level=info msg="Memory available for map entries (0.003% of 67421646848B): 168554117B" subsys=config level=info msg="option bpf-ct-global-tcp-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-ct-global-any-max set by dynamic sizing to 295708" subsys=config level=info msg="option bpf-nat-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-neigh-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-sock-rev-map-max set by dynamic sizing to 295708" subsys=config level=info msg=" --agent-health-port='9879'" subsys=daemon level=info msg=" --agent-labels=''" subsys=daemon level=info msg=" --agent-liveness-update-interval='1s'" subsys=daemon level=info msg=" --agent-not-ready-taint-key='node.cilium.io/agent-not-ready'" subsys=daemon level=info msg=" --allocator-list-timeout='3m0s'" subsys=daemon level=info msg=" --allow-icmp-frag-needed='true'" subsys=daemon level=info msg=" --allow-localhost='auto'" subsys=daemon level=info msg=" --annotate-k8s-node='false'" subsys=daemon level=info msg=" --api-rate-limit=''" subsys=daemon level=info msg=" --arping-refresh-period='30s'" subsys=daemon level=info msg=" --auto-create-cilium-node-resource='true'" subsys=daemon level=info msg=" --auto-direct-node-routes='false'" subsys=daemon level=info msg=" --bgp-announce-lb-ip='false'" subsys=daemon level=info msg=" --bgp-announce-pod-cidr='false'" subsys=daemon level=info msg=" --bgp-config-path='/var/lib/cilium/bgp/config.yaml'" subsys=daemon level=info msg=" --bpf-auth-map-max='524288'" subsys=daemon level=info msg=" --bpf-ct-global-any-max='262144'" subsys=daemon level=info msg=" --bpf-ct-global-tcp-max='524288'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-fin='10s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-syn='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp-grace='1m0s'" subsys=daemon level=info msg=" --bpf-filter-priority='1'" subsys=daemon level=info msg=" --bpf-fragments-map-max='8192'" subsys=daemon level=info msg=" --bpf-lb-acceleration='disabled'" subsys=daemon level=info msg=" --bpf-lb-affinity-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-algorithm='random'" subsys=daemon level=info msg=" --bpf-lb-dev-ip-addr-inherit=''" subsys=daemon level=info msg=" --bpf-lb-dsr-dispatch='opt'" subsys=daemon level=info msg=" --bpf-lb-dsr-l4-xlate='frontend'" subsys=daemon level=info msg=" --bpf-lb-external-clusterip='false'" subsys=daemon level=info msg=" --bpf-lb-maglev-hash-seed='JLfvgnHc2kaSUFaI'" subsys=daemon level=info msg=" --bpf-lb-maglev-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-maglev-table-size='16381'" subsys=daemon level=info msg=" --bpf-lb-map-max='65536'" subsys=daemon level=info msg=" --bpf-lb-mode='snat'" subsys=daemon level=info msg=" --bpf-lb-rev-nat-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-rss-ipv4-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-rss-ipv6-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-service-backend-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-service-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-sock='false'" subsys=daemon level=info msg=" --bpf-lb-sock-hostns-only='false'" subsys=daemon level=info msg=" --bpf-lb-source-range-map-max='0'" subsys=daemon level=info msg=" --bpf-map-dynamic-size-ratio='0.0025'" subsys=daemon level=info msg=" --bpf-map-event-buffers=''" subsys=daemon level=info msg=" --bpf-nat-global-max='524288'" subsys=daemon level=info msg=" --bpf-neigh-global-max='524288'" subsys=daemon level=info msg=" --bpf-policy-map-full-reconciliation-interval='15m0s'" subsys=daemon level=info msg=" --bpf-policy-map-max='16384'" subsys=daemon level=info msg=" --bpf-root='/sys/fs/bpf'" subsys=daemon level=info msg=" --bpf-sock-rev-map-max='262144'" subsys=daemon level=info msg=" --bypass-ip-availability-upon-restore='false'" subsys=daemon level=info msg=" --certificates-directory='/var/run/cilium/certs'" subsys=daemon level=info msg=" --cflags=''" subsys=daemon level=info msg=" --cgroup-root='/run/cilium/cgroupv2'" subsys=daemon level=info msg=" --cilium-endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --cluster-health-port='4240'" subsys=daemon level=info msg=" --cluster-id='0'" subsys=daemon level=info msg=" --cluster-name='default'" subsys=daemon level=info msg=" --cluster-pool-ipv4-cidr='10.0.0.0/8'" subsys=daemon level=info msg=" --cluster-pool-ipv4-mask-size='24'" subsys=daemon level=info msg=" --clustermesh-config='/var/lib/cilium/clustermesh/'" subsys=daemon level=info msg=" --clustermesh-ip-identities-sync-timeout='1m0s'" subsys=daemon level=info msg=" --cmdref=''" subsys=daemon level=info msg=" --cni-chaining-mode='none'" subsys=daemon level=info msg=" --cni-chaining-target=''" subsys=daemon level=info msg=" --cni-exclusive='true'" subsys=daemon level=info msg=" --cni-external-routing='false'" subsys=daemon level=info msg=" --cni-log-file='/var/run/cilium/cilium-cni.log'" subsys=daemon level=info msg=" --cnp-node-status-gc-interval='0s'" subsys=daemon level=info msg=" --config=''" subsys=daemon level=info msg=" --config-dir='/tmp/cilium/config-map'" subsys=daemon level=info msg=" --config-sources='config-map:kube-system/cilium-config'" subsys=daemon level=info msg=" --conntrack-gc-interval='0s'" subsys=daemon level=info msg=" --conntrack-gc-max-interval='0s'" subsys=daemon level=info msg=" --crd-wait-timeout='5m0s'" subsys=daemon level=info msg=" --custom-cni-conf='false'" subsys=daemon level=info msg=" --datapath-mode='veth'" subsys=daemon level=info msg=" --debug='false'" subsys=daemon level=info msg=" --debug-verbose=''" subsys=daemon level=info msg=" --derive-masquerade-ip-addr-from-device=''" subsys=daemon level=info msg=" --devices=''" subsys=daemon level=info msg=" --direct-routing-device=''" subsys=daemon level=info msg=" --disable-cnp-status-updates='true'" subsys=daemon level=info msg=" --disable-endpoint-crd='false'" subsys=daemon level=info msg=" --disable-envoy-version-check='false'" subsys=daemon level=info msg=" --disable-iptables-feeder-rules=''" subsys=daemon level=info msg=" --dns-max-ips-per-restored-rule='1000'" subsys=daemon level=info msg=" --dns-policy-unload-on-shutdown='false'" subsys=daemon level=info msg=" --dnsproxy-concurrency-limit='0'" subsys=daemon level=info msg=" --dnsproxy-concurrency-processing-grace-period='0s'" subsys=daemon level=info msg=" --dnsproxy-enable-transparent-mode='true'" subsys=daemon level=info msg=" --dnsproxy-lock-count='128'" subsys=daemon level=info msg=" --dnsproxy-lock-timeout='500ms'" subsys=daemon level=info msg=" --egress-gateway-policy-map-max='16384'" subsys=daemon level=info msg=" --egress-gateway-reconciliation-trigger-interval='1s'" subsys=daemon level=info msg=" --egress-masquerade-interfaces=''" subsys=daemon level=info msg=" --egress-multi-home-ip-rule-compat='false'" subsys=daemon level=info msg=" --enable-auto-protect-node-port-range='true'" subsys=daemon level=info msg=" --enable-bandwidth-manager='false'" subsys=daemon level=info msg=" --enable-bbr='false'" subsys=daemon level=info msg=" --enable-bgp-control-plane='false'" subsys=daemon level=info msg=" --enable-bpf-clock-probe='false'" subsys=daemon level=info msg=" --enable-bpf-masquerade='false'" subsys=daemon level=info msg=" --enable-bpf-tproxy='false'" subsys=daemon level=info msg=" --enable-cilium-api-server-access='*'" subsys=daemon level=info msg=" --enable-cilium-endpoint-slice='false'" subsys=daemon level=info msg=" --enable-cilium-health-api-server-access='*'" subsys=daemon level=info msg=" --enable-custom-calls='false'" subsys=daemon level=info msg=" --enable-endpoint-health-checking='true'" subsys=daemon level=info msg=" --enable-endpoint-routes='false'" subsys=daemon level=info msg=" --enable-envoy-config='false'" subsys=daemon level=info msg=" --enable-external-ips='false'" subsys=daemon level=info msg=" --enable-health-check-nodeport='true'" subsys=daemon level=info msg=" --enable-health-checking='true'" subsys=daemon level=info msg=" --enable-high-scale-ipcache='false'" subsys=daemon level=info msg=" --enable-host-firewall='false'" subsys=daemon level=info msg=" --enable-host-legacy-routing='false'" subsys=daemon level=info msg=" --enable-host-port='false'" subsys=daemon level=info msg=" --enable-hubble='false'" subsys=daemon level=info msg=" --enable-hubble-recorder-api='true'" subsys=daemon level=info msg=" --enable-icmp-rules='true'" subsys=daemon level=info msg=" --enable-identity-mark='true'" subsys=daemon level=info msg=" --enable-ip-masq-agent='false'" subsys=daemon level=info msg=" --enable-ipsec='false'" subsys=daemon level=info msg=" --enable-ipsec-key-watcher='true'" subsys=daemon level=info msg=" --enable-ipv4='true'" subsys=daemon level=info msg=" --enable-ipv4-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv4-egress-gateway='false'" subsys=daemon level=info msg=" --enable-ipv4-fragment-tracking='true'" subsys=daemon level=info msg=" --enable-ipv4-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6='false'" subsys=daemon level=info msg=" --enable-ipv6-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv6-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6-ndp='false'" subsys=daemon level=info msg=" --enable-k8s='true'" subsys=daemon level=info msg=" --enable-k8s-api-discovery='false'" subsys=daemon level=info msg=" --enable-k8s-endpoint-slice='true'" subsys=daemon level=info msg=" --enable-k8s-event-handover='false'" subsys=daemon level=info msg=" --enable-k8s-networkpolicy='true'" subsys=daemon level=info msg=" --enable-k8s-terminating-endpoint='true'" subsys=daemon level=info msg=" --enable-l2-announcements='false'" subsys=daemon level=info msg=" --enable-l2-neigh-discovery='true'" subsys=daemon level=info msg=" --enable-l2-pod-announcements='false'" subsys=daemon level=info msg=" --enable-l7-proxy='true'" subsys=daemon level=info msg=" --enable-local-node-route='true'" subsys=daemon level=info msg=" --enable-local-redirect-policy='false'" subsys=daemon level=info msg=" --enable-mke='false'" subsys=daemon level=info msg=" --enable-monitor='true'" subsys=daemon level=info msg=" --enable-nat46x64-gateway='false'" subsys=daemon level=info msg=" --enable-node-port='false'" subsys=daemon level=info msg=" --enable-pmtu-discovery='false'" subsys=daemon level=info msg=" --enable-policy='default'" subsys=daemon level=info msg=" --enable-recorder='false'" subsys=daemon level=info msg=" --enable-remote-node-identity='true'" subsys=daemon level=info msg=" --enable-runtime-device-detection='false'" subsys=daemon level=info msg=" --enable-sctp='false'" subsys=daemon level=info msg=" --enable-service-topology='false'" subsys=daemon level=info msg=" --enable-session-affinity='false'" subsys=daemon level=info msg=" --enable-srv6='false'" subsys=daemon level=info msg=" --enable-stale-cilium-endpoint-cleanup='true'" subsys=daemon level=info msg=" --enable-svc-source-range-check='true'" subsys=daemon level=info msg=" --enable-tracing='false'" subsys=daemon level=info msg=" --enable-unreachable-routes='false'" subsys=daemon level=info msg=" --enable-vtep='false'" subsys=daemon level=info msg=" --enable-well-known-identities='false'" subsys=daemon level=info msg=" --enable-wireguard='false'" subsys=daemon level=info msg=" --enable-wireguard-userspace-fallback='false'" subsys=daemon level=info msg=" --enable-xdp-prefilter='false'" subsys=daemon level=info msg=" --enable-xt-socket-fallback='true'" subsys=daemon level=info msg=" --encrypt-interface=''" subsys=daemon level=info msg=" --encrypt-node='false'" subsys=daemon level=info msg=" --endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --endpoint-queue-size='25'" subsys=daemon level=info msg=" --endpoint-status=''" subsys=daemon level=info msg=" --envoy-config-timeout='2m0s'" subsys=daemon level=info msg=" --envoy-log=''" subsys=daemon level=info msg=" --exclude-local-address=''" subsys=daemon level=info msg=" --external-envoy-proxy='false'" subsys=daemon level=info msg=" --fixed-identity-mapping=''" subsys=daemon level=info msg=" --fqdn-regex-compile-lru-size='1024'" subsys=daemon level=info msg=" --gops-port='9890'" subsys=daemon level=info msg=" --http-403-msg=''" subsys=daemon level=info msg=" --http-idle-timeout='0'" subsys=daemon level=info msg=" --http-max-grpc-timeout='0'" subsys=daemon level=info msg=" --http-normalize-path='true'" subsys=daemon level=info msg=" --http-request-timeout='3600'" subsys=daemon level=info msg=" --http-retry-count='3'" subsys=daemon level=info msg=" --http-retry-timeout='0'" subsys=daemon level=info msg=" --hubble-disable-tls='false'" subsys=daemon level=info msg=" --hubble-event-buffer-capacity='4095'" subsys=daemon level=info msg=" --hubble-event-queue-size='0'" subsys=daemon level=info msg=" --hubble-export-file-compress='false'" subsys=daemon level=info msg=" --hubble-export-file-max-backups='5'" subsys=daemon level=info msg=" --hubble-export-file-max-size-mb='10'" subsys=daemon level=info msg=" --hubble-export-file-path=''" subsys=daemon level=info msg=" --hubble-listen-address=''" subsys=daemon level=info msg=" --hubble-metrics=''" subsys=daemon level=info msg=" --hubble-metrics-server=''" subsys=daemon level=info msg=" --hubble-monitor-events=''" subsys=daemon level=info msg=" --hubble-prefer-ipv6='false'" subsys=daemon level=info msg=" --hubble-recorder-sink-queue-size='1024'" subsys=daemon level=info msg=" --hubble-recorder-storage-path='/var/run/cilium/pcaps'" subsys=daemon level=info msg=" --hubble-skip-unknown-cgroup-ids='true'" subsys=daemon level=info msg=" --hubble-socket-path='/var/run/cilium/hubble.sock'" subsys=daemon level=info msg=" --hubble-tls-cert-file=''" subsys=daemon level=info msg=" --hubble-tls-client-ca-files=''" subsys=daemon level=info msg=" --hubble-tls-key-file=''" subsys=daemon level=info msg=" --identity-allocation-mode='crd'" subsys=daemon level=info msg=" --identity-change-grace-period='5s'" subsys=daemon level=info msg=" --identity-gc-interval='15m0s'" subsys=daemon level=info msg=" --identity-heartbeat-timeout='30m0s'" subsys=daemon level=info msg=" --identity-restore-grace-period='10m0s'" subsys=daemon level=info msg=" --install-egress-gateway-routes='false'" subsys=daemon level=info msg=" --install-iptables-rules='true'" subsys=daemon level=info msg=" --install-no-conntrack-iptables-rules='false'" subsys=daemon level=info msg=" --ip-allocation-timeout='2m0s'" subsys=daemon level=info msg=" --ip-masq-agent-config-path='/etc/config/ip-masq-agent'" subsys=daemon level=info msg=" --ipam='cluster-pool'" subsys=daemon level=info msg=" --ipam-cilium-node-update-rate='15s'" subsys=daemon level=info msg=" --ipam-multi-pool-pre-allocation='default=8'" subsys=daemon level=info msg=" --ipsec-key-file=''" subsys=daemon level=info msg=" --ipsec-key-rotation-duration='5m0s'" subsys=daemon level=info msg=" --iptables-lock-timeout='5s'" subsys=daemon level=info msg=" --iptables-random-fully='false'" subsys=daemon level=info msg=" --ipv4-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv4-node='auto'" subsys=daemon level=info msg=" --ipv4-pod-subnets=''" subsys=daemon level=info msg=" --ipv4-range='auto'" subsys=daemon level=info msg=" --ipv4-service-loopback-address='169.254.42.1'" subsys=daemon level=info msg=" --ipv4-service-range='auto'" subsys=daemon level=info msg=" --ipv6-cluster-alloc-cidr='f00d::/64'" subsys=daemon level=info msg=" --ipv6-mcast-device=''" subsys=daemon level=info msg=" --ipv6-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv6-node='auto'" subsys=daemon level=info msg=" --ipv6-pod-subnets=''" subsys=daemon level=info msg=" --ipv6-range='auto'" subsys=daemon level=info msg=" --ipv6-service-range='auto'" subsys=daemon level=info msg=" --join-cluster='false'" subsys=daemon level=info msg=" --k8s-api-server=''" subsys=daemon level=info msg=" --k8s-client-burst='10'" subsys=daemon level=info msg=" --k8s-client-qps='5'" subsys=daemon level=info msg=" --k8s-heartbeat-timeout='30s'" subsys=daemon level=info msg=" --k8s-kubeconfig-path=''" subsys=daemon level=info msg=" --k8s-namespace='kube-system'" subsys=daemon level=info msg=" --k8s-require-ipv4-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-require-ipv6-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-service-cache-size='128'" subsys=daemon level=info msg=" --k8s-service-proxy-name=''" subsys=daemon level=info msg=" --k8s-sync-timeout='3m0s'" subsys=daemon level=info msg=" --k8s-watcher-endpoint-selector='metadata.name!=kube-scheduler,metadata.name!=kube-controller-manager,metadata.name!=etcd-operator,metadata.name!=gcp-controller-manager'" subsys=daemon level=info msg=" --keep-config='false'" subsys=daemon level=info msg=" --kube-proxy-replacement='disabled'" subsys=daemon level=info msg=" --kube-proxy-replacement-healthz-bind-address=''" subsys=daemon level=info msg=" --kvstore=''" subsys=daemon level=info msg=" --kvstore-connectivity-timeout='2m0s'" subsys=daemon level=info msg=" --kvstore-lease-ttl='15m0s'" subsys=daemon level=info msg=" --kvstore-max-consecutive-quorum-errors='2'" subsys=daemon level=info msg=" --kvstore-opt=''" subsys=daemon level=info msg=" --kvstore-periodic-sync='5m0s'" subsys=daemon level=info msg=" --l2-announcements-lease-duration='15s'" subsys=daemon level=info msg=" --l2-announcements-renew-deadline='5s'" subsys=daemon level=info msg=" --l2-announcements-retry-period='2s'" subsys=daemon level=info msg=" --l2-pod-announcements-interface=''" subsys=daemon level=info msg=" --label-prefix-file=''" subsys=daemon level=info msg=" --labels=''" subsys=daemon level=info msg=" --lib-dir='/var/lib/cilium'" subsys=daemon level=info msg=" --local-max-addr-scope='252'" subsys=daemon level=info msg=" --local-router-ipv4=''" subsys=daemon level=info msg=" --local-router-ipv6=''" subsys=daemon level=info msg=" --log-driver=''" subsys=daemon level=info msg=" --log-opt=''" subsys=daemon level=info msg=" --log-system-load='false'" subsys=daemon level=info msg=" --max-controller-interval='0'" subsys=daemon level=info msg=" --mesh-auth-enabled='true'" subsys=daemon level=info msg=" --mesh-auth-gc-interval='5m0s'" subsys=daemon level=info msg=" --mesh-auth-mutual-listener-port='0'" subsys=daemon level=info msg=" --mesh-auth-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-rotated-identities-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-signal-backoff-duration='1s'" subsys=daemon level=info msg=" --mesh-auth-spiffe-trust-domain='spiffe.cilium'" subsys=daemon level=info msg=" --mesh-auth-spire-admin-socket=''" subsys=daemon level=info msg=" --metrics=''" subsys=daemon level=info msg=" --mke-cgroup-mount=''" subsys=daemon level=info msg=" --monitor-aggregation='medium'" subsys=daemon level=info msg=" --monitor-aggregation-flags='all'" subsys=daemon level=info msg=" --monitor-aggregation-interval='5s'" subsys=daemon level=info msg=" --monitor-queue-size='0'" subsys=daemon level=info msg=" --mtu='0'" subsys=daemon level=info msg=" --node-encryption-opt-out-labels='node-role.kubernetes.io/control-plane'" subsys=daemon level=info msg=" --node-port-acceleration='disabled'" subsys=daemon level=info msg=" --node-port-algorithm='random'" subsys=daemon level=info msg=" --node-port-bind-protection='true'" subsys=daemon level=info msg=" --node-port-mode='snat'" subsys=daemon level=info msg=" --node-port-range='30000,32767'" subsys=daemon level=info msg=" --nodes-gc-interval='5m0s'" subsys=daemon level=info msg=" --operator-api-serve-addr='127.0.0.1:9234'" subsys=daemon level=info msg=" --policy-audit-mode='false'" subsys=daemon level=info msg=" --policy-queue-size='100'" subsys=daemon level=info msg=" --policy-trigger-interval='1s'" subsys=daemon level=info msg=" --pprof='false'" subsys=daemon level=info msg=" --pprof-address='localhost'" subsys=daemon level=info msg=" --pprof-port='6060'" subsys=daemon level=info msg=" --preallocate-bpf-maps='false'" subsys=daemon level=info msg=" --prepend-iptables-chains='true'" subsys=daemon level=info msg=" --procfs='/host/proc'" subsys=daemon level=info msg=" --prometheus-serve-addr=':9962'" subsys=daemon level=info msg=" --proxy-connect-timeout='2'" subsys=daemon level=info msg=" --proxy-gid='1337'" subsys=daemon level=info msg=" --proxy-idle-timeout-seconds='60'" subsys=daemon level=info msg=" --proxy-max-connection-duration-seconds='0'" subsys=daemon level=info msg=" --proxy-max-requests-per-connection='0'" subsys=daemon level=info msg=" --proxy-prometheus-port='9964'" subsys=daemon level=info msg=" --read-cni-conf=''" subsys=daemon level=info msg=" --remove-cilium-node-taints='true'" subsys=daemon level=info msg=" --restore='true'" subsys=daemon level=info msg=" --route-metric='0'" subsys=daemon level=info msg=" --routing-mode='tunnel'" subsys=daemon level=info msg=" --set-cilium-is-up-condition='true'" subsys=daemon level=info msg=" --set-cilium-node-taints='true'" subsys=daemon level=info msg=" --sidecar-istio-proxy-image='cilium/istio_proxy'" subsys=daemon level=info msg=" --single-cluster-route='false'" subsys=daemon level=info msg=" --skip-cnp-status-startup-clean='false'" subsys=daemon level=info msg=" --socket-path='/var/run/cilium/cilium.sock'" subsys=daemon level=info msg=" --srv6-encap-mode='reduced'" subsys=daemon level=info msg=" --state-dir='/var/run/cilium'" subsys=daemon level=info msg=" --synchronize-k8s-nodes='true'" subsys=daemon level=info msg=" --tofqdns-dns-reject-response-code='refused'" subsys=daemon level=info msg=" --tofqdns-enable-dns-compression='true'" subsys=daemon level=info msg=" --tofqdns-endpoint-max-ip-per-hostname='50'" subsys=daemon level=info msg=" --tofqdns-idle-connection-grace-period='0s'" subsys=daemon level=info msg=" --tofqdns-max-deferred-connection-deletes='10000'" subsys=daemon level=info msg=" --tofqdns-min-ttl='0'" subsys=daemon level=info msg=" --tofqdns-pre-cache=''" subsys=daemon level=info msg=" --tofqdns-proxy-port='0'" subsys=daemon level=info msg=" --tofqdns-proxy-response-max-delay='100ms'" subsys=daemon level=info msg=" --trace-payloadlen='128'" subsys=daemon level=info msg=" --trace-sock='true'" subsys=daemon level=info msg=" --tunnel=''" subsys=daemon level=info msg=" --tunnel-port='6082'" subsys=daemon level=info msg=" --tunnel-protocol='geneve'" subsys=daemon level=info msg=" --unmanaged-pod-watcher-interval='15'" subsys=daemon level=info msg=" --use-cilium-internal-ip-for-ipsec='false'" subsys=daemon level=info msg=" --version='false'" subsys=daemon level=info msg=" --vlan-bpf-bypass=''" subsys=daemon level=info msg=" --vtep-cidr=''" subsys=daemon level=info msg=" --vtep-endpoint=''" subsys=daemon level=info msg=" --vtep-mac=''" subsys=daemon level=info msg=" --vtep-mask=''" subsys=daemon level=info msg=" --wireguard-encapsulate='false'" subsys=daemon level=info msg=" --write-cni-conf-when-ready='/host/etc/cni/net.d/05-cilium.conflist'" subsys=daemon level=info msg=" _ _ _" subsys=daemon level=info msg=" ___|_| |_|_ _ _____" subsys=daemon level=info msg="| _| | | | | | |" subsys=daemon level=info msg="|___|_|_|_|___|_|_|_|" subsys=daemon level=info msg="Cilium 1.14.8 cf6e022e 2024-03-13T12:23:35-04:00 go version go1.21.8 linux/amd64" subsys=daemon level=info msg="clang (10.0.0) and kernel (5.15.0) versions: OK!" subsys=linux-datapath level=info msg="linking environment: OK!" subsys=linux-datapath level=info msg="Kernel config file not found: if the agent fails to start, check the system requirements at https://docs.cilium.io/en/stable/operations/system_requirements" subsys=probes level=info msg="Detected mounted BPF filesystem at /sys/fs/bpf" subsys=bpf level=info msg="Mounted cgroupv2 filesystem at /run/cilium/cgroupv2" subsys=cgroups level=info msg="Parsing base label prefixes from default label list" subsys=labels-filter level=info msg="Parsing additional label prefixes from user inputs: []" subsys=labels-filter level=info msg="Final label prefixes to be used for identity evaluation:" subsys=labels-filter level=info msg=" - reserved:.*" subsys=labels-filter level=info msg=" - :io\\.kubernetes\\.pod\\.namespace" subsys=labels-filter level=info msg=" - :io\\.cilium\\.k8s\\.namespace\\.labels" subsys=labels-filter level=info msg=" - :app\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:io\\.kubernetes" subsys=labels-filter level=info msg=" - !:kubernetes\\.io" subsys=labels-filter level=info msg=" - !:.*beta\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:k8s\\.io" subsys=labels-filter level=info msg=" - !:pod-template-generation" subsys=labels-filter level=info msg=" - !:pod-template-hash" subsys=labels-filter level=info msg=" - !:controller-revision-hash" subsys=labels-filter level=info msg=" - !:annotation.*" subsys=labels-filter level=info msg=" - !:etcd_node" subsys=labels-filter level=info msg=Invoked duration="799.085µs" function="pprof.glob..func1 (cell.go:50)" subsys=hive level=info msg=Invoked duration="41.361µs" function="gops.registerGopsHooks (cell.go:38)" subsys=hive level=info msg=Invoked duration="895.699µs" function="metrics.NewRegistry (registry.go:65)" subsys=hive level=info msg=Invoked duration="4.93µs" function="metrics.glob..func1 (cell.go:12)" subsys=hive level=info msg="Spire Delegate API Client is disabled as no socket path is configured" subsys=spire-delegate level=info msg="Mutual authentication handler is disabled as no port is configured" subsys=auth level=info msg=Invoked duration=99.646672ms function="cmd.glob..func4 (daemon_main.go:1607)" subsys=hive level=info msg=Invoked duration="20.461µs" function="gc.registerSignalHandler (cell.go:47)" subsys=hive level=info msg=Invoked duration="22.641µs" function="utime.initUtimeSync (cell.go:29)" subsys=hive level=info msg=Invoked duration="66.932µs" function="agentliveness.newAgentLivenessUpdater (agent_liveness.go:43)" subsys=hive level=info msg=Invoked duration="127.254µs" function="l2responder.NewL2ResponderReconciler (l2responder.go:63)" subsys=hive level=info msg=Invoked duration="198.947µs" function="garp.newGARPProcessor (processor.go:27)" subsys=hive level=info msg=Starting subsys=hive level=info msg="Started gops server" address="127.0.0.1:9890" subsys=gops level=info msg="Start hook executed" duration="674.812µs" function="gops.registerGopsHooks.func1 (cell.go:43)" subsys=hive level=info msg="Start hook executed" duration="2.3µs" function="metrics.NewRegistry.func1 (registry.go:86)" subsys=hive level=info msg="Establishing connection to apiserver" host="https://10.96.0.1:443" subsys=k8s-client level=info msg="Serving prometheus metrics on :9962" subsys=metrics level=info msg="Connected to apiserver" subsys=k8s-client level=info msg="Start hook executed" duration=10.713385ms function="client.