0.67 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-t2r5p subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.253 508dce45-8b5c-4cdc-96ad-507fdb438cfe default }" containerID=7a3639894a9902859efe33baece463f122f0fd15472da891b68cba8b2d87e16d datapathConfiguration="&{false false false false false }" interface=lxc813c0c8355b5 k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-5dlmb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7a3639894a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2220 ipv4=10.0.0.253 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-5dlmb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7a3639894a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2220 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.253 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-5dlmb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=default-backend;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend;k8s:io.kubernetes.pod.namespace=ingress-nginx;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7a3639894a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2220 identity=10699 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.253 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-5dlmb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7a3639894a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2220 identity=10699 ipv4=10.0.0.253 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-5dlmb subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=7a3639894a datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2220 identity=10699 ipv4=10.0.0.253 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-5dlmb subsys=endpoint level=info msg="Successful endpoint creation" containerID=7a3639894a datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2220 identity=10699 ipv4=10.0.0.253 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-5dlmb subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.188 0e946f84-cb19-4269-9f2a-ff68e9450669 default }" containerID=8dbab648d51b47aa3c5133801396b0c6634c4826412f0df62c9657d0d94ab228 datapathConfiguration="&{false false false false false }" interface=lxcc7041b512182 k8sPodName=ingress-nginx/ingress-nginx-admission-patch-d7kzq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8dbab648d5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1247 ipv4=10.0.0.188 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-d7kzq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8dbab648d5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1247 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=258fdece-f12c-4cfe-a841-68a6d01fc524,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=258fdece-f12c-4cfe-a841-68a6d01fc524,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.188 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-d7kzq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=258fdece-f12c-4cfe-a841-68a6d01fc524;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch;k8s:controller-uid=258fdece-f12c-4cfe-a841-68a6d01fc524;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-patch;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8dbab648d5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1247 identity=11010 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=258fdece-f12c-4cfe-a841-68a6d01fc524,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=258fdece-f12c-4cfe-a841-68a6d01fc524,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.188 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-d7kzq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8dbab648d5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1247 identity=11010 ipv4=10.0.0.188 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-d7kzq subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8dbab648d5 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1247 identity=11010 ipv4=10.0.0.188 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-d7kzq subsys=endpoint level=info msg="Successful endpoint creation" containerID=8dbab648d5 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1247 identity=11010 ipv4=10.0.0.188 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-d7kzq subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=8dbab648d5 endpointID=1247 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-patch-d7kzq subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=258fdece-f12c-4cfe-a841-68a6d01fc524 k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch k8s:controller-uid=258fdece-f12c-4cfe-a841-68a6d01fc524 k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-patch]" subsys=allocator level=info msg="Removed endpoint" containerID=8dbab648d5 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1247 identity=11010 ipv4=10.0.0.188 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-d7kzq subsys=endpoint level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"messaging-topology-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9443 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-messaging-topology-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=ac65a402-199f-44a3-9959-61ea79823d9b] Description:}]" policyAddRequest=082a962d-855f-4998-aeaa-366a45c8ae14 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-messaging-topology-operator subsys=k8s-watcher level=info msg="Policy imported via API, recalculating..." policyAddRequest=082a962d-855f-4998-aeaa-366a45c8ae14 policyRevision=2 subsys=daemon level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"rabbitmq-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-cluster-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=e5fd1b06-e3ac-4e03-9348-866df509dac0] Description:}]" policyAddRequest=5181e7bd-f145-421d-ac94-101495784ebe subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=5181e7bd-f145-421d-ac94-101495784ebe policyRevision=3 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-cluster-operator subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.173 e2effe2f-fc9a-4dba-9dc9-7823718e4750 default }" containerID=298aa9867e43c97d5ffb2c4e7d5faed892644ba714b6c8f5c50604a3a26681cb datapathConfiguration="&{false false false false false }" interface=lxc7c8ef69458e2 k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-r9jwf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=298aa9867e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1261 ipv4=10.0.0.173 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-r9jwf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=298aa9867e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1261 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.9.0,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.173 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-r9jwf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=298aa9867e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1261 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.173 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-r9jwf line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=2.9.0;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=298aa9867e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1261 identity=36312 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.9.0,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.173 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-r9jwf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=298aa9867e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1261 identity=36312 ipv4=10.0.0.173 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-r9jwf subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=298aa9867e datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1261 identity=36312 ipv4=10.0.0.173 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-r9jwf subsys=endpoint level=info msg="Successful endpoint creation" containerID=298aa9867e datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1261 identity=36312 ipv4=10.0.0.173 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-r9jwf subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.183 40509c6d-4ae6-4291-bbf7-8c1f879b91cd default }" containerID=de8a9bae6b28c5567f7340c7a56857730421bddd1192b89d367bf9112c6266bc datapathConfiguration="&{false false false false false }" interface=lxc590a742bb2ab k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-mv2vw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=de8a9bae6b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=145 ipv4=10.0.0.183 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-mv2vw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=de8a9bae6b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=145 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.14.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.183 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-mv2vw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=messaging-topology-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=1.14.1;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=de8a9bae6b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=145 identity=59084 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.14.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.183 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-mv2vw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=de8a9bae6b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=145 identity=59084 ipv4=10.0.0.183 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-mv2vw subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=de8a9bae6b datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=145 identity=59084 ipv4=10.0.0.183 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-mv2vw subsys=endpoint level=info msg="Successful endpoint creation" containerID=de8a9bae6b datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=145 identity=59084 ipv4=10.0.0.183 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-mv2vw subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.226 2fcbab4a-6c13-4437-b30d-244bc9214453 default }" containerID=52bc1042890aca63fbdd5cf3f84a4c86c5d45f878df9c98495681c45e3a7878f datapathConfiguration="&{false false false false false }" interface=lxcc5d78731720b k8sPodName=openstack/pxc-operator-7cff949c8b-6g4t4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=52bc104289 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3519 ipv4=10.0.0.226 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-6g4t4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=52bc104289 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3519 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.226 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-6g4t4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=operator;k8s:app.kubernetes.io/instance=pxc-operator;k8s:app.kubernetes.io/name=pxc-operator;k8s:app.kubernetes.io/part-of=pxc-operator;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=52bc104289 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3519 identity=59298 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.226 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-6g4t4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=52bc104289 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3519 identity=59298 ipv4=10.0.0.226 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-6g4t4 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=52bc104289 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=3519 identity=59298 ipv4=10.0.0.226 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-6g4t4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=52bc104289 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=3519 identity=59298 ipv4=10.0.0.226 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-6g4t4 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.242 18700643-f782-437a-9b6c-f5face8db747 default }" containerID=6e1578815835f6507134f7373b887306cc243951adb47e29f6eca3df026d0263 datapathConfiguration="&{false false false false false }" interface=lxcc13a565d2900 k8sPodName=local-path-storage/helper-pod-create-pvc-0f981203-e900-4d6e-a1c4-893abc487293 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6e15788158 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=146 ipv4=10.0.0.242 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0f981203-e900-4d6e-a1c4-893abc487293 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6e15788158 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=146 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.242 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0f981203-e900-4d6e-a1c4-893abc487293 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=6e15788158 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=146 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.242 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0f981203-e900-4d6e-a1c4-893abc487293 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6e15788158 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=146 identity=28050 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.242 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0f981203-e900-4d6e-a1c4-893abc487293 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6e15788158 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=146 identity=28050 ipv4=10.0.0.242 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0f981203-e900-4d6e-a1c4-893abc487293 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6e15788158 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=146 identity=28050 ipv4=10.0.0.242 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0f981203-e900-4d6e-a1c4-893abc487293 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.55 2a480608-b7ce-43be-ae28-3927b0109780 default }" containerID=2e4398ac44a94a2e1389b9033fe9fde5ce65ca060933ed07c466d958d1c3316e datapathConfiguration="&{false false false false false }" interface=lxc0b0969bb4ed6 k8sPodName=openstack/percona-xtradb-haproxy-0 labels="[]" subsys=daemon sync-build=true level=info msg="Successful endpoint creation" containerID=6e15788158 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=146 identity=28050 ipv4=10.0.0.242 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0f981203-e900-4d6e-a1c4-893abc487293 subsys=daemon level=info msg="New endpoint" containerID=2e4398ac44 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1346 ipv4=10.0.0.55 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2e4398ac44 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1346 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.55 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=haproxy;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2e4398ac44 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1346 identity=726 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.55 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2e4398ac44 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1346 identity=726 ipv4=10.0.0.55 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2e4398ac44 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1346 identity=726 ipv4=10.0.0.55 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=2e4398ac44 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1346 identity=726 ipv4=10.0.0.55 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=6e15788158 endpointID=146 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-0f981203-e900-4d6e-a1c4-893abc487293 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=6e15788158 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=146 identity=28050 ipv4=10.0.0.242 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0f981203-e900-4d6e-a1c4-893abc487293 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.65 74d25c05-c149-47ed-a52f-8ae0579235e8 default }" containerID=edceca9dfdad9de6b2600c9cff493013344c2a6c01986f579f47cf04397c6a92 datapathConfiguration="&{false false false false false }" interface=lxc8ec07f6ad6ab k8sPodName=openstack/percona-xtradb-pxc-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=edceca9dfd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3460 ipv4=10.0.0.65 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=edceca9dfd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3460 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.65 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=pxc;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=edceca9dfd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3460 identity=50257 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.65 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=edceca9dfd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3460 identity=50257 ipv4=10.0.0.65 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=edceca9dfd datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=3460 identity=50257 ipv4=10.0.0.65 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=edceca9dfd datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=3460 identity=50257 ipv4=10.0.0.65 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.19 2856492e-3cac-4b26-8b95-780af88e1d15 default }" containerID=9b7c572aeca162105bb8c3aef22373f59871285724914c131b3d26b2ba029d62 datapathConfiguration="&{false false false false false }" interface=lxc292e1036b235 k8sPodName=openstack/memcached-memcached-6479589586-zrnjg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9b7c572aec datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=196 ipv4=10.0.0.19 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-zrnjg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9b7c572aec datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=196 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.19 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-zrnjg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=memcached;k8s:component=server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=memcached;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9b7c572aec datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=196 identity=12408 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.19 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-zrnjg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9b7c572aec datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=196 identity=12408 ipv4=10.0.0.19 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-zrnjg subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=9b7c572aec datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=196 identity=12408 ipv4=10.0.0.19 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-zrnjg subsys=endpoint level=info msg="Successful endpoint creation" containerID=9b7c572aec datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=196 identity=12408 ipv4=10.0.0.19 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-zrnjg subsys=daemon level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"keycloak\",\"k8s:app.kubernetes.io/instance\":\"keycloak\",\"k8s:app.kubernetes.io/name\":\"keycloak\",\"k8s:io.kubernetes.pod.namespace\":\"auth-system\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:7800 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:8080 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=keycloak k8s:io.cilium.k8s.policy.namespace=auth-system k8s:io.cilium.k8s.policy.uid=a28986b4-ae8c-4096-9f5d-04131975845b] Description:}]" policyAddRequest=0cc14ef9-15f2-421b-b1d8-9fc776f347b2 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=0cc14ef9-15f2-421b-b1d8-9fc776f347b2 policyRevision=4 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=keycloak subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.94 dd81d7cd-d94d-40c2-a1ce-5fdf9ab9bc61 default }" containerID=21557704254026ec87e95a85267255ee3870f6eedce293bb221302e984e349b7 datapathConfiguration="&{false false false false false }" interface=lxc3e32f7b93c65 k8sPodName=auth-system/keycloak-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2155770425 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2417 ipv4=10.0.0.94 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2155770425 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2417 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.94 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:auth-system k8s:io.cilium.k8s.namespace.labels.name:auth-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=keycloak;k8s:app.kubernetes.io/instance=keycloak;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=keycloak;k8s:app.kubernetes.io/version=24.0.5;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=keycloak-21.4.