(*compositeClientset).onStart" subsys=hive level=info msg="Start hook executed" duration=5.235998ms function="authmap.newAuthMap.func1 (cell.go:27)" subsys=hive level=info msg="Start hook executed" duration="50.192µs" function="configmap.newMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="82.352µs" function="signalmap.newMap.func1 (cell.go:44)" subsys=hive level=info msg="Start hook executed" duration="273.169µs" function="nodemap.newNodeMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="128.935µs" function="eventsmap.newEventsMap.func1 (cell.go:35)" subsys=hive level=info msg="Start hook executed" duration="128.425µs" function="*cni.cniConfigManager.Start" subsys=hive level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Wrote CNI configuration file to /host/etc/cni/net.d/05-cilium.conflist" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Start hook executed" duration=49.545612ms function="datapath.newDatapath.func1 (cells.go:113)" subsys=hive level=info msg="Restored 0 node IDs from the BPF map" subsys=linux-datapath level=info msg="Start hook executed" duration="77.733µs" function="datapath.newDatapath.func2 (cells.go:126)" subsys=hive level=info msg="Start hook executed" duration="9.91µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Node].Start" subsys=hive level=info msg="Start hook executed" duration="15.61µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNode].Start" subsys=hive level=info msg="Using autogenerated IPv4 allocation range" subsys=node v4Prefix=10.33.0.0/16 level=info msg="no local ciliumnode found, will not restore cilium internal ips from k8s" subsys=daemon level=info msg="Start hook executed" duration=102.300869ms function="node.NewLocalNodeStore.func1 (local_node_store.go:76)" subsys=hive level=info msg="Start hook executed" duration="15.62µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration=101.13025ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration="2.74µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Using discoveryv1.EndpointSlice" subsys=k8s level=info msg="Start hook executed" duration=101.10845ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Start hook executed" duration="9.2µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Pod].Start" subsys=hive level=info msg="Start hook executed" duration="2.58µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Namespace].Start" subsys=hive level=info msg="Start hook executed" duration="2.16µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="1.8µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumClusterwideNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="2.1µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumCIDRGroup].Start" subsys=hive level=info msg="Start hook executed" duration="27.181µs" function="endpointmanager.newDefaultEndpointManager.func1 (cell.go:203)" subsys=hive level=info msg="Start hook executed" duration="29.861µs" function="cmd.newPolicyTrifecta.func1 (policy.go:135)" subsys=hive level=info msg="Start hook executed" duration="59.042µs" function="*manager.manager.Start" subsys=hive level=info msg="Serving cilium node monitor v1.2 API at unix:///var/run/cilium/monitor1_2.sock" subsys=monitor-agent level=info msg="Start hook executed" duration="267.958µs" function="agent.newMonitorAgent.func1 (cell.go:61)" subsys=hive level=info msg="Start hook executed" duration="2.3µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumL2AnnouncementPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="6.68µs" function="*job.group.Start" subsys=hive level=info msg="Start hook executed" duration="189.146µs" function="proxy.newProxy.func1 (cell.go:55)" subsys=hive level=info msg="Envoy: Starting xDS gRPC server listening on /var/run/cilium/envoy/sockets/xds.sock" subsys=envoy-manager level=info msg="Start hook executed" duration="662.031µs" function="signal.provideSignalManager.func1 (cell.go:25)" subsys=hive level=info msg="Datapath signal listener running" subsys=signal level=info msg="Start hook executed" duration=1.201599ms function="auth.registerAuthManager.func1 (cell.go:109)" subsys=hive level=info msg="Start hook executed" duration="4.69µs" function="auth.registerGCJobs.func1 (cell.go:158)" subsys=hive level=info msg="Start hook executed" duration="13.3µs" function="*job.group.Start" subsys=hive level=warning msg="Deprecated value for --kube-proxy-replacement: disabled (use either \"true\", or \"false\")" subsys=daemon level=info msg="Auto-disabling \"enable-node-port\", \"enable-external-ips\", \"bpf-lb-sock\", \"enable-host-port\" features and falling back to \"enable-host-legacy-routing\"" subsys=daemon level=info msg="Inheriting MTU from external network interface" device=ens3 ipAddr=199.204.45.33 mtu=1500 subsys=mtu level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_ipcache, recreating and re-pinning map cilium_ipcache" file-path=/sys/fs/bpf/tc/globals/cilium_ipcache name=cilium_ipcache subsys=bpf level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_tunnel_map, recreating and re-pinning map cilium_tunnel_map" file-path=/sys/fs/bpf/tc/globals/cilium_tunnel_map name=cilium_tunnel_map subsys=bpf level=info msg="Restored services from maps" failedServices=0 restoredServices=0 subsys=service level=info msg="Restored backends from maps" failedBackends=0 restoredBackends=0 skippedBackends=0 subsys=service level=info msg="Reading old endpoints..." subsys=daemon level=info msg="No old endpoints found." subsys=daemon level=info msg="Waiting until all Cilium CRDs are available" subsys=k8s level=info msg="All Cilium CRDs have been found and are available" subsys=k8s level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=info msg="Successfully created CiliumNode resource" subsys=nodediscovery level=warning msg="Unable to create CiliumNode resource, will retry" error="ciliumnodes.cilium.io \"instance\" already exists" subsys=nodediscovery level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=info msg="Received own node information from API server" ipAddr.ipv4=199.204.45.33 ipAddr.ipv6="" k8sNodeIP=199.204.45.33 labels="map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:]" nodeName=instance subsys=k8s v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="k8s mode: Allowing localhost to reach local endpoints" subsys=daemon level=info msg="Detected devices" devices="[]" subsys=linux-datapath level=info msg="Enabling k8s event listener" subsys=k8s-watcher level=info msg="Removing stale endpoint interfaces" subsys=daemon level=info msg="Skipping kvstore configuration" subsys=daemon level=info msg="Initializing node addressing" subsys=daemon level=info msg="Waiting until local node addressing before starting watchers depending on it" subsys=k8s-watcher level=info msg="Initializing cluster-pool IPAM" subsys=ipam v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="Restoring endpoints..." subsys=daemon level=info msg="Endpoints restored" failed=0 restored=0 subsys=daemon level=info msg="Addressing information:" subsys=daemon level=info msg=" Cluster-Name: default" subsys=daemon level=info msg=" Cluster-ID: 0" subsys=daemon level=info msg=" Local node-name: instance" subsys=daemon level=info msg=" Node-IPv6: " subsys=daemon level=info msg=" External-Node IPv4: 199.204.45.33" subsys=daemon level=info msg=" Internal-Node IPv4: 10.0.0.113" subsys=daemon level=info msg=" IPv4 allocation prefix: 10.0.0.0/24" subsys=daemon level=info msg=" Loopback IPv4: 169.254.42.1" subsys=daemon level=info msg=" Local IPv4 addresses:" subsys=daemon level=info msg=" - 199.204.45.33" subsys=daemon level=info msg=" - 172.17.0.100" subsys=daemon level=info msg=" - 10.96.240.200" subsys=daemon level=info msg="Node updated" clusterName=default nodeName=instance subsys=nodemanager level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Waiting until all pre-existing resources have been received" subsys=k8s-watcher level=info msg="Adding local node to cluster" node="{instance default [{InternalIP 199.204.45.33} {CiliumInternalIP 10.0.0.113}] 10.0.0.0/24 [] [] 10.0.0.119 0 local 0 map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:] map[] 1 }" subsys=nodediscovery level=info msg="Initializing identity allocator" subsys=identity-cache level=info msg="Allocating identities between range" cluster-id=0 max=65535 min=256 subsys=identity-cache level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.core.bpf_jit_enable sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.all.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.fib_multipath_use_neigh sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.unprivileged_bpf_disabled sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.timer_migration sysParamValue=0 level=info msg="Setting up BPF datapath" bpfClockSource=ktime bpfInsnSet="" subsys=datapath-loader level=info msg="Iptables rules installed" subsys=iptables level=info msg="Adding new proxy port rules for cilium-dns-egress:40843" id=cilium-dns-egress subsys=proxy level=info msg="Iptables proxy rules installed" subsys=iptables level=info msg="Start hook executed" duration=2.626192462s function="cmd.newDaemonPromise.func1 (daemon_main.go:1663)" subsys=hive level=info msg="Starting IP identity watcher" subsys=ipcache level=info msg="Start hook executed" duration="12.26µs" function="utime.initUtimeSync.func1 (cell.go:33)" subsys=hive level=info msg="Initializing daemon" subsys=daemon level=info msg="Validating configured node address ranges" subsys=daemon level=info msg="Start hook executed" duration="9.271µs" function="*job.group.Start" subsys=hive level=info msg="Starting connection tracking garbage collector" subsys=daemon level=info msg="Start hook executed" duration="96.463µs" function="l2respondermap.newMap.func1 (l2_responder_map4.go:44)" subsys=hive level=info msg="Start hook executed" duration="243.348µs" function="*job.group.Start" subsys=hive level=info msg="Initial scan of connection tracking completed" subsys=ct-gc level=info msg="Regenerating restored endpoints" numRestored=0 subsys=daemon level=info msg="Creating host endpoint" subsys=daemon level=info msg="Finished regenerating restored endpoints" regenerated=0 subsys=daemon total=0 level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1703 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Deleted orphan backends" orphanBackends=0 subsys=service level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1703 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1703 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Launching Cilium health daemon" subsys=daemon level=info msg="Launching Cilium health endpoint" subsys=daemon level=info msg="Started healthz status API server" address="127.0.0.1:9879" subsys=daemon level=info msg="Processing queued endpoint deletion requests from /var/run/cilium/deleteQueue" subsys=daemon level=info msg="processing 0 queued deletion requests" subsys=daemon level=info msg="Initializing Cilium API" subsys=daemon level=info msg="Daemon initialization completed" bootstrapTime=3.581346725s subsys=daemon level=info msg="Hubble server is disabled" subsys=hubble level=info msg="Serving cilium API at unix:///var/run/cilium/cilium.sock" subsys=daemon level=info msg="Compiled new BPF template" BPFCompilationTime=342.109557ms file-path=/var/run/cilium/state/templates/d46c52d11cc951677859f55a07e6305bc857e599428f0629ac7e248a58913685/bpf_host.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1703 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.128 887283ba-8937-4939-92a8-a13d3a499dab default }" containerID=05113272a1b6dce9c8f55ba0979a0d4fde7aa0585048b3158a85f7bba3d98318 datapathConfiguration="&{false false false false false }" interface=lxcaacbade58094 k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-7k7m8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=05113272a1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=969 ipv4=10.0.0.128 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-7k7m8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=05113272a1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=969 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=fc167602-5b5f-4a31-a676-2eb7082f0f1d,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=fc167602-5b5f-4a31-a676-2eb7082f0f1d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.128 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-7k7m8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app=certgen;k8s:batch.kubernetes.io/controller-uid=fc167602-5b5f-4a31-a676-2eb7082f0f1d;k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen;k8s:controller-uid=fc167602-5b5f-4a31-a676-2eb7082f0f1d;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;k8s:job-name=envoy-gateway-gateway-helm-certgen;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=05113272a1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=969 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.128 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-7k7m8 line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=05113272a1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=969 identity=11255 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=fc167602-5b5f-4a31-a676-2eb7082f0f1d,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=fc167602-5b5f-4a31-a676-2eb7082f0f1d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.128 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-7k7m8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=05113272a1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=969 identity=11255 ipv4=10.0.0.128 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-7k7m8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.163 764cd3d1-9ff9-4d3b-b954-3361f9d23a59 default }" containerID=b125d0cc5f20917caa46260c235015f41953b4f4d0a30bbeaf115b9b5b78f76f datapathConfiguration="&{false false false false false }" interface=lxce265739499ab k8sPodName=kube-system/coredns-7c96b6546b-6jmtv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b125d0cc5f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=173 ipv4=10.0.0.163 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-6jmtv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b125d0cc5f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=173 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.163 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-6jmtv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:kube-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=coredns;k8s:io.kubernetes.pod.namespace=kube-system;k8s:k8s-app=kube-dns;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b125d0cc5f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=173 identity=62843 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.163 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-6jmtv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b125d0cc5f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=173 identity=62843 ipv4=10.0.0.163 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-6jmtv subsys=endpoint level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=713 ipv4=10.0.0.119 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=713 identityLabels="reserved:health" ipv4=10.0.0.119 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=713 identity=4 identityLabels="reserved:health" ipv4=10.0.0.119 ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Compiled new BPF template" BPFCompilationTime=1.04342116s file-path=/var/run/cilium/state/templates/c29fe3ef896c3b7391c88b0d894b4bbb826303b43fd5aa9298333fe1aae0a874/bpf_lxc.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=713 identity=4 ipv4=10.0.0.119 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b125d0cc5f datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=173 identity=62843 ipv4=10.0.0.163 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-6jmtv subsys=endpoint level=info msg="Successful endpoint creation" containerID=b125d0cc5f datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=173 identity=62843 ipv4=10.0.0.163 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-6jmtv subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=05113272a1 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=969 identity=11255 ipv4=10.0.0.128 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-7k7m8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=05113272a1 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=969 identity=11255 ipv4=10.0.0.128 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-7k7m8 subsys=daemon level=info msg="Serving cilium health API at unix:///var/run/cilium/health.sock" subsys=health-server level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=05113272a1 endpointID=969 k8sNamespace=envoy-gateway-system k8sPodName=envoy-gateway-gateway-helm-certgen-7k7m8 subsys=daemon level=info msg="Releasing key" key="[k8s:app=certgen k8s:batch.kubernetes.io/controller-uid=fc167602-5b5f-4a31-a676-2eb7082f0f1d k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen k8s:controller-uid=fc167602-5b5f-4a31-a676-2eb7082f0f1d k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen k8s:io.kubernetes.pod.namespace=envoy-gateway-system k8s:job-name=envoy-gateway-gateway-helm-certgen]" subsys=allocator level=info msg="Removed endpoint" containerID=05113272a1 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=969 identity=11255 ipv4=10.0.0.128 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-7k7m8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.69 e66a371e-48d9-4fcd-9284-7e03ffc7fa28 default }" containerID=303e4c1ae30380f1d9ee1a72e52c5f741783f2a4f4fea5c106b906884308d80c datapathConfiguration="&{false false false false false }" interface=lxc7ba7d7abb8e0 k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-p7qb9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=303e4c1ae3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=699 ipv4=10.0.0.69 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-p7qb9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=303e4c1ae3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=699 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.69 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-p7qb9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=303e4c1ae3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=699 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.69 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-p7qb9 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=envoy-gateway;k8s:app.kubernetes.io/name=gateway-helm;k8s:control-plane=envoy-gateway;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=303e4c1ae3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=699 identity=32119 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.69 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-p7qb9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=303e4c1ae3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=699 identity=32119 ipv4=10.0.0.69 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-p7qb9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=303e4c1ae3 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=699 identity=32119 ipv4=10.0.0.69 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-p7qb9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=303e4c1ae3 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=699 identity=32119 ipv4=10.0.0.69 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-p7qb9 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1703 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_01703 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_01703 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_01703 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_01703:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1703 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.51 ae22cd3e-aab0-404f-8a1c-29fca1cb1702 default }" containerID=89ded04933a0c4aa1de6df60465bd2ed148d890683d343bd706fb7df31edfa7d datapathConfiguration="&{false false false false false }" interface=lxc5dab885dcaaa k8sPodName=kube-system/coredns-67659f764b-p6wrn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=89ded04933 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3528 ipv4=10.0.0.51 ipv6= k8sPodName=kube-system/coredns-67659f764b-p6wrn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=89ded04933 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3528 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.51 ipv6= k8sPodName=kube-system/coredns-67659f764b-p6wrn subsys=endpoint level=info msg="Identity of endpoint changed" containerID=89ded04933 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3528 identity=62843 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.51 ipv6= k8sPodName=kube-system/coredns-67659f764b-p6wrn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=89ded04933 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3528 identity=62843 ipv4=10.0.0.51 ipv6= k8sPodName=kube-system/coredns-67659f764b-p6wrn subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.136 fa8ac0da-cc14-4d8e-b0db-0c3e0f4b7292 default }" containerID=c5c31e97c9762bb5603fe3c3ca827315fbe4e124e8de140a1e0b81546f38572b datapathConfiguration="&{false false false false false }" interface=lxcea17a3933097 k8sPodName=kube-system/coredns-67659f764b-6czrn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c5c31e97c9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1222 ipv4=10.0.0.136 ipv6= k8sPodName=kube-system/coredns-67659f764b-6czrn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c5c31e97c9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1222 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.136 ipv6= k8sPodName=kube-system/coredns-67659f764b-6czrn subsys=endpoint level=info msg="Identity of endpoint changed" containerID=c5c31e97c9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1222 identity=62843 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.136 ipv6= k8sPodName=kube-system/coredns-67659f764b-6czrn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c5c31e97c9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1222 identity=62843 ipv4=10.0.0.136 ipv6= k8sPodName=kube-system/coredns-67659f764b-6czrn subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c5c31e97c9 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1222 identity=62843 ipv4=10.0.0.136 ipv6= k8sPodName=kube-system/coredns-67659f764b-6czrn subsys=endpoint level=info msg="Successful endpoint creation" containerID=c5c31e97c9 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1222 identity=62843 ipv4=10.0.0.136 ipv6= k8sPodName=kube-system/coredns-67659f764b-6czrn subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=89ded04933 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3528 identity=62843 ipv4=10.0.0.51 ipv6= k8sPodName=kube-system/coredns-67659f764b-p6wrn subsys=endpoint level=info msg="Successful endpoint creation" containerID=89ded04933 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3528 identity=62843 ipv4=10.0.0.51 ipv6= k8sPodName=kube-system/coredns-67659f764b-p6wrn subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.192 6e530968-e375-42ed-90f4-4c058447a338 default }" containerID=c54bc1ef80fb900f615c3e4af3b9bbfaf6c4d598918036ea3df5c20323bdce8a datapathConfiguration="&{false false false false false }" interface=lxcb384ce78e7e6 k8sPodName=local-path-storage/local-path-provisioner-679c578f5-krxnc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c54bc1ef80 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3290 ipv4=10.0.0.192 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-krxnc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c54bc1ef80 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3290 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.192 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-krxnc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=local-path-provisioner;k8s:app.kubernetes.io/name=local-path-provisioner;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c54bc1ef80 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3290 identity=42298 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.192 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-krxnc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c54bc1ef80 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3290 identity=42298 ipv4=10.0.0.192 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-krxnc subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=c54bc1ef80 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3290 identity=42298 ipv4=10.0.0.192 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-krxnc subsys=endpoint level=info msg="Successful endpoint creation" containerID=c54bc1ef80 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3290 identity=42298 ipv4=10.0.0.192 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-krxnc subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=b125d0cc5f endpointID=173 k8sNamespace=kube-system k8sPodName=coredns-7c96b6546b-6jmtv subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=coredns k8s:io.kubernetes.pod.namespace=kube-system k8s:k8s-app=kube-dns]" subsys=allocator level=info msg="Removed endpoint" containerID=b125d0cc5f datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=173 identity=62843 ipv4=10.0.0.163 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-6jmtv subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.172 b030dd54-7e96-4415-9abc-e33eb4605ed5 default }" containerID=905f20478aeb07be2047184061047719f472b75ab24e4790f5fbc9403d1a68b6 datapathConfiguration="&{false false false false false }" interface=lxc29acd4b224cf k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-p5nw2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=905f20478a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1259 ipv4=10.0.0.172 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-p5nw2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=905f20478a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1259 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.172 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-p5nw2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.88 37220694-4ff6-4dbc-94d8-e496b4d78498 default }" containerID=90a89e0848788363c878db6eef3c9c20b4ea92afeb9fc2600d20b509480b7ab9 datapathConfiguration="&{false false false false false }" interface=lxc88bd38c6b142 k8sPodName=cert-manager/cert-manager-webhook-548949fc64-xs8cl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=90a89e0848 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2285 ipv4=10.0.0.88 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-xs8cl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=90a89e0848 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2285 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.88 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-xs8cl subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=cainjector;k8s:app.kubernetes.io/component=cainjector;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cainjector;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=905f20478a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1259 identity=41879 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.172 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-p5nw2 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=905f20478a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1259 identity=41879 ipv4=10.0.0.172 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-p5nw2 subsys=endpoint level=info msg="Invalid state transition skipped" containerID=90a89e0848 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2285 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.88 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-xs8cl line=611 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=webhook;k8s:app.kubernetes.io/component=webhook;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=webhook;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=90a89e0848 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2285 identity=29155 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.88 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-xs8cl oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=90a89e0848 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2285 identity=29155 ipv4=10.0.0.88 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-xs8cl subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.246 d7d89e7b-6123-4857-9767-325c48bef6d4 default }" containerID=de87e481370856b106164e3e4b6bd21213f4a61bcae396943cbd91dd1ea22d55 datapathConfiguration="&{false false false false false }" interface=lxc36bd96238514 k8sPodName=cert-manager/cert-manager-75c4c745bc-5dxp7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=de87e48137 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1369 ipv4=10.0.0.246 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-5dxp7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=de87e48137 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1369 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.246 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-5dxp7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=cert-manager;k8s:app.kubernetes.io/component=controller;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cert-manager;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=de87e48137 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1369 identity=10498 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.246 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-5dxp7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=de87e48137 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1369 identity=10498 ipv4=10.0.0.246 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-5dxp7 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=905f20478a datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1259 identity=41879 ipv4=10.0.0.172 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-p5nw2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=905f20478a datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1259 identity=41879 ipv4=10.0.0.172 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-p5nw2 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=de87e48137 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1369 identity=10498 ipv4=10.0.0.246 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-5dxp7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=de87e48137 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1369 identity=10498 ipv4=10.0.0.246 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-5dxp7 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=90a89e0848 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2285 identity=29155 ipv4=10.0.0.88 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-xs8cl subsys=endpoint level=info msg="Successful endpoint creation" containerID=90a89e0848 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2285 identity=29155 ipv4=10.0.0.88 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-xs8cl subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.56 40740fde-d296-4dec-9389-ff15ff9da117 default }" containerID=713838a983839726a4ebec978b858796a33a83c4a4d4f1ce3e52c4903e1ac2a0 datapathConfiguration="&{false false false false false }" interface=lxc561b66893e1b k8sPodName=cert-manager/cert-manager-startupapicheck-4g7pm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=713838a983 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2721 ipv4=10.0.0.56 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-4g7pm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=713838a983 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2721 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=d8cb341f-2bbb-4537-b5a4-f8236f7db19f,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=d8cb341f-2bbb-4537-b5a4-f8236f7db19f,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.56 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-4g7pm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=startupapicheck;k8s:app.kubernetes.io/component=startupapicheck;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=startupapicheck;k8s:app.kubernetes.io/version=v1.11.5;k8s:batch.kubernetes.io/controller-uid=d8cb341f-2bbb-4537-b5a4-f8236f7db19f;k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck;k8s:controller-uid=d8cb341f-2bbb-4537-b5a4-f8236f7db19f;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck;k8s:io.kubernetes.pod.namespace=cert-manager;k8s:job-name=cert-manager-startupapicheck;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=713838a983 