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system;k8s:io.cilium.k8s.namespace.labels.name=auth-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keycloak;k8s:io.kubernetes.pod.namespace=auth-system;k8s:statefulset.kubernetes.io/pod-name=keycloak-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2155770425 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2417 identity=3973 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.94 ipv6= k8sPodName=auth-system/keycloak-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2155770425 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2417 identity=3973 ipv4=10.0.0.94 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=2155770425 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2417 identity=3973 ipv4=10.0.0.94 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=2155770425 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2417 identity=3973 ipv4=10.0.0.94 ipv6= k8sPodName=auth-system/keycloak-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.03501971984224126 newInterval=7m30s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.162 9c8e36ee-db93-4365-8cab-85cc6f5c0105 default }" containerID=2d7d2eeefe084dd445ebb10ff3123c648fd41eb54dd38ed0d041aae0b63056de datapathConfiguration="&{false false false false false }" interface=lxc99af3869a1b6 k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-w8vkc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2d7d2eeefe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2600 ipv4=10.0.0.162 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-w8vkc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2d7d2eeefe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2600 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.162 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-w8vkc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:secretgen-controller]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=2d7d2eeefe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2600 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.162 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-w8vkc line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=secretgen-controller;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa;k8s:io.kubernetes.pod.namespace=secretgen-controller;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2d7d2eeefe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2600 identity=46537 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.162 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-w8vkc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2d7d2eeefe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2600 identity=46537 ipv4=10.0.0.162 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-w8vkc subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2d7d2eeefe datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2600 identity=46537 ipv4=10.0.0.162 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-w8vkc subsys=endpoint level=info msg="Successful endpoint creation" containerID=2d7d2eeefe datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2600 identity=46537 ipv4=10.0.0.162 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-w8vkc subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.92 5695abab-89a6-4fa5-bf7e-e0d1f0e136f5 default }" containerID=3e46b1cd5898c7934ed9f02a2c7a1b2e50b2310d7ed0b264e80510fd63897c8a datapathConfiguration="&{false false false false false }" interface=lxcf75a031392ec k8sPodName=monitoring/kube-prometheus-stack-admission-create-dq78n labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3e46b1cd58 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=890 ipv4=10.0.0.92 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-dq78n subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3e46b1cd58 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=890 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=18207534-8983-4bad-87dc-1b505df9fc30,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=18207534-8983-4bad-87dc-1b505df9fc30,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.92 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-dq78n subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=3e46b1cd58 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=890 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.92 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-dq78n line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-create;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=18207534-8983-4bad-87dc-1b505df9fc30;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=18207534-8983-4bad-87dc-1b505df9fc30;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-create;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3e46b1cd58 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=890 identity=14601 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=18207534-8983-4bad-87dc-1b505df9fc30,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=18207534-8983-4bad-87dc-1b505df9fc30,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.92 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-dq78n oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3e46b1cd58 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=890 identity=14601 ipv4=10.0.0.92 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-dq78n subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3e46b1cd58 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=890 identity=14601 ipv4=10.0.0.92 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-dq78n subsys=endpoint level=info msg="Successful endpoint creation" containerID=3e46b1cd58 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=890 identity=14601 ipv4=10.0.0.92 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-dq78n subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=3e46b1cd58 endpointID=890 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-create-dq78n subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-create k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=18207534-8983-4bad-87dc-1b505df9fc30 k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=18207534-8983-4bad-87dc-1b505df9fc30 k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-create k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=3e46b1cd58 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=890 identity=14601 ipv4=10.0.0.92 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-dq78n subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.231 15742403-bece-42a1-9dea-761ed1b6025d default }" containerID=f279d5a773c230961a41be3e2765db937ca631d50f7c5651d7e4204c9de5a8a6 datapathConfiguration="&{false false false false false }" interface=lxc938a0ee3f08b k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-89ggq labels="[]" subsys=daemon sync-build=true level=info msg="Create endpoint request" addressing="&{10.0.0.187 c3c610f9-0f4c-4119-bbb1-348f8e6c0cce default }" containerID=a8872f6f8d66e27cfcd41a2ac841ceea5aef2a4f06ac931354900dfb72ab9d6e datapathConfiguration="&{false false false false false }" interface=lxc958050f51d2b k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-nfb5l labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a8872f6f8d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1401 ipv4=10.0.0.187 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-nfb5l subsys=endpoint level=info msg="New endpoint" containerID=f279d5a773 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=157 ipv4=10.0.0.231 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-89ggq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a8872f6f8d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1401 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.187 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-nfb5l subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring]" subsys=crd-allocator level=info msg="Resolving identity labels (blocking)" containerID=f279d5a773 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=157 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.231 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-89ggq subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-operator;k8s:app.kubernetes.io/component=prometheus-operator;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:chart=kube-prometheus-stack-60.2.0;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a8872f6f8d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1401 identity=55221 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.187 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-nfb5l oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring]" subsys=crd-allocator level=info msg="Waiting for endpoint to be generated" containerID=a8872f6f8d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1401 identity=55221 ipv4=10.0.0.187 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-nfb5l subsys=endpoint level=info msg="Invalid state transition skipped" containerID=f279d5a773 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=157 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.231 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-89ggq line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=metrics;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-state-metrics;k8s:app.kubernetes.io/part-of=kube-state-metrics;k8s:app.kubernetes.io/version=2.12.0;k8s:helm.sh/chart=kube-state-metrics-5.20.