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2721 identity=1497 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=d8cb341f-2bbb-4537-b5a4-f8236f7db19f,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=d8cb341f-2bbb-4537-b5a4-f8236f7db19f,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.56 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-4g7pm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=713838a983 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2721 identity=1497 ipv4=10.0.0.56 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-4g7pm subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=713838a983 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2721 identity=1497 ipv4=10.0.0.56 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-4g7pm subsys=endpoint level=info msg="Successful endpoint creation" containerID=713838a983 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2721 identity=1497 ipv4=10.0.0.56 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-4g7pm subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=713838a983 endpointID=2721 k8sNamespace=cert-manager k8sPodName=cert-manager-startupapicheck-4g7pm subsys=daemon level=info msg="Releasing key" key="[k8s:app=startupapicheck k8s:app.kubernetes.io/component=startupapicheck k8s:app.kubernetes.io/instance=cert-manager k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=startupapicheck k8s:app.kubernetes.io/version=v1.11.5 k8s:batch.kubernetes.io/controller-uid=d8cb341f-2bbb-4537-b5a4-f8236f7db19f k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck k8s:controller-uid=d8cb341f-2bbb-4537-b5a4-f8236f7db19f k8s:helm.sh/chart=cert-manager-v1.11.5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager k8s:io.cilium.k8s.namespace.labels.name=cert-manager k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck k8s:io.kubernetes.pod.namespace=cert-manager k8s:job-name=cert-manager-startupapicheck]" subsys=allocator level=info msg="Removed endpoint" containerID=713838a983 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2721 identity=1497 ipv4=10.0.0.56 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-4g7pm subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.225 0aea60a0-d2bf-4346-82ff-e631d03df89e default }" containerID=d6e6981a5893a6e68f799eec1e3c6df4c409b05225b83ca23b2318b56233cc4c datapathConfiguration="&{false false false false false }" interface=lxcc93c6836fad8 k8sPodName=ingress-nginx/ingress-nginx-admission-create-ft4js labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d6e6981a58 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1453 ipv4=10.0.0.225 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-ft4js subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d6e6981a58 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1453 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=7121838d-734a-4b1b-b845-3313207c2a2f,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=7121838d-734a-4b1b-b845-3313207c2a2f,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.225 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-ft4js subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=7121838d-734a-4b1b-b845-3313207c2a2f;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create;k8s:controller-uid=7121838d-734a-4b1b-b845-3313207c2a2f;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-create;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d6e6981a58 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1453 identity=29383 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=7121838d-734a-4b1b-b845-3313207c2a2f,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=7121838d-734a-4b1b-b845-3313207c2a2f,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.225 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-ft4js oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d6e6981a58 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1453 identity=29383 ipv4=10.0.0.225 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-ft4js subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=d6e6981a58 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1453 identity=29383 ipv4=10.0.0.225 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-ft4js subsys=endpoint level=info msg="Successful endpoint creation" containerID=d6e6981a58 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1453 identity=29383 ipv4=10.0.0.225 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-ft4js subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=d6e6981a58 endpointID=1453 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-create-ft4js subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=7121838d-734a-4b1b-b845-3313207c2a2f k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create k8s:controller-uid=7121838d-734a-4b1b-b845-3313207c2a2f k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-create]" subsys=allocator level=info msg="Removed endpoint" containerID=d6e6981a58 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1453 identity=29383 ipv4=10.0.0.225 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-ft4js subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.134 049fa4b4-24ef-420e-a219-a4dcee9afb46 default }" containerID=c97ee6d0ab7d98ca1a313accc1227a6892b5ec2878148133aa4c1074b036e7af datapathConfiguration="&{false false false false false }" interface=lxcc6ed15266e08 k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-t7gw9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c97ee6d0ab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3610 ipv4=10.0.0.134 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-t7gw9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c97ee6d0ab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3610 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.134 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-t7gw9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=c97ee6d0ab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3610 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.134 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-t7gw9 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=default-backend;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend;k8s:io.kubernetes.pod.namespace=ingress-nginx;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c97ee6d0ab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3610 identity=7140 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.134 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-t7gw9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c97ee6d0ab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3610 identity=7140 ipv4=10.0.0.134 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-t7gw9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c97ee6d0ab datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3610 identity=7140 ipv4=10.0.0.134 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-t7gw9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=c97ee6d0ab datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3610 identity=7140 ipv4=10.0.0.134 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-t7gw9 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.129 87f56471-e11e-492f-b467-c0cbdf1de2ac default }" containerID=b7d102c0c8bc9289a005697b08d5f2e490b2d8d546571c61cc9bec7ce5d8a222 datapathConfiguration="&{false false false false false }" interface=lxcd15aee5337be k8sPodName=ingress-nginx/ingress-nginx-admission-patch-pbwk7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b7d102c0c8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=202 ipv4=10.0.0.129 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-pbwk7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b7d102c0c8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=202 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=4ed34ffa-a10a-42ef-8865-b83604f28845,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=4ed34ffa-a10a-42ef-8865-b83604f28845,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.129 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-pbwk7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=4ed34ffa-a10a-42ef-8865-b83604f28845;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch;k8s:controller-uid=4ed34ffa-a10a-42ef-8865-b83604f28845;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-patch;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b7d102c0c8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=202 identity=42805 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=4ed34ffa-a10a-42ef-8865-b83604f28845,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=4ed34ffa-a10a-42ef-8865-b83604f28845,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.129 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-pbwk7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b7d102c0c8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=202 identity=42805 ipv4=10.0.0.129 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-pbwk7 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b7d102c0c8 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=202 identity=42805 ipv4=10.0.0.129 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-pbwk7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=b7d102c0c8 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=202 identity=42805 ipv4=10.0.0.129 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-pbwk7 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=b7d102c0c8 endpointID=202 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-patch-pbwk7 subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=4ed34ffa-a10a-42ef-8865-b83604f28845 k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch k8s:controller-uid=4ed34ffa-a10a-42ef-8865-b83604f28845 k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-patch]" subsys=allocator level=info msg="Removed endpoint" containerID=b7d102c0c8 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=202 identity=42805 ipv4=10.0.0.129 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-pbwk7 subsys=endpoint level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"rabbitmq-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-cluster-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=f72c765b-32ff-4e6b-ab0f-437df7f1484f] Description:}]" policyAddRequest=84a30933-71d5-4b89-b4f2-6ab4ab517294 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=84a30933-71d5-4b89-b4f2-6ab4ab517294 policyRevision=2 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-cluster-operator subsys=k8s-watcher level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"messaging-topology-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9443 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-messaging-topology-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=7ceefdec-8481-4452-89fc-17c6f29d093c] Description:}]" policyAddRequest=1c45c6c8-b3d8-484c-9c66-0d0951048354 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=1c45c6c8-b3d8-484c-9c66-0d0951048354 policyRevision=3 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-messaging-topology-operator subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.204 a21ef366-1681-4ddf-87fd-fb9ff91b9c73 default }" containerID=9e02959ecc0650b9b0ff8f7f02987d2412c202476c94f1b2ae120c05faad87f1 datapathConfiguration="&{false false false false false }" interface=lxcf6165fab965f k8sPodName=openstack/rabbitmq-cluster-operator-5448d56d95-x684k labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9e02959ecc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=846 ipv4=10.0.0.204 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-5448d56d95-x684k subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9e02959ecc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=846 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.9.0,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.204 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-5448d56d95-x684k subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=2.9.0;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9e02959ecc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=846 identity=30032 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.9.0,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.204 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-5448d56d95-x684k oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=9e02959ecc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=846 identity=30032 ipv4=10.0.0.204 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-5448d56d95-x684k subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9e02959ecc datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=846 identity=30032 ipv4=10.0.0.204 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-5448d56d95-x684k subsys=endpoint level=info msg="Successful endpoint creation" containerID=9e02959ecc datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=846 identity=30032 ipv4=10.0.0.204 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-5448d56d95-x684k subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.160 7fb05281-6cab-4a5e-a8ce-a6969d690510 default }" containerID=28a482be85e717ebf747463a201a95ee2dbd776ef0c4cf49f39f8d98ed7de2fe datapathConfiguration="&{false false false false false }" interface=lxcbf96a8cd5c00 k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-7pmfx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=28a482be85 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=102 ipv4=10.0.0.160 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-7pmfx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=28a482be85 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=102 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.14.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.160 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-7pmfx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=messaging-topology-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=1.14.1;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=28a482be85 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=102 identity=61813 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.14.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.160 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-7pmfx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=28a482be85 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=102 identity=61813 ipv4=10.0.0.160 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-7pmfx subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=28a482be85 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=102 identity=61813 ipv4=10.0.0.160 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-7pmfx subsys=endpoint level=info msg="Successful endpoint creation" containerID=28a482be85 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=102 identity=61813 ipv4=10.0.0.160 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-7pmfx subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.25 333a78d5-712d-45cb-9336-8470ced2ffbb default }" containerID=852b4534fa8676989e1091ff084247305ad4a6e291aab24f466654dbfebfb4a2 datapathConfiguration="&{false false false false false }" interface=lxc19339d423b33 k8sPodName=openstack/pxc-operator-7cff949c8b-6sxxg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=852b4534fa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1964 ipv4=10.0.0.25 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-6sxxg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=852b4534fa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1964 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.25 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-6sxxg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=852b4534fa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1964 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.25 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-6sxxg line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=operator;k8s:app.kubernetes.io/instance=pxc-operator;k8s:app.kubernetes.io/name=pxc-operator;k8s:app.kubernetes.io/part-of=pxc-operator;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=852b4534fa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1964 identity=25912 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.25 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-6sxxg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=852b4534fa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1964 identity=25912 ipv4=10.0.0.25 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-6sxxg subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=852b4534fa datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1964 identity=25912 ipv4=10.0.0.25 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-6sxxg subsys=endpoint level=info msg="Successful endpoint creation" containerID=852b4534fa datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1964 identity=25912 ipv4=10.0.0.25 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-6sxxg subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.236 b2092130-17d3-4921-837f-ceb6deba010d default }" containerID=c18234d52461096d7d3f21bca80bd3e839792559176ba52d65e96022efc7dbf8 datapathConfiguration="&{false false false false false }" interface=lxc7cfcefb74a1a k8sPodName=local-path-storage/helper-pod-create-pvc-b2ba22f1-687f-47bd-b6f7-9e31874f3ceb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c18234d524 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=909 ipv4=10.0.0.236 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b2ba22f1-687f-47bd-b6f7-9e31874f3ceb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c18234d524 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=909 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.236 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b2ba22f1-687f-47bd-b6f7-9e31874f3ceb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c18234d524 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=909 identity=8417 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.236 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b2ba22f1-687f-47bd-b6f7-9e31874f3ceb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c18234d524 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=909 identity=8417 ipv4=10.0.0.236 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b2ba22f1-687f-47bd-b6f7-9e31874f3ceb subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=c18234d524 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=909 identity=8417 ipv4=10.0.0.236 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b2ba22f1-687f-47bd-b6f7-9e31874f3ceb subsys=endpoint level=info msg="Successful endpoint creation" containerID=c18234d524 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=909 identity=8417 ipv4=10.0.0.236 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b2ba22f1-687f-47bd-b6f7-9e31874f3ceb subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.72 9a550a2c-1e73-4a7e-bcfc-38c731633c10 default }" containerID=1ce35e376f1ff3636fa2aa082691fb8f2f4111108070011a4edbc802a87893ca datapathConfiguration="&{false false false false false }" interface=lxc17b15d0b2ae1 k8sPodName=openstack/percona-xtradb-haproxy-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1ce35e376f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=197 ipv4=10.0.0.72 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1ce35e376f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=197 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.72 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=haproxy;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1ce35e376f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=197 identity=34130 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.72 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1ce35e376f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=197 identity=34130 ipv4=10.0.0.72 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1ce35e376f datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=197 identity=34130 ipv4=10.0.0.72 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=1ce35e376f datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=197 identity=34130 ipv4=10.0.0.72 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=c18234d524 endpointID=909 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-b2ba22f1-687f-47bd-b6f7-9e31874f3ceb subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=c18234d524 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=909 identity=8417 ipv4=10.0.0.236 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b2ba22f1-687f-47bd-b6f7-9e31874f3ceb subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.59 567f1604-5c2b-401f-8c47-982e3487a31e default }" containerID=7426c905145e3772560a387ff69e6cef74019dae54b5e151280bf6fe9f837298 datapathConfiguration="&{false false false false false }" interface=lxc76e3b5cabc83 k8sPodName=openstack/percona-xtradb-pxc-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7426c90514 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1324 ipv4=10.0.0.59 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7426c90514 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1324 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.59 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=pxc;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7426c90514 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1324 identity=32144 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.59 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7426c90514 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1324 identity=32144 ipv4=10.0.0.59 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=7426c90514 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1324 identity=32144 ipv4=10.0.0.59 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=7426c90514 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1324 identity=32144 ipv4=10.0.0.59 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/instance\":\"valkey\",\"k8s:app.kubernetes.io/name\":\"valkey\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:6379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:26379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:} {IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9121 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=valkey k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=b8f1e922-a0b4-48d6-8ecf-67b429ce2a01] Description:}]" policyAddRequest=787d6092-811c-467d-a327-faa60afebf5f subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=787d6092-811c-467d-a327-faa60afebf5f policyRevision=4 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=valkey subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.81 fbd8c48c-8940-436a-85c2-7977e7b5553a default }" containerID=fe97f90db20522d800e077cea9c4ac3dc00d92329adc10018a1a1d4cd508d56b datapathConfiguration="&{false false false false false }" interface=lxc3c33459e72cc k8sPodName=local-path-storage/helper-pod-create-pvc-695323ed-303b-4667-929f-ae54f47430cb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fe97f90db2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3910 ipv4=10.0.0.81 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-695323ed-303b-4667-929f-ae54f47430cb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fe97f90db2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3910 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.81 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-695323ed-303b-4667-929f-ae54f47430cb subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fe97f90db2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3910 identity=8417 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.81 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-695323ed-303b-4667-929f-ae54f47430cb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fe97f90db2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3910 identity=8417 ipv4=10.0.0.81 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-695323ed-303b-4667-929f-ae54f47430cb subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=fe97f90db2 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3910 identity=8417 ipv4=10.0.0.81 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-695323ed-303b-4667-929f-ae54f47430cb subsys=endpoint level=info msg="Successful endpoint creation" containerID=fe97f90db2 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3910 identity=8417 ipv4=10.0.0.81 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-695323ed-303b-4667-929f-ae54f47430cb subsys=daemon level=info msg="Delete endpoint request" containerID=fe97f90db2 endpointID=3910 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-695323ed-303b-4667-929f-ae54f47430cb subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=fe97f90db2 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3910 identity=8417 ipv4=10.0.0.81 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-695323ed-303b-4667-929f-ae54f47430cb subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.4 f6bcc168-8fec-48ec-af8d-d9c78d94e715 default }" containerID=6af10c51d3e4c36fa7f981cccf92c080a1357f510e3f9662fe34ac2937e7e32c datapathConfiguration="&{false false false false false }" interface=lxccd1c9765c3a5 k8sPodName=openstack/valkey-node-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6af10c51d3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=76 ipv4=10.0.0.4 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6af10c51d3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=76 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.4 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=6af10c51d3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=76 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.4 ipv6= k8sPodName=openstack/valkey-node-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=node;k8s:app.kubernetes.io/instance=valkey;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=valkey;k8s:app.kubernetes.io/version=8.0.2;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=valkey-2.4.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=valkey;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=valkey-node-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6af10c51d3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=76 identity=513 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.4 ipv6= k8sPodName=openstack/valkey-node-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6af10c51d3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=76 identity=513 ipv4=10.0.0.4 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6af10c51d3 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=76 identity=513 ipv4=10.0.0.4 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=6af10c51d3 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=76 identity=513 ipv4=10.0.0.4 ipv6= k8sPodName=openstack/valkey-node-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"keycloak\",\"k8s:app.kubernetes.io/instance\":\"keycloak\",\"k8s:app.kubernetes.io/name\":\"keycloak\",\"k8s:io.kubernetes.pod.namespace\":\"auth-system\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:7800 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:8080 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=keycloak k8s:io.cilium.k8s.policy.namespace=auth-system k8s:io.cilium.k8s.policy.uid=891e8362-7e65-43d3-ab6c-89eecae64557] Description:}]" policyAddRequest=dccb45e7-2d7c-4a0d-a27d-8fd6c2338cab subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=dccb45e7-2d7c-4a0d-a27d-8fd6c2338cab policyRevision=5 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=keycloak subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.213 c5aa6353-c673-4908-bea2-de7ea9e48cad default }" containerID=cb9ab0ce980b910c5852d189c687b968c6e007ee0f0ed8eef1768c8f5d46482f datapathConfiguration="&{false false false false false }" interface=lxc5a205291e2fa k8sPodName=auth-system/keycloak-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=cb9ab0ce98 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3424 ipv4=10.0.0.213 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=cb9ab0ce98 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3424 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.213 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:auth-system k8s:io.cilium.k8s.namespace.labels.name:auth-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=keycloak;k8s:app.kubernetes.io/instance=keycloak;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=keycloak;k8s:app.kubernetes.io/version=24.0.5;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=keycloak-21.4.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system;k8s:io.cilium.k8s.namespace.labels.name=auth-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keycloak;k8s:io.kubernetes.pod.namespace=auth-system;k8s:statefulset.kubernetes.io/pod-name=keycloak-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=cb9ab0ce98 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3424 identity=3616 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.213 ipv6= k8sPodName=auth-system/keycloak-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=cb9ab0ce98 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3424 identity=3616 ipv4=10.0.0.213 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=cb9ab0ce98 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3424 identity=3616 ipv4=10.0.0.213 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=cb9ab0ce98 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3424 identity=3616 ipv4=10.0.0.213 ipv6= k8sPodName=auth-system/keycloak-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.01002340146360599 newInterval=7m30s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.191 29e7037a-246c-4713-bc09-fb476bed3f87 default }" containerID=65e2b915fcff4bbb686dd8c3671cb9527316a627e83442c60353cea1f91fa10e datapathConfiguration="&{false false false false false }" interface=lxc6d0071fbdf46 k8sPodName=monitoring/node-feature-discovery-worker-hcztf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=65e2b915fc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1344 ipv4=10.0.0.191 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-hcztf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=65e2b915fc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1344 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.191 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-hcztf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=worker;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=65e2b915fc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1344 identity=448 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.191 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-hcztf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=65e2b915fc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1344 identity=448 ipv4=10.0.0.191 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-hcztf subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.55 0ee2c9ba-b170-4d6b-9bec-00c058540f2f default }" containerID=b6969ebe5e3c7346b6fba63053ad22afdaf7903785f93dd4ca8bee1f4c20808d datapathConfiguration="&{false false false false false }" interface=lxc82fc531a0663 k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-cgl7p labels="[]" subsys=daemon sync-build=true level=info msg="Create endpoint request" addressing="&{10.0.0.173 81970837-ea94-4592-aeba-25a11d4e9b94 default }" containerID=8244eb5c4dd960546acc817fd20ae80555516b4248268fd454e92077c5bcbb85 datapathConfiguration="&{false false false false false }" interface=lxc19caaf8ffb7f k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-rfnk7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b6969ebe5e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=282 ipv4=10.0.0.55 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-cgl7p subsys=endpoint level=info msg="New endpoint" containerID=8244eb5c4d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=315 ipv4=10.0.0.173 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-rfnk7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b6969ebe5e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=282 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.55 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-cgl7p subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Resolving identity labels (blocking)" containerID=8244eb5c4d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=315 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.173 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-rfnk7 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=gc;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b6969ebe5e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=282 identity=16087 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.55 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-cgl7p oldIdentity="no identity" subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Waiting for endpoint to be generated" containerID=b6969ebe5e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=282 identity=16087 ipv4=10.0.0.55 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-cgl7p subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=master;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8244eb5c4d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=315 identity=4329 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.173 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-rfnk7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8244eb5c4d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=315 identity=4329 ipv4=10.0.0.173 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-rfnk7 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=65e2b915fc datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1344 identity=448 ipv4=10.0.0.191 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-hcztf subsys=endpoint level=info msg="Successful endpoint creation" containerID=65e2b915fc datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1344 identity=448 ipv4=10.0.0.191 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-hcztf subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=b6969ebe5e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=282 identity=16087 ipv4=10.0.0.55 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-cgl7p subsys=endpoint level=info msg="Successful endpoint creation" containerID=b6969ebe5e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=282 identity=16087 ipv4=10.0.0.55 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-cgl7p subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=8244eb5c4d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=315 identity=4329 ipv4=10.0.0.173 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-rfnk7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=8244eb5c4d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=315 identity=4329 ipv4=10.0.0.173 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-rfnk7 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.133 c811750b-10de-4175-bf20-208b37559613 default }" containerID=33212ff4a142e9ed8224b0dcb5d6e0bc9155841f367907a9b8c16532c5c69697 datapathConfiguration="&{false false false false false }" interface=lxcbb11c6882250 k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-tck8d labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=33212ff4a1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=329 ipv4=10.0.0.133 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-tck8d subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=33212ff4a1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=329 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.133 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-tck8d subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:secretgen-controller]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=secretgen-controller;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa;k8s:io.kubernetes.pod.namespace=secretgen-controller;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=33212ff4a1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=329 identity=10761 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.133 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-tck8d oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=33212ff4a1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=329 identity=10761 ipv4=10.0.0.133 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-tck8d subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=33212ff4a1 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=329 identity=10761 ipv4=10.0.0.133 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-tck8d subsys=endpoint level=info msg="Successful endpoint creation" containerID=33212ff4a1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=329 identity=10761 ipv4=10.0.0.133 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-tck8d subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1703 identity=1 identityLabels="k8s:feature.node.kubernetes.io/cpu-cpuid.ADX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AESNI=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX2=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CLZERO=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CMPXCHG8=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FMA3=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSROPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.HYPERVISOR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IA32_ARCH_CAP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBPB=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBRS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.LAHF=true,k8s:feature.node.kubernetes.io/cpu-cpuid.MOVBE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.NRIPS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.OSXSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SHA=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SPEC_CTRL_SSBD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SSE4A=true,k8s:feature.node.kubernetes.io/cpu-cpuid.STIBP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVM=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVMNP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSCALL=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSEE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.TOPEXT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.WBNOINVD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.X87=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XGETBV1=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEC=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEOPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVES=true,k8s:feature.node.kubernetes.io/cpu-hardware_multithreading=false,k8s:feature.node.kubernetes.io/cpu-model.family=23,k8s:feature.node.kubernetes.io/cpu-model.id=49,k8s:feature.node.kubernetes.io/cpu-model.vendor_id=AMD,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ=true,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ_IDLE=true,k8s:feature.node.kubernetes.io/kernel-version.full=5.15.0-174-generic,k8s:feature.node.kubernetes.io/kernel-version.major=5,k8s:feature.node.kubernetes.io/kernel-version.minor=15,k8s:feature.node.kubernetes.io/kernel-version.revision=0,k8s:feature.node.kubernetes.io/pci-0300_1af4.present=true,k8s:feature.node.kubernetes.io/system-os_release.ID=ubuntu,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.major=22,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.minor=04,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID=22.04,k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_01703 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_01703 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_01703 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_01703:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1703 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.162 5e5c933a-cf7b-40db-86c0-12d93850a7c8 default }" containerID=651a6e00feb7068f88ae0b02e9c35c9a1dfa518f6c4ce8a71875f412c001d166 datapathConfiguration="&{false false false false false }" interface=lxc1135580456ae k8sPodName=monitoring/kube-prometheus-stack-admission-create-d8grc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=651a6e00fe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1319 ipv4=10.0.0.162 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-d8grc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=651a6e00fe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1319 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=66f133a5-229d-4736-8184-b05385c60d8e,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=66f133a5-229d-4736-8184-b05385c60d8e,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.162 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-d8grc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=651a6e00fe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1319 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.162 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-d8grc line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-create;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=66f133a5-229d-4736-8184-b05385c60d8e;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=66f133a5-229d-4736-8184-b05385c60d8e;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-create;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=651a6e00fe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1319 identity=20873 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=66f133a5-229d-4736-8184-b05385c60d8e,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=66f133a5-229d-4736-8184-b05385c60d8e,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.162 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-d8grc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=651a6e00fe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1319 identity=20873 ipv4=10.0.0.162 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-d8grc subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=651a6e00fe datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1319 identity=20873 ipv4=10.0.0.162 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-d8grc subsys=endpoint level=info msg="Successful endpoint creation" containerID=651a6e00fe datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1319 identity=20873 ipv4=10.0.0.162 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-d8grc subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=651a6e00fe endpointID=1319 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-create-d8grc subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-create k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=66f133a5-229d-4736-8184-b05385c60d8e k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=66f133a5-229d-4736-8184-b05385c60d8e k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-create k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=651a6e00fe datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1319 identity=20873 ipv4=10.0.0.162 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-d8grc subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.182 f59e47b2-d1f0-404a-8fb1-d24ab26f6319 default }" containerID=77c0459414b50e401173165d2c627f0c32cc3c96eca1eabb20d5f423971b1a01 datapathConfiguration="&{false false false false false }" interface=lxc6027d1e421f1 k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-9ft27 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=77c0459414 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1216 ipv4=10.0.0.182 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-9ft27 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=77c0459414 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1216 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.182 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-9ft27 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.52 c008ba23-df1b-426b-bb3b-5e7c87c475be default }" containerID=9e5abe80f8e5713114fc1900f3dea652965b5f3a2f575a18c45a938529471c40 datapathConfiguration="&{false false false false false }" interface=lxc24ad2a4bb397 k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-jpdpj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9e5abe80f8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3587 ipv4=10.0.0.52 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-jpdpj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9e5abe80f8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3587 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.52 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-jpdpj subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=9e5abe80f8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3587 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.52 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-jpdpj line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-operator;k8s:app.kubernetes.io/component=prometheus-operator;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:chart=kube-prometheus-stack-60.2.0;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=77c0459414 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1216 identity=31811 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.182 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-9ft27 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=77c0459414 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1216 identity=31811 ipv4=10.0.0.182 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-9ft27 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=metrics;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-state-metrics;k8s:app.kubernetes.io/part-of=kube-state-metrics;k8s:app.kubernetes.io/version=2.12.0;k8s:helm.sh/chart=kube-state-metrics-5.20.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9e5abe80f8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3587 identity=45905 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.52 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-jpdpj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9e5abe80f8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3587 identity=45905 ipv4=10.0.0.52 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-jpdpj subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.184 ded3da50-cc07-40a9-8db8-530a9713e324 default }" containerID=dc7dee73bdff376ad27970bdc33792513d4827d9371e9ebc11c3c8b25c9e6f4a datapathConfiguration="&{false false false false false }" interface=lxc45a6dbb73ac2 k8sPodName=monitoring/kube-prometheus-stack-grafana-5664f54f8d-wl7wq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=dc7dee73bd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2339 ipv4=10.0.0.184 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-5664f54f8d-wl7wq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=dc7dee73bd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2339 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.184 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-5664f54f8d-wl7wq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/name=grafana;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=dc7dee73bd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2339 identity=35139 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.184 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-5664f54f8d-wl7wq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=dc7dee73bd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2339 identity=35139 ipv4=10.0.0.184 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-5664f54f8d-wl7wq subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=77c0459414 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1216 identity=31811 ipv4=10.0.0.182 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-9ft27 subsys=endpoint level=info msg="Successful endpoint creation" containerID=77c0459414 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1216 identity=31811 ipv4=10.0.0.182 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-9ft27 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=9e5abe80f8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3587 identity=45905 ipv4=10.0.0.52 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-jpdpj subsys=endpoint level=info msg="Successful endpoint creation" containerID=9e5abe80f8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3587 identity=45905 ipv4=10.0.0.52 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-jpdpj subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=dc7dee73bd datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2339 identity=35139 ipv4=10.0.0.184 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-5664f54f8d-wl7wq subsys=endpoint level=info msg="Successful endpoint creation" containerID=dc7dee73bd datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2339 identity=35139 ipv4=10.0.0.184 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-5664f54f8d-wl7wq subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.102 53f4426b-0fdb-46dd-8124-de286cde5b36 default }" containerID=e6b59c8b671acf870b9fa5b6d6fa737452aafa0fcbeb7e4f4a0ad4a6f5571dd3 datapathConfiguration="&{false false false false false }" interface=lxc702e3ede0fd5 k8sPodName=monitoring/kube-prometheus-stack-admission-patch-kssc7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e6b59c8b67 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=588 ipv4=10.0.0.102 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-kssc7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e6b59c8b67 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=588 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=d6b793ef-929b-42b6-a334-ef20844a45f9,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=d6b793ef-929b-42b6-a334-ef20844a45f9,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.102 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-kssc7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-patch;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=d6b793ef-929b-42b6-a334-ef20844a45f9;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=d6b793ef-929b-42b6-a334-ef20844a45f9;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-patch;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e6b59c8b67 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=588 identity=35686 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=d6b793ef-929b-42b6-a334-ef20844a45f9,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=d6b793ef-929b-42b6-a334-ef20844a45f9,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.102 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-kssc7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e6b59c8b67 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=588 identity=35686 ipv4=10.0.0.102 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-kssc7 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e6b59c8b67 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=588 identity=35686 ipv4=10.0.0.102 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-kssc7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=e6b59c8b67 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=588 identity=35686 ipv4=10.0.0.102 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-kssc7 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.8 01e2b0a1-3eab-4286-8216-0c953989e84d default }" containerID=765ccf6e6b2e532a5b6542fb5298d43570e8cc6951746614b1293193a19d896c datapathConfiguration="&{false false false false false }" interface=lxca75fbf6ce8bc k8sPodName=local-path-storage/helper-pod-create-pvc-5db003f3-e116-4ff5-8001-291c4a5d2e37 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=765ccf6e6b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1818 ipv4=10.0.0.8 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5db003f3-e116-4ff5-8001-291c4a5d2e37 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=765ccf6e6b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1818 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.8 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5db003f3-e116-4ff5-8001-291c4a5d2e37 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=765ccf6e6b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1818 identity=8417 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.8 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5db003f3-e116-4ff5-8001-291c4a5d2e37 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=765ccf6e6b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1818 identity=8417 ipv4=10.0.0.8 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5db003f3-e116-4ff5-8001-291c4a5d2e37 subsys=endpoint level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=765ccf6e6b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1818 identity=8417 ipv4=10.0.0.8 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5db003f3-e116-4ff5-8001-291c4a5d2e37 subsys=endpoint level=info msg="Successful endpoint creation" containerID=765ccf6e6b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1818 identity=8417 ipv4=10.0.0.8 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5db003f3-e116-4ff5-8001-291c4a5d2e37 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.94 f00a6ac4-7d26-4c4f-a5a9-45b27489e02d default }" containerID=00f261804b72cb21dcc916e390c4282605ac3ee645c87b7fd73f3805f9771f13 datapathConfiguration="&{false false false false false }" interface=lxcff8eb1e6722e k8sPodName=local-path-storage/helper-pod-create-pvc-6f13e72b-e8ae-4f1d-9d64-0b4db92e2cc1 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=00f261804b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2106 ipv4=10.0.0.94 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6f13e72b-e8ae-4f1d-9d64-0b4db92e2cc1 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=00f261804b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2106 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.94 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6f13e72b-e8ae-4f1d-9d64-0b4db92e2cc1 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=00f261804b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2106 identity=8417 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.94 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6f13e72b-e8ae-4f1d-9d64-0b4db92e2cc1 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=00f261804b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2106 identity=8417 ipv4=10.0.0.94 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6f13e72b-e8ae-4f1d-9d64-0b4db92e2cc1 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=00f261804b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2106 identity=8417 ipv4=10.0.0.94 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6f13e72b-e8ae-4f1d-9d64-0b4db92e2cc1 subsys=endpoint level=info msg="Successful endpoint creation" containerID=00f261804b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2106 identity=8417 ipv4=10.0.0.94 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6f13e72b-e8ae-4f1d-9d64-0b4db92e2cc1 subsys=daemon level=info msg="Delete endpoint request" containerID=e6b59c8b67 endpointID=588 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-patch-kssc7 subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-patch k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=d6b793ef-929b-42b6-a334-ef20844a45f9 k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=d6b793ef-929b-42b6-a334-ef20844a45f9 k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-patch k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=e6b59c8b67 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=588 identity=35686 ipv4=10.0.0.102 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-kssc7 subsys=endpoint level=info msg="Delete endpoint request" containerID=00f261804b endpointID=2106 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-6f13e72b-e8ae-4f1d-9d64-0b4db92e2cc1 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Delete endpoint request" containerID=765ccf6e6b endpointID=1818 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-5db003f3-e116-4ff5-8001-291c4a5d2e37 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=00f261804b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2106 identity=8417 ipv4=10.0.0.94 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6f13e72b-e8ae-4f1d-9d64-0b4db92e2cc1 subsys=endpoint level=info msg="Removed endpoint" containerID=765ccf6e6b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1818 identity=8417 ipv4=10.0.0.8 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5db003f3-e116-4ff5-8001-291c4a5d2e37 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.229 5bd93df6-906e-42c8-a297-c5d6d65a017e default }" containerID=a019841fa9dfe0f697417a4c28ffd3f2524f1ae98c0a00c4e5ed3939b5047aee datapathConfiguration="&{false false false false false }" interface=lxc3146434c2c65 k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a019841fa9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=563 ipv4=10.0.0.229 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a019841fa9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=563 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.229 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:alertmanager=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=alertmanager;k8s:app.kubernetes.io/version=0.27.0;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a019841fa9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=563 identity=29858 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.229 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a019841fa9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=563 identity=29858 ipv4=10.0.0.229 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=a019841fa9 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=563 identity=29858 ipv4=10.0.0.229 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=a019841fa9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=563 identity=29858 ipv4=10.0.0.229 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.7 1d9cea0b-a259-4192-add5-8caf98fe1e7d default }" containerID=187e7786e040ab1d626e2dccbef637cf98e5ebdfacd6b8cf77349ebc84e3c9b4 datapathConfiguration="&{false false false false false }" interface=lxcea2f3778ed46 k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=187e7786e0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=131 ipv4=10.0.0.7 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=187e7786e0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=131 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.7 