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f279d5a773 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=157 identity=13690 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.231 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-89ggq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f279d5a773 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=157 identity=13690 ipv4=10.0.0.231 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-89ggq subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f279d5a773 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=157 identity=13690 ipv4=10.0.0.231 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-89ggq subsys=endpoint level=info msg="Successful endpoint creation" containerID=f279d5a773 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=157 identity=13690 ipv4=10.0.0.231 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-89ggq subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=a8872f6f8d datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1401 identity=55221 ipv4=10.0.0.187 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-nfb5l subsys=endpoint level=info msg="Successful endpoint creation" containerID=a8872f6f8d datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1401 identity=55221 ipv4=10.0.0.187 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-nfb5l subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.74 85004a4b-c6d5-4073-a97c-f5d422ed5d78 default }" containerID=592c367b71fba21d66e9c5e1e69f0f387826d747696bccc1315ba14a6e10a9a0 datapathConfiguration="&{false false false false false }" interface=lxc6e3f732b3dff k8sPodName=monitoring/kube-prometheus-stack-grafana-5987c9d454-q6w82 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=592c367b71 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3773 ipv4=10.0.0.74 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-5987c9d454-q6w82 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=592c367b71 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3773 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.74 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-5987c9d454-q6w82 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/name=grafana;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=592c367b71 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3773 identity=16045 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.74 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-5987c9d454-q6w82 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=592c367b71 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3773 identity=16045 ipv4=10.0.0.74 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-5987c9d454-q6w82 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=592c367b71 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3773 identity=16045 ipv4=10.0.0.74 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-5987c9d454-q6w82 subsys=endpoint level=info msg="Successful endpoint creation" containerID=592c367b71 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3773 identity=16045 ipv4=10.0.0.74 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-5987c9d454-q6w82 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.139 b0715c96-25c9-4174-b9dc-cd76825d0f7b default }" containerID=c9ebe93293bd372a3a1c899591df77f1ce29d97bd822c562a6840352f4d54207 datapathConfiguration="&{false false false false false }" interface=lxcf27abdb3c6a2 k8sPodName=monitoring/kube-prometheus-stack-admission-patch-829tw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c9ebe93293 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1271 ipv4=10.0.0.139 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-829tw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c9ebe93293 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1271 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=004821d6-af08-4008-b73e-87387e2f314a,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=004821d6-af08-4008-b73e-87387e2f314a,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.139 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-829tw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-patch;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=004821d6-af08-4008-b73e-87387e2f314a;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=004821d6-af08-4008-b73e-87387e2f314a;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-patch;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c9ebe93293 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1271 identity=48292 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=004821d6-af08-4008-b73e-87387e2f314a,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=004821d6-af08-4008-b73e-87387e2f314a,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.139 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-829tw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c9ebe93293 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1271 identity=48292 ipv4=10.0.0.139 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-829tw subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c9ebe93293 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1271 identity=48292 ipv4=10.0.0.139 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-829tw subsys=endpoint level=info msg="Successful endpoint creation" containerID=c9ebe93293 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1271 identity=48292 ipv4=10.0.0.139 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-829tw subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=c9ebe93293 endpointID=1271 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-patch-829tw subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-patch k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=004821d6-af08-4008-b73e-87387e2f314a k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=004821d6-af08-4008-b73e-87387e2f314a k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-patch k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=c9ebe93293 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1271 identity=48292 ipv4=10.0.0.139 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-829tw subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.246 4d02b6e9-1087-49e1-b7a2-dd52d6f359fc default }" containerID=29f052b914bb6159faba5381b762ecf6fd0eae3d83f266dd5296a661521747db datapathConfiguration="&{false false false false false }" interface=lxc0c392c67df10 k8sPodName=local-path-storage/helper-pod-create-pvc-4f7a6a8c-ba9e-44d0-b9d4-f77a0970941b labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=29f052b914 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=245 ipv4=10.0.0.246 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4f7a6a8c-ba9e-44d0-b9d4-f77a0970941b subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=29f052b914 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=245 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.246 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4f7a6a8c-ba9e-44d0-b9d4-f77a0970941b subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=29f052b914 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=245 identity=28050 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.246 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4f7a6a8c-ba9e-44d0-b9d4-f77a0970941b oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=29f052b914 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=245 identity=28050 ipv4=10.0.0.246 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4f7a6a8c-ba9e-44d0-b9d4-f77a0970941b subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=29f052b914 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=245 identity=28050 ipv4=10.0.0.246 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4f7a6a8c-ba9e-44d0-b9d4-f77a0970941b subsys=endpoint level=info msg="Successful endpoint creation" containerID=29f052b914 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=245 identity=28050 ipv4=10.0.0.246 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4f7a6a8c-ba9e-44d0-b9d4-f77a0970941b subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.213 f69ca1aa-724a-444b-9c87-786b60791ef1 default }" containerID=974c1b99237caac58945cc66ae16e229f3da4902e6c7e11cf4047f8e7d3d7531 datapathConfiguration="&{false false false false false }" interface=lxca5df76ea9751 k8sPodName=local-path-storage/helper-pod-create-pvc-bd82e145-21e9-4156-a0a5-61fc5351b583 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=974c1b9923 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=868 ipv4=10.0.0.213 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-bd82e145-21e9-4156-a0a5-61fc5351b583 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=974c1b9923 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=868 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.213 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-bd82e145-21e9-4156-a0a5-61fc5351b583 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=974c1b9923 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=868 identity=28050 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.213 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-bd82e145-21e9-4156-a0a5-61fc5351b583 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=974c1b9923 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=868 identity=28050 ipv4=10.0.0.213 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-bd82e145-21e9-4156-a0a5-61fc5351b583 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=974c1b9923 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=868 identity=28050 ipv4=10.0.0.213 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-bd82e145-21e9-4156-a0a5-61fc5351b583 subsys=endpoint level=info msg="Successful endpoint creation" containerID=974c1b9923 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=868 identity=28050 ipv4=10.0.0.213 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-bd82e145-21e9-4156-a0a5-61fc5351b583 subsys=daemon level=info msg="Delete endpoint request" containerID=29f052b914 endpointID=245 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-4f7a6a8c-ba9e-44d0-b9d4-f77a0970941b subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Delete endpoint request" containerID=974c1b9923 endpointID=868 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-bd82e145-21e9-4156-a0a5-61fc5351b583 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=29f052b914 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=245 identity=28050 ipv4=10.0.0.246 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4f7a6a8c-ba9e-44d0-b9d4-f77a0970941b subsys=endpoint level=info msg="Removed endpoint" containerID=974c1b9923 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=868 identity=28050 ipv4=10.0.0.213 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-bd82e145-21e9-4156-a0a5-61fc5351b583 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.208 48672fed-2af3-4dec-9a69-e9911e061c12 default }" containerID=81192d4919d239a5b97110d20fa2403345b844ec047807332acce96139eb2aa9 datapathConfiguration="&{false false false false false }" interface=lxca2173ee7431c k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=81192d4919 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=991 ipv4=10.0.0.208 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=81192d4919 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=991 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.208 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=81192d4919 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=991 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.208 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=prometheus;k8s:app.kubernetes.io/version=2.51.2;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus;k8s:io.kubernetes.pod.namespace=monitoring;k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus;k8s:operator.prometheus.io/shard=0;k8s:prometheus=kube-prometheus-stack-prometheus;k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=81192d4919 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=991 identity=15839 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.208 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=81192d4919 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=991 identity=15839 ipv4=10.0.0.208 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.95 d7178883-a4c2-414c-b1e8-82c0d4321cc6 default }" containerID=151d0eeb17ce2b7e6ed67c24c8d46ee4f7b80c9e973cd0e9fb2d8b95ef11fe89 datapathConfiguration="&{false false false false false }" interface=lxc4b842bc5ee39 k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=151d0eeb17 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=679 ipv4=10.0.0.95 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=151d0eeb17 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=679 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.95 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:alertmanager=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=alertmanager;k8s:app.kubernetes.io/version=0.27.0;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=151d0eeb17 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=679 identity=9747 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.95 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=151d0eeb17 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=679 identity=9747 ipv4=10.0.0.95 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=81192d4919 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=991 identity=15839 ipv4=10.0.0.208 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=81192d4919 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=991 identity=15839 ipv4=10.0.0.208 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=151d0eeb17 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=679 identity=9747 ipv4=10.0.0.95 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=151d0eeb17 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=679 identity=9747 ipv4=10.0.0.95 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.40 a60a96df-a65c-4ee3-8d9b-43b5b5d69bfc default }" containerID=c920f8fde5e55cecfd39a6bfca88432cdae634ae89ac16529f301df916142876 datapathConfiguration="&{false false false false false }" interface=lxc2c4cf4745873 k8sPodName=local-path-storage/helper-pod-create-pvc-abcfe9a8-7492-4f9f-9fa3-68b99067efd3 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c920f8fde5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=889 ipv4=10.0.0.40 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-abcfe9a8-7492-4f9f-9fa3-68b99067efd3 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c920f8fde5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=889 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.40 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-abcfe9a8-7492-4f9f-9fa3-68b99067efd3 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c920f8fde5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=889 identity=28050 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.40 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-abcfe9a8-7492-4f9f-9fa3-68b99067efd3 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c920f8fde5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=889 identity=28050 ipv4=10.0.0.40 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-abcfe9a8-7492-4f9f-9fa3-68b99067efd3 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c920f8fde5 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=889 identity=28050 ipv4=10.0.0.40 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-abcfe9a8-7492-4f9f-9fa3-68b99067efd3 subsys=endpoint level=info msg="Successful endpoint creation" containerID=c920f8fde5 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=889 identity=28050 ipv4=10.0.0.40 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-abcfe9a8-7492-4f9f-9fa3-68b99067efd3 subsys=daemon level=info msg="Delete endpoint request" containerID=c920f8fde5 endpointID=889 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-abcfe9a8-7492-4f9f-9fa3-68b99067efd3 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=c920f8fde5 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=889 identity=28050 ipv4=10.0.0.40 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-abcfe9a8-7492-4f9f-9fa3-68b99067efd3 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.232 7b4d2799-dfa3-4810-838c-a10acccdf6f0 default }" containerID=040d943b265814094f06a690137f6ed2568e5152bdffaae8a2f1c0473100c1d3 datapathConfiguration="&{false false false false false }" interface=lxcb83c8ebd4999 k8sPodName=openstack/rabbitmq-keystone-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=040d943b26 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3116 ipv4=10.0.0.232 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=040d943b26 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3116 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.232 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=040d943b26 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3116 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.232 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-keystone;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=040d943b26 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3116 identity=2969 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.232 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=040d943b26 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3116 identity=2969 ipv4=10.0.0.232 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=040d943b26 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3116 identity=2969 ipv4=10.0.0.232 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=040d943b26 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3116 identity=2969 ipv4=10.0.0.232 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.215 1b6ed70b-51ab-422b-9aac-814d20ba9081 default }" containerID=9544a1fc8f3a1601c9b9b247c43eb804726928fcb02438044536c9ff051c8ee4 datapathConfiguration="&{false false false false false }" interface=lxc632c8eb18708 k8sPodName=openstack/keystone-api-9657cdc45-bc9hc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9544a1fc8f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1987 ipv4=10.0.0.215 ipv6= k8sPodName=openstack/keystone-api-9657cdc45-bc9hc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9544a1fc8f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1987 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.215 ipv6= k8sPodName=openstack/keystone-api-9657cdc45-bc9hc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9544a1fc8f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1987 identity=50588 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.215 ipv6= k8sPodName=openstack/keystone-api-9657cdc45-bc9hc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9544a1fc8f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1987 identity=50588 ipv4=10.0.0.215 ipv6= k8sPodName=openstack/keystone-api-9657cdc45-bc9hc subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=9544a1fc8f datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1987 identity=50588 ipv4=10.0.0.215 ipv6= k8sPodName=openstack/keystone-api-9657cdc45-bc9hc subsys=endpoint level=info msg="Successful endpoint creation" containerID=9544a1fc8f datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1987 identity=50588 ipv4=10.0.0.215 ipv6= k8sPodName=openstack/keystone-api-9657cdc45-bc9hc subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.68 bfe176f5-e899-41ca-937c-7c5f2ba23230 default }" containerID=793a9ab5e074aeebf74204a90a3ced0ddda2b852c79727f7b0f4067492d234a0 datapathConfiguration="&{false false false false false }" interface=lxcf6baac54a82f k8sPodName=openstack/keystone-credential-setup-q2pnm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=793a9ab5e0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2050 ipv4=10.0.0.68 ipv6= k8sPodName=openstack/keystone-credential-setup-q2pnm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=793a9ab5e0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2050 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=9bd174eb-1109-49c7-a6da-c9e142881983,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=9bd174eb-1109-49c7-a6da-c9e142881983,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.68 ipv6= k8sPodName=openstack/keystone-credential-setup-q2pnm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=9bd174eb-1109-49c7-a6da-c9e142881983;k8s:batch.kubernetes.io/job-name=keystone-credential-setup;k8s:component=credential-setup;k8s:controller-uid=9bd174eb-1109-49c7-a6da-c9e142881983;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-credential-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=793a9ab5e0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2050 identity=15011 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=9bd174eb-1109-49c7-a6da-c9e142881983,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=9bd174eb-1109-49c7-a6da-c9e142881983,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.68 ipv6= k8sPodName=openstack/keystone-credential-setup-q2pnm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=793a9ab5e0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2050 identity=15011 ipv4=10.0.0.68 ipv6= k8sPodName=openstack/keystone-credential-setup-q2pnm subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=793a9ab5e0 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2050 identity=15011 ipv4=10.0.0.68 ipv6= k8sPodName=openstack/keystone-credential-setup-q2pnm subsys=endpoint level=info msg="Successful endpoint creation" containerID=793a9ab5e0 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2050 identity=15011 ipv4=10.0.0.68 