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=prometheus;k8s:app.kubernetes.io/version=2.51.2;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus;k8s:io.kubernetes.pod.namespace=monitoring;k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus;k8s:operator.prometheus.io/shard=0;k8s:prometheus=kube-prometheus-stack-prometheus;k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=187e7786e0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=131 identity=4290 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.7 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=187e7786e0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=131 identity=4290 ipv4=10.0.0.7 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=187e7786e0 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=131 identity=4290 ipv4=10.0.0.7 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=187e7786e0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=131 identity=4290 ipv4=10.0.0.7 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.205 79b8bd41-2fb3-4b0e-9cce-65c2fcbc5db6 default }" containerID=df75a99a47caeaa1d15fff87dc810d17de7cafef54b78019a05addddddae44d0 datapathConfiguration="&{false false false false false }" interface=lxcae94eb662813 k8sPodName=monitoring/loki-gateway-cf54cb88c-7rk6c labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=df75a99a47 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1025 ipv4=10.0.0.205 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-7rk6c subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=df75a99a47 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1025 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.205 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-7rk6c subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=df75a99a47 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1025 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.205 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-7rk6c line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=gateway;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=df75a99a47 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1025 identity=30510 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.205 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-7rk6c oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=df75a99a47 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1025 identity=30510 ipv4=10.0.0.205 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-7rk6c subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=df75a99a47 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1025 identity=30510 ipv4=10.0.0.205 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-7rk6c subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.174 60e8a517-ec12-4593-b51a-58d13740010e default }" containerID=2a06d7053def829e1d928e0802e72284190bc58f9553cc4f80d56d4d819915a9 datapathConfiguration="&{false false false false false }" interface=lxc8d5ce4135cb3 k8sPodName=monitoring/loki-results-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2a06d7053d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3585 ipv4=10.0.0.174 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2a06d7053d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3585 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.174 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Successful endpoint creation" containerID=df75a99a47 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1025 identity=30510 ipv4=10.0.0.205 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-7rk6c subsys=daemon level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-results-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-results-cache;k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2a06d7053d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3585 identity=2360 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.174 ipv6= k8sPodName=monitoring/loki-results-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2a06d7053d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3585 identity=2360 ipv4=10.0.0.174 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.132 18c5c70a-54ad-41fe-a6d2-d34b69d1110f default }" containerID=ac29fb18788a6d6c855969552ab185e3730f35392e3807a133fd7ddc5ca32af6 datapathConfiguration="&{false false false false false }" interface=lxc55f14bee376d k8sPodName=monitoring/loki-chunks-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ac29fb1878 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=32 ipv4=10.0.0.132 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ac29fb1878 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=32 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.132 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-chunks-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-chunks-cache;k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ac29fb1878 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=32 identity=5824 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.132 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ac29fb1878 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=32 identity=5824 ipv4=10.0.0.132 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2a06d7053d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3585 identity=2360 ipv4=10.0.0.174 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=2a06d7053d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3585 identity=2360 ipv4=10.0.0.174 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=ac29fb1878 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=32 identity=5824 ipv4=10.0.0.132 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=ac29fb1878 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=32 identity=5824 ipv4=10.0.0.132 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.139 33c92930-3660-4581-99f1-17af7a2a1b88 default }" containerID=107657466b102fcdcc912ecfa2a2327195af62954d3154db8ef5cdef8477986c datapathConfiguration="&{false false false false false }" interface=lxc68514d5e439b k8sPodName=local-path-storage/helper-pod-create-pvc-493fb8a6-dc50-4d12-839d-d8f604c4f905 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=107657466b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2628 ipv4=10.0.0.139 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-493fb8a6-dc50-4d12-839d-d8f604c4f905 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=107657466b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2628 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.139 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-493fb8a6-dc50-4d12-839d-d8f604c4f905 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=107657466b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2628 identity=8417 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.139 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-493fb8a6-dc50-4d12-839d-d8f604c4f905 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=107657466b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2628 identity=8417 ipv4=10.0.0.139 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-493fb8a6-dc50-4d12-839d-d8f604c4f905 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=107657466b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2628 identity=8417 ipv4=10.0.0.139 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-493fb8a6-dc50-4d12-839d-d8f604c4f905 subsys=endpoint level=info msg="Successful endpoint creation" containerID=107657466b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2628 identity=8417 ipv4=10.0.0.139 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-493fb8a6-dc50-4d12-839d-d8f604c4f905 subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.42 2f83ea21-bf83-4a84-94d9-2ca2b0484c90 default }" containerID=50ac737d75843929e2f2758f52ab9c7c76e7691efdc167e02c130faf9f871cec datapathConfiguration="&{false false false false false }" interface=lxc131df45f1481 k8sPodName=monitoring/vector-gfrpj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=50ac737d75 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1422 ipv4=10.0.0.42 ipv6= k8sPodName=monitoring/vector-gfrpj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=50ac737d75 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1422 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.42 ipv6= k8sPodName=monitoring/vector-gfrpj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=50ac737d75 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1422 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.42 ipv6= k8sPodName=monitoring/vector-gfrpj line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=Agent;k8s:app.kubernetes.io/instance=vector;k8s:app.kubernetes.io/name=vector;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=vector;k8s:io.kubernetes.pod.namespace=monitoring;k8s:vector.dev/exclude=true;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=50ac737d75 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1422 identity=63421 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.42 ipv6= k8sPodName=monitoring/vector-gfrpj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=50ac737d75 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1422 identity=63421 ipv4=10.0.0.42 ipv6= k8sPodName=monitoring/vector-gfrpj subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=50ac737d75 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1422 identity=63421 ipv4=10.0.0.42 ipv6= k8sPodName=monitoring/vector-gfrpj subsys=endpoint level=info msg="Successful endpoint creation" containerID=50ac737d75 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1422 identity=63421 ipv4=10.0.0.42 ipv6= k8sPodName=monitoring/vector-gfrpj subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=107657466b endpointID=2628 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-493fb8a6-dc50-4d12-839d-d8f604c4f905 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=107657466b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2628 identity=8417 ipv4=10.0.0.139 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-493fb8a6-dc50-4d12-839d-d8f604c4f905 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.36 039a26d6-4207-4fb9-bf53-e123d27cd670 default }" containerID=7f453fadf038acef995d5ba157153a342e1593820550d9510207140fad177fc3 datapathConfiguration="&{false false false false false }" interface=lxc12b2c3d4b9b8 k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-w8n25 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7f453fadf0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1071 ipv4=10.0.0.36 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-w8n25 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7f453fadf0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1071 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.36 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-w8n25 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=prometheus-pushgateway;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=prometheus-pushgateway;k8s:app.kubernetes.io/version=v1.8.0;k8s:helm.sh/chart=prometheus-pushgateway-2.13.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7f453fadf0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1071 identity=38300 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.36 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-w8n25 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7f453fadf0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1071 identity=38300 ipv4=10.0.0.36 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-w8n25 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=7f453fadf0 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1071 identity=38300 ipv4=10.0.0.36 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-w8n25 subsys=endpoint level=info msg="Successful endpoint creation" containerID=7f453fadf0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1071 identity=38300 ipv4=10.0.0.36 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-w8n25 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.91 f63baa5a-11b4-4fb8-b3cd-2cfc92b7c52a default }" containerID=39b704ce77d8779eebca3d210121a2cd0ea4f70396b6b0008d702e4f3e08989d datapathConfiguration="&{false false false false false }" interface=lxca8e6f77520b5 k8sPodName=monitoring/loki-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=39b704ce77 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1221 ipv4=10.0.0.91 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=39b704ce77 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1221 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.91 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=single-binary;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:app.kubernetes.io/part-of=memberlist;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=loki-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=39b704ce77 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1221 identity=23404 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.91 ipv6= k8sPodName=monitoring/loki-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=39b704ce77 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1221 identity=23404 ipv4=10.0.0.91 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=39b704ce77 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1221 identity=23404 ipv4=10.0.0.91 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=39b704ce77 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1221 identity=23404 ipv4=10.0.0.91 ipv6= k8sPodName=monitoring/loki-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.53 46f36ee8-1ba3-446c-87e3-a9972db2fd19 default }" containerID=3bcb32d882fd6612115217232a89a100e5a8f7177409f9c0c475deffc4993675 datapathConfiguration="&{false false false false false }" interface=lxc02f3c544bcb2 k8sPodName=openstack/memcached-memcached-6479589586-t7bxl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3bcb32d882 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=653 ipv4=10.0.0.53 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-t7bxl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3bcb32d882 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=653 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.53 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-t7bxl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=memcached;k8s:component=server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=memcached;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3bcb32d882 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=653 identity=53283 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.53 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-t7bxl oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3bcb32d882 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=653 identity=53283 ipv4=10.0.0.53 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-t7bxl subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3bcb32d882 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=653 identity=53283 ipv4=10.0.0.53 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-t7bxl subsys=endpoint level=info msg="Successful endpoint creation" containerID=3bcb32d882 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=653 identity=53283 ipv4=10.0.0.53 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-t7bxl subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.189 3d0f03b8-e65c-4849-a458-e6031d0152d3 default }" containerID=35765d828210feae8de9e95946fa83d36356f9ba56c65b25464f3a6c88974aa8 datapathConfiguration="&{false false false false false }" interface=lxc92c0d694ede7 k8sPodName=local-path-storage/helper-pod-create-pvc-dd86eae4-be17-4d9a-91f9-2be0a7f5fd8c labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=35765d8282 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=897 ipv4=10.0.0.189 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-dd86eae4-be17-4d9a-91f9-2be0a7f5fd8c subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=35765d8282 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=897 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.189 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-dd86eae4-be17-4d9a-91f9-2be0a7f5fd8c subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=35765d8282 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=897 identity=8417 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.189 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-dd86eae4-be17-4d9a-91f9-2be0a7f5fd8c oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=35765d8282 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=897 identity=8417 ipv4=10.0.0.189 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-dd86eae4-be17-4d9a-91f9-2be0a7f5fd8c subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=35765d8282 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=897 identity=8417 ipv4=10.0.0.189 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-dd86eae4-be17-4d9a-91f9-2be0a7f5fd8c subsys=endpoint level=info msg="Successful endpoint creation" containerID=35765d8282 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=897 identity=8417 ipv4=10.0.0.189 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-dd86eae4-be17-4d9a-91f9-2be0a7f5fd8c subsys=daemon level=info msg="Delete endpoint request" containerID=35765d8282 endpointID=897 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-dd86eae4-be17-4d9a-91f9-2be0a7f5fd8c subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=35765d8282 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=897 identity=8417 ipv4=10.0.0.189 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-dd86eae4-be17-4d9a-91f9-2be0a7f5fd8c subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.159 785b15f3-5b5f-4664-a85e-8f22568d6eda default }" containerID=8d8cad458ac4263e46ad371db0f6399a843602b34651eef8651434415327e514 datapathConfiguration="&{false false false false false }" interface=lxc42379e819f66 k8sPodName=openstack/rabbitmq-keystone-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8d8cad458a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2734 ipv4=10.0.0.159 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8d8cad458a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2734 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.159 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-keystone;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=8d8cad458a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2734 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.159 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=8d8cad458a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2734 identity=55091 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.159 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8d8cad458a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2734 identity=55091 ipv4=10.0.0.159 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8d8cad458a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2734 identity=55091 ipv4=10.0.0.159 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=8d8cad458a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2734 identity=55091 ipv4=10.0.0.159 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.37 d9e1ec66-53d6-42fe-9001-272d064fff9a default }" containerID=f119aac5cff557db5dba70bfb8c71b195a928c808f72b38337771d0d53311b09 datapathConfiguration="&{false false false false false }" interface=lxcffb1deafbdcf k8sPodName=openstack/keystone-api-6948f48657-9zjk4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f119aac5cf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1854 ipv4=10.0.0.37 ipv6= k8sPodName=openstack/keystone-api-6948f48657-9zjk4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f119aac5cf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1854 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.37 ipv6= k8sPodName=openstack/keystone-api-6948f48657-9zjk4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=f119aac5cf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1854 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.37 ipv6= k8sPodName=openstack/keystone-api-6948f48657-9zjk4 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f119aac5cf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1854 identity=14188 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.37 ipv6= k8sPodName=openstack/keystone-api-6948f48657-9zjk4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f119aac5cf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1854 identity=14188 ipv4=10.0.0.37 ipv6= k8sPodName=openstack/keystone-api-6948f48657-9zjk4 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.50 1f7b0327-2987-45b1-901e-864738ed3154 default }" containerID=65cf38b9e6ece019b9bae10ad7e69660a3ff2dc6dec8a8cbc6b2593a2eeb6e6d datapathConfiguration="&{false false false false false }" interface=lxc536dd02ff567 k8sPodName=openstack/keystone-credential-setup-8kc6r labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=65cf38b9e6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1070 ipv4=10.0.0.50 ipv6= k8sPodName=openstack/keystone-credential-setup-8kc6r subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=65cf38b9e6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1070 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=c6e574f8-d8cb-423a-9333-f6d46d5da261,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=c6e574f8-d8cb-423a-9333-f6d46d5da261,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.50 ipv6= k8sPodName=openstack/keystone-credential-setup-8kc6r subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=c6e574f8-d8cb-423a-9333-f6d46d5da261;k8s:batch.kubernetes.io/job-name=keystone-credential-setup;k8s:component=credential-setup;k8s:controller-uid=c6e574f8-d8cb-423a-9333-f6d46d5da261;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-credential-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=65cf38b9e6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1070 identity=2157 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=c6e574f8-d8cb-423a-9333-f6d46d5da261,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=c6e574f8-d8cb-423a-9333-f6d46d5da261,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.50 ipv6= k8sPodName=openstack/keystone-credential-setup-8kc6r oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=65cf38b9e6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1070 identity=2157 ipv4=10.0.0.50 ipv6= k8sPodName=openstack/keystone-credential-setup-8kc6r subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f119aac5cf datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1854 identity=14188 ipv4=10.0.0.37 ipv6= k8sPodName=openstack/keystone-api-6948f48657-9zjk4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f119aac5cf datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1854 identity=14188 ipv4=10.0.0.37 ipv6= k8sPodName=openstack/keystone-api-6948f48657-9zjk4 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=65cf38b9e6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1070 identity=2157 ipv4=10.0.0.50 ipv6= k8sPodName=openstack/keystone-credential-setup-8kc6r subsys=endpoint level=info msg="Successful endpoint creation" containerID=65cf38b9e6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1070 identity=2157 ipv4=10.0.0.50 ipv6= k8sPodName=openstack/keystone-credential-setup-8kc6r subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=65cf38b9e6 endpointID=1070 k8sNamespace=openstack k8sPodName=keystone-credential-setup-8kc6r subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=c6e574f8-d8cb-423a-9333-f6d46d5da261 k8s:batch.kubernetes.io/job-name=keystone-credential-setup k8s:component=credential-setup k8s:controller-uid=c6e574f8-d8cb-423a-9333-f6d46d5da261 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-credential-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=65cf38b9e6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1070 identity=2157 ipv4=10.0.0.50 ipv6= k8sPodName=openstack/keystone-credential-setup-8kc6r subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.94 b0e23d98-ccc3-4834-be99-d27c0367d2ae default }" containerID=8dbb1a1df898567dea89a33bad1c1dc476a61c977677e5e4550a5f6095284c67 datapathConfiguration="&{false false false false false }" interface=lxce7cbde6c59d0 k8sPodName=openstack/keystone-db-init-pmzbk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8dbb1a1df8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3050 ipv4=10.0.0.94 ipv6= k8sPodName=openstack/keystone-db-init-pmzbk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8dbb1a1df8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3050 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=5686a661-6896-4307-8de5-215c12caa05e,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=5686a661-6896-4307-8de5-215c12caa05e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.94 ipv6= k8sPodName=openstack/keystone-db-init-pmzbk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=5686a661-6896-4307-8de5-215c12caa05e;k8s:batch.kubernetes.io/job-name=keystone-db-init;k8s:component=db-init;k8s:controller-uid=5686a661-6896-4307-8de5-215c12caa05e;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8dbb1a1df8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3050 identity=26127 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=5686a661-6896-4307-8de5-215c12caa05e,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=5686a661-6896-4307-8de5-215c12caa05e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.94 ipv6= k8sPodName=openstack/keystone-db-init-pmzbk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8dbb1a1df8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3050 identity=26127 ipv4=10.0.0.94 ipv6= k8sPodName=openstack/keystone-db-init-pmzbk subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=8dbb1a1df8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3050 identity=26127 ipv4=10.0.0.94 ipv6= k8sPodName=openstack/keystone-db-init-pmzbk subsys=endpoint level=info msg="Successful endpoint creation" containerID=8dbb1a1df8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3050 identity=26127 ipv4=10.0.0.94 ipv6= k8sPodName=openstack/keystone-db-init-pmzbk subsys=daemon level=info msg="Delete endpoint request" containerID=8dbb1a1df8 endpointID=3050 k8sNamespace=openstack k8sPodName=keystone-db-init-pmzbk subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=5686a661-6896-4307-8de5-215c12caa05e k8s:batch.kubernetes.io/job-name=keystone-db-init k8s:component=db-init k8s:controller-uid=5686a661-6896-4307-8de5-215c12caa05e k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=8dbb1a1df8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3050 identity=26127 ipv4=10.0.0.94 ipv6= k8sPodName=openstack/keystone-db-init-pmzbk subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.181 5e49e2ce-e738-4880-983c-1c324e7492d6 default }" containerID=823de69287ee7bbc85127657d1323672449c045161481a256fceb181d70aa76b datapathConfiguration="&{false false false false false }" interface=lxc0babb01b22ef k8sPodName=openstack/keystone-fernet-setup-qvj2c labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=823de69287 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2722 ipv4=10.0.0.181 ipv6= k8sPodName=openstack/keystone-fernet-setup-qvj2c subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=823de69287 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2722 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=1025e067-d25a-4810-9c4f-5f7aa3a62aa4,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=1025e067-d25a-4810-9c4f-5f7aa3a62aa4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.181 ipv6= k8sPodName=openstack/keystone-fernet-setup-qvj2c subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=1025e067-d25a-4810-9c4f-5f7aa3a62aa4;k8s:batch.kubernetes.io/job-name=keystone-fernet-setup;k8s:component=fernet-setup;k8s:controller-uid=1025e067-d25a-4810-9c4f-5f7aa3a62aa4;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-fernet-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=823de69287 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2722 identity=653 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=1025e067-d25a-4810-9c4f-5f7aa3a62aa4,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=1025e067-d25a-4810-9c4f-5f7aa3a62aa4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.181 ipv6= k8sPodName=openstack/keystone-fernet-setup-qvj2c oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=823de69287 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2722 identity=653 ipv4=10.0.0.181 ipv6= k8sPodName=openstack/keystone-fernet-setup-qvj2c subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=823de69287 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2722 identity=653 ipv4=10.0.0.181 ipv6= k8sPodName=openstack/keystone-fernet-setup-qvj2c subsys=endpoint level=info msg="Successful endpoint creation" containerID=823de69287 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2722 identity=653 ipv4=10.0.0.181 ipv6= k8sPodName=openstack/keystone-fernet-setup-qvj2c subsys=daemon level=info msg="Delete endpoint request" containerID=823de69287 endpointID=2722 k8sNamespace=openstack k8sPodName=keystone-fernet-setup-qvj2c subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=1025e067-d25a-4810-9c4f-5f7aa3a62aa4 k8s:batch.kubernetes.io/job-name=keystone-fernet-setup k8s:component=fernet-setup k8s:controller-uid=1025e067-d25a-4810-9c4f-5f7aa3a62aa4 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-fernet-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=823de69287 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2722 identity=653 ipv4=10.0.0.181 ipv6= k8sPodName=openstack/keystone-fernet-setup-qvj2c subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.135 b4892b8f-5c0f-4eaa-a02c-7f5b97fa4db9 default }" containerID=9a5f18f51cdd3cf187d734b25ee886c81e3aec964cd44a922af77f3558b38c15 datapathConfiguration="&{false false false false false }" interface=lxcc7ffe160d994 k8sPodName=openstack/keystone-db-sync-ft7rb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9a5f18f51c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3337 ipv4=10.0.0.135 ipv6= k8sPodName=openstack/keystone-db-sync-ft7rb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9a5f18f51c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3337 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=2df88999-313f-45cc-9322-d8fd1ace2e53,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=2df88999-313f-45cc-9322-d8fd1ace2e53,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.135 ipv6= k8sPodName=openstack/keystone-db-sync-ft7rb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=9a5f18f51c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3337 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.135 ipv6= k8sPodName=openstack/keystone-db-sync-ft7rb line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=2df88999-313f-45cc-9322-d8fd1ace2e53;k8s:batch.kubernetes.io/job-name=keystone-db-sync;k8s:component=db-sync;k8s:controller-uid=2df88999-313f-45cc-9322-d8fd1ace2e53;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-sync;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9a5f18f51c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3337 identity=8185 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=2df88999-313f-45cc-9322-d8fd1ace2e53,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=2df88999-313f-45cc-9322-d8fd1ace2e53,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.135 ipv6= k8sPodName=openstack/keystone-db-sync-ft7rb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9a5f18f51c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3337 identity=8185 ipv4=10.0.0.135 ipv6= k8sPodName=openstack/keystone-db-sync-ft7rb subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9a5f18f51c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3337 identity=8185 ipv4=10.0.0.135 ipv6= k8sPodName=openstack/keystone-db-sync-ft7rb subsys=endpoint level=info msg="Successful endpoint creation" containerID=9a5f18f51c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3337 identity=8185 ipv4=10.0.0.135 ipv6= k8sPodName=openstack/keystone-db-sync-ft7rb subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=9a5f18f51c endpointID=3337 k8sNamespace=openstack k8sPodName=keystone-db-sync-ft7rb subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=2df88999-313f-45cc-9322-d8fd1ace2e53 k8s:batch.kubernetes.io/job-name=keystone-db-sync k8s:component=db-sync k8s:controller-uid=2df88999-313f-45cc-9322-d8fd1ace2e53 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-sync k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=9a5f18f51c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3337 identity=8185 ipv4=10.0.0.135 ipv6= k8sPodName=openstack/keystone-db-sync-ft7rb subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.201 cf06bf2f-2a20-4cd4-b32b-44d70ca7c89f default }" containerID=4b3dccb0c9053e5b837d4c4436c0d125a64d19eb2323735bc77a62ef8212299b datapathConfiguration="&{false false false false false }" interface=lxca6c8bc2efb41 k8sPodName=openstack/keystone-rabbit-init-vhn2b labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4b3dccb0c9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=98 ipv4=10.0.0.201 ipv6= k8sPodName=openstack/keystone-rabbit-init-vhn2b subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4b3dccb0c9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=98 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=d588f0ca-3521-4a09-8d80-bdcdbcdf97b7,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=d588f0ca-3521-4a09-8d80-bdcdbcdf97b7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.201 ipv6= k8sPodName=openstack/keystone-rabbit-init-vhn2b subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=d588f0ca-3521-4a09-8d80-bdcdbcdf97b7;k8s:batch.kubernetes.io/job-name=keystone-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=d588f0ca-3521-4a09-8d80-bdcdbcdf97b7;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-rabbit-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4b3dccb0c9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=98 identity=58677 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=d588f0ca-3521-4a09-8d80-bdcdbcdf97b7,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=d588f0ca-3521-4a09-8d80-bdcdbcdf97b7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.201 ipv6= k8sPodName=openstack/keystone-rabbit-init-vhn2b oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4b3dccb0c9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=98 identity=58677 ipv4=10.0.0.201 ipv6= k8sPodName=openstack/keystone-rabbit-init-vhn2b subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=4b3dccb0c9 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=98 identity=58677 ipv4=10.0.0.201 ipv6= k8sPodName=openstack/keystone-rabbit-init-vhn2b subsys=endpoint level=info msg="Successful endpoint creation" containerID=4b3dccb0c9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=98 identity=58677 ipv4=10.0.0.201 ipv6= k8sPodName=openstack/keystone-rabbit-init-vhn2b subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=4b3dccb0c9 endpointID=98 k8sNamespace=openstack k8sPodName=keystone-rabbit-init-vhn2b subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=d588f0ca-3521-4a09-8d80-bdcdbcdf97b7 k8s:batch.kubernetes.io/job-name=keystone-rabbit-init k8s:component=rabbit-init k8s:controller-uid=d588f0ca-3521-4a09-8d80-bdcdbcdf97b7 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-rabbit-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=4b3dccb0c9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=98 identity=58677 ipv4=10.0.0.201 ipv6= k8sPodName=openstack/keystone-rabbit-init-vhn2b subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.230 918cfd1b-089c-4b68-925a-22800dc7843f default }" containerID=e9fa8433c51d05147b9b95b0ff0012788896a493f13b09392081a9179adca047 datapathConfiguration="&{false false false false false }" interface=lxc7fafa327949d k8sPodName=openstack/keystone-domain-manage-h52fs labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e9fa8433c5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=52 ipv4=10.0.0.230 ipv6= k8sPodName=openstack/keystone-domain-manage-h52fs subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e9fa8433c5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=52 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=97c95633-5bd4-4261-b057-28745c5b426a,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=97c95633-5bd4-4261-b057-28745c5b426a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.230 ipv6= k8sPodName=openstack/keystone-domain-manage-h52fs subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=97c95633-5bd4-4261-b057-28745c5b426a;k8s:batch.kubernetes.io/job-name=keystone-domain-manage;k8s:component=domain-manage;k8s:controller-uid=97c95633-5bd4-4261-b057-28745c5b426a;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-domain-manage;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e9fa8433c5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=52 identity=40046 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=97c95633-5bd4-4261-b057-28745c5b426a,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=97c95633-5bd4-4261-b057-28745c5b426a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.230 ipv6= k8sPodName=openstack/keystone-domain-manage-h52fs oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e9fa8433c5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=52 identity=40046 ipv4=10.0.0.230 ipv6= k8sPodName=openstack/keystone-domain-manage-h52fs subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=e9fa8433c5 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=52 identity=40046 ipv4=10.0.0.230 ipv6= k8sPodName=openstack/keystone-domain-manage-h52fs subsys=endpoint level=info msg="Successful endpoint creation" containerID=e9fa8433c5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=52 identity=40046 ipv4=10.0.0.230 ipv6= k8sPodName=openstack/keystone-domain-manage-h52fs subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=e9fa8433c5 endpointID=52 k8sNamespace=openstack k8sPodName=keystone-domain-manage-h52fs subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=97c95633-5bd4-4261-b057-28745c5b426a k8s:batch.kubernetes.io/job-name=keystone-domain-manage k8s:component=domain-manage k8s:controller-uid=97c95633-5bd4-4261-b057-28745c5b426a k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-domain-manage k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=e9fa8433c5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=52 identity=40046 ipv4=10.0.0.230 ipv6= k8sPodName=openstack/keystone-domain-manage-h52fs subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.227 e362ddff-9dad-40cc-9a92-ee7112ca8cb8 default }" containerID=faf18ad68ba4a16dd9d2ef582043e274612384895d9af23cacd46ad3ea261e09 datapathConfiguration="&{false false false false false }" interface=lxcc43ae1bdd1f5 k8sPodName=openstack/keystone-bootstrap-prbdd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=faf18ad68b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2717 ipv4=10.0.0.227 ipv6= k8sPodName=openstack/keystone-bootstrap-prbdd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=faf18ad68b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2717 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=b90f297c-83d4-4a99-8480-4850dc0fc770,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=b90f297c-83d4-4a99-8480-4850dc0fc770,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.227 ipv6= k8sPodName=openstack/keystone-bootstrap-prbdd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=b90f297c-83d4-4a99-8480-4850dc0fc770;k8s:batch.kubernetes.io/job-name=keystone-bootstrap;k8s:component=bootstrap;k8s:controller-uid=b90f297c-83d4-4a99-8480-4850dc0fc770;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-bootstrap;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=faf18ad68b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2717 identity=13669 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=b90f297c-83d4-4a99-8480-4850dc0fc770,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=b90f297c-83d4-4a99-8480-4850dc0fc770,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.227 ipv6= k8sPodName=openstack/keystone-bootstrap-prbdd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=faf18ad68b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2717 identity=13669 ipv4=10.0.0.227 ipv6= k8sPodName=openstack/keystone-bootstrap-prbdd subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=faf18ad68b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2717 identity=13669 ipv4=10.0.0.227 ipv6= k8sPodName=openstack/keystone-bootstrap-prbdd subsys=endpoint level=info msg="Successful endpoint creation" containerID=faf18ad68b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2717 identity=13669 ipv4=10.0.0.227 ipv6= k8sPodName=openstack/keystone-bootstrap-prbdd subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=faf18ad68b endpointID=2717 k8sNamespace=openstack k8sPodName=keystone-bootstrap-prbdd subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=b90f297c-83d4-4a99-8480-4850dc0fc770 k8s:batch.kubernetes.io/job-name=keystone-bootstrap k8s:component=bootstrap k8s:controller-uid=b90f297c-83d4-4a99-8480-4850dc0fc770 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-bootstrap k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=faf18ad68b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2717 identity=13669 ipv4=10.0.0.227 ipv6= k8sPodName=openstack/keystone-bootstrap-prbdd subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.200 24ede05b-d2cd-4632-b499-e05b4fefa53a default }" containerID=3fc71ae1c30cf0a30271def168259aac8f38d97a7501e50a9ca0725ac23d7d74 datapathConfiguration="&{false false false false false }" interface=lxcea7c3b02dfbf k8sPodName=local-path-storage/helper-pod-create-pvc-05c0b9c4-4018-481a-a28a-4d7ff0a94007 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3fc71ae1c3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=551 ipv4=10.0.0.200 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-05c0b9c4-4018-481a-a28a-4d7ff0a94007 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3fc71ae1c3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=551 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.200 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-05c0b9c4-4018-481a-a28a-4d7ff0a94007 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3fc71ae1c3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=551 identity=8417 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.200 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-05c0b9c4-4018-481a-a28a-4d7ff0a94007 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3fc71ae1c3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=551 identity=8417 ipv4=10.0.0.200 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-05c0b9c4-4018-481a-a28a-4d7ff0a94007 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3fc71ae1c3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=551 identity=8417 ipv4=10.0.0.200 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-05c0b9c4-4018-481a-a28a-4d7ff0a94007 subsys=endpoint level=info msg="Successful endpoint creation" containerID=3fc71ae1c3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=551 identity=8417 ipv4=10.0.0.200 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-05c0b9c4-4018-481a-a28a-4d7ff0a94007 subsys=daemon level=info msg="Delete endpoint request" containerID=3fc71ae1c3 endpointID=551 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-05c0b9c4-4018-481a-a28a-4d7ff0a94007 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=3fc71ae1c3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=551 identity=8417 ipv4=10.0.0.200 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-05c0b9c4-4018-481a-a28a-4d7ff0a94007 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.15 01ddc008-6b88-47c1-8b77-78b9f1bcd05c default }" containerID=81500db796d0fbbde32fbde65bd8a577b5e884ac7c5c18ac4ebb75c4685f51a3 datapathConfiguration="&{false false false false false }" interface=lxc3ea4d2d395d7 k8sPodName=openstack/rabbitmq-barbican-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=81500db796 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2701 ipv4=10.0.0.15 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=81500db796 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2701 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.15 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-barbican;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=81500db796 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2701 identity=60256 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.15 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=81500db796 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2701 identity=60256 ipv4=10.0.0.15 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=81500db796 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2701 identity=60256 ipv4=10.0.0.15 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=81500db796 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2701 identity=60256 ipv4=10.0.0.15 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.035562108566558906 newInterval=11m15s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.40 dc898f37-5e95-455d-b8b3-ef4a39a524fe default }" containerID=4c6d2fabe9e86c043ec75c6b61464c0a602263d9c2536303636be6bb54437472 datapathConfiguration="&{false false false false false }" interface=lxc6b4b59e930ce k8sPodName=openstack/barbican-api-577c574945-qtht4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4c6d2fabe9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=420 ipv4=10.0.0.40 ipv6= k8sPodName=openstack/barbican-api-577c574945-qtht4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4c6d2fabe9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=420 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.40 ipv6= k8sPodName=openstack/barbican-api-577c574945-qtht4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=4c6d2fabe9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=420 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.40 ipv6= k8sPodName=openstack/barbican-api-577c574945-qtht4 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4c6d2fabe9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=420 identity=8565 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.40 ipv6= k8sPodName=openstack/barbican-api-577c574945-qtht4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4c6d2fabe9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=420 identity=8565 ipv4=10.0.0.40 ipv6= k8sPodName=openstack/barbican-api-577c574945-qtht4 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.135 ef4b6e1f-89ab-47af-a455-bb97bcf40b9a default }" containerID=36182d8be542b4a1596132adf4e3b94b5a3ab1cdcec1b466805fb38a6355108c datapathConfiguration="&{false false false false false }" interface=lxc7398ab9baa76 k8sPodName=openstack/barbican-db-init-6d4d5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=36182d8be5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3007 ipv4=10.0.0.135 ipv6= k8sPodName=openstack/barbican-db-init-6d4d5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=36182d8be5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3007 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=15c7ff6e-d3cb-4462-9f2e-a4ffbb2a14af,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=15c7ff6e-d3cb-4462-9f2e-a4ffbb2a14af,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.135 ipv6= k8sPodName=openstack/barbican-db-init-6d4d5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=15c7ff6e-d3cb-4462-9f2e-a4ffbb2a14af;k8s:batch.kubernetes.io/job-name=barbican-db-init;k8s:component=db-init;k8s:controller-uid=15c7ff6e-d3cb-4462-9f2e-a4ffbb2a14af;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=36182d8be5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3007 identity=10218 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=15c7ff6e-d3cb-4462-9f2e-a4ffbb2a14af,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=15c7ff6e-d3cb-4462-9f2e-a4ffbb2a14af,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.135 ipv6= k8sPodName=openstack/barbican-db-init-6d4d5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=36182d8be5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3007 identity=10218 ipv4=10.0.0.135 ipv6= k8sPodName=openstack/barbican-db-init-6d4d5 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4c6d2fabe9 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=420 identity=8565 ipv4=10.0.0.40 ipv6= k8sPodName=openstack/barbican-api-577c574945-qtht4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=4c6d2fabe9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=420 identity=8565 ipv4=10.0.0.40 ipv6= k8sPodName=openstack/barbican-api-577c574945-qtht4 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=36182d8be5 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3007 identity=10218 ipv4=10.0.0.135 ipv6= k8sPodName=openstack/barbican-db-init-6d4d5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=36182d8be5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3007 identity=10218 ipv4=10.0.0.135 ipv6= k8sPodName=openstack/barbican-db-init-6d4d5 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=36182d8be5 endpointID=3007 k8sNamespace=openstack k8sPodName=barbican-db-init-6d4d5 subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=15c7ff6e-d3cb-4462-9f2e-a4ffbb2a14af k8s:batch.kubernetes.io/job-name=barbican-db-init k8s:component=db-init k8s:controller-uid=15c7ff6e-d3cb-4462-9f2e-a4ffbb2a14af k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=36182d8be5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3007 identity=10218 ipv4=10.0.0.135 ipv6= k8sPodName=openstack/barbican-db-init-6d4d5 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.48 17742260-85df-405d-838c-168830f13883 default }" containerID=fa7a709a533a079d63c9794570d449d84f2518cbe26c670e7d86b37a0e7f6bcc datapathConfiguration="&{false false false false false }" interface=lxcdc1bdcd00eed k8sPodName=openstack/barbican-db-sync-dxtf9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fa7a709a53 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=735 ipv4=10.0.0.48 ipv6= k8sPodName=openstack/barbican-db-sync-dxtf9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fa7a709a53 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=735 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=b5e205e6-be5c-4f6f-add0-16689e82fe7f,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=b5e205e6-be5c-4f6f-add0-16689e82fe7f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.48 ipv6= k8sPodName=openstack/barbican-db-sync-dxtf9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=b5e205e6-be5c-4f6f-add0-16689e82fe7f;k8s:batch.kubernetes.io/job-name=barbican-db-sync;k8s:component=db-sync;k8s:controller-uid=b5e205e6-be5c-4f6f-add0-16689e82fe7f;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-sync;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fa7a709a53 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=735 identity=23437 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=b5e205e6-be5c-4f6f-add0-16689e82fe7f,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=b5e205e6-be5c-4f6f-add0-16689e82fe7f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.48 ipv6= k8sPodName=openstack/barbican-db-sync-dxtf9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fa7a709a53 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=735 identity=23437 ipv4=10.0.0.48 ipv6= k8sPodName=openstack/barbican-db-sync-dxtf9 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=fa7a709a53 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=735 identity=23437 ipv4=10.0.0.48 ipv6= k8sPodName=openstack/barbican-db-sync-dxtf9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=fa7a709a53 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=735 identity=23437 ipv4=10.0.0.48 ipv6= k8sPodName=openstack/barbican-db-sync-dxtf9 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=fa7a709a53 endpointID=735 k8sNamespace=openstack k8sPodName=barbican-db-sync-dxtf9 subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=b5e205e6-be5c-4f6f-add0-16689e82fe7f k8s:batch.kubernetes.io/job-name=barbican-db-sync k8s:component=db-sync k8s:controller-uid=b5e205e6-be5c-4f6f-add0-16689e82fe7f k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-sync k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=fa7a709a53 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=735 identity=23437 ipv4=10.0.0.48 ipv6= k8sPodName=openstack/barbican-db-sync-dxtf9 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.47 04b371f6-8b68-4088-b596-77b4c8b0c214 default }" containerID=019b2fd40c6b185dc8874784d339528f39d292615303fd369004b2b450f9b25c datapathConfiguration="&{false false false false false }" interface=lxcb6b42778591a k8sPodName=openstack/barbican-rabbit-init-ds778 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=019b2fd40c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1306 ipv4=10.0.0.47 ipv6= k8sPodName=openstack/barbican-rabbit-init-ds778 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=019b2fd40c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1306 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=203cd998-97d5-49b1-b322-3dde037c9952,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=203cd998-97d5-49b1-b322-3dde037c9952,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.47 ipv6= k8sPodName=openstack/barbican-rabbit-init-ds778 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=203cd998-97d5-49b1-b322-3dde037c9952;k8s:batch.kubernetes.io/job-name=barbican-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=203cd998-97d5-49b1-b322-3dde037c9952;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-rabbit-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=019b2fd40c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1306 identity=19194 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=203cd998-97d5-49b1-b322-3dde037c9952,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=203cd998-97d5-49b1-b322-3dde037c9952,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.47 ipv6= k8sPodName=openstack/barbican-rabbit-init-ds778 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=019b2fd40c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1306 identity=19194 ipv4=10.0.0.47 ipv6= k8sPodName=openstack/barbican-rabbit-init-ds778 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=019b2fd40c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1306 identity=19194 ipv4=10.0.0.47 ipv6= k8sPodName=openstack/barbican-rabbit-init-ds778 subsys=endpoint level=info msg="Successful endpoint creation" containerID=019b2fd40c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1306 identity=19194 ipv4=10.0.0.47 ipv6= k8sPodName=openstack/barbican-rabbit-init-ds778 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=019b2fd40c endpointID=1306 k8sNamespace=openstack k8sPodName=barbican-rabbit-init-ds778 subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=203cd998-97d5-49b1-b322-3dde037c9952 k8s:batch.kubernetes.io/job-name=barbican-rabbit-init k8s:component=rabbit-init k8s:controller-uid=203cd998-97d5-49b1-b322-3dde037c9952 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-rabbit-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=019b2fd40c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1306 identity=19194 ipv4=10.0.0.47 ipv6= k8sPodName=openstack/barbican-rabbit-init-ds778 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.23 5dc59adf-2c0f-4dfb-9edd-e53f185dbf3b default }" containerID=9100c1102c4b3fe92bdb115154f135e613b372d011b52d35ed5ae5cb749b172e datapathConfiguration="&{false false false false false }" interface=lxc3bf0e4f94450 k8sPodName=openstack/barbican-ks-service-724sv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9100c1102c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2294 ipv4=10.0.0.23 ipv6= k8sPodName=openstack/barbican-ks-service-724sv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9100c1102c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2294 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=ea95fb74-c7cc-472a-85d6-4ef3fc6876bc,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=ea95fb74-c7cc-472a-85d6-4ef3fc6876bc,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.23 ipv6= k8sPodName=openstack/barbican-ks-service-724sv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=ea95fb74-c7cc-472a-85d6-4ef3fc6876bc;k8s:batch.kubernetes.io/job-name=barbican-ks-service;k8s:component=ks-service;k8s:controller-uid=ea95fb74-c7cc-472a-85d6-4ef3fc6876bc;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-service;k8s:release_group=barbican;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=9100c1102c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2294 identity=51097 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=ea95fb74-c7cc-472a-85d6-4ef3fc6876bc,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=ea95fb74-c7cc-472a-85d6-4ef3fc6876bc,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.23 ipv6= k8sPodName=openstack/barbican-ks-service-724sv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9100c1102c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2294 identity=51097 ipv4=10.0.0.23 ipv6= k8sPodName=openstack/barbican-ks-service-724sv subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9100c1102c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2294 identity=51097 ipv4=10.0.0.23 ipv6= k8sPodName=openstack/barbican-ks-service-724sv subsys=endpoint level=info msg="Successful endpoint creation" containerID=9100c1102c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2294 identity=51097 ipv4=10.0.0.23 ipv6= k8sPodName=openstack/barbican-ks-service-724sv subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=9100c1102c endpointID=2294 k8sNamespace=openstack k8sPodName=barbican-ks-service-724sv subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=ea95fb74-c7cc-472a-85d6-4ef3fc6876bc k8s:batch.kubernetes.io/job-name=barbican-ks-service k8s:component=ks-service k8s:controller-uid=ea95fb74-c7cc-472a-85d6-4ef3fc6876bc k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-service k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=9100c1102c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2294 identity=51097 ipv4=10.0.0.23 ipv6= k8sPodName=openstack/barbican-ks-service-724sv subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.14 ec89b558-820c-4418-9feb-50ca1122ae89 default }" containerID=860f38c9f5aca7282f2df6cdf8006f62c0d47e3563a266de6a839b93f3db7cea datapathConfiguration="&{false false false false false }" interface=lxccddedc533636 k8sPodName=openstack/barbican-ks-endpoints-hf5j4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=860f38c9f5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3877 ipv4=10.0.0.14 ipv6= k8sPodName=openstack/barbican-ks-endpoints-hf5j4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=860f38c9f5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3877 