ipv6= k8sPodName=openstack/keystone-credential-setup-q2pnm subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=793a9ab5e0 endpointID=2050 k8sNamespace=openstack k8sPodName=keystone-credential-setup-q2pnm subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=9bd174eb-1109-49c7-a6da-c9e142881983 k8s:batch.kubernetes.io/job-name=keystone-credential-setup k8s:component=credential-setup k8s:controller-uid=9bd174eb-1109-49c7-a6da-c9e142881983 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-credential-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=793a9ab5e0 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2050 identity=15011 ipv4=10.0.0.68 ipv6= k8sPodName=openstack/keystone-credential-setup-q2pnm subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.62 01c11982-7b45-4302-bc6d-7228032211e8 default }" containerID=118c2796d422f367d20898635ee06a49a5cd0bbe7fa9a235aeb020994997b216 datapathConfiguration="&{false false false false false }" interface=lxc3c357ccf548b k8sPodName=openstack/keystone-db-init-df2lx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=118c2796d4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3943 ipv4=10.0.0.62 ipv6= k8sPodName=openstack/keystone-db-init-df2lx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=118c2796d4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3943 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=1ba84143-227a-4eb4-afaa-e218b2b654b2,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=1ba84143-227a-4eb4-afaa-e218b2b654b2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.62 ipv6= k8sPodName=openstack/keystone-db-init-df2lx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=1ba84143-227a-4eb4-afaa-e218b2b654b2;k8s:batch.kubernetes.io/job-name=keystone-db-init;k8s:component=db-init;k8s:controller-uid=1ba84143-227a-4eb4-afaa-e218b2b654b2;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-init;k8s:release_group=keystone;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=118c2796d4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3943 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.62 ipv6= k8sPodName=openstack/keystone-db-init-df2lx line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=118c2796d4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3943 identity=21460 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=1ba84143-227a-4eb4-afaa-e218b2b654b2,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=1ba84143-227a-4eb4-afaa-e218b2b654b2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.62 ipv6= k8sPodName=openstack/keystone-db-init-df2lx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=118c2796d4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3943 identity=21460 ipv4=10.0.0.62 ipv6= k8sPodName=openstack/keystone-db-init-df2lx subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=118c2796d4 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3943 identity=21460 ipv4=10.0.0.62 ipv6= k8sPodName=openstack/keystone-db-init-df2lx subsys=endpoint level=info msg="Successful endpoint creation" containerID=118c2796d4 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3943 identity=21460 ipv4=10.0.0.62 ipv6= k8sPodName=openstack/keystone-db-init-df2lx subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=118c2796d4 endpointID=3943 k8sNamespace=openstack k8sPodName=keystone-db-init-df2lx subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=1ba84143-227a-4eb4-afaa-e218b2b654b2 k8s:batch.kubernetes.io/job-name=keystone-db-init k8s:component=db-init k8s:controller-uid=1ba84143-227a-4eb4-afaa-e218b2b654b2 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=118c2796d4 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3943 identity=21460 ipv4=10.0.0.62 ipv6= k8sPodName=openstack/keystone-db-init-df2lx subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.241 63b30b28-06b8-4155-88ba-64e5125ab2da default }" containerID=8abca5224d17919e026ffa39c6ae2c90511d2bc1554e377001f55848df54f77a datapathConfiguration="&{false false false false false }" interface=lxcf701a9b6da7f k8sPodName=openstack/keystone-fernet-setup-t5wpj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8abca5224d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1501 ipv4=10.0.0.241 ipv6= k8sPodName=openstack/keystone-fernet-setup-t5wpj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8abca5224d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1501 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=5f2e2d97-d0b8-4c76-94c5-81ca18d1e4f8,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=5f2e2d97-d0b8-4c76-94c5-81ca18d1e4f8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.241 ipv6= k8sPodName=openstack/keystone-fernet-setup-t5wpj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=5f2e2d97-d0b8-4c76-94c5-81ca18d1e4f8;k8s:batch.kubernetes.io/job-name=keystone-fernet-setup;k8s:component=fernet-setup;k8s:controller-uid=5f2e2d97-d0b8-4c76-94c5-81ca18d1e4f8;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-fernet-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=8abca5224d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1501 identity=15297 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=5f2e2d97-d0b8-4c76-94c5-81ca18d1e4f8,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=5f2e2d97-d0b8-4c76-94c5-81ca18d1e4f8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.241 ipv6= k8sPodName=openstack/keystone-fernet-setup-t5wpj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8abca5224d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1501 identity=15297 ipv4=10.0.0.241 ipv6= k8sPodName=openstack/keystone-fernet-setup-t5wpj subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8abca5224d datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1501 identity=15297 ipv4=10.0.0.241 ipv6= k8sPodName=openstack/keystone-fernet-setup-t5wpj subsys=endpoint level=info msg="Successful endpoint creation" containerID=8abca5224d datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1501 identity=15297 ipv4=10.0.0.241 ipv6= k8sPodName=openstack/keystone-fernet-setup-t5wpj subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=8abca5224d endpointID=1501 k8sNamespace=openstack k8sPodName=keystone-fernet-setup-t5wpj subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=5f2e2d97-d0b8-4c76-94c5-81ca18d1e4f8 k8s:batch.kubernetes.io/job-name=keystone-fernet-setup k8s:component=fernet-setup k8s:controller-uid=5f2e2d97-d0b8-4c76-94c5-81ca18d1e4f8 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-fernet-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=8abca5224d datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1501 identity=15297 ipv4=10.0.0.241 ipv6= k8sPodName=openstack/keystone-fernet-setup-t5wpj subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.6 74319336-1cf1-4823-8f3f-a3da2e2165ae default }" containerID=4de61f001c5bd813994cfb92eae07240db138e5d284bd5056a5e731774d4016e datapathConfiguration="&{false false false false false }" interface=lxcb290ad7dd7e6 k8sPodName=openstack/keystone-db-sync-kdjv7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4de61f001c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2619 ipv4=10.0.0.6 ipv6= k8sPodName=openstack/keystone-db-sync-kdjv7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4de61f001c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2619 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=0e6f4a09-e88f-44ec-9d41-0a400d333260,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=0e6f4a09-e88f-44ec-9d41-0a400d333260,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.6 ipv6= k8sPodName=openstack/keystone-db-sync-kdjv7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=0e6f4a09-e88f-44ec-9d41-0a400d333260;k8s:batch.kubernetes.io/job-name=keystone-db-sync;k8s:component=db-sync;k8s:controller-uid=0e6f4a09-e88f-44ec-9d41-0a400d333260;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-sync;k8s:release_group=keystone;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=4de61f001c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2619 identity=13431 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=0e6f4a09-e88f-44ec-9d41-0a400d333260,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=0e6f4a09-e88f-44ec-9d41-0a400d333260,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.6 ipv6= k8sPodName=openstack/keystone-db-sync-kdjv7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4de61f001c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2619 identity=13431 ipv4=10.0.0.6 ipv6= k8sPodName=openstack/keystone-db-sync-kdjv7 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4de61f001c datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2619 identity=13431 ipv4=10.0.0.6 ipv6= k8sPodName=openstack/keystone-db-sync-kdjv7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=4de61f001c datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2619 identity=13431 ipv4=10.0.0.6 ipv6= k8sPodName=openstack/keystone-db-sync-kdjv7 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=4de61f001c endpointID=2619 k8sNamespace=openstack k8sPodName=keystone-db-sync-kdjv7 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=0e6f4a09-e88f-44ec-9d41-0a400d333260 k8s:batch.kubernetes.io/job-name=keystone-db-sync k8s:component=db-sync k8s:controller-uid=0e6f4a09-e88f-44ec-9d41-0a400d333260 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-sync k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=4de61f001c datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2619 identity=13431 ipv4=10.0.0.6 ipv6= k8sPodName=openstack/keystone-db-sync-kdjv7 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.139 0fc294dd-bb26-4355-a349-55cb02dcfa6c default }" containerID=f85368d0c9306b5140bfbb053d71e1315f45f4517c40e243b8d513a6627bd595 datapathConfiguration="&{false false false false false }" interface=lxceddd041e9834 k8sPodName=openstack/keystone-rabbit-init-gn2wh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f85368d0c9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1496 ipv4=10.0.0.139 ipv6= k8sPodName=openstack/keystone-rabbit-init-gn2wh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f85368d0c9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1496 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=48246cf3-00df-4430-9523-e441d307a1b4,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=48246cf3-00df-4430-9523-e441d307a1b4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.139 ipv6= k8sPodName=openstack/keystone-rabbit-init-gn2wh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=f85368d0c9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1496 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.139 ipv6= k8sPodName=openstack/keystone-rabbit-init-gn2wh line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=48246cf3-00df-4430-9523-e441d307a1b4;k8s:batch.kubernetes.io/job-name=keystone-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=48246cf3-00df-4430-9523-e441d307a1b4;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-rabbit-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f85368d0c9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1496 identity=29778 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=48246cf3-00df-4430-9523-e441d307a1b4,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=48246cf3-00df-4430-9523-e441d307a1b4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.139 ipv6= k8sPodName=openstack/keystone-rabbit-init-gn2wh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f85368d0c9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1496 identity=29778 ipv4=10.0.0.139 ipv6= k8sPodName=openstack/keystone-rabbit-init-gn2wh subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f85368d0c9 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1496 identity=29778 ipv4=10.0.0.139 ipv6= k8sPodName=openstack/keystone-rabbit-init-gn2wh subsys=endpoint level=info msg="Successful endpoint creation" containerID=f85368d0c9 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1496 identity=29778 ipv4=10.0.0.139 ipv6= k8sPodName=openstack/keystone-rabbit-init-gn2wh subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=f85368d0c9 endpointID=1496 k8sNamespace=openstack k8sPodName=keystone-rabbit-init-gn2wh subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=48246cf3-00df-4430-9523-e441d307a1b4 k8s:batch.kubernetes.io/job-name=keystone-rabbit-init k8s:component=rabbit-init k8s:controller-uid=48246cf3-00df-4430-9523-e441d307a1b4 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-rabbit-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=f85368d0c9 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1496 identity=29778 ipv4=10.0.0.139 ipv6= k8sPodName=openstack/keystone-rabbit-init-gn2wh subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.116 64e5b7c5-186a-4e44-ac0a-1b036f72e984 default }" containerID=af09213709c2fc6c8b261e9fb1bfa011ebd18e698918fd2fa107a75407a8451d datapathConfiguration="&{false false false false false }" interface=lxc1bb380ad988d k8sPodName=openstack/keystone-domain-manage-4wnnz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=af09213709 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1273 ipv4=10.0.0.116 ipv6= k8sPodName=openstack/keystone-domain-manage-4wnnz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=af09213709 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1273 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=96187ddb-08e4-44d8-be5a-79857eb09484,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=96187ddb-08e4-44d8-be5a-79857eb09484,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.116 ipv6= k8sPodName=openstack/keystone-domain-manage-4wnnz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=96187ddb-08e4-44d8-be5a-79857eb09484;k8s:batch.kubernetes.io/job-name=keystone-domain-manage;k8s:component=domain-manage;k8s:controller-uid=96187ddb-08e4-44d8-be5a-79857eb09484;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-domain-manage;k8s:release_group=keystone;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=af09213709 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1273 identity=36005 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=96187ddb-08e4-44d8-be5a-79857eb09484,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=96187ddb-08e4-44d8-be5a-79857eb09484,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.116 ipv6= k8sPodName=openstack/keystone-domain-manage-4wnnz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=af09213709 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1273 identity=36005 ipv4=10.0.0.116 ipv6= k8sPodName=openstack/keystone-domain-manage-4wnnz subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=af09213709 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1273 identity=36005 ipv4=10.0.0.116 ipv6= k8sPodName=openstack/keystone-domain-manage-4wnnz subsys=endpoint level=info msg="Successful endpoint creation" containerID=af09213709 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1273 identity=36005 ipv4=10.0.0.116 ipv6= k8sPodName=openstack/keystone-domain-manage-4wnnz subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=af09213709 endpointID=1273 k8sNamespace=openstack k8sPodName=keystone-domain-manage-4wnnz subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=96187ddb-08e4-44d8-be5a-79857eb09484 k8s:batch.kubernetes.io/job-name=keystone-domain-manage k8s:component=domain-manage k8s:controller-uid=96187ddb-08e4-44d8-be5a-79857eb09484 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-domain-manage k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=af09213709 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1273 identity=36005 ipv4=10.0.0.116 ipv6= k8sPodName=openstack/keystone-domain-manage-4wnnz subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.18 1965ffbf-6165-4d32-95e2-37ed0c9f3416 default }" containerID=d1e852504cbb2284fd3703ca432af9a902bdd5328e07e7c02ca552328ef8e377 datapathConfiguration="&{false false false false false }" interface=lxce9db02a579ca k8sPodName=openstack/keystone-bootstrap-qgrsw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d1e852504c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1094 ipv4=10.0.0.18 ipv6= k8sPodName=openstack/keystone-bootstrap-qgrsw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d1e852504c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1094 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=72136bb8-8c98-411b-a01a-841ec1ca6bdf,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=72136bb8-8c98-411b-a01a-841ec1ca6bdf,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.18 ipv6= k8sPodName=openstack/keystone-bootstrap-qgrsw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=72136bb8-8c98-411b-a01a-841ec1ca6bdf;k8s:batch.kubernetes.io/job-name=keystone-bootstrap;k8s:component=bootstrap;k8s:controller-uid=72136bb8-8c98-411b-a01a-841ec1ca6bdf;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-bootstrap;k8s:release_group=keystone;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=d1e852504c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1094 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.18 ipv6= k8sPodName=openstack/keystone-bootstrap-qgrsw line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=d1e852504c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1094 identity=1448 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=72136bb8-8c98-411b-a01a-841ec1ca6bdf,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=72136bb8-8c98-411b-a01a-841ec1ca6bdf,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.18 ipv6= k8sPodName=openstack/keystone-bootstrap-qgrsw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d1e852504c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1094 identity=1448 ipv4=10.0.0.18 ipv6= k8sPodName=openstack/keystone-bootstrap-qgrsw subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d1e852504c datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1094 identity=1448 ipv4=10.0.0.18 ipv6= k8sPodName=openstack/keystone-bootstrap-qgrsw subsys=endpoint level=info msg="Successful endpoint creation" containerID=d1e852504c datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1094 identity=1448 ipv4=10.0.0.18 ipv6= k8sPodName=openstack/keystone-bootstrap-qgrsw subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=d1e852504c endpointID=1094 k8sNamespace=openstack k8sPodName=keystone-bootstrap-qgrsw subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=72136bb8-8c98-411b-a01a-841ec1ca6bdf k8s:batch.kubernetes.io/job-name=keystone-bootstrap k8s:component=bootstrap k8s:controller-uid=72136bb8-8c98-411b-a01a-841ec1ca6bdf k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-bootstrap k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=d1e852504c datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1094 identity=1448 ipv4=10.0.0.18 ipv6= k8sPodName=openstack/keystone-bootstrap-qgrsw subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.159 6c71faba-b8c5-4f2f-a527-20283f1a467e default }" containerID=df2603bbdd88f86c7b3f964b2a7ade0f7ded3b92d2eb5ec60aa94b0cefdba37a datapathConfiguration="&{false false false false false }" interface=lxc03b17dcacdb0 k8sPodName=openstack/horizon-cd585f56c-9vq7l labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=df2603bbdd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=188 ipv4=10.0.0.159 ipv6= k8sPodName=openstack/horizon-cd585f56c-9vq7l subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=df2603bbdd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=188 identityLabels="k8s:application=horizon,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=horizon" ipv4=10.0.0.159 ipv6= k8sPodName=openstack/horizon-cd585f56c-9vq7l subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=horizon;k8s:component=server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=horizon;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=horizon;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=df2603bbdd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=188 identity=24333 identityLabels="k8s:application=horizon,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=horizon" ipv4=10.0.0.159 ipv6= k8sPodName=openstack/horizon-cd585f56c-9vq7l oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=df2603bbdd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=188 identity=24333 ipv4=10.0.0.159 ipv6= k8sPodName=openstack/horizon-cd585f56c-9vq7l subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.53 b08aebc6-babb-48c1-b5d9-05ab17749a8f default }" containerID=c59f2c4391e5244a6024b0df443372a2f146c734cfdd57f6dc6caa20335f37c8 datapathConfiguration="&{false false false false false }" interface=lxcd4df4a747f7b k8sPodName=openstack/horizon-cd585f56c-bgrzt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c59f2c4391 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1097 ipv4=10.0.0.53 ipv6= k8sPodName=openstack/horizon-cd585f56c-bgrzt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c59f2c4391 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1097 identityLabels="k8s:application=horizon,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=horizon" ipv4=10.0.0.53 ipv6= k8sPodName=openstack/horizon-cd585f56c-bgrzt subsys=endpoint level=info msg="Identity of endpoint changed" containerID=c59f2c4391 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1097 identity=24333 identityLabels="k8s:application=horizon,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=horizon" ipv4=10.0.0.53 ipv6= k8sPodName=openstack/horizon-cd585f56c-bgrzt oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c59f2c4391 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1097 identity=24333 ipv4=10.0.0.53 ipv6= k8sPodName=openstack/horizon-cd585f56c-bgrzt subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.18 d7e26e19-4705-4a84-96ac-863133d04679 default }" containerID=b523b1883b16fdd7b2271dd049aadf679ef90b1af80e27f8835248193e8e0010 datapathConfiguration="&{false false false false false }" interface=lxcadd9aa48f343 k8sPodName=openstack/horizon-cd585f56c-qnqjv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b523b1883b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1760 ipv4=10.0.0.18 ipv6= k8sPodName=openstack/horizon-cd585f56c-qnqjv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b523b1883b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1760 identityLabels="k8s:application=horizon,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=horizon" ipv4=10.0.0.18 ipv6= k8sPodName=openstack/horizon-cd585f56c-qnqjv subsys=endpoint level=info msg="Identity of endpoint changed" containerID=b523b1883b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1760 identity=24333 identityLabels="k8s:application=horizon,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=horizon" ipv4=10.0.0.18 ipv6= k8sPodName=openstack/horizon-cd585f56c-qnqjv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b523b1883b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1760 identity=24333 ipv4=10.0.0.18 ipv6= k8sPodName=openstack/horizon-cd585f56c-qnqjv subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=df2603bbdd datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=188 identity=24333 ipv4=10.0.0.159 ipv6= k8sPodName=openstack/horizon-cd585f56c-9vq7l subsys=endpoint level=info msg="Successful endpoint creation" containerID=df2603bbdd datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=188 identity=24333 ipv4=10.0.0.159 ipv6= k8sPodName=openstack/horizon-cd585f56c-9vq7l subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=c59f2c4391 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1097 identity=24333 ipv4=10.0.0.53 ipv6= k8sPodName=openstack/horizon-cd585f56c-bgrzt subsys=endpoint level=info msg="Successful endpoint creation" containerID=c59f2c4391 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1097 identity=24333 ipv4=10.0.0.53 ipv6= k8sPodName=openstack/horizon-cd585f56c-bgrzt subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.149 3885f750-c3bf-4a37-bca9-e96c4c57ed62 default }" containerID=9b8f1c68d8b0b847907d1be37732335d0ec1de3cd1a23ee904765ea0e6bd3052 datapathConfiguration="&{false false false false false }" interface=lxc1d7553577bf7 k8sPodName=openstack/horizon-db-init-22hqb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9b8f1c68d8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1574 ipv4=10.0.0.149 ipv6= k8sPodName=openstack/horizon-db-init-22hqb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9b8f1c68d8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1574 identityLabels="k8s:application=horizon,k8s:batch.kubernetes.io/controller-uid=08333a9e-952b-4416-8fc9-dbcec2c0a395,k8s:batch.kubernetes.io/job-name=horizon-db-init,k8s:component=db-init,k8s:controller-uid=08333a9e-952b-4416-8fc9-dbcec2c0a395,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=horizon-db-init,k8s:release_group=horizon" ipv4=10.0.0.149 ipv6= k8sPodName=openstack/horizon-db-init-22hqb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Rewrote endpoint BPF program" containerID=b523b1883b datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1760 identity=24333 ipv4=10.0.0.18 ipv6= k8sPodName=openstack/horizon-cd585f56c-qnqjv subsys=endpoint level=info msg="Successful endpoint creation" containerID=b523b1883b datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1760 identity=24333 ipv4=10.0.0.18 ipv6= k8sPodName=openstack/horizon-cd585f56c-qnqjv subsys=daemon level=info msg="Allocated new global key" key="k8s:application=horizon;k8s:batch.kubernetes.io/controller-uid=08333a9e-952b-4416-8fc9-dbcec2c0a395;k8s:batch.kubernetes.io/job-name=horizon-db-init;k8s:component=db-init;k8s:controller-uid=08333a9e-952b-4416-8fc9-dbcec2c0a395;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=horizon-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=horizon-db-init;k8s:release_group=horizon;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9b8f1c68d8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1574 identity=3323 identityLabels="k8s:application=horizon,k8s:batch.kubernetes.io/controller-uid=08333a9e-952b-4416-8fc9-dbcec2c0a395,k8s:batch.kubernetes.io/job-name=horizon-db-init,k8s:component=db-init,k8s:controller-uid=08333a9e-952b-4416-8fc9-dbcec2c0a395,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=horizon-db-init,k8s:release_group=horizon" ipv4=10.0.0.149 ipv6= k8sPodName=openstack/horizon-db-init-22hqb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9b8f1c68d8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1574 identity=3323 ipv4=10.0.0.149 ipv6= k8sPodName=openstack/horizon-db-init-22hqb subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9b8f1c68d8 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1574 identity=3323 ipv4=10.0.0.149 ipv6= k8sPodName=openstack/horizon-db-init-22hqb subsys=endpoint level=info msg="Successful endpoint creation" containerID=9b8f1c68d8 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1574 identity=3323 ipv4=10.0.0.149 ipv6= k8sPodName=openstack/horizon-db-init-22hqb subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=9b8f1c68d8 endpointID=1574 k8sNamespace=openstack k8sPodName=horizon-db-init-22hqb subsys=daemon level=info msg="Releasing key" key="[k8s:application=horizon k8s:batch.kubernetes.io/controller-uid=08333a9e-952b-4416-8fc9-dbcec2c0a395 k8s:batch.kubernetes.io/job-name=horizon-db-init k8s:component=db-init k8s:controller-uid=08333a9e-952b-4416-8fc9-dbcec2c0a395 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=horizon-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=horizon-db-init k8s:release_group=horizon]" subsys=allocator level=info msg="Removed endpoint" containerID=9b8f1c68d8 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1574 identity=3323 ipv4=10.0.0.149 ipv6= k8sPodName=openstack/horizon-db-init-22hqb subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.92 81ca413d-f86e-484a-bff4-558823662726 default }" containerID=bd14dd012ba256627c30debb825a4c80cd482b3a143012b8097db7ad16f5180f datapathConfiguration="&{false false false false false }" interface=lxc2a5304a80e0f k8sPodName=openstack/horizon-db-sync-7h869 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bd14dd012b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=473 ipv4=10.0.0.92 ipv6= k8sPodName=openstack/horizon-db-sync-7h869 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bd14dd012b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=473 identityLabels="k8s:application=horizon,k8s:batch.kubernetes.io/controller-uid=0b7703fc-7ae1-4e8a-acb7-e1ccc71d4ffb,k8s:batch.kubernetes.io/job-name=horizon-db-sync,k8s:component=db-sync,k8s:controller-uid=0b7703fc-7ae1-4e8a-acb7-e1ccc71d4ffb,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=horizon-db-sync,k8s:release_group=horizon" ipv4=10.0.0.92 ipv6= k8sPodName=openstack/horizon-db-sync-7h869 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=horizon;k8s:batch.kubernetes.io/controller-uid=0b7703fc-7ae1-4e8a-acb7-e1ccc71d4ffb;k8s:batch.kubernetes.io/job-name=horizon-db-sync;k8s:component=db-sync;k8s:controller-uid=0b7703fc-7ae1-4e8a-acb7-e1ccc71d4ffb;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=horizon-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=horizon-db-sync;k8s:release_group=horizon;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=bd14dd012b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=473 identity=29681 identityLabels="k8s:application=horizon,k8s:batch.kubernetes.io/controller-uid=0b7703fc-7ae1-4e8a-acb7-e1ccc71d4ffb,k8s:batch.kubernetes.io/job-name=horizon-db-sync,k8s:component=db-sync,k8s:controller-uid=0b7703fc-7ae1-4e8a-acb7-e1ccc71d4ffb,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=horizon-db-sync,k8s:release_group=horizon" ipv4=10.0.0.92 ipv6= k8sPodName=openstack/horizon-db-sync-7h869 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=bd14dd012b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=473 identity=29681 ipv4=10.0.0.92 ipv6= k8sPodName=openstack/horizon-db-sync-7h869 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=bd14dd012b datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=473 identity=29681 ipv4=10.0.0.92 ipv6= k8sPodName=openstack/horizon-db-sync-7h869 subsys=endpoint level=info msg="Successful endpoint creation" containerID=bd14dd012b datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=473 identity=29681 ipv4=10.0.0.92 ipv6= k8sPodName=openstack/horizon-db-sync-7h869 subsys=daemon level=info msg="Delete endpoint request" containerID=bd14dd012b endpointID=473 k8sNamespace=openstack k8sPodName=horizon-db-sync-7h869 subsys=daemon level=info msg="Releasing key" key="[k8s:application=horizon k8s:batch.kubernetes.io/controller-uid=0b7703fc-7ae1-4e8a-acb7-e1ccc71d4ffb k8s:batch.kubernetes.io/job-name=horizon-db-sync k8s:component=db-sync k8s:controller-uid=0b7703fc-7ae1-4e8a-acb7-e1ccc71d4ffb k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=horizon-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=horizon-db-sync k8s:release_group=horizon]" subsys=allocator level=info msg="Removed endpoint" containerID=bd14dd012b datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=473 identity=29681 ipv4=10.0.0.92 ipv6= k8sPodName=openstack/horizon-db-sync-7h869 subsys=endpoint