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=820f3997-ac58-4708-8064-7981c6e0269d,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=820f3997-ac58-4708-8064-7981c6e0269d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.14 ipv6= k8sPodName=openstack/barbican-ks-endpoints-hf5j4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=820f3997-ac58-4708-8064-7981c6e0269d;k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=820f3997-ac58-4708-8064-7981c6e0269d;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-endpoints;k8s:release_group=barbican;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=860f38c9f5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3877 identity=8330 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=820f3997-ac58-4708-8064-7981c6e0269d,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=820f3997-ac58-4708-8064-7981c6e0269d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.14 ipv6= k8sPodName=openstack/barbican-ks-endpoints-hf5j4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=860f38c9f5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3877 identity=8330 ipv4=10.0.0.14 ipv6= k8sPodName=openstack/barbican-ks-endpoints-hf5j4 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=860f38c9f5 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3877 identity=8330 ipv4=10.0.0.14 ipv6= k8sPodName=openstack/barbican-ks-endpoints-hf5j4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=860f38c9f5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3877 identity=8330 ipv4=10.0.0.14 ipv6= k8sPodName=openstack/barbican-ks-endpoints-hf5j4 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=860f38c9f5 endpointID=3877 k8sNamespace=openstack k8sPodName=barbican-ks-endpoints-hf5j4 subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=820f3997-ac58-4708-8064-7981c6e0269d k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=820f3997-ac58-4708-8064-7981c6e0269d k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-endpoints k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=860f38c9f5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3877 identity=8330 ipv4=10.0.0.14 ipv6= k8sPodName=openstack/barbican-ks-endpoints-hf5j4 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.239 56afd5a9-3bed-45a4-8991-7385f00f7a70 default }" containerID=866a20bbb2fdacc41a3eb437c5056fd201576438563ac0ad3bd0c226d6a95cf1 datapathConfiguration="&{false false false false false }" interface=lxcfd87f1380b57 k8sPodName=openstack/barbican-ks-user-5ccxr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=866a20bbb2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=290 ipv4=10.0.0.239 ipv6= k8sPodName=openstack/barbican-ks-user-5ccxr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=866a20bbb2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=290 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=a5287c55-c6b3-42fd-8f46-35b806911cc2,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=a5287c55-c6b3-42fd-8f46-35b806911cc2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.239 ipv6= k8sPodName=openstack/barbican-ks-user-5ccxr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=a5287c55-c6b3-42fd-8f46-35b806911cc2;k8s:batch.kubernetes.io/job-name=barbican-ks-user;k8s:component=ks-user;k8s:controller-uid=a5287c55-c6b3-42fd-8f46-35b806911cc2;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-user;k8s:release_group=barbican;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=866a20bbb2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=290 identity=45753 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=a5287c55-c6b3-42fd-8f46-35b806911cc2,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=a5287c55-c6b3-42fd-8f46-35b806911cc2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.239 ipv6= k8sPodName=openstack/barbican-ks-user-5ccxr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=866a20bbb2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=290 identity=45753 ipv4=10.0.0.239 ipv6= k8sPodName=openstack/barbican-ks-user-5ccxr subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=866a20bbb2 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=290 identity=45753 ipv4=10.0.0.239 ipv6= k8sPodName=openstack/barbican-ks-user-5ccxr subsys=endpoint level=info msg="Successful endpoint creation" containerID=866a20bbb2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=290 identity=45753 ipv4=10.0.0.239 ipv6= k8sPodName=openstack/barbican-ks-user-5ccxr subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=866a20bbb2 endpointID=290 k8sNamespace=openstack k8sPodName=barbican-ks-user-5ccxr subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=a5287c55-c6b3-42fd-8f46-35b806911cc2 k8s:batch.kubernetes.io/job-name=barbican-ks-user k8s:component=ks-user k8s:controller-uid=a5287c55-c6b3-42fd-8f46-35b806911cc2 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-user k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=866a20bbb2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=290 identity=45753 ipv4=10.0.0.239 ipv6= k8sPodName=openstack/barbican-ks-user-5ccxr subsys=endpoint level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Create endpoint request" addressing="&{10.0.0.38 ac08a1ce-07ed-4cc8-b4e0-5eb4e2cb63ef default }" containerID=4bbad162c1c0b5c3c2d1f95718c2b5b324bb5051d6c0fb0effa7335b6995f005 datapathConfiguration="&{false false false false false }" interface=lxc8dcf06a80292 k8sPodName=rook-ceph/rook-ceph-operator-7b66cfb94c-rllr6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4bbad162c1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3384 ipv4=10.0.0.38 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-7b66cfb94c-rllr6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4bbad162c1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3384 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.14.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.38 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-7b66cfb94c-rllr6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:rook-ceph k8s:io.cilium.k8s.namespace.labels.name:rook-ceph]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-operator;k8s:helm.sh/chart=rook-ceph-v1.14.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph;k8s:io.cilium.k8s.namespace.labels.name=rook-ceph;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system;k8s:io.kubernetes.pod.namespace=rook-ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4bbad162c1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3384 identity=11757 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.14.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.38 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-7b66cfb94c-rllr6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4bbad162c1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3384 identity=11757 ipv4=10.0.0.38 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-7b66cfb94c-rllr6 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=4bbad162c1 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3384 identity=11757 ipv4=10.0.0.38 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-7b66cfb94c-rllr6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=4bbad162c1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3384 identity=11757 ipv4=10.0.0.38 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-7b66cfb94c-rllr6 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.54 4692d0fe-99df-49f0-b66d-fe4bb3a6df87 default }" containerID=3b3aa2a46070d1c2112e818a5393bd7ad5bc2ffd327778344b8b87000680953c datapathConfiguration="&{false false false false false }" interface=lxc6ff52a8676a3 k8sPodName=openstack/rook-ceph-detect-version-j4flf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3b3aa2a460 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=877 ipv4=10.0.0.54 ipv6= k8sPodName=openstack/rook-ceph-detect-version-j4flf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3b3aa2a460 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=877 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=dee5b995-a032-4e46-b4d9-10bd65cd5033,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=dee5b995-a032-4e46-b4d9-10bd65cd5033,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.14.5" ipv4=10.0.0.54 ipv6= k8sPodName=openstack/rook-ceph-detect-version-j4flf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-detect-version;k8s:batch.kubernetes.io/controller-uid=dee5b995-a032-4e46-b4d9-10bd65cd5033;k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version;k8s:controller-uid=dee5b995-a032-4e46-b4d9-10bd65cd5033;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=rook-ceph-detect-version;k8s:rook-version=v1.14.5;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=3b3aa2a460 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=877 identity=42887 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=dee5b995-a032-4e46-b4d9-10bd65cd5033,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=dee5b995-a032-4e46-b4d9-10bd65cd5033,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.14.5" ipv4=10.0.0.54 ipv6= k8sPodName=openstack/rook-ceph-detect-version-j4flf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3b3aa2a460 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=877 identity=42887 ipv4=10.0.0.54 ipv6= k8sPodName=openstack/rook-ceph-detect-version-j4flf subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3b3aa2a460 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=877 identity=42887 ipv4=10.0.0.54 ipv6= k8sPodName=openstack/rook-ceph-detect-version-j4flf subsys=endpoint level=info msg="Successful endpoint creation" containerID=3b3aa2a460 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=877 identity=42887 ipv4=10.0.0.54 ipv6= k8sPodName=openstack/rook-ceph-detect-version-j4flf subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=3b3aa2a460 endpointID=877 k8sNamespace=openstack k8sPodName=rook-ceph-detect-version-j4flf subsys=daemon level=info msg="Releasing key" key="[k8s:app=rook-ceph-detect-version k8s:batch.kubernetes.io/controller-uid=dee5b995-a032-4e46-b4d9-10bd65cd5033 k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version k8s:controller-uid=dee5b995-a032-4e46-b4d9-10bd65cd5033 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=rook-ceph-detect-version k8s:rook-version=v1.14.5]" subsys=allocator level=info msg="Removed endpoint" containerID=3b3aa2a460 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=877 identity=42887 ipv4=10.0.0.54 ipv6= k8sPodName=openstack/rook-ceph-detect-version-j4flf subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.230 71a09810-f0b7-465b-89d7-7fcda7a2b6a3 default }" containerID=fbce2ff210ce5f2e0bd32ef9abb891bf152371843d98c1391cf939bd322a8f5a datapathConfiguration="&{false false false false false }" interface=lxc307bedf1e23f k8sPodName=openstack/ceph-object-controller-detect-version-6rtsj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fbce2ff210 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=254 ipv4=10.0.0.230 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-6rtsj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fbce2ff210 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=254 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=cd76e705-2cb0-4954-9382-a2d229480e12,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=cd76e705-2cb0-4954-9382-a2d229480e12,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.14.5" ipv4=10.0.0.230 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-6rtsj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=ceph-object-controller-detect-version;k8s:batch.kubernetes.io/controller-uid=cd76e705-2cb0-4954-9382-a2d229480e12;k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version;k8s:controller-uid=cd76e705-2cb0-4954-9382-a2d229480e12;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=ceph-object-controller-detect-version;k8s:rook-version=v1.14.5;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fbce2ff210 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=254 identity=11453 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=cd76e705-2cb0-4954-9382-a2d229480e12,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=cd76e705-2cb0-4954-9382-a2d229480e12,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.14.5" ipv4=10.0.0.230 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-6rtsj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fbce2ff210 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=254 identity=11453 ipv4=10.0.0.230 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-6rtsj subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=fbce2ff210 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=254 identity=11453 ipv4=10.0.0.230 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-6rtsj subsys=endpoint level=info msg="Successful endpoint creation" containerID=fbce2ff210 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=254 identity=11453 ipv4=10.0.0.230 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-6rtsj subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=fbce2ff210 endpointID=254 k8sNamespace=openstack k8sPodName=ceph-object-controller-detect-version-6rtsj subsys=daemon level=info msg="Releasing key" key="[k8s:app=ceph-object-controller-detect-version k8s:batch.kubernetes.io/controller-uid=cd76e705-2cb0-4954-9382-a2d229480e12 k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version k8s:controller-uid=cd76e705-2cb0-4954-9382-a2d229480e12 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=ceph-object-controller-detect-version k8s:rook-version=v1.14.5]" subsys=allocator level=info msg="Removed endpoint" containerID=fbce2ff210 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=254 identity=11453 ipv4=10.0.0.230 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-6rtsj subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.137 bc1fa78e-d0fc-4db2-b8f4-e5228c968ebe default }" containerID=947ad9c8308b89b6bad8fb6085ea98e11d1c50a498503921b49c8ee6c01058de datapathConfiguration="&{false false false false false }" interface=lxc88de1de76b99 k8sPodName=local-path-storage/helper-pod-create-pvc-c0559885-7d48-4a66-8eec-734362aad3f3 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=947ad9c830 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2212 ipv4=10.0.0.137 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c0559885-7d48-4a66-8eec-734362aad3f3 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=947ad9c830 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2212 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.137 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c0559885-7d48-4a66-8eec-734362aad3f3 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=947ad9c830 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2212 identity=8417 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.137 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c0559885-7d48-4a66-8eec-734362aad3f3 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=947ad9c830 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2212 identity=8417 ipv4=10.0.0.137 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c0559885-7d48-4a66-8eec-734362aad3f3 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=947ad9c830 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2212 identity=8417 ipv4=10.0.0.137 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c0559885-7d48-4a66-8eec-734362aad3f3 subsys=endpoint level=info msg="Successful endpoint creation" containerID=947ad9c830 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2212 identity=8417 ipv4=10.0.0.137 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c0559885-7d48-4a66-8eec-734362aad3f3 subsys=daemon level=info msg="Delete endpoint request" containerID=947ad9c830 endpointID=2212 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-c0559885-7d48-4a66-8eec-734362aad3f3 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=947ad9c830 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2212 identity=8417 ipv4=10.0.0.137 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c0559885-7d48-4a66-8eec-734362aad3f3 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.16 40cc59ed-e1f2-4d7b-9362-17533ef2df98 default }" containerID=3c712d398b21bf7207598fd6ca1b0094a918f2ca60d3aecf739d2813c98d43b7 datapathConfiguration="&{false false false false false }" interface=lxc61582fab3254 k8sPodName=openstack/rabbitmq-glance-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3c712d398b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=243 ipv4=10.0.0.16 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3c712d398b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=243 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.16 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-glance;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3c712d398b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=243 identity=24937 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.16 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3c712d398b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=243 identity=24937 ipv4=10.0.0.16 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3c712d398b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=243 identity=24937 ipv4=10.0.0.16 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=3c712d398b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=243 identity=24937 ipv4=10.0.0.16 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.46 a675f79a-289a-4c26-8c97-d34ba6609759 default }" containerID=67b3657d3b254c083edf0427be457f9b2f5b404744a2e457d98991b83c7299e0 datapathConfiguration="&{false false false false false }" interface=lxc637c760e493f k8sPodName=openstack/glance-db-init-lps8r labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=67b3657d3b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=237 ipv4=10.0.0.46 ipv6= k8sPodName=openstack/glance-db-init-lps8r subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=67b3657d3b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=237 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=c008d180-436c-4d10-986f-b13ccf97b27f,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=c008d180-436c-4d10-986f-b13ccf97b27f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.46 ipv6= k8sPodName=openstack/glance-db-init-lps8r subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=c008d180-436c-4d10-986f-b13ccf97b27f;k8s:batch.kubernetes.io/job-name=glance-db-init;k8s:component=db-init;k8s:controller-uid=c008d180-436c-4d10-986f-b13ccf97b27f;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=67b3657d3b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=237 identity=42422 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=c008d180-436c-4d10-986f-b13ccf97b27f,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=c008d180-436c-4d10-986f-b13ccf97b27f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.46 ipv6= k8sPodName=openstack/glance-db-init-lps8r oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=67b3657d3b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=237 identity=42422 ipv4=10.0.0.46 ipv6= k8sPodName=openstack/glance-db-init-lps8r subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=67b3657d3b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=237 identity=42422 ipv4=10.0.0.46 ipv6= k8sPodName=openstack/glance-db-init-lps8r subsys=endpoint level=info msg="Successful endpoint creation" containerID=67b3657d3b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=237 identity=42422 ipv4=10.0.0.46 ipv6= k8sPodName=openstack/glance-db-init-lps8r subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=67b3657d3b endpointID=237 k8sNamespace=openstack k8sPodName=glance-db-init-lps8r subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=c008d180-436c-4d10-986f-b13ccf97b27f k8s:batch.kubernetes.io/job-name=glance-db-init k8s:component=db-init k8s:controller-uid=c008d180-436c-4d10-986f-b13ccf97b27f k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=67b3657d3b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=237 identity=42422 ipv4=10.0.0.46 ipv6= k8sPodName=openstack/glance-db-init-lps8r subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.144 7a1850f2-aa23-468c-950c-06d7b05cb4b1 default }" containerID=991889a08a593271bc615a56d8d8838d15d9ea39fe6d7f0e9dab076a6488e438 datapathConfiguration="&{false false false false false }" interface=lxc849d58436907 k8sPodName=openstack/glance-db-sync-f6kzb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=991889a08a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3437 ipv4=10.0.0.144 ipv6= k8sPodName=openstack/glance-db-sync-f6kzb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=991889a08a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3437 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=03d16ff3-6707-4584-af81-1a9b61f8d26a,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=03d16ff3-6707-4584-af81-1a9b61f8d26a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.144 ipv6= k8sPodName=openstack/glance-db-sync-f6kzb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=03d16ff3-6707-4584-af81-1a9b61f8d26a;k8s:batch.kubernetes.io/job-name=glance-db-sync;k8s:component=db-sync;k8s:controller-uid=03d16ff3-6707-4584-af81-1a9b61f8d26a;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-sync;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=991889a08a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3437 identity=19252 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=03d16ff3-6707-4584-af81-1a9b61f8d26a,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=03d16ff3-6707-4584-af81-1a9b61f8d26a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.144 ipv6= k8sPodName=openstack/glance-db-sync-f6kzb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=991889a08a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3437 identity=19252 ipv4=10.0.0.144 ipv6= k8sPodName=openstack/glance-db-sync-f6kzb subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=991889a08a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3437 identity=19252 ipv4=10.0.0.144 ipv6= k8sPodName=openstack/glance-db-sync-f6kzb subsys=endpoint level=info msg="Successful endpoint creation" containerID=991889a08a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3437 identity=19252 ipv4=10.0.0.144 ipv6= k8sPodName=openstack/glance-db-sync-f6kzb subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=991889a08a endpointID=3437 k8sNamespace=openstack k8sPodName=glance-db-sync-f6kzb subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=03d16ff3-6707-4584-af81-1a9b61f8d26a k8s:batch.kubernetes.io/job-name=glance-db-sync k8s:component=db-sync k8s:controller-uid=03d16ff3-6707-4584-af81-1a9b61f8d26a k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-sync k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=991889a08a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3437 identity=19252 ipv4=10.0.0.144 ipv6= k8sPodName=openstack/glance-db-sync-f6kzb subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.29 68bdf499-455a-4ad1-a54d-37af9e12596d default }" containerID=80428fd42fff3f0913cb3e5362bc1ad7cc87b5fb5977a1169e2dcb7e9acdd8e1 datapathConfiguration="&{false false false false false }" interface=lxca84b7742efa7 k8sPodName=openstack/glance-rabbit-init-6trp2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=80428fd42f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=484 ipv4=10.0.0.29 ipv6= k8sPodName=openstack/glance-rabbit-init-6trp2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=80428fd42f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=484 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=8f659710-7c3e-42c0-9092-1799fd80dd90,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=8f659710-7c3e-42c0-9092-1799fd80dd90,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.29 ipv6= k8sPodName=openstack/glance-rabbit-init-6trp2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=8f659710-7c3e-42c0-9092-1799fd80dd90;k8s:batch.kubernetes.io/job-name=glance-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=8f659710-7c3e-42c0-9092-1799fd80dd90;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-rabbit-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=80428fd42f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=484 identity=32610 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=8f659710-7c3e-42c0-9092-1799fd80dd90,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=8f659710-7c3e-42c0-9092-1799fd80dd90,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.29 ipv6= k8sPodName=openstack/glance-rabbit-init-6trp2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=80428fd42f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=484 identity=32610 ipv4=10.0.0.29 ipv6= k8sPodName=openstack/glance-rabbit-init-6trp2 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=80428fd42f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=484 identity=32610 ipv4=10.0.0.29 ipv6= k8sPodName=openstack/glance-rabbit-init-6trp2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=80428fd42f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=484 identity=32610 ipv4=10.0.0.29 ipv6= k8sPodName=openstack/glance-rabbit-init-6trp2 subsys=daemon level=info msg="Delete endpoint request" containerID=80428fd42f endpointID=484 k8sNamespace=openstack k8sPodName=glance-rabbit-init-6trp2 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=8f659710-7c3e-42c0-9092-1799fd80dd90 k8s:batch.kubernetes.io/job-name=glance-rabbit-init k8s:component=rabbit-init k8s:controller-uid=8f659710-7c3e-42c0-9092-1799fd80dd90 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-rabbit-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=80428fd42f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=484 identity=32610 ipv4=10.0.0.29 ipv6= k8sPodName=openstack/glance-rabbit-init-6trp2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.215 4c222145-44a7-420c-a571-e10d9d5d5fda default }" containerID=fabe82c63caa67b5c040418516e3b2f6dc67e06113c809fe43a84605e3d0018c datapathConfiguration="&{false false false false false }" interface=lxc4edb67b274a9 k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-f7lhq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fabe82c63c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=583 ipv4=10.0.0.215 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-f7lhq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fabe82c63c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=583 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.215 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-f7lhq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-rgw;k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io;k8s:app.kubernetes.io/created-by=rook-ceph-operator;k8s:app.kubernetes.io/instance=ceph;k8s:app.kubernetes.io/managed-by=rook-ceph-operator;k8s:app.kubernetes.io/name=ceph-rgw;k8s:app.kubernetes.io/part-of=ceph;k8s:ceph_daemon_id=ceph;k8s:ceph_daemon_type=rgw;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw;k8s:io.kubernetes.pod.namespace=openstack;k8s:rgw=ceph;k8s:rook.io/operator-namespace=rook-ceph;k8s:rook_cluster=openstack;k8s:rook_object_store=ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fabe82c63c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=583 identity=2899 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.215 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-f7lhq oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=fabe82c63c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=583 identity=2899 ipv4=10.0.0.215 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-f7lhq subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.223 2a2424d6-f3b9-4e3b-85db-c46344610398 default }" containerID=b378d6ed79574ff42d488e6ed1ffd5a56a39be1d6dedd21eaa6daa5edd323d35 datapathConfiguration="&{false false false false false }" interface=lxc780519191b71 k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-5dsw9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b378d6ed79 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2913 ipv4=10.0.0.223 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-5dsw9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b378d6ed79 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2913 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.223 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-5dsw9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-crashcollector;k8s:ceph-version=18.2.7-0;k8s:ceph_daemon_id=crash;k8s:crashcollector=crash;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default;k8s:io.kubernetes.pod.namespace=openstack;k8s:node_name=instance;k8s:rook_cluster=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b378d6ed79 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2913 identity=14142 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.223 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-5dsw9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b378d6ed79 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2913 identity=14142 ipv4=10.0.0.223 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-5dsw9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=fabe82c63c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=583 identity=2899 ipv4=10.0.0.215 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-f7lhq subsys=endpoint level=info msg="Successful endpoint creation" containerID=fabe82c63c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=583 identity=2899 ipv4=10.0.0.215 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-f7lhq subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=b378d6ed79 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2913 identity=14142 ipv4=10.0.0.223 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-5dsw9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=b378d6ed79 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2913 identity=14142 ipv4=10.0.0.223 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-5dsw9 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.207 c9890a25-f808-4935-8879-154733299508 default }" containerID=4133f1c2c3cb6fd51d4ab5eb8c75d963a040c17c490a812054d9f0a7b3a68bd5 datapathConfiguration="&{false false false false false }" interface=lxc62b80c70d868 k8sPodName=openstack/glance-ks-service-nct2q labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4133f1c2c3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2747 ipv4=10.0.0.207 ipv6= k8sPodName=openstack/glance-ks-service-nct2q subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4133f1c2c3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2747 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=bde637ff-5367-4ec6-b445-c3daa33b85a0,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=bde637ff-5367-4ec6-b445-c3daa33b85a0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.207 ipv6= k8sPodName=openstack/glance-ks-service-nct2q subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=bde637ff-5367-4ec6-b445-c3daa33b85a0;k8s:batch.kubernetes.io/job-name=glance-ks-service;k8s:component=ks-service;k8s:controller-uid=bde637ff-5367-4ec6-b445-c3daa33b85a0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-service;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4133f1c2c3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2747 identity=39344 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=bde637ff-5367-4ec6-b445-c3daa33b85a0,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=bde637ff-5367-4ec6-b445-c3daa33b85a0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.207 ipv6= k8sPodName=openstack/glance-ks-service-nct2q oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4133f1c2c3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2747 identity=39344 ipv4=10.0.0.207 ipv6= k8sPodName=openstack/glance-ks-service-nct2q subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4133f1c2c3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2747 identity=39344 ipv4=10.0.0.207 ipv6= k8sPodName=openstack/glance-ks-service-nct2q subsys=endpoint level=info msg="Successful endpoint creation" containerID=4133f1c2c3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2747 identity=39344 ipv4=10.0.0.207 ipv6= k8sPodName=openstack/glance-ks-service-nct2q subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=4133f1c2c3 endpointID=2747 k8sNamespace=openstack k8sPodName=glance-ks-service-nct2q subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=bde637ff-5367-4ec6-b445-c3daa33b85a0 k8s:batch.kubernetes.io/job-name=glance-ks-service k8s:component=ks-service k8s:controller-uid=bde637ff-5367-4ec6-b445-c3daa33b85a0 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-service k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=4133f1c2c3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2747 identity=39344 ipv4=10.0.0.207 ipv6= k8sPodName=openstack/glance-ks-service-nct2q subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.254 dbe4c508-37e3-46f1-aded-7a7bc543eeb1 default }" containerID=7d6c241873fc7e93223bbf93fc223290615c3149b9c178fe2781f61832b647f5 datapathConfiguration="&{false false false false false }" interface=lxce529a77d81ea k8sPodName=openstack/glance-ks-endpoints-lgvj9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7d6c241873 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=682 ipv4=10.0.0.254 ipv6= k8sPodName=openstack/glance-ks-endpoints-lgvj9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7d6c241873 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=682 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=6745f858-9870-416c-98c9-e84d1949eefe,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=6745f858-9870-416c-98c9-e84d1949eefe,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.254 ipv6= k8sPodName=openstack/glance-ks-endpoints-lgvj9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=7d6c241873 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=682 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.254 ipv6= k8sPodName=openstack/glance-ks-endpoints-lgvj9 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=6745f858-9870-416c-98c9-e84d1949eefe;k8s:batch.kubernetes.io/job-name=glance-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=6745f858-9870-416c-98c9-e84d1949eefe;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-endpoints;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7d6c241873 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=682 identity=25943 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=6745f858-9870-416c-98c9-e84d1949eefe,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=6745f858-9870-416c-98c9-e84d1949eefe,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.254 ipv6= k8sPodName=openstack/glance-ks-endpoints-lgvj9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7d6c241873 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=682 identity=25943 ipv4=10.0.0.254 ipv6= k8sPodName=openstack/glance-ks-endpoints-lgvj9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7d6c241873 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=682 identity=25943 ipv4=10.0.0.254 ipv6= k8sPodName=openstack/glance-ks-endpoints-lgvj9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=7d6c241873 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=682 identity=25943 ipv4=10.0.0.254 ipv6= k8sPodName=openstack/glance-ks-endpoints-lgvj9 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.179 bcc3834d-1cf4-4f50-b785-570fbdb4816c default }" containerID=2310b44745ae5b285378eee358bcf4971b38a7154225184cbcca8c5c20f4465e datapathConfiguration="&{false false false false false }" interface=lxc4a3170311a5c k8sPodName=openstack/ceph-object-controller-detect-version-ghl5g labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2310b44745 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2722 ipv4=10.0.0.179 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-ghl5g subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2310b44745 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2722 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=c675fb39-58f3-461a-a6ea-f19535457ce4,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=c675fb39-58f3-461a-a6ea-f19535457ce4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.14.5" ipv4=10.0.0.179 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-ghl5g subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app=ceph-object-controller-detect-version;k8s:batch.kubernetes.io/controller-uid=c675fb39-58f3-461a-a6ea-f19535457ce4;k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version;k8s:controller-uid=c675fb39-58f3-461a-a6ea-f19535457ce4;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=ceph-object-controller-detect-version;k8s:rook-version=v1.14.5;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2310b44745 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2722 identity=38362 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=c675fb39-58f3-461a-a6ea-f19535457ce4,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=c675fb39-58f3-461a-a6ea-f19535457ce4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.14.5" ipv4=10.0.0.179 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-ghl5g oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2310b44745 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2722 identity=38362 ipv4=10.0.0.179 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-ghl5g subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2310b44745 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2722 identity=38362 ipv4=10.0.0.179 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-ghl5g subsys=endpoint level=info msg="Successful endpoint creation" containerID=2310b44745 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2722 identity=38362 ipv4=10.0.0.179 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-ghl5g subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=7d6c241873 endpointID=682 k8sNamespace=openstack k8sPodName=glance-ks-endpoints-lgvj9 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=6745f858-9870-416c-98c9-e84d1949eefe k8s:batch.kubernetes.io/job-name=glance-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=6745f858-9870-416c-98c9-e84d1949eefe k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-endpoints k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=7d6c241873 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=682 identity=25943 ipv4=10.0.0.254 ipv6= k8sPodName=openstack/glance-ks-endpoints-lgvj9 subsys=endpoint level=info msg="Delete endpoint request" containerID=2310b44745 endpointID=2722 k8sNamespace=openstack k8sPodName=ceph-object-controller-detect-version-ghl5g subsys=daemon level=info msg="Releasing key" key="[k8s:app=ceph-object-controller-detect-version k8s:batch.kubernetes.io/controller-uid=c675fb39-58f3-461a-a6ea-f19535457ce4 k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version k8s:controller-uid=c675fb39-58f3-461a-a6ea-f19535457ce4 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=ceph-object-controller-detect-version k8s:rook-version=v1.14.5]" subsys=allocator level=info msg="Removed endpoint" containerID=2310b44745 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2722 identity=38362 ipv4=10.0.0.179 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-ghl5g subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.235 b70120e5-5ed5-4841-9ae9-de4ff643ef6d default }" containerID=b2ceb817181c5c5bd81fa518d645d733853472b9e1237e5085f36d35977b4ada datapathConfiguration="&{false false false false false }" interface=lxc09d94626ba29 k8sPodName=openstack/glance-ks-user-8r4xf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b2ceb81718 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1591 ipv4=10.0.0.235 ipv6= k8sPodName=openstack/glance-ks-user-8r4xf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b2ceb81718 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1591 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=d1035edd-392c-48ad-8edb-c29f8a7a11de,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=d1035edd-392c-48ad-8edb-c29f8a7a11de,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.235 ipv6= k8sPodName=openstack/glance-ks-user-8r4xf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=b2ceb81718 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1591 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.235 ipv6= k8sPodName=openstack/glance-ks-user-8r4xf line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=d1035edd-392c-48ad-8edb-c29f8a7a11de;k8s:batch.kubernetes.io/job-name=glance-ks-user;k8s:component=ks-user;k8s:controller-uid=d1035edd-392c-48ad-8edb-c29f8a7a11de;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-user;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b2ceb81718 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1591 identity=26458 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=d1035edd-392c-48ad-8edb-c29f8a7a11de,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=d1035edd-392c-48ad-8edb-c29f8a7a11de,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.235 ipv6= k8sPodName=openstack/glance-ks-user-8r4xf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b2ceb81718 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1591 identity=26458 ipv4=10.0.0.235 ipv6= k8sPodName=openstack/glance-ks-user-8r4xf subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b2ceb81718 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1591 identity=26458 ipv4=10.0.0.235 ipv6= k8sPodName=openstack/glance-ks-user-8r4xf subsys=endpoint level=info msg="Successful endpoint creation" containerID=b2ceb81718 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1591 identity=26458 ipv4=10.0.0.235 ipv6= k8sPodName=openstack/glance-ks-user-8r4xf subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=b2ceb81718 endpointID=1591 k8sNamespace=openstack k8sPodName=glance-ks-user-8r4xf subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=d1035edd-392c-48ad-8edb-c29f8a7a11de k8s:batch.kubernetes.io/job-name=glance-ks-user k8s:component=ks-user k8s:controller-uid=d1035edd-392c-48ad-8edb-c29f8a7a11de k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-user k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=b2ceb81718 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1591 identity=26458 ipv4=10.0.0.235 ipv6= k8sPodName=openstack/glance-ks-user-8r4xf subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.81 782d7a45-e3af-4d25-8e62-b10f9a6a6726 default }" containerID=2e7e31a150e152ad0587105a8d5d4923feda26d7df9358b715eb18a9ac5f7122 datapathConfiguration="&{false false false false false }" interface=lxc42e17fbb247f k8sPodName=openstack/glance-metadefs-load-8z6xg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2e7e31a150 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2239 ipv4=10.0.0.81 ipv6= k8sPodName=openstack/glance-metadefs-load-8z6xg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2e7e31a150 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2239 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=cad1bac9-1e53-4bc0-81c6-2e2bbc4874f2,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=cad1bac9-1e53-4bc0-81c6-2e2bbc4874f2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.81 ipv6= k8sPodName=openstack/glance-metadefs-load-8z6xg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=cad1bac9-1e53-4bc0-81c6-2e2bbc4874f2;k8s:batch.kubernetes.io/job-name=glance-metadefs-load;k8s:component=metadefs_load;k8s:controller-uid=cad1bac9-1e53-4bc0-81c6-2e2bbc4874f2;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-metadefs-load;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2e7e31a150 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2239 identity=22480 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=cad1bac9-1e53-4bc0-81c6-2e2bbc4874f2,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=cad1bac9-1e53-4bc0-81c6-2e2bbc4874f2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.81 ipv6= k8sPodName=openstack/glance-metadefs-load-8z6xg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2e7e31a150 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2239 identity=22480 ipv4=10.0.0.81 ipv6= k8sPodName=openstack/glance-metadefs-load-8z6xg subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=2e7e31a150 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2239 identity=22480 ipv4=10.0.0.81 ipv6= k8sPodName=openstack/glance-metadefs-load-8z6xg subsys=endpoint level=info msg="Successful endpoint creation" containerID=2e7e31a150 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2239 identity=22480 ipv4=10.0.0.81 ipv6= k8sPodName=openstack/glance-metadefs-load-8z6xg subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=2e7e31a150 endpointID=2239 k8sNamespace=openstack k8sPodName=glance-metadefs-load-8z6xg subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=cad1bac9-1e53-4bc0-81c6-2e2bbc4874f2 k8s:batch.kubernetes.io/job-name=glance-metadefs-load k8s:component=metadefs_load k8s:controller-uid=cad1bac9-1e53-4bc0-81c6-2e2bbc4874f2 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-metadefs-load k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=2e7e31a150 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2239 identity=22480 ipv4=10.0.0.81 ipv6= k8sPodName=openstack/glance-metadefs-load-8z6xg subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.89 23e26816-908a-4581-9ed0-e78389d235af default }" containerID=ed43d93f1fba2c912baacfdf142d758173e1de81ed3483df89ad50d55dca738f datapathConfiguration="&{false false false false false }" interface=lxcb6ed4929b8d4 k8sPodName=openstack/glance-storage-init-r8mwf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ed43d93f1f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1569 ipv4=10.0.0.89 ipv6= k8sPodName=openstack/glance-storage-init-r8mwf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ed43d93f1f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1569 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=90c62b5c-fa0e-48ce-9923-433defe04707,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=90c62b5c-fa0e-48ce-9923-433defe04707,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.89 ipv6= k8sPodName=openstack/glance-storage-init-r8mwf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=90c62b5c-fa0e-48ce-9923-433defe04707;k8s:batch.kubernetes.io/job-name=glance-storage-init;k8s:component=storage-init;k8s:controller-uid=90c62b5c-fa0e-48ce-9923-433defe04707;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-storage-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ed43d93f1f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1569 identity=63442 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=90c62b5c-fa0e-48ce-9923-433defe04707,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=90c62b5c-fa0e-48ce-9923-433defe04707,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.89 ipv6= k8sPodName=openstack/glance-storage-init-r8mwf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ed43d93f1f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1569 identity=63442 ipv4=10.0.0.89 ipv6= k8sPodName=openstack/glance-storage-init-r8mwf subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=ed43d93f1f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1569 identity=63442 ipv4=10.0.0.89 ipv6= k8sPodName=openstack/glance-storage-init-r8mwf subsys=endpoint level=info msg="Successful endpoint creation" containerID=ed43d93f1f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1569 identity=63442 ipv4=10.0.0.89 ipv6= k8sPodName=openstack/glance-storage-init-r8mwf subsys=daemon level=info msg="Delete endpoint request" containerID=ed43d93f1f endpointID=1569 k8sNamespace=openstack k8sPodName=glance-storage-init-r8mwf subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=90c62b5c-fa0e-48ce-9923-433defe04707 k8s:batch.kubernetes.io/job-name=glance-storage-init k8s:component=storage-init k8s:controller-uid=90c62b5c-fa0e-48ce-9923-433defe04707 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-storage-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=ed43d93f1f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1569 identity=63442 ipv4=10.0.0.89 ipv6= k8sPodName=openstack/glance-storage-init-r8mwf subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.211 43d2d9e4-570a-43c0-8473-2d2b5b34031d default }" containerID=56e86ac63430e8d0c10db245db87dffafae3b71cb7203812329bd2253e6f67ae datapathConfiguration="&{false false false false false }" interface=lxc196f5a50e84b k8sPodName=openstack/glance-api-587f7f987d-bskzq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=56e86ac634 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=926 ipv4=10.0.0.211 ipv6= k8sPodName=openstack/glance-api-587f7f987d-bskzq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=56e86ac634 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=926 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.211 ipv6= k8sPodName=openstack/glance-api-587f7f987d-bskzq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=glance;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=56e86ac634 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=926 identity=63479 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.211 ipv6= k8sPodName=openstack/glance-api-587f7f987d-bskzq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=56e86ac634 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=926 identity=63479 ipv4=10.0.0.211 ipv6= k8sPodName=openstack/glance-api-587f7f987d-bskzq subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=56e86ac634 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=926 identity=63479 ipv4=10.0.0.211 ipv6= k8sPodName=openstack/glance-api-587f7f987d-bskzq subsys=endpoint level=info msg="Successful endpoint creation" containerID=56e86ac634 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=926 identity=63479 ipv4=10.0.0.211 ipv6= k8sPodName=openstack/glance-api-587f7f987d-bskzq subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.232 771c1ada-8902-4b08-b196-157f56e64979 default }" containerID=771e9a8a3ea239484b5f1d1916e60f178e9144b2734323520d26b2c47e6cae6a datapathConfiguration="&{false false false false false }" interface=lxc4ac4faade4f6 k8sPodName=openstack/staffeln-conductor-57cf697874-j626v labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=771e9a8a3e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1068 ipv4=10.0.0.232 ipv6= k8sPodName=openstack/staffeln-conductor-57cf697874-j626v subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=771e9a8a3e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1068 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.232 ipv6= k8sPodName=openstack/staffeln-conductor-57cf697874-j626v subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=771e9a8a3e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1068 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.232 ipv6= k8sPodName=openstack/staffeln-conductor-57cf697874-j626v line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=conductor;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=771e9a8a3e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1068 identity=58005 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.232 ipv6= k8sPodName=openstack/staffeln-conductor-57cf697874-j626v oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=771e9a8a3e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1068 identity=58005 ipv4=10.0.0.232 ipv6= k8sPodName=openstack/staffeln-conductor-57cf697874-j626v subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.85 78d5fc7a-c5e0-47c3-8b60-9b3505ed95d3 default }" containerID=0348ced501209cc381681050146f72213fda641ac7af6b18992af4a1b2688d22 datapathConfiguration="&{false false false false false }" interface=lxc78b668fae2c7 k8sPodName=openstack/staffeln-db-init-xxrvg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0348ced501 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2590 ipv4=10.0.0.85 ipv6= k8sPodName=openstack/staffeln-db-init-xxrvg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0348ced501 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2590 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=81f875b7-2dfb-4ffd-8257-7c638a330c8d,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=81f875b7-2dfb-4ffd-8257-7c638a330c8d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.85 ipv6= k8sPodName=openstack/staffeln-db-init-xxrvg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=81f875b7-2dfb-4ffd-8257-7c638a330c8d;k8s:batch.kubernetes.io/job-name=staffeln-db-init;k8s:component=db-init;k8s:controller-uid=81f875b7-2dfb-4ffd-8257-7c638a330c8d;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-init;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0348ced501 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2590 identity=50020 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=81f875b7-2dfb-4ffd-8257-7c638a330c8d,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=81f875b7-2dfb-4ffd-8257-7c638a330c8d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.85 ipv6= k8sPodName=openstack/staffeln-db-init-xxrvg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0348ced501 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2590 identity=50020 ipv4=10.0.0.85 ipv6= k8sPodName=openstack/staffeln-db-init-xxrvg subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=771e9a8a3e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1068 identity=58005 ipv4=10.0.0.232 ipv6= k8sPodName=openstack/staffeln-conductor-57cf697874-j626v subsys=endpoint level=info msg="Successful endpoint creation" containerID=771e9a8a3e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1068 identity=58005 ipv4=10.0.0.232 ipv6= k8sPodName=openstack/staffeln-conductor-57cf697874-j626v subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.185 bc9d01c6-938d-494d-a97d-e778bee35eec default }" containerID=218797f97644d5c4a283eb76ec212826209f0f98b6da64373dc01d5e8b97e781 datapathConfiguration="&{false false false false false }" interface=lxc4614788023d0 k8sPodName=openstack/staffeln-api-59495c8569-wh4rm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=218797f976 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2401 ipv4=10.0.0.185 ipv6= k8sPodName=openstack/staffeln-api-59495c8569-wh4rm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=218797f976 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2401 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.185 ipv6= k8sPodName=openstack/staffeln-api-59495c8569-wh4rm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=218797f976 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2401 identity=19396 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.185 ipv6= k8sPodName=openstack/staffeln-api-59495c8569-wh4rm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=218797f976 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2401 identity=19396 ipv4=10.0.0.185 ipv6= k8sPodName=openstack/staffeln-api-59495c8569-wh4rm subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0348ced501 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2590 identity=50020 ipv4=10.0.0.85 ipv6= k8sPodName=openstack/staffeln-db-init-xxrvg subsys=endpoint level=info msg="Successful endpoint creation" containerID=0348ced501 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2590 identity=50020 ipv4=10.0.0.85 ipv6= k8sPodName=openstack/staffeln-db-init-xxrvg subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=218797f976 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2401 identity=19396 ipv4=10.0.0.185 ipv6= k8sPodName=openstack/staffeln-api-59495c8569-wh4rm subsys=endpoint level=info msg="Successful endpoint creation" containerID=218797f976 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2401 identity=19396 ipv4=10.0.0.185 ipv6= k8sPodName=openstack/staffeln-api-59495c8569-wh4rm subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=0348ced501 endpointID=2590 k8sNamespace=openstack k8sPodName=staffeln-db-init-xxrvg subsys=daemon level=info msg="Releasing key" key="[k8s:application=staffeln k8s:batch.kubernetes.io/controller-uid=81f875b7-2dfb-4ffd-8257-7c638a330c8d k8s:batch.kubernetes.io/job-name=staffeln-db-init k8s:component=db-init k8s:controller-uid=81f875b7-2dfb-4ffd-8257-7c638a330c8d k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=staffeln-db-init k8s:release_group=staffeln]" subsys=allocator level=info msg="Removed endpoint" containerID=0348ced501 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2590 identity=50020 ipv4=10.0.0.85 ipv6= k8sPodName=openstack/staffeln-db-init-xxrvg subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.154 65b4e193-3fb2-4525-a7f9-a16b40e06ac0 default }" containerID=ec122e0bbe47e773246f578f147ec32404372ca6bacd1d27b8493e64d1702e64 datapathConfiguration="&{false false false false false }" interface=lxc4eb84aeda97c k8sPodName=openstack/staffeln-db-sync-tr9nk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ec122e0bbe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2779 ipv4=10.0.0.154 ipv6= k8sPodName=openstack/staffeln-db-sync-tr9nk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ec122e0bbe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2779 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=3f74514c-c488-4d8f-9d09-db1a4bed29c9,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=3f74514c-c488-4d8f-9d09-db1a4bed29c9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.154 ipv6= k8sPodName=openstack/staffeln-db-sync-tr9nk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=3f74514c-c488-4d8f-9d09-db1a4bed29c9;k8s:batch.kubernetes.io/job-name=staffeln-db-sync;k8s:component=db-sync;k8s:controller-uid=3f74514c-c488-4d8f-9d09-db1a4bed29c9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-sync;k8s:release_group=staffeln;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=ec122e0bbe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2779 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.154 ipv6= k8sPodName=openstack/staffeln-db-sync-tr9nk line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=ec122e0bbe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2779 identity=31435 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=3f74514c-c488-4d8f-9d09-db1a4bed29c9,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=3f74514c-c488-4d8f-9d09-db1a4bed29c9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.154 ipv6= k8sPodName=openstack/staffeln-db-sync-tr9nk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ec122e0bbe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2779 identity=31435 ipv4=10.0.0.154 ipv6= k8sPodName=openstack/staffeln-db-sync-tr9nk subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ec122e0bbe datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2779 identity=31435 ipv4=10.0.0.154 ipv6= k8sPodName=openstack/staffeln-db-sync-tr9nk subsys=endpoint level=info msg="Successful endpoint creation" containerID=ec122e0bbe datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2779 identity=31435 ipv4=10.0.0.154 ipv6= k8sPodName=openstack/staffeln-db-sync-tr9nk subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager