level=info msg="Memory available for map entries (0.003% of 16764956672B): 41912391B" subsys=config level=info msg="option bpf-ct-global-tcp-max set by dynamic sizing to 147061" subsys=config level=info msg="option bpf-ct-global-any-max set by dynamic sizing to 73530" subsys=config level=info msg="option bpf-nat-global-max set by dynamic sizing to 147061" subsys=config level=info msg="option bpf-neigh-global-max set by dynamic sizing to 147061" subsys=config level=info msg="option bpf-sock-rev-map-max set by dynamic sizing to 73530" subsys=config level=info msg=" --agent-health-port='9879'" subsys=daemon level=info msg=" --agent-labels=''" subsys=daemon level=info msg=" --agent-liveness-update-interval='1s'" subsys=daemon level=info msg=" --agent-not-ready-taint-key='node.cilium.io/agent-not-ready'" subsys=daemon level=info msg=" --allocator-list-timeout='3m0s'" subsys=daemon level=info msg=" --allow-icmp-frag-needed='true'" subsys=daemon level=info msg=" --allow-localhost='auto'" subsys=daemon level=info msg=" --annotate-k8s-node='false'" subsys=daemon level=info msg=" --api-rate-limit=''" subsys=daemon level=info msg=" --arping-refresh-period='30s'" subsys=daemon level=info msg=" --auto-create-cilium-node-resource='true'" subsys=daemon level=info msg=" --auto-direct-node-routes='false'" subsys=daemon level=info msg=" --bgp-announce-lb-ip='false'" subsys=daemon level=info msg=" --bgp-announce-pod-cidr='false'" subsys=daemon level=info msg=" --bgp-config-path='/var/lib/cilium/bgp/config.yaml'" subsys=daemon level=info msg=" --bpf-auth-map-max='524288'" subsys=daemon level=info msg=" --bpf-ct-global-any-max='262144'" subsys=daemon level=info msg=" --bpf-ct-global-tcp-max='524288'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-fin='10s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-syn='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp-grace='1m0s'" subsys=daemon level=info msg=" --bpf-filter-priority='1'" subsys=daemon level=info msg=" --bpf-fragments-map-max='8192'" subsys=daemon level=info msg=" --bpf-lb-acceleration='disabled'" subsys=daemon level=info msg=" --bpf-lb-affinity-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-algorithm='random'" subsys=daemon level=info msg=" --bpf-lb-dev-ip-addr-inherit=''" subsys=daemon level=info msg=" --bpf-lb-dsr-dispatch='opt'" subsys=daemon level=info msg=" --bpf-lb-dsr-l4-xlate='frontend'" subsys=daemon level=info msg=" --bpf-lb-external-clusterip='false'" subsys=daemon level=info msg=" --bpf-lb-maglev-hash-seed='JLfvgnHc2kaSUFaI'" subsys=daemon level=info msg=" --bpf-lb-maglev-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-maglev-table-size='16381'" subsys=daemon level=info msg=" --bpf-lb-map-max='65536'" subsys=daemon level=info msg=" --bpf-lb-mode='snat'" subsys=daemon level=info msg=" --bpf-lb-rev-nat-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-rss-ipv4-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-rss-ipv6-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-service-backend-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-service-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-sock='false'" subsys=daemon level=info msg=" --bpf-lb-sock-hostns-only='false'" subsys=daemon level=info msg=" --bpf-lb-source-range-map-max='0'" subsys=daemon level=info msg=" --bpf-map-dynamic-size-ratio='0.0025'" subsys=daemon level=info msg=" --bpf-map-event-buffers=''" subsys=daemon level=info msg=" --bpf-nat-global-max='524288'" subsys=daemon level=info msg=" --bpf-neigh-global-max='524288'" subsys=daemon level=info msg=" --bpf-policy-map-full-reconciliation-interval='15m0s'" subsys=daemon level=info msg=" --bpf-policy-map-max='16384'" subsys=daemon level=info msg=" --bpf-root='/sys/fs/bpf'" subsys=daemon level=info msg=" --bpf-sock-rev-map-max='262144'" subsys=daemon level=info msg=" --bypass-ip-availability-upon-restore='false'" subsys=daemon level=info msg=" --certificates-directory='/var/run/cilium/certs'" subsys=daemon level=info msg=" --cflags=''" subsys=daemon level=info msg=" --cgroup-root='/run/cilium/cgroupv2'" subsys=daemon level=info msg=" --cilium-endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --cluster-health-port='4240'" subsys=daemon level=info msg=" --cluster-id='0'" subsys=daemon level=info msg=" --cluster-name='default'" subsys=daemon level=info msg=" --cluster-pool-ipv4-cidr='10.0.0.0/8'" subsys=daemon level=info msg=" --cluster-pool-ipv4-mask-size='24'" subsys=daemon level=info msg=" --clustermesh-config='/var/lib/cilium/clustermesh/'" subsys=daemon level=info msg=" --clustermesh-ip-identities-sync-timeout='1m0s'" subsys=daemon level=info msg=" --cmdref=''" subsys=daemon level=info msg=" --cni-chaining-mode='none'" subsys=daemon level=info msg=" --cni-chaining-target=''" subsys=daemon level=info msg=" --cni-exclusive='true'" subsys=daemon level=info msg=" --cni-external-routing='false'" subsys=daemon level=info msg=" --cni-log-file='/var/run/cilium/cilium-cni.log'" subsys=daemon level=info msg=" --cnp-node-status-gc-interval='0s'" subsys=daemon level=info msg=" --config=''" subsys=daemon level=info msg=" --config-dir='/tmp/cilium/config-map'" subsys=daemon level=info msg=" --config-sources='config-map:kube-system/cilium-config'" subsys=daemon level=info msg=" --conntrack-gc-interval='0s'" subsys=daemon level=info msg=" --conntrack-gc-max-interval='0s'" subsys=daemon level=info msg=" --crd-wait-timeout='5m0s'" subsys=daemon level=info msg=" --custom-cni-conf='false'" subsys=daemon level=info msg=" --datapath-mode='veth'" subsys=daemon level=info msg=" --debug='false'" subsys=daemon level=info msg=" --debug-verbose=''" subsys=daemon level=info msg=" --derive-masquerade-ip-addr-from-device=''" subsys=daemon level=info msg=" --devices=''" subsys=daemon level=info msg=" --direct-routing-device=''" subsys=daemon level=info msg=" --disable-cnp-status-updates='true'" subsys=daemon level=info msg=" --disable-endpoint-crd='false'" subsys=daemon level=info msg=" --disable-envoy-version-check='false'" subsys=daemon level=info msg=" --disable-iptables-feeder-rules=''" subsys=daemon level=info msg=" --dns-max-ips-per-restored-rule='1000'" subsys=daemon level=info msg=" --dns-policy-unload-on-shutdown='false'" subsys=daemon level=info msg=" --dnsproxy-concurrency-limit='0'" subsys=daemon level=info msg=" --dnsproxy-concurrency-processing-grace-period='0s'" subsys=daemon level=info msg=" --dnsproxy-enable-transparent-mode='true'" subsys=daemon level=info msg=" --dnsproxy-lock-count='128'" subsys=daemon level=info msg=" --dnsproxy-lock-timeout='500ms'" subsys=daemon level=info msg=" --egress-gateway-policy-map-max='16384'" subsys=daemon level=info msg=" --egress-gateway-reconciliation-trigger-interval='1s'" subsys=daemon level=info msg=" --egress-masquerade-interfaces=''" subsys=daemon level=info msg=" --egress-multi-home-ip-rule-compat='false'" subsys=daemon level=info msg=" --enable-auto-protect-node-port-range='true'" subsys=daemon level=info msg=" --enable-bandwidth-manager='false'" subsys=daemon level=info msg=" --enable-bbr='false'" subsys=daemon level=info msg=" --enable-bgp-control-plane='false'" subsys=daemon level=info msg=" --enable-bpf-clock-probe='false'" subsys=daemon level=info msg=" --enable-bpf-masquerade='false'" subsys=daemon level=info msg=" --enable-bpf-tproxy='false'" subsys=daemon level=info msg=" --enable-cilium-api-server-access='*'" subsys=daemon level=info msg=" --enable-cilium-endpoint-slice='false'" subsys=daemon level=info msg=" --enable-cilium-health-api-server-access='*'" subsys=daemon level=info msg=" --enable-custom-calls='false'" subsys=daemon level=info msg=" --enable-endpoint-health-checking='true'" subsys=daemon level=info msg=" --enable-endpoint-routes='false'" subsys=daemon level=info msg=" --enable-envoy-config='false'" subsys=daemon level=info msg=" --enable-external-ips='false'" subsys=daemon level=info msg=" --enable-health-check-nodeport='true'" subsys=daemon level=info msg=" --enable-health-checking='true'" subsys=daemon level=info msg=" --enable-high-scale-ipcache='false'" subsys=daemon level=info msg=" --enable-host-firewall='false'" subsys=daemon level=info msg=" --enable-host-legacy-routing='false'" subsys=daemon level=info msg=" --enable-host-port='false'" subsys=daemon level=info msg=" --enable-hubble='false'" subsys=daemon level=info msg=" --enable-hubble-recorder-api='true'" subsys=daemon level=info msg=" --enable-icmp-rules='true'" subsys=daemon level=info msg=" --enable-identity-mark='true'" subsys=daemon level=info msg=" --enable-ip-masq-agent='false'" subsys=daemon level=info msg=" --enable-ipsec='false'" subsys=daemon level=info msg=" --enable-ipsec-key-watcher='true'" subsys=daemon level=info msg=" --enable-ipv4='true'" subsys=daemon level=info msg=" --enable-ipv4-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv4-egress-gateway='false'" subsys=daemon level=info msg=" --enable-ipv4-fragment-tracking='true'" subsys=daemon level=info msg=" --enable-ipv4-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6='false'" subsys=daemon level=info msg=" --enable-ipv6-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv6-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6-ndp='false'" subsys=daemon level=info msg=" --enable-k8s='true'" subsys=daemon level=info msg=" --enable-k8s-api-discovery='false'" subsys=daemon level=info msg=" --enable-k8s-endpoint-slice='true'" subsys=daemon level=info msg=" --enable-k8s-event-handover='false'" subsys=daemon level=info msg=" --enable-k8s-networkpolicy='true'" subsys=daemon level=info msg=" --enable-k8s-terminating-endpoint='true'" subsys=daemon level=info msg=" --enable-l2-announcements='false'" subsys=daemon level=info msg=" --enable-l2-neigh-discovery='true'" subsys=daemon level=info msg=" --enable-l2-pod-announcements='false'" subsys=daemon level=info msg=" --enable-l7-proxy='true'" subsys=daemon level=info msg=" --enable-local-node-route='true'" subsys=daemon level=info msg=" --enable-local-redirect-policy='false'" subsys=daemon level=info msg=" --enable-mke='false'" subsys=daemon level=info msg=" --enable-monitor='true'" subsys=daemon level=info msg=" --enable-nat46x64-gateway='false'" subsys=daemon level=info msg=" --enable-node-port='false'" subsys=daemon level=info msg=" --enable-pmtu-discovery='false'" subsys=daemon level=info msg=" --enable-policy='default'" subsys=daemon level=info msg=" --enable-recorder='false'" subsys=daemon level=info msg=" --enable-remote-node-identity='true'" subsys=daemon level=info msg=" --enable-runtime-device-detection='false'" subsys=daemon level=info msg=" --enable-sctp='false'" subsys=daemon level=info msg=" --enable-service-topology='false'" subsys=daemon level=info msg=" --enable-session-affinity='false'" subsys=daemon level=info msg=" --enable-srv6='false'" subsys=daemon level=info msg=" --enable-stale-cilium-endpoint-cleanup='true'" subsys=daemon level=info msg=" --enable-svc-source-range-check='true'" subsys=daemon level=info msg=" --enable-tracing='false'" subsys=daemon level=info msg=" --enable-unreachable-routes='false'" subsys=daemon level=info msg=" --enable-vtep='false'" subsys=daemon level=info msg=" --enable-well-known-identities='false'" subsys=daemon level=info msg=" --enable-wireguard='false'" subsys=daemon level=info msg=" --enable-wireguard-userspace-fallback='false'" subsys=daemon level=info msg=" --enable-xdp-prefilter='false'" subsys=daemon level=info msg=" --enable-xt-socket-fallback='true'" subsys=daemon level=info msg=" --encrypt-interface=''" subsys=daemon level=info msg=" --encrypt-node='false'" subsys=daemon level=info msg=" --endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --endpoint-queue-size='25'" subsys=daemon level=info msg=" --endpoint-status=''" subsys=daemon level=info msg=" --envoy-config-timeout='2m0s'" subsys=daemon level=info msg=" --envoy-log=''" subsys=daemon level=info msg=" --exclude-local-address=''" subsys=daemon level=info msg=" --external-envoy-proxy='false'" subsys=daemon level=info msg=" --fixed-identity-mapping=''" subsys=daemon level=info msg=" --fqdn-regex-compile-lru-size='1024'" subsys=daemon level=info msg=" --gops-port='9890'" subsys=daemon level=info msg=" --http-403-msg=''" subsys=daemon level=info msg=" --http-idle-timeout='0'" subsys=daemon level=info msg=" --http-max-grpc-timeout='0'" subsys=daemon level=info msg=" --http-normalize-path='true'" subsys=daemon level=info msg=" --http-request-timeout='3600'" subsys=daemon level=info msg=" --http-retry-count='3'" subsys=daemon level=info msg=" --http-retry-timeout='0'" subsys=daemon level=info msg=" --hubble-disable-tls='false'" subsys=daemon level=info msg=" --hubble-event-buffer-capacity='4095'" subsys=daemon level=info msg=" --hubble-event-queue-size='0'" subsys=daemon level=info msg=" --hubble-export-file-compress='false'" subsys=daemon level=info msg=" --hubble-export-file-max-backups='5'" subsys=daemon level=info msg=" --hubble-export-file-max-size-mb='10'" subsys=daemon level=info msg=" --hubble-export-file-path=''" subsys=daemon level=info msg=" --hubble-listen-address=''" subsys=daemon level=info msg=" --hubble-metrics=''" subsys=daemon level=info msg=" --hubble-metrics-server=''" subsys=daemon level=info msg=" --hubble-monitor-events=''" subsys=daemon level=info msg=" --hubble-prefer-ipv6='false'" subsys=daemon level=info msg=" --hubble-recorder-sink-queue-size='1024'" subsys=daemon level=info msg=" --hubble-recorder-storage-path='/var/run/cilium/pcaps'" subsys=daemon level=info msg=" --hubble-skip-unknown-cgroup-ids='true'" subsys=daemon level=info msg=" --hubble-socket-path='/var/run/cilium/hubble.sock'" subsys=daemon level=info msg=" --hubble-tls-cert-file=''" subsys=daemon level=info msg=" --hubble-tls-client-ca-files=''" subsys=daemon level=info msg=" --hubble-tls-key-file=''" subsys=daemon level=info msg=" --identity-allocation-mode='crd'" subsys=daemon level=info msg=" --identity-change-grace-period='5s'" subsys=daemon level=info msg=" --identity-gc-interval='15m0s'" subsys=daemon level=info msg=" --identity-heartbeat-timeout='30m0s'" subsys=daemon level=info msg=" --identity-restore-grace-period='10m0s'" subsys=daemon level=info msg=" --install-egress-gateway-routes='false'" subsys=daemon level=info msg=" --install-iptables-rules='true'" subsys=daemon level=info msg=" --install-no-conntrack-iptables-rules='false'" subsys=daemon level=info msg=" --ip-allocation-timeout='2m0s'" subsys=daemon level=info msg=" --ip-masq-agent-config-path='/etc/config/ip-masq-agent'" subsys=daemon level=info msg=" --ipam='cluster-pool'" subsys=daemon level=info msg=" --ipam-cilium-node-update-rate='15s'" subsys=daemon level=info msg=" --ipam-multi-pool-pre-allocation='default=8'" subsys=daemon level=info msg=" --ipsec-key-file=''" subsys=daemon level=info msg=" --ipsec-key-rotation-duration='5m0s'" subsys=daemon level=info msg=" --iptables-lock-timeout='5s'" subsys=daemon level=info msg=" --iptables-random-fully='false'" subsys=daemon level=info msg=" --ipv4-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv4-node='auto'" subsys=daemon level=info msg=" --ipv4-pod-subnets=''" subsys=daemon level=info msg=" --ipv4-range='auto'" subsys=daemon level=info msg=" --ipv4-service-loopback-address='169.254.42.1'" subsys=daemon level=info msg=" --ipv4-service-range='auto'" subsys=daemon level=info msg=" --ipv6-cluster-alloc-cidr='f00d::/64'" subsys=daemon level=info msg=" --ipv6-mcast-device=''" subsys=daemon level=info msg=" --ipv6-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv6-node='auto'" subsys=daemon level=info msg=" --ipv6-pod-subnets=''" subsys=daemon level=info msg=" --ipv6-range='auto'" subsys=daemon level=info msg=" --ipv6-service-range='auto'" subsys=daemon level=info msg=" --join-cluster='false'" subsys=daemon level=info msg=" --k8s-api-server=''" subsys=daemon level=info msg=" --k8s-client-burst='10'" subsys=daemon level=info msg=" --k8s-client-qps='5'" subsys=daemon level=info msg=" --k8s-heartbeat-timeout='30s'" subsys=daemon level=info msg=" --k8s-kubeconfig-path=''" subsys=daemon level=info msg=" --k8s-namespace='kube-system'" subsys=daemon level=info msg=" --k8s-require-ipv4-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-require-ipv6-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-service-cache-size='128'" subsys=daemon level=info msg=" --k8s-service-proxy-name=''" subsys=daemon level=info msg=" --k8s-sync-timeout='3m0s'" subsys=daemon level=info msg=" --k8s-watcher-endpoint-selector='metadata.name!=kube-scheduler,metadata.name!=kube-controller-manager,metadata.name!=etcd-operator,metadata.name!=gcp-controller-manager'" subsys=daemon level=info msg=" --keep-config='false'" subsys=daemon level=info msg=" --kube-proxy-replacement='disabled'" subsys=daemon level=info msg=" --kube-proxy-replacement-healthz-bind-address=''" subsys=daemon level=info msg=" --kvstore=''" subsys=daemon level=info msg=" --kvstore-connectivity-timeout='2m0s'" subsys=daemon level=info msg=" --kvstore-lease-ttl='15m0s'" subsys=daemon level=info msg=" --kvstore-max-consecutive-quorum-errors='2'" subsys=daemon level=info msg=" --kvstore-opt=''" subsys=daemon level=info msg=" --kvstore-periodic-sync='5m0s'" subsys=daemon level=info msg=" --l2-announcements-lease-duration='15s'" subsys=daemon level=info msg=" --l2-announcements-renew-deadline='5s'" subsys=daemon level=info msg=" --l2-announcements-retry-period='2s'" subsys=daemon level=info msg=" --l2-pod-announcements-interface=''" subsys=daemon level=info msg=" --label-prefix-file=''" subsys=daemon level=info msg=" --labels=''" subsys=daemon level=info msg=" --lib-dir='/var/lib/cilium'" subsys=daemon level=info msg=" --local-max-addr-scope='252'" subsys=daemon level=info msg=" --local-router-ipv4=''" subsys=daemon level=info msg=" --local-router-ipv6=''" subsys=daemon level=info msg=" --log-driver=''" subsys=daemon level=info msg=" --log-opt=''" subsys=daemon level=info msg=" --log-system-load='false'" subsys=daemon level=info msg=" --max-controller-interval='0'" subsys=daemon level=info msg=" --mesh-auth-enabled='true'" subsys=daemon level=info msg=" --mesh-auth-gc-interval='5m0s'" subsys=daemon level=info msg=" --mesh-auth-mutual-listener-port='0'" subsys=daemon level=info msg=" --mesh-auth-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-rotated-identities-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-signal-backoff-duration='1s'" subsys=daemon level=info msg=" --mesh-auth-spiffe-trust-domain='spiffe.cilium'" subsys=daemon level=info msg=" --mesh-auth-spire-admin-socket=''" subsys=daemon level=info msg=" --metrics=''" subsys=daemon level=info msg=" --mke-cgroup-mount=''" subsys=daemon level=info msg=" --monitor-aggregation='medium'" subsys=daemon level=info msg=" --monitor-aggregation-flags='all'" subsys=daemon level=info msg=" --monitor-aggregation-interval='5s'" subsys=daemon level=info msg=" --monitor-queue-size='0'" subsys=daemon level=info msg=" --mtu='0'" subsys=daemon level=info msg=" --node-encryption-opt-out-labels='node-role.kubernetes.io/control-plane'" subsys=daemon level=info msg=" --node-port-acceleration='disabled'" subsys=daemon level=info msg=" --node-port-algorithm='random'" subsys=daemon level=info msg=" --node-port-bind-protection='true'" subsys=daemon level=info msg=" --node-port-mode='snat'" subsys=daemon level=info msg=" --node-port-range='30000,32767'" subsys=daemon level=info msg=" --nodes-gc-interval='5m0s'" subsys=daemon level=info msg=" --operator-api-serve-addr='127.0.0.1:9234'" subsys=daemon level=info msg=" --policy-audit-mode='false'" subsys=daemon level=info msg=" --policy-queue-size='100'" subsys=daemon level=info msg=" --policy-trigger-interval='1s'" subsys=daemon level=info msg=" --pprof='false'" subsys=daemon level=info msg=" --pprof-address='localhost'" subsys=daemon level=info msg=" --pprof-port='6060'" subsys=daemon level=info msg=" --preallocate-bpf-maps='false'" subsys=daemon level=info msg=" --prepend-iptables-chains='true'" subsys=daemon level=info msg=" --procfs='/host/proc'" subsys=daemon level=info msg=" --prometheus-serve-addr=':9962'" subsys=daemon level=info msg=" --proxy-connect-timeout='2'" subsys=daemon level=info msg=" --proxy-gid='1337'" subsys=daemon level=info msg=" --proxy-idle-timeout-seconds='60'" subsys=daemon level=info msg=" --proxy-max-connection-duration-seconds='0'" subsys=daemon level=info msg=" --proxy-max-requests-per-connection='0'" subsys=daemon level=info msg=" --proxy-prometheus-port='9964'" subsys=daemon level=info msg=" --read-cni-conf=''" subsys=daemon level=info msg=" --remove-cilium-node-taints='true'" subsys=daemon level=info msg=" --restore='true'" subsys=daemon level=info msg=" --route-metric='0'" subsys=daemon level=info msg=" --routing-mode='tunnel'" subsys=daemon level=info msg=" --set-cilium-is-up-condition='true'" subsys=daemon level=info msg=" --set-cilium-node-taints='true'" subsys=daemon level=info msg=" --sidecar-istio-proxy-image='cilium/istio_proxy'" subsys=daemon level=info msg=" --single-cluster-route='false'" subsys=daemon level=info msg=" --skip-cnp-status-startup-clean='false'" subsys=daemon level=info msg=" --socket-path='/var/run/cilium/cilium.sock'" subsys=daemon level=info msg=" --srv6-encap-mode='reduced'" subsys=daemon level=info msg=" --state-dir='/var/run/cilium'" subsys=daemon level=info msg=" --synchronize-k8s-nodes='true'" subsys=daemon level=info msg=" --tofqdns-dns-reject-response-code='refused'" subsys=daemon level=info msg=" --tofqdns-enable-dns-compression='true'" subsys=daemon level=info msg=" --tofqdns-endpoint-max-ip-per-hostname='50'" subsys=daemon level=info msg=" --tofqdns-idle-connection-grace-period='0s'" subsys=daemon level=info msg=" --tofqdns-max-deferred-connection-deletes='10000'" subsys=daemon level=info msg=" --tofqdns-min-ttl='0'" subsys=daemon level=info msg=" --tofqdns-pre-cache=''" subsys=daemon level=info msg=" --tofqdns-proxy-port='0'" subsys=daemon level=info msg=" --tofqdns-proxy-response-max-delay='100ms'" subsys=daemon level=info msg=" --trace-payloadlen='128'" subsys=daemon level=info msg=" --trace-sock='true'" subsys=daemon level=info msg=" --tunnel=''" subsys=daemon level=info msg=" --tunnel-port='6082'" subsys=daemon level=info msg=" --tunnel-protocol='geneve'" subsys=daemon level=info msg=" --unmanaged-pod-watcher-interval='15'" subsys=daemon level=info msg=" --use-cilium-internal-ip-for-ipsec='false'" subsys=daemon level=info msg=" --version='false'" subsys=daemon level=info msg=" --vlan-bpf-bypass=''" subsys=daemon level=info msg=" --vtep-cidr=''" subsys=daemon level=info msg=" --vtep-endpoint=''" subsys=daemon level=info msg=" --vtep-mac=''" subsys=daemon level=info msg=" --vtep-mask=''" subsys=daemon level=info msg=" --wireguard-encapsulate='false'" subsys=daemon level=info msg=" --write-cni-conf-when-ready='/host/etc/cni/net.d/05-cilium.conflist'" subsys=daemon level=info msg=" _ _ _" subsys=daemon level=info msg=" ___|_| |_|_ _ _____" subsys=daemon level=info msg="| _| | | | | | |" subsys=daemon level=info msg="|___|_|_|_|___|_|_|_|" subsys=daemon level=info msg="Cilium 1.14.8 cf6e022e 2024-03-13T12:23:35-04:00 go version go1.21.8 linux/amd64" subsys=daemon level=info msg="clang (10.0.0) and kernel (5.15.0) versions: OK!" subsys=linux-datapath level=info msg="linking environment: OK!" subsys=linux-datapath level=info msg="Kernel config file not found: if the agent fails to start, check the system requirements at https://docs.cilium.io/en/stable/operations/system_requirements" subsys=probes level=info msg="Detected mounted BPF filesystem at /sys/fs/bpf" subsys=bpf level=info msg="Mounted cgroupv2 filesystem at /run/cilium/cgroupv2" subsys=cgroups level=info msg="Parsing base label prefixes from default label list" subsys=labels-filter level=info msg="Parsing additional label prefixes from user inputs: []" subsys=labels-filter level=info msg="Final label prefixes to be used for identity evaluation:" subsys=labels-filter level=info msg=" - reserved:.*" subsys=labels-filter level=info msg=" - :io\\.kubernetes\\.pod\\.namespace" subsys=labels-filter level=info msg=" - :io\\.cilium\\.k8s\\.namespace\\.labels" subsys=labels-filter level=info msg=" - :app\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:io\\.kubernetes" subsys=labels-filter level=info msg=" - !:kubernetes\\.io" subsys=labels-filter level=info msg=" - !:.*beta\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:k8s\\.io" subsys=labels-filter level=info msg=" - !:pod-template-generation" subsys=labels-filter level=info msg=" - !:pod-template-hash" subsys=labels-filter level=info msg=" - !:controller-revision-hash" subsys=labels-filter level=info msg=" - !:annotation.*" subsys=labels-filter level=info msg=" - !:etcd_node" subsys=labels-filter level=info msg=Invoked duration="988.72µs" function="pprof.glob..func1 (cell.go:50)" subsys=hive level=info msg=Invoked duration="60.032µs" function="gops.registerGopsHooks (cell.go:38)" subsys=hive level=info msg=Invoked duration="956.318µs" function="metrics.NewRegistry (registry.go:65)" subsys=hive level=info msg=Invoked duration="9.701µs" function="metrics.glob..func1 (cell.go:12)" subsys=hive level=info msg="Spire Delegate API Client is disabled as no socket path is configured" subsys=spire-delegate level=info msg="Mutual authentication handler is disabled as no port is configured" subsys=auth level=info msg=Invoked duration=97.581505ms function="cmd.glob..func4 (daemon_main.go:1607)" subsys=hive level=info msg=Invoked duration="11.79µs" function="gc.registerSignalHandler (cell.go:47)" subsys=hive level=info msg=Invoked duration="16.14µs" function="utime.initUtimeSync (cell.go:29)" subsys=hive level=info msg=Invoked duration="56.712µs" function="agentliveness.newAgentLivenessUpdater (agent_liveness.go:43)" subsys=hive level=info msg=Invoked duration="78.123µs" function="l2responder.NewL2ResponderReconciler (l2responder.go:63)" subsys=hive level=info msg=Invoked duration="86.473µs" function="garp.newGARPProcessor (processor.go:27)" subsys=hive level=info msg=Starting subsys=hive level=info msg="Started gops server" address="127.0.0.1:9890" subsys=gops level=info msg="Start hook executed" duration="393.576µs" function="gops.registerGopsHooks.func1 (cell.go:43)" subsys=hive level=info msg="Start hook executed" duration="1.08µs" function="metrics.NewRegistry.func1 (registry.go:86)" subsys=hive level=info msg="Establishing connection to apiserver" host="https://10.96.0.1:443" subsys=k8s-client level=info msg="Serving prometheus metrics on :9962" subsys=metrics level=info msg="Connected to apiserver" subsys=k8s-client level=info msg="Start hook executed" duration=10.552818ms function="client.(*compositeClientset).onStart" subsys=hive level=info msg="Start hook executed" duration=6.183981ms function="authmap.newAuthMap.func1 (cell.go:27)" subsys=hive level=info msg="Start hook executed" duration="34.592µs" function="configmap.newMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="38.962µs" function="signalmap.newMap.func1 (cell.go:44)" subsys=hive level=info msg="Start hook executed" duration="239.94µs" function="nodemap.newNodeMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="108.765µs" function="eventsmap.newEventsMap.func1 (cell.go:35)" subsys=hive level=info msg="Start hook executed" duration="70.253µs" function="*cni.cniConfigManager.Start" subsys=hive level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Wrote CNI configuration file to /host/etc/cni/net.d/05-cilium.conflist" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Start hook executed" duration=45.6372ms function="datapath.newDatapath.func1 (cells.go:113)" subsys=hive level=info msg="Restored 0 node IDs from the BPF map" subsys=linux-datapath level=info msg="Start hook executed" duration="112.785µs" function="datapath.newDatapath.func2 (cells.go:126)" subsys=hive level=info msg="Start hook executed" duration="4.371µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Node].Start" subsys=hive level=info msg="Start hook executed" duration="3.83µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNode].Start" subsys=hive level=info msg="Using autogenerated IPv4 allocation range" subsys=node v4Prefix=10.170.0.0/16 level=info msg="no local ciliumnode found, will not restore cilium internal ips from k8s" subsys=daemon level=info msg="Start hook executed" duration=102.834939ms function="node.NewLocalNodeStore.func1 (local_node_store.go:76)" subsys=hive level=info msg="Start hook executed" duration="3.2µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration=100.958512ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration="18.91µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Using discoveryv1.EndpointSlice" subsys=k8s level=info msg="Start hook executed" duration=200.669113ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Start hook executed" duration="3.92µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Pod].Start" subsys=hive level=info msg="Start hook executed" duration="1.53µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Namespace].Start" subsys=hive level=info msg="Start hook executed" duration="1.88µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="1.5µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumClusterwideNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="1.1µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumCIDRGroup].Start" subsys=hive level=info msg="Start hook executed" duration="23.821µs" function="endpointmanager.newDefaultEndpointManager.func1 (cell.go:203)" subsys=hive level=info msg="Start hook executed" duration="13.471µs" function="cmd.newPolicyTrifecta.func1 (policy.go:135)" subsys=hive level=info msg="Start hook executed" duration="40.531µs" function="*manager.manager.Start" subsys=hive level=info msg="Serving cilium node monitor v1.2 API at unix:///var/run/cilium/monitor1_2.sock" subsys=monitor-agent level=info msg="Start hook executed" duration="343.994µs" function="agent.newMonitorAgent.func1 (cell.go:61)" subsys=hive level=info msg="Start hook executed" duration="2.33µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumL2AnnouncementPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="7.52µs" function="*job.group.Start" subsys=hive level=info msg="Start hook executed" duration="321.923µs" function="proxy.newProxy.func1 (cell.go:55)" subsys=hive level=info msg="Envoy: Starting xDS gRPC server listening on /var/run/cilium/envoy/sockets/xds.sock" subsys=envoy-manager level=info msg="Start hook executed" duration="571.144µs" function="signal.provideSignalManager.func1 (cell.go:25)" subsys=hive level=info msg="Datapath signal listener running" subsys=signal level=info msg="Start hook executed" duration=1.325633ms function="auth.registerAuthManager.func1 (cell.go:109)" subsys=hive level=info msg="Start hook executed" duration="5.57µs" function="auth.registerGCJobs.func1 (cell.go:158)" subsys=hive level=info msg="Start hook executed" duration="21.92µs" function="*job.group.Start" subsys=hive level=warning msg="Deprecated value for --kube-proxy-replacement: disabled (use either \"true\", or \"false\")" subsys=daemon level=info msg="Auto-disabling \"enable-node-port\", \"enable-external-ips\", \"bpf-lb-sock\", \"enable-host-port\" features and falling back to \"enable-host-legacy-routing\"" subsys=daemon level=info msg="Inheriting MTU from external network interface" device=ens3 ipAddr=199.19.213.170 mtu=1500 subsys=mtu level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_ipcache, recreating and re-pinning map cilium_ipcache" file-path=/sys/fs/bpf/tc/globals/cilium_ipcache name=cilium_ipcache subsys=bpf level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_tunnel_map, recreating and re-pinning map cilium_tunnel_map" file-path=/sys/fs/bpf/tc/globals/cilium_tunnel_map name=cilium_tunnel_map subsys=bpf level=info msg="Restored services from maps" failedServices=0 restoredServices=0 subsys=service level=info msg="Restored backends from maps" failedBackends=0 restoredBackends=0 skippedBackends=0 subsys=service level=info msg="Reading old endpoints..." subsys=daemon level=info msg="No old endpoints found." subsys=daemon level=info msg="Waiting until all Cilium CRDs are available" subsys=k8s level=info msg="All Cilium CRDs have been found and are available" subsys=k8s level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=info msg="Successfully created CiliumNode resource" subsys=nodediscovery level=warning msg="Unable to create CiliumNode resource, will retry" error="ciliumnodes.cilium.io \"instance\" already exists" subsys=nodediscovery level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=warning msg="Waiting for k8s node information" error="required IPv4 PodCIDR not available" subsys=k8s level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=info msg="Received own node information from API server" ipAddr.ipv4=199.19.213.170 ipAddr.ipv6="" k8sNodeIP=199.19.213.170 labels="map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:]" nodeName=instance subsys=k8s v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="k8s mode: Allowing localhost to reach local endpoints" subsys=daemon level=info msg="Detected devices" devices="[]" subsys=linux-datapath level=info msg="Enabling k8s event listener" subsys=k8s-watcher level=info msg="Removing stale endpoint interfaces" subsys=daemon level=info msg="Waiting until local node addressing before starting watchers depending on it" subsys=k8s-watcher level=info msg="Skipping kvstore configuration" subsys=daemon level=info msg="Initializing node addressing" subsys=daemon level=info msg="Initializing cluster-pool IPAM" subsys=ipam v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="Restoring endpoints..." subsys=daemon level=info msg="Endpoints restored" failed=0 restored=0 subsys=daemon level=info msg="Addressing information:" subsys=daemon level=info msg=" Cluster-Name: default" subsys=daemon level=info msg=" Cluster-ID: 0" subsys=daemon level=info msg=" Local node-name: instance" subsys=daemon level=info msg=" Node-IPv6: " subsys=daemon level=info msg=" External-Node IPv4: 199.19.213.170" subsys=daemon level=info msg=" Internal-Node IPv4: 10.0.0.247" subsys=daemon level=info msg=" IPv4 allocation prefix: 10.0.0.0/24" subsys=daemon level=info msg=" Loopback IPv4: 169.254.42.1" subsys=daemon level=info msg=" Local IPv4 addresses:" subsys=daemon level=info msg=" - 199.19.213.170" subsys=daemon level=info msg=" - 172.17.0.100" subsys=daemon level=info msg="Node updated" clusterName=default nodeName=instance subsys=nodemanager level=info msg="Adding local node to cluster" node="{instance default [{InternalIP 199.19.213.170} {CiliumInternalIP 10.0.0.247}] 10.0.0.0/24 [] [] 10.0.0.194 0 local 0 map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:] map[] 1 }" subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Waiting until all pre-existing resources have been received" subsys=k8s-watcher level=info msg="Initializing identity allocator" subsys=identity-cache level=info msg="Allocating identities between range" cluster-id=0 max=65535 min=256 subsys=identity-cache level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.core.bpf_jit_enable sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.all.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.fib_multipath_use_neigh sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.unprivileged_bpf_disabled sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.timer_migration sysParamValue=0 level=info msg="Setting up BPF datapath" bpfClockSource=ktime bpfInsnSet="" subsys=datapath-loader level=info msg="Iptables rules installed" subsys=iptables level=info msg="Adding new proxy port rules for cilium-dns-egress:45817" id=cilium-dns-egress subsys=proxy level=info msg="Iptables proxy rules installed" subsys=iptables level=info msg="Start hook executed" duration=2.373228945s function="cmd.newDaemonPromise.func1 (daemon_main.go:1663)" subsys=hive level=info msg="Initializing daemon" subsys=daemon level=info msg="Validating configured node address ranges" subsys=daemon level=info msg="Start hook executed" duration="19.811µs" function="utime.initUtimeSync.func1 (cell.go:33)" subsys=hive level=info msg="Start hook executed" duration="30.231µs" function="*job.group.Start" subsys=hive level=info msg="Starting IP identity watcher" subsys=ipcache level=info msg="Starting connection tracking garbage collector" subsys=daemon level=info msg="Start hook executed" duration="35.051µs" function="l2respondermap.newMap.func1 (l2_responder_map4.go:44)" subsys=hive level=info msg="Start hook executed" duration="5.98µs" function="*job.group.Start" subsys=hive level=info msg="Initial scan of connection tracking completed" subsys=ct-gc level=info msg="Regenerating restored endpoints" numRestored=0 subsys=daemon level=info msg="Creating host endpoint" subsys=daemon level=info msg="Finished regenerating restored endpoints" regenerated=0 subsys=daemon total=0 level=info msg="Deleted orphan backends" orphanBackends=0 subsys=service level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1024 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1024 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1024 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Launching Cilium health daemon" subsys=daemon level=info msg="Launching Cilium health endpoint" subsys=daemon level=info msg="Started healthz status API server" address="127.0.0.1:9879" subsys=daemon level=info msg="Processing queued endpoint deletion requests from /var/run/cilium/deleteQueue" subsys=daemon level=info msg="processing 0 queued deletion requests" subsys=daemon level=info msg="Initializing Cilium API" subsys=daemon level=info msg="Daemon initialization completed" bootstrapTime=3.45001472s subsys=daemon level=info msg="Hubble server is disabled" subsys=hubble level=info msg="Serving cilium API at unix:///var/run/cilium/cilium.sock" subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.112 9bf6290f-65bc-4ef7-a466-d57640e4a114 default }" containerID=48f7cb30614e39df8ebb28b8a10638a444d5033677ec727443c4383b8a23f246 datapathConfiguration="&{false false false false false }" interface=lxc2f1e6c3a5ee8 k8sPodName=kube-system/coredns-7c96b6546b-mwstq labels="[]" subsys=daemon sync-build=true level=info msg="Create endpoint request" addressing="&{10.0.0.77 054a1c07-0d44-4be2-853c-ab48b43e39af default }" containerID=6ec1950e09b6628a651ea936f8ded81221be83abc1283602a41c2ce3492ad13d datapathConfiguration="&{false false false false false }" interface=lxc3623e20653e9 k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-cltds labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=48f7cb3061 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1299 ipv4=10.0.0.112 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-mwstq subsys=endpoint level=info msg="New endpoint" containerID=6ec1950e09 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2667 ipv4=10.0.0.77 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-cltds subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6ec1950e09 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2667 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=7eb72b6b-bd13-4ad2-8e26-557c4418ec86,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=7eb72b6b-bd13-4ad2-8e26-557c4418ec86,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.77 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-cltds subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="Resolving identity labels (blocking)" containerID=48f7cb3061 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1299 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.112 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-mwstq subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=6ec1950e09 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2667 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.77 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-cltds line=611 subsys=endpoint level=info msg="Invalid state transition skipped" containerID=48f7cb3061 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1299 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.112 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-mwstq line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=certgen;k8s:batch.kubernetes.io/controller-uid=7eb72b6b-bd13-4ad2-8e26-557c4418ec86;k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen;k8s:controller-uid=7eb72b6b-bd13-4ad2-8e26-557c4418ec86;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;k8s:job-name=envoy-gateway-gateway-helm-certgen;" subsys=allocator level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:kube-system]" subsys=crd-allocator level=info msg="Identity of endpoint changed" containerID=6ec1950e09 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2667 identity=6240 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=7eb72b6b-bd13-4ad2-8e26-557c4418ec86,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=7eb72b6b-bd13-4ad2-8e26-557c4418ec86,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.77 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-cltds oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6ec1950e09 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2667 identity=6240 ipv4=10.0.0.77 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-cltds subsys=endpoint level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=coredns;k8s:io.kubernetes.pod.namespace=kube-system;k8s:k8s-app=kube-dns;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=48f7cb3061 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1299 identity=38511 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.112 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-mwstq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=48f7cb3061 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1299 identity=38511 ipv4=10.0.0.112 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-mwstq subsys=endpoint level=info msg="Compiled new BPF template" BPFCompilationTime=298.835656ms file-path=/var/run/cilium/state/templates/81423de38daf76e9632928bd1324b3c280e346b43738be2ffb632c919b4df8a0/bpf_host.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1024 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1379 ipv4=10.0.0.194 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1379 identityLabels="reserved:health" ipv4=10.0.0.194 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1379 identity=4 identityLabels="reserved:health" ipv4=10.0.0.194 ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Compiled new BPF template" BPFCompilationTime=1.107106647s file-path=/var/run/cilium/state/templates/19c726b39dea22654ae29c2074b9afb195cdf02040f1e617194e1127f3bfcd72/bpf_lxc.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID=48f7cb3061 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1299 identity=38511 ipv4=10.0.0.112 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-mwstq subsys=endpoint level=info msg="Successful endpoint creation" containerID=48f7cb3061 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1299 identity=38511 ipv4=10.0.0.112 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-mwstq subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1379 identity=4 ipv4=10.0.0.194 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6ec1950e09 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2667 identity=6240 ipv4=10.0.0.77 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-cltds subsys=endpoint level=info msg="Successful endpoint creation" containerID=6ec1950e09 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2667 identity=6240 ipv4=10.0.0.77 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-cltds subsys=daemon level=info msg="Serving cilium health API at unix:///var/run/cilium/health.sock" subsys=health-server level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=6ec1950e09 endpointID=2667 k8sNamespace=envoy-gateway-system k8sPodName=envoy-gateway-gateway-helm-certgen-cltds subsys=daemon level=info msg="Releasing key" key="[k8s:app=certgen k8s:batch.kubernetes.io/controller-uid=7eb72b6b-bd13-4ad2-8e26-557c4418ec86 k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen k8s:controller-uid=7eb72b6b-bd13-4ad2-8e26-557c4418ec86 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen k8s:io.kubernetes.pod.namespace=envoy-gateway-system k8s:job-name=envoy-gateway-gateway-helm-certgen]" subsys=allocator level=info msg="Removed endpoint" containerID=6ec1950e09 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2667 identity=6240 ipv4=10.0.0.77 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-cltds subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.45 0832f32f-60d5-4e1c-aec2-011c029177a2 default }" containerID=6ac21bcc1e29efb5172978c900d8291247c7d9a23d1e8b23c0500b329dc2e052 datapathConfiguration="&{false false false false false }" interface=lxc819d7376d62f k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-tl5s6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6ac21bcc1e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=92 ipv4=10.0.0.45 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-tl5s6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6ac21bcc1e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=92 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.45 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-tl5s6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=envoy-gateway;k8s:app.kubernetes.io/name=gateway-helm;k8s:control-plane=envoy-gateway;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6ac21bcc1e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=92 identity=29279 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.45 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-tl5s6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6ac21bcc1e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=92 identity=29279 ipv4=10.0.0.45 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-tl5s6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6ac21bcc1e datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=92 identity=29279 ipv4=10.0.0.45 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-tl5s6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=6ac21bcc1e datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=92 identity=29279 ipv4=10.0.0.45 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-tl5s6 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1024 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_01024 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_01024 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_01024 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_01024:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00003 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00003 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00003 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00003:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1024 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.175 37c6fe90-0281-4d71-905c-cf52767d1bf1 default }" containerID=9f7ff8c3e8e6ef09ce0c47eb29ce104a63aaa0623473159808521ed9c700c804 datapathConfiguration="&{false false false false false }" interface=lxc189174d18aa6 k8sPodName=kube-system/coredns-67659f764b-sl684 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9f7ff8c3e8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2607 ipv4=10.0.0.175 ipv6= k8sPodName=kube-system/coredns-67659f764b-sl684 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9f7ff8c3e8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2607 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.175 ipv6= k8sPodName=kube-system/coredns-67659f764b-sl684 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=9f7ff8c3e8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2607 identity=38511 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.175 ipv6= k8sPodName=kube-system/coredns-67659f764b-sl684 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9f7ff8c3e8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2607 identity=38511 ipv4=10.0.0.175 ipv6= k8sPodName=kube-system/coredns-67659f764b-sl684 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9f7ff8c3e8 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2607 identity=38511 ipv4=10.0.0.175 ipv6= k8sPodName=kube-system/coredns-67659f764b-sl684 subsys=endpoint level=info msg="Successful endpoint creation" containerID=9f7ff8c3e8 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2607 identity=38511 ipv4=10.0.0.175 ipv6= k8sPodName=kube-system/coredns-67659f764b-sl684 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.38 afc06192-3eb5-45d3-a6ee-f1286aaff487 default }" containerID=c4435c5cb0673c1d81fe85f36bf3f13bcb981a3726dd8c0f07f02b1963e64484 datapathConfiguration="&{false false false false false }" interface=lxc320189db88dc k8sPodName=kube-system/coredns-67659f764b-xq9jg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c4435c5cb0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3690 ipv4=10.0.0.38 ipv6= k8sPodName=kube-system/coredns-67659f764b-xq9jg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c4435c5cb0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3690 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.38 ipv6= k8sPodName=kube-system/coredns-67659f764b-xq9jg subsys=endpoint level=info msg="Identity of endpoint changed" containerID=c4435c5cb0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3690 identity=38511 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.38 ipv6= k8sPodName=kube-system/coredns-67659f764b-xq9jg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c4435c5cb0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3690 identity=38511 ipv4=10.0.0.38 ipv6= k8sPodName=kube-system/coredns-67659f764b-xq9jg subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c4435c5cb0 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3690 identity=38511 ipv4=10.0.0.38 ipv6= k8sPodName=kube-system/coredns-67659f764b-xq9jg subsys=endpoint level=info msg="Successful endpoint creation" containerID=c4435c5cb0 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3690 identity=38511 ipv4=10.0.0.38 ipv6= k8sPodName=kube-system/coredns-67659f764b-xq9jg subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.124 1472cf6b-8cc5-49d4-9b6a-8d60bd6995db default }" containerID=86b24e4618d98917588967288d4ac82f9c40681d0ea27fa9e2ac45ab9ab618aa datapathConfiguration="&{false false false false false }" interface=lxcb0f068427c25 k8sPodName=local-path-storage/local-path-provisioner-679c578f5-x9s8x labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=86b24e4618 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2132 ipv4=10.0.0.124 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-x9s8x subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=86b24e4618 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2132 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.124 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-x9s8x subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=local-path-provisioner;k8s:app.kubernetes.io/name=local-path-provisioner;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=86b24e4618 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2132 identity=54009 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.124 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-x9s8x oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=86b24e4618 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2132 identity=54009 ipv4=10.0.0.124 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-x9s8x subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=86b24e4618 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2132 identity=54009 ipv4=10.0.0.124 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-x9s8x subsys=endpoint level=info msg="Successful endpoint creation" containerID=86b24e4618 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2132 identity=54009 ipv4=10.0.0.124 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-x9s8x subsys=daemon level=info msg="Delete endpoint request" containerID=48f7cb3061 endpointID=1299 k8sNamespace=kube-system k8sPodName=coredns-7c96b6546b-mwstq subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=coredns k8s:io.kubernetes.pod.namespace=kube-system k8s:k8s-app=kube-dns]" subsys=allocator level=info msg="Removed endpoint" containerID=48f7cb3061 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1299 identity=38511 ipv4=10.0.0.112 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-mwstq subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.5 da9893ff-f28e-47fb-befc-5cb5d06891ae default }" containerID=d9c709896dbd178a73e226a2fed0996dab21b056f5ada52bc307ddaf978eb2c5 datapathConfiguration="&{false false false false false }" interface=lxc68d740aa0733 k8sPodName=cert-manager/cert-manager-cainjector-84f45b698d-f6bdf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d9c709896d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=573 ipv4=10.0.0.5 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-84f45b698d-f6bdf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d9c709896d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=573 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.5 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-84f45b698d-f6bdf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=cainjector;k8s:app.kubernetes.io/component=cainjector;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cainjector;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d9c709896d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=573 identity=29793 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.5 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-84f45b698d-f6bdf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d9c709896d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=573 identity=29793 ipv4=10.0.0.5 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-84f45b698d-f6bdf subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=d9c709896d datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=573 identity=29793 ipv4=10.0.0.5 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-84f45b698d-f6bdf subsys=endpoint level=info msg="Successful endpoint creation" containerID=d9c709896d datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=573 identity=29793 ipv4=10.0.0.5 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-84f45b698d-f6bdf subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.59 d7e486c0-acf6-44d6-8524-f6be3f687f52 default }" containerID=298715c38ffcbb503e58e9181182f0b34f51c5b5aab0b1e8d833c88e0248af29 datapathConfiguration="&{false false false false false }" interface=lxcbff632e4ef62 k8sPodName=cert-manager/cert-manager-75969b45cf-wtk7b labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=298715c38f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=816 ipv4=10.0.0.59 ipv6= k8sPodName=cert-manager/cert-manager-75969b45cf-wtk7b subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=298715c38f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=816 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.59 ipv6= k8sPodName=cert-manager/cert-manager-75969b45cf-wtk7b subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.109 ace301f3-7346-4bff-8d62-cbc2515c8e5b default }" containerID=37fbba65153bc1d93798a3d61c3e9395a39263f2a0adc26e99e60a355753a3cd datapathConfiguration="&{false false false false false }" interface=lxcd158cc67d45b k8sPodName=cert-manager/cert-manager-webhook-9997c64fc-9r776 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=37fbba6515 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=42 ipv4=10.0.0.109 ipv6= k8sPodName=cert-manager/cert-manager-webhook-9997c64fc-9r776 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=37fbba6515 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=42 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.109 ipv6= k8sPodName=cert-manager/cert-manager-webhook-9997c64fc-9r776 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=cert-manager;k8s:app.kubernetes.io/component=controller;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cert-manager;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=298715c38f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=816 identity=24269 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.59 ipv6= k8sPodName=cert-manager/cert-manager-75969b45cf-wtk7b oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=298715c38f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=816 identity=24269 ipv4=10.0.0.59 ipv6= k8sPodName=cert-manager/cert-manager-75969b45cf-wtk7b subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=webhook;k8s:app.kubernetes.io/component=webhook;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=webhook;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=37fbba6515 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=42 identity=27846 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.109 ipv6= k8sPodName=cert-manager/cert-manager-webhook-9997c64fc-9r776 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=37fbba6515 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=42 identity=27846 ipv4=10.0.0.109 ipv6= k8sPodName=cert-manager/cert-manager-webhook-9997c64fc-9r776 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=298715c38f datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=816 identity=24269 ipv4=10.0.0.59 ipv6= k8sPodName=cert-manager/cert-manager-75969b45cf-wtk7b subsys=endpoint level=info msg="Successful endpoint creation" containerID=298715c38f datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=816 identity=24269 ipv4=10.0.0.59 ipv6= k8sPodName=cert-manager/cert-manager-75969b45cf-wtk7b subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=37fbba6515 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=42 identity=27846 ipv4=10.0.0.109 ipv6= k8sPodName=cert-manager/cert-manager-webhook-9997c64fc-9r776 subsys=endpoint level=info msg="Successful endpoint creation" containerID=37fbba6515 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=42 identity=27846 ipv4=10.0.0.109 ipv6= k8sPodName=cert-manager/cert-manager-webhook-9997c64fc-9r776 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.209 b1392525-73e0-431c-b7b2-6099a25f582a default }" containerID=f12afa5976634fb4976afa42ee1efa7675abbbf88afa0b77f46954ba8d9fe997 datapathConfiguration="&{false false false false false }" interface=lxc380c5cf53ea1 k8sPodName=cert-manager/cert-manager-startupapicheck-7xwmm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f12afa5976 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=186 ipv4=10.0.0.209 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-7xwmm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f12afa5976 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=186 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=ef2b12b7-4e27-4fa7-9a1c-1824ea9b4588,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=ef2b12b7-4e27-4fa7-9a1c-1824ea9b4588,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.209 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-7xwmm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=startupapicheck;k8s:app.kubernetes.io/component=startupapicheck;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=startupapicheck;k8s:app.kubernetes.io/version=v1.11.5;k8s:batch.kubernetes.io/controller-uid=ef2b12b7-4e27-4fa7-9a1c-1824ea9b4588;k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck;k8s:controller-uid=ef2b12b7-4e27-4fa7-9a1c-1824ea9b4588;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck;k8s:io.kubernetes.pod.namespace=cert-manager;k8s:job-name=cert-manager-startupapicheck;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f12afa5976 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=186 identity=14267 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=ef2b12b7-4e27-4fa7-9a1c-1824ea9b4588,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=ef2b12b7-4e27-4fa7-9a1c-1824ea9b4588,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.209 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-7xwmm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f12afa5976 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=186 identity=14267 ipv4=10.0.0.209 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-7xwmm subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f12afa5976 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=186 identity=14267 ipv4=10.0.0.209 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-7xwmm subsys=endpoint level=info msg="Successful endpoint creation" containerID=f12afa5976 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=186 identity=14267 ipv4=10.0.0.209 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-7xwmm subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=f12afa5976 endpointID=186 k8sNamespace=cert-manager k8sPodName=cert-manager-startupapicheck-7xwmm subsys=daemon level=info msg="Releasing key" key="[k8s:app=startupapicheck k8s:app.kubernetes.io/component=startupapicheck k8s:app.kubernetes.io/instance=cert-manager k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=startupapicheck k8s:app.kubernetes.io/version=v1.11.5 k8s:batch.kubernetes.io/controller-uid=ef2b12b7-4e27-4fa7-9a1c-1824ea9b4588 k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck k8s:controller-uid=ef2b12b7-4e27-4fa7-9a1c-1824ea9b4588 k8s:helm.sh/chart=cert-manager-v1.11.5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager k8s:io.cilium.k8s.namespace.labels.name=cert-manager k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck k8s:io.kubernetes.pod.namespace=cert-manager k8s:job-name=cert-manager-startupapicheck]" subsys=allocator level=info msg="Removed endpoint" containerID=f12afa5976 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=186 identity=14267 ipv4=10.0.0.209 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-7xwmm subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.245 50cd2804-f91f-49a5-883a-5fa7f69b42f7 default }" containerID=c3be1e2de6481010f4e064c19d0b80a67c257fe3a6e8863b7b7c7f038e948a0e datapathConfiguration="&{false false false false false }" interface=lxca9700134648e k8sPodName=ingress-nginx/ingress-nginx-admission-create-sfjm4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c3be1e2de6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=66 ipv4=10.0.0.245 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-sfjm4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c3be1e2de6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=66 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=b5dcfda4-cf62-4dad-8c7f-167583a13b93,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=b5dcfda4-cf62-4dad-8c7f-167583a13b93,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.245 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-sfjm4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=b5dcfda4-cf62-4dad-8c7f-167583a13b93;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create;k8s:controller-uid=b5dcfda4-cf62-4dad-8c7f-167583a13b93;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-create;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=c3be1e2de6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=66 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.245 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-sfjm4 line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=c3be1e2de6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=66 identity=29084 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=b5dcfda4-cf62-4dad-8c7f-167583a13b93,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=b5dcfda4-cf62-4dad-8c7f-167583a13b93,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.245 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-sfjm4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c3be1e2de6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=66 identity=29084 ipv4=10.0.0.245 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-sfjm4 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c3be1e2de6 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=66 identity=29084 ipv4=10.0.0.245 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-sfjm4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=c3be1e2de6 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=66 identity=29084 ipv4=10.0.0.245 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-sfjm4 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=c3be1e2de6 endpointID=66 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-create-sfjm4 subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=b5dcfda4-cf62-4dad-8c7f-167583a13b93 k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create k8s:controller-uid=b5dcfda4-cf62-4dad-8c7f-167583a13b93 k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-create]" subsys=allocator level=info msg="Removed endpoint" containerID=c3be1e2de6 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=66 identity=29084 ipv4=10.0.0.245 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-sfjm4 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.158 aa77a426-066f-4a39-be4d-a0c2ae323f21 default }" containerID=8fb09df802860e0373bf6cfc5c5e363a26201ff1744230a0b2ae4d9bcd2c3ffa datapathConfiguration="&{false false false false false }" interface=lxc3bf576ffdd3b k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-v9qrb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8fb09df802 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1630 ipv4=10.0.0.158 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-v9qrb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8fb09df802 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1630 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.158 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-v9qrb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=default-backend;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend;k8s:io.kubernetes.pod.namespace=ingress-nginx;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=8fb09df802 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1630 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.158 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-v9qrb line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=8fb09df802 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1630 identity=51667 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.158 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-v9qrb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8fb09df802 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1630 identity=51667 ipv4=10.0.0.158 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-v9qrb subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8fb09df802 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1630 identity=51667 ipv4=10.0.0.158 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-v9qrb subsys=endpoint level=info msg="Successful endpoint creation" containerID=8fb09df802 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1630 identity=51667 ipv4=10.0.0.158 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-v9qrb subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.244 57c60ff1-4f59-4f38-aad6-41e512b72177 default }" containerID=9f1e4a430a56f1c78183045178405bb79b672acb463e2ce2e37f5000196c7df7 datapathConfiguration="&{false false false false false }" interface=lxcf311b9eed5f7 k8sPodName=ingress-nginx/ingress-nginx-admission-patch-5z695 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9f1e4a430a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=293 ipv4=10.0.0.244 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-5z695 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9f1e4a430a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=293 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=946c3260-aa85-4195-80d4-bfe457d58f8c,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=946c3260-aa85-4195-80d4-bfe457d58f8c,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.244 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-5z695 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=946c3260-aa85-4195-80d4-bfe457d58f8c;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch;k8s:controller-uid=946c3260-aa85-4195-80d4-bfe457d58f8c;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-patch;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9f1e4a430a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=293 identity=54653 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=946c3260-aa85-4195-80d4-bfe457d58f8c,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=946c3260-aa85-4195-80d4-bfe457d58f8c,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.244 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-5z695 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9f1e4a430a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=293 identity=54653 ipv4=10.0.0.244 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-5z695 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9f1e4a430a datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=293 identity=54653 ipv4=10.0.0.244 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-5z695 subsys=endpoint level=info msg="Successful endpoint creation" containerID=9f1e4a430a datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=293 identity=54653 ipv4=10.0.0.244 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-5z695 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=9f1e4a430a endpointID=293 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-patch-5z695 subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=946c3260-aa85-4195-80d4-bfe457d58f8c k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch k8s:controller-uid=946c3260-aa85-4195-80d4-bfe457d58f8c k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-patch]" subsys=allocator level=info msg="Removed endpoint" containerID=9f1e4a430a datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=293 identity=54653 ipv4=10.0.0.244 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-5z695 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.197 833308b9-91e2-40e5-b7f3-ecb191f70969 default }" containerID=7dcf9b555e8a3d338a4771efd344cdb3d05d1b5b5bd26a84f2b2f282efc5536b datapathConfiguration="&{false false false false false }" interface=lxc399657b0d0db k8sPodName=openstack/rabbitmq-cluster-operator-6b5c8b7cdc-bhtt7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7dcf9b555e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1051 ipv4=10.0.0.197 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-6b5c8b7cdc-bhtt7 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.136 83d6c2e4-fed5-4450-a387-f1a6604a2472 default }" containerID=5243e66658b2f4996a37cf2c29fdd5f2f3b3377a5b475d9961d11614bfbb87fc datapathConfiguration="&{false false false false false }" interface=lxc7187e9c962cd k8sPodName=openstack/rabbitmq-messaging-topology-operator-69996b7f7f-9jh54 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5243e66658 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2154 ipv4=10.0.0.136 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-69996b7f7f-9jh54 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7dcf9b555e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1051 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:helm.sh/chart=rabbitmq-cluster-operator-2.6.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.197 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-6b5c8b7cdc-bhtt7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Resolving identity labels (blocking)" containerID=5243e66658 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2154 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:helm.sh/chart=rabbitmq-cluster-operator-2.6.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.136 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-69996b7f7f-9jh54 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:helm.sh/chart=rabbitmq-cluster-operator-2.6.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=7dcf9b555e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1051 identity=63125 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:helm.sh/chart=rabbitmq-cluster-operator-2.6.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.197 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-6b5c8b7cdc-bhtt7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7dcf9b555e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1051 identity=63125 ipv4=10.0.0.197 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-6b5c8b7cdc-bhtt7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Invalid state transition skipped" containerID=5243e66658 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2154 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.136 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-69996b7f7f-9jh54 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=messaging-topology-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:helm.sh/chart=rabbitmq-cluster-operator-2.6.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5243e66658 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2154 identity=21049 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:helm.sh/chart=rabbitmq-cluster-operator-2.6.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.136 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-69996b7f7f-9jh54 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5243e66658 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2154 identity=21049 ipv4=10.0.0.136 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-69996b7f7f-9jh54 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7dcf9b555e datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1051 identity=63125 ipv4=10.0.0.197 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-6b5c8b7cdc-bhtt7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=7dcf9b555e datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1051 identity=63125 ipv4=10.0.0.197 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-6b5c8b7cdc-bhtt7 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=5243e66658 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2154 identity=21049 ipv4=10.0.0.136 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-69996b7f7f-9jh54 subsys=endpoint level=info msg="Successful endpoint creation" containerID=5243e66658 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2154 identity=21049 ipv4=10.0.0.136 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-69996b7f7f-9jh54 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.105 91364ca5-6212-4fd4-b43c-b05774c6c349 default }" containerID=d077220061b4b11bd2d9756c01d299436f81ffc6f99289ace22f8f3ce1f0fc4a datapathConfiguration="&{false false false false false }" interface=lxc119b786e5c5d k8sPodName=openstack/pxc-operator-59d66cbc78-ktsh5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d077220061 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3298 ipv4=10.0.0.105 ipv6= k8sPodName=openstack/pxc-operator-59d66cbc78-ktsh5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d077220061 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3298 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.105 ipv6= k8sPodName=openstack/pxc-operator-59d66cbc78-ktsh5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=operator;k8s:app.kubernetes.io/instance=pxc-operator;k8s:app.kubernetes.io/name=pxc-operator;k8s:app.kubernetes.io/part-of=pxc-operator;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d077220061 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3298 identity=15380 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.105 ipv6= k8sPodName=openstack/pxc-operator-59d66cbc78-ktsh5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d077220061 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3298 identity=15380 ipv4=10.0.0.105 ipv6= k8sPodName=openstack/pxc-operator-59d66cbc78-ktsh5 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d077220061 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3298 identity=15380 ipv4=10.0.0.105 ipv6= k8sPodName=openstack/pxc-operator-59d66cbc78-ktsh5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=d077220061 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3298 identity=15380 ipv4=10.0.0.105 ipv6= k8sPodName=openstack/pxc-operator-59d66cbc78-ktsh5 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.76 c795de42-3339-4e95-90d4-3540bc1cb701 default }" containerID=b5c4df3b0f63b8d7c23f4bd49b8b34b68b4dbe59f3d144816003a29cfbeebf73 datapathConfiguration="&{false false false false false }" interface=lxca0de75d6da85 k8sPodName=openstack/percona-xtradb-haproxy-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b5c4df3b0f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3124 ipv4=10.0.0.76 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b5c4df3b0f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3124 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.76 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=b5c4df3b0f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3124 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.76 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=haproxy;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b5c4df3b0f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3124 identity=64948 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.76 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b5c4df3b0f datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3124 identity=64948 ipv4=10.0.0.76 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.122 753933d7-a544-43e6-9b76-6977220ccd39 default }" containerID=b7b3bcf052ad25412c9bca98d2c1a08b6af4f53ac30f540035168a490438d8f8 datapathConfiguration="&{false false false false false }" interface=lxc7c19e0df4256 k8sPodName=local-path-storage/helper-pod-create-pvc-f81590fc-ce44-4e73-8656-b03c3e19ed67 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b7b3bcf052 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=851 ipv4=10.0.0.122 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f81590fc-ce44-4e73-8656-b03c3e19ed67 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b7b3bcf052 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=851 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.122 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f81590fc-ce44-4e73-8656-b03c3e19ed67 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b7b3bcf052 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=851 identity=17016 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.122 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f81590fc-ce44-4e73-8656-b03c3e19ed67 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b7b3bcf052 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=851 identity=17016 ipv4=10.0.0.122 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f81590fc-ce44-4e73-8656-b03c3e19ed67 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b5c4df3b0f datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3124 identity=64948 ipv4=10.0.0.76 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=b5c4df3b0f datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3124 identity=64948 ipv4=10.0.0.76 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=b7b3bcf052 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=851 identity=17016 ipv4=10.0.0.122 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f81590fc-ce44-4e73-8656-b03c3e19ed67 subsys=endpoint level=info msg="Successful endpoint creation" containerID=b7b3bcf052 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=851 identity=17016 ipv4=10.0.0.122 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f81590fc-ce44-4e73-8656-b03c3e19ed67 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=b7b3bcf052 endpointID=851 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-f81590fc-ce44-4e73-8656-b03c3e19ed67 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=b7b3bcf052 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=851 identity=17016 ipv4=10.0.0.122 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f81590fc-ce44-4e73-8656-b03c3e19ed67 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.178 a8fe0c45-70ef-4bc1-8c93-129f37675261 default }" containerID=007edc49b5988dd280a07abfcf7d2dae495fd1241e4300be089ee2a577c81f56 datapathConfiguration="&{false false false false false }" interface=lxc33c58b7f9493 k8sPodName=openstack/percona-xtradb-pxc-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=007edc49b5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3449 ipv4=10.0.0.178 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=007edc49b5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3449 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.178 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=pxc;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=007edc49b5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3449 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.178 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=007edc49b5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3449 identity=11432 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.178 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=007edc49b5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3449 identity=11432 ipv4=10.0.0.178 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=007edc49b5 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3449 identity=11432 ipv4=10.0.0.178 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=007edc49b5 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3449 identity=11432 ipv4=10.0.0.178 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.64 e0e99861-dfd7-4468-a28d-b9e31c6b9e89 default }" containerID=cdd24a832078a99ded8fcf2c8c2e6ace31017880668fabebf303355bb3b2e761 datapathConfiguration="&{false false false false false }" interface=lxcbba4f37e428c k8sPodName=openstack/memcached-memcached-c47d949f5-whzbd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=cdd24a8320 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=336 ipv4=10.0.0.64 ipv6= k8sPodName=openstack/memcached-memcached-c47d949f5-whzbd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=cdd24a8320 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=336 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.64 ipv6= k8sPodName=openstack/memcached-memcached-c47d949f5-whzbd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=cdd24a8320 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=336 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.64 ipv6= k8sPodName=openstack/memcached-memcached-c47d949f5-whzbd line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=memcached;k8s:component=server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=memcached;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=cdd24a8320 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=336 identity=2151 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.64 ipv6= k8sPodName=openstack/memcached-memcached-c47d949f5-whzbd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=cdd24a8320 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=336 identity=2151 ipv4=10.0.0.64 ipv6= k8sPodName=openstack/memcached-memcached-c47d949f5-whzbd subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=cdd24a8320 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=336 identity=2151 ipv4=10.0.0.64 ipv6= k8sPodName=openstack/memcached-memcached-c47d949f5-whzbd subsys=endpoint level=info msg="Successful endpoint creation" containerID=cdd24a8320 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=336 identity=2151 ipv4=10.0.0.64 ipv6= k8sPodName=openstack/memcached-memcached-c47d949f5-whzbd subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.96 73b723c9-77c8-4686-ba08-77def05a33c1 default }" containerID=1c24349f4d2eee96acefe26e93106e35ab0e60bdff4ce77c09282f744626ec07 datapathConfiguration="&{false false false false false }" interface=lxcc2841fe20538 k8sPodName=auth-system/keycloak-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1c24349f4d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2675 ipv4=10.0.0.96 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1c24349f4d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2675 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-16.0.3,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.96 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:auth-system k8s:io.cilium.k8s.namespace.labels.name:auth-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=keycloak;k8s:app.kubernetes.io/instance=keycloak;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=keycloak;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=keycloak-16.0.3;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system;k8s:io.cilium.k8s.namespace.labels.name=auth-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keycloak;k8s:io.kubernetes.pod.namespace=auth-system;k8s:statefulset.kubernetes.io/pod-name=keycloak-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1c24349f4d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2675 identity=38529 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-16.0.3,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.96 ipv6= k8sPodName=auth-system/keycloak-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=1c24349f4d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2675 identity=38529 ipv4=10.0.0.96 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1c24349f4d datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2675 identity=38529 ipv4=10.0.0.96 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=1c24349f4d datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2675 identity=38529 ipv4=10.0.0.96 ipv6= k8sPodName=auth-system/keycloak-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.53 0af65a60-32ca-47d9-9dbe-e74ab5542877 default }" containerID=ea7475af70ea16e80dc28979956b6cf8eeea51e4be70d31fcb81b9081fcf2722 datapathConfiguration="&{false false false false false }" interface=lxcdce8ae26c525 k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-px6gl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ea7475af70 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1262 ipv4=10.0.0.53 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-px6gl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ea7475af70 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1262 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.53 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-px6gl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:secretgen-controller]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=ea7475af70 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1262 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.53 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-px6gl line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=secretgen-controller;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa;k8s:io.kubernetes.pod.namespace=secretgen-controller;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ea7475af70 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1262 identity=23907 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.53 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-px6gl oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ea7475af70 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1262 identity=23907 ipv4=10.0.0.53 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-px6gl subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ea7475af70 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1262 identity=23907 ipv4=10.0.0.53 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-px6gl subsys=endpoint level=info msg="Successful endpoint creation" containerID=ea7475af70 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1262 identity=23907 ipv4=10.0.0.53 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-px6gl subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.66 f491fc35-85d9-4941-a2d3-37008a006adb default }" containerID=fe3b97d0272045f24fcbce7ed558b44675acb4f9d95dcbe308fe1ae3dd1fcc3d datapathConfiguration="&{false false false false false }" interface=lxc10c18f618194 k8sPodName=monitoring/kube-prometheus-stack-admission-create-5l4kg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fe3b97d027 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2528 ipv4=10.0.0.66 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-5l4kg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fe3b97d027 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2528 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=58.1.3,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=5b23eb18-f78b-4c93-84db-acb2c7d68a47,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-58.1.3,k8s:controller-uid=5b23eb18-f78b-4c93-84db-acb2c7d68a47,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.66 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-5l4kg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-create;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=58.1.3;k8s:batch.kubernetes.io/controller-uid=5b23eb18-f78b-4c93-84db-acb2c7d68a47;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create;k8s:chart=kube-prometheus-stack-58.1.3;k8s:controller-uid=5b23eb18-f78b-4c93-84db-acb2c7d68a47;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-create;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fe3b97d027 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2528 identity=55027 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=58.1.3,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=5b23eb18-f78b-4c93-84db-acb2c7d68a47,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-58.1.3,k8s:controller-uid=5b23eb18-f78b-4c93-84db-acb2c7d68a47,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.66 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-5l4kg oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=fe3b97d027 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2528 identity=55027 ipv4=10.0.0.66 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-5l4kg subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=fe3b97d027 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2528 identity=55027 ipv4=10.0.0.66 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-5l4kg subsys=endpoint level=info msg="Successful endpoint creation" containerID=fe3b97d027 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2528 identity=55027 ipv4=10.0.0.66 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-5l4kg subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=fe3b97d027 endpointID=2528 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-create-5l4kg subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-create k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=58.1.3 k8s:batch.kubernetes.io/controller-uid=5b23eb18-f78b-4c93-84db-acb2c7d68a47 k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create k8s:chart=kube-prometheus-stack-58.1.3 k8s:controller-uid=5b23eb18-f78b-4c93-84db-acb2c7d68a47 k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-create k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=fe3b97d027 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2528 identity=55027 ipv4=10.0.0.66 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-5l4kg subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.61 fab8a575-3ecb-426b-9c60-54300594b503 default }" containerID=829b1cc0be51b82b2cd4fd8bd904edf0998a97ffd2c3e8c06377148cf6be4470 datapathConfiguration="&{false false false false false }" interface=lxc112383311f95 k8sPodName=monitoring/kube-prometheus-stack-grafana-5544b9f695-fm6wd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=829b1cc0be datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=971 ipv4=10.0.0.61 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-5544b9f695-fm6wd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=829b1cc0be datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=971 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.61 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-5544b9f695-fm6wd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/name=grafana;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=829b1cc0be datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=971 identity=3969 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.61 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-5544b9f695-fm6wd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=829b1cc0be datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=971 identity=3969 ipv4=10.0.0.61 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-5544b9f695-fm6wd subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.157 aaa21e0a-4242-4f04-9f4e-13564ca85027 default }" containerID=ddbe23b943f54f6149acc4ce1e175a66ee684038f4514266db28d79f1d8eac67 datapathConfiguration="&{false false false false false }" interface=lxc284520670405 k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-c8fb6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ddbe23b943 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=824 ipv4=10.0.0.157 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-c8fb6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ddbe23b943 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=824 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.18.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.157 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-c8fb6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.79 79cab381-0048-45a7-8e53-7b21d2d54e8c default }" containerID=a5c4760e8260c281f869ff465125cbec89d3f00f26772934d6b4cf90d3437689 datapathConfiguration="&{false false false false false }" interface=lxcaead43c6db54 k8sPodName=monitoring/kube-prometheus-stack-operator-cc88b86d6-gskvh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a5c4760e82 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=874 ipv4=10.0.0.79 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cc88b86d6-gskvh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a5c4760e82 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=874 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=58.1.3,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-58.1.3,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.79 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cc88b86d6-gskvh subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=metrics;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-state-metrics;k8s:app.kubernetes.io/part-of=kube-state-metrics;k8s:app.kubernetes.io/version=2.12.0;k8s:helm.sh/chart=kube-state-metrics-5.18.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ddbe23b943 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=824 identity=9261 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.18.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.157 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-c8fb6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ddbe23b943 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=824 identity=9261 ipv4=10.0.0.157 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-c8fb6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-operator;k8s:app.kubernetes.io/component=prometheus-operator;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=58.1.3;k8s:chart=kube-prometheus-stack-58.1.3;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a5c4760e82 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=874 identity=4109 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=58.1.3,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-58.1.3,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.79 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cc88b86d6-gskvh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a5c4760e82 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=874 identity=4109 ipv4=10.0.0.79 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cc88b86d6-gskvh subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=829b1cc0be datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=971 identity=3969 ipv4=10.0.0.61 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-5544b9f695-fm6wd subsys=endpoint level=info msg="Successful endpoint creation" containerID=829b1cc0be datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=971 identity=3969 ipv4=10.0.0.61 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-5544b9f695-fm6wd subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=ddbe23b943 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=824 identity=9261 ipv4=10.0.0.157 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-c8fb6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=ddbe23b943 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=824 identity=9261 ipv4=10.0.0.157 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-c8fb6 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=a5c4760e82 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=874 identity=4109 ipv4=10.0.0.79 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cc88b86d6-gskvh subsys=endpoint level=info msg="Successful endpoint creation" containerID=a5c4760e82 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=874 identity=4109 ipv4=10.0.0.79 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cc88b86d6-gskvh subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.209 b9e99940-e0e5-40df-bfd7-b6c451a8e46c default }" containerID=adf9d717801b5bbb02a19647f51602f2885dca12f2bd281c0219f969039404d2 datapathConfiguration="&{false false false false false }" interface=lxcc9c18325cc3e k8sPodName=monitoring/kube-prometheus-stack-admission-patch-sbstd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=adf9d71780 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1905 ipv4=10.0.0.209 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-sbstd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=adf9d71780 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1905 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=58.1.3,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=f86faa6a-d535-4df3-bef5-66e3f6f2dba8,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-58.1.3,k8s:controller-uid=f86faa6a-d535-4df3-bef5-66e3f6f2dba8,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.209 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-sbstd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-patch;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=58.1.3;k8s:batch.kubernetes.io/controller-uid=f86faa6a-d535-4df3-bef5-66e3f6f2dba8;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch;k8s:chart=kube-prometheus-stack-58.1.3;k8s:controller-uid=f86faa6a-d535-4df3-bef5-66e3f6f2dba8;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-patch;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=adf9d71780 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1905 identity=34222 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=58.1.3,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=f86faa6a-d535-4df3-bef5-66e3f6f2dba8,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-58.1.3,k8s:controller-uid=f86faa6a-d535-4df3-bef5-66e3f6f2dba8,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.209 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-sbstd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=adf9d71780 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1905 identity=34222 ipv4=10.0.0.209 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-sbstd subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=adf9d71780 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1905 identity=34222 ipv4=10.0.0.209 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-sbstd subsys=endpoint level=info msg="Successful endpoint creation" containerID=adf9d71780 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1905 identity=34222 ipv4=10.0.0.209 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-sbstd subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=adf9d71780 endpointID=1905 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-patch-sbstd subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-patch k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=58.1.3 k8s:batch.kubernetes.io/controller-uid=f86faa6a-d535-4df3-bef5-66e3f6f2dba8 k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch k8s:chart=kube-prometheus-stack-58.1.3 k8s:controller-uid=f86faa6a-d535-4df3-bef5-66e3f6f2dba8 k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-patch k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=adf9d71780 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1905 identity=34222 ipv4=10.0.0.209 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-sbstd subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.248 b6bfb36b-bbcb-4c9b-a2c2-dbd26c3b1d9f default }" containerID=5e514301c8253dbc580529f066ecaf412b1339ccfd2e63f6dc6f4e784dc9e942 datapathConfiguration="&{false false false false false }" interface=lxc90c81df82a13 k8sPodName=local-path-storage/helper-pod-create-pvc-8dd59bac-7d80-44c9-92a6-f63b1c7d8363 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5e514301c8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1236 ipv4=10.0.0.248 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8dd59bac-7d80-44c9-92a6-f63b1c7d8363 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5e514301c8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1236 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.248 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8dd59bac-7d80-44c9-92a6-f63b1c7d8363 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5e514301c8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1236 identity=17016 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.248 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8dd59bac-7d80-44c9-92a6-f63b1c7d8363 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5e514301c8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1236 identity=17016 ipv4=10.0.0.248 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8dd59bac-7d80-44c9-92a6-f63b1c7d8363 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5e514301c8 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1236 identity=17016 ipv4=10.0.0.248 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8dd59bac-7d80-44c9-92a6-f63b1c7d8363 subsys=endpoint level=info msg="Successful endpoint creation" containerID=5e514301c8 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1236 identity=17016 ipv4=10.0.0.248 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8dd59bac-7d80-44c9-92a6-f63b1c7d8363 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.176 8143424e-8bf5-4518-a767-4ecd7cf83319 default }" containerID=278a8424791d8906bd89ddea807b69a49100fa93e86a44ebd8049ab10874c10a datapathConfiguration="&{false false false false false }" interface=lxcfa87943166ab k8sPodName=local-path-storage/helper-pod-create-pvc-d6103991-3513-4e69-983d-7590007e1d88 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=278a842479 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1719 ipv4=10.0.0.176 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d6103991-3513-4e69-983d-7590007e1d88 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=278a842479 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1719 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.176 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d6103991-3513-4e69-983d-7590007e1d88 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=278a842479 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1719 identity=17016 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.176 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d6103991-3513-4e69-983d-7590007e1d88 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=278a842479 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1719 identity=17016 ipv4=10.0.0.176 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d6103991-3513-4e69-983d-7590007e1d88 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=278a842479 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1719 identity=17016 ipv4=10.0.0.176 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d6103991-3513-4e69-983d-7590007e1d88 subsys=endpoint level=info msg="Successful endpoint creation" containerID=278a842479 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1719 identity=17016 ipv4=10.0.0.176 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d6103991-3513-4e69-983d-7590007e1d88 subsys=daemon level=info msg="Delete endpoint request" containerID=5e514301c8 endpointID=1236 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-8dd59bac-7d80-44c9-92a6-f63b1c7d8363 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Delete endpoint request" containerID=278a842479 endpointID=1719 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-d6103991-3513-4e69-983d-7590007e1d88 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=5e514301c8 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1236 identity=17016 ipv4=10.0.0.248 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8dd59bac-7d80-44c9-92a6-f63b1c7d8363 subsys=endpoint level=info msg="Removed endpoint" containerID=278a842479 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1719 identity=17016 ipv4=10.0.0.176 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d6103991-3513-4e69-983d-7590007e1d88 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.213 e4eca533-a1ee-4d3f-9f20-9dd5c2e0766b default }" containerID=6d5762db7291aa0dcd02395cde056f022020824c16ff52373b8c2e0e0cd7860d datapathConfiguration="&{false false false false false }" interface=lxc86ed135d4ea6 k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6d5762db72 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3259 ipv4=10.0.0.213 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6d5762db72 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3259 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.213 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=6d5762db72 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3259 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.213 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=prometheus;k8s:app.kubernetes.io/version=2.51.2;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus;k8s:io.kubernetes.pod.namespace=monitoring;k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus;k8s:operator.prometheus.io/shard=0;k8s:prometheus=kube-prometheus-stack-prometheus;k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6d5762db72 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3259 identity=40745 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.213 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6d5762db72 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3259 identity=40745 ipv4=10.0.0.213 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6d5762db72 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3259 identity=40745 ipv4=10.0.0.213 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=6d5762db72 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3259 identity=40745 ipv4=10.0.0.213 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.108 d5556fb6-78d2-4d30-956d-4c221f58c069 default }" containerID=21845204336f6bad026fb1be9ef301be182d059ccd81966efe533b289ca1ede4 datapathConfiguration="&{false false false false false }" interface=lxc3ec69c9465b3 k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2184520433 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1464 ipv4=10.0.0.108 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2184520433 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1464 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.108 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:alertmanager=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=alertmanager;k8s:app.kubernetes.io/version=0.27.0;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2184520433 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1464 identity=15551 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.108 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2184520433 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1464 identity=15551 ipv4=10.0.0.108 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2184520433 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1464 identity=15551 ipv4=10.0.0.108 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=2184520433 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1464 identity=15551 ipv4=10.0.0.108 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.10 994dd2cf-f1ec-4640-be6f-cf9cce18959b default }" containerID=0d10146e40610bb99f42cafa101900a723eeb5fd051e11f3497c2c4a240aa15b datapathConfiguration="&{false false false false false }" interface=lxc3f3b5716afcf k8sPodName=local-path-storage/helper-pod-create-pvc-737b36b9-d99b-4b63-a296-6b755e4d1365 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0d10146e40 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1718 ipv4=10.0.0.10 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-737b36b9-d99b-4b63-a296-6b755e4d1365 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0d10146e40 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1718 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.10 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-737b36b9-d99b-4b63-a296-6b755e4d1365 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0d10146e40 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1718 identity=17016 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.10 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-737b36b9-d99b-4b63-a296-6b755e4d1365 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0d10146e40 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1718 identity=17016 ipv4=10.0.0.10 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-737b36b9-d99b-4b63-a296-6b755e4d1365 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0d10146e40 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1718 identity=17016 ipv4=10.0.0.10 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-737b36b9-d99b-4b63-a296-6b755e4d1365 subsys=endpoint level=info msg="Successful endpoint creation" containerID=0d10146e40 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1718 identity=17016 ipv4=10.0.0.10 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-737b36b9-d99b-4b63-a296-6b755e4d1365 subsys=daemon level=info msg="Delete endpoint request" containerID=0d10146e40 endpointID=1718 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-737b36b9-d99b-4b63-a296-6b755e4d1365 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=0d10146e40 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1718 identity=17016 ipv4=10.0.0.10 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-737b36b9-d99b-4b63-a296-6b755e4d1365 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.216 97f747e4-50d9-4fca-a719-6334ada011ca default }" containerID=f3e9b94f90d899d9da3d7477b3cd9cc80e189018228a1791a0302316b64f60c4 datapathConfiguration="&{false false false false false }" interface=lxc877e21f80ae6 k8sPodName=openstack/rabbitmq-keystone-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f3e9b94f90 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2261 ipv4=10.0.0.216 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f3e9b94f90 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2261 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.216 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=f3e9b94f90 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2261 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.216 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-keystone;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f3e9b94f90 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2261 identity=26736 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.216 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f3e9b94f90 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2261 identity=26736 ipv4=10.0.0.216 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f3e9b94f90 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2261 identity=26736 ipv4=10.0.0.216 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f3e9b94f90 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2261 identity=26736 ipv4=10.0.0.216 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.251 5c28cde2-d5ef-4594-9c24-076e9192b001 default }" containerID=b7a7f297c3f5b90e145876c0451993e5ab67bc1d13121b90af8226fca855aac1 datapathConfiguration="&{false false false false false }" interface=lxc8c4254b04aa6 k8sPodName=openstack/keystone-api-799995948b-sztc9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b7a7f297c3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1157 ipv4=10.0.0.251 ipv6= k8sPodName=openstack/keystone-api-799995948b-sztc9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b7a7f297c3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1157 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.251 ipv6= k8sPodName=openstack/keystone-api-799995948b-sztc9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b7a7f297c3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1157 identity=41258 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.251 ipv6= k8sPodName=openstack/keystone-api-799995948b-sztc9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b7a7f297c3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1157 identity=41258 ipv4=10.0.0.251 ipv6= k8sPodName=openstack/keystone-api-799995948b-sztc9 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.68 672f6f9c-0c85-46b9-bad8-0b22f1cc57cb default }" containerID=7df42054c867593bc6884d352c1b1be2aa4142ddc9463c4edefd209c89f729cb datapathConfiguration="&{false false false false false }" interface=lxcee5b97276f59 k8sPodName=openstack/keystone-credential-setup-pr5m9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7df42054c8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2922 ipv4=10.0.0.68 ipv6= k8sPodName=openstack/keystone-credential-setup-pr5m9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7df42054c8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2922 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=3b8f8930-24cc-4466-bb3e-f0f9059a3350,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=3b8f8930-24cc-4466-bb3e-f0f9059a3350,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.68 ipv6= k8sPodName=openstack/keystone-credential-setup-pr5m9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=3b8f8930-24cc-4466-bb3e-f0f9059a3350;k8s:batch.kubernetes.io/job-name=keystone-credential-setup;k8s:component=credential-setup;k8s:controller-uid=3b8f8930-24cc-4466-bb3e-f0f9059a3350;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-credential-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7df42054c8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2922 identity=41769 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=3b8f8930-24cc-4466-bb3e-f0f9059a3350,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=3b8f8930-24cc-4466-bb3e-f0f9059a3350,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.68 ipv6= k8sPodName=openstack/keystone-credential-setup-pr5m9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7df42054c8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2922 identity=41769 ipv4=10.0.0.68 ipv6= k8sPodName=openstack/keystone-credential-setup-pr5m9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b7a7f297c3 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1157 identity=41258 ipv4=10.0.0.251 ipv6= k8sPodName=openstack/keystone-api-799995948b-sztc9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=b7a7f297c3 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1157 identity=41258 ipv4=10.0.0.251 ipv6= k8sPodName=openstack/keystone-api-799995948b-sztc9 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=7df42054c8 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2922 identity=41769 ipv4=10.0.0.68 ipv6= k8sPodName=openstack/keystone-credential-setup-pr5m9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=7df42054c8 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2922 identity=41769 ipv4=10.0.0.68 ipv6= k8sPodName=openstack/keystone-credential-setup-pr5m9 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=7df42054c8 endpointID=2922 k8sNamespace=openstack k8sPodName=keystone-credential-setup-pr5m9 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=3b8f8930-24cc-4466-bb3e-f0f9059a3350 k8s:batch.kubernetes.io/job-name=keystone-credential-setup k8s:component=credential-setup k8s:controller-uid=3b8f8930-24cc-4466-bb3e-f0f9059a3350 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-credential-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=7df42054c8 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2922 identity=41769 ipv4=10.0.0.68 ipv6= k8sPodName=openstack/keystone-credential-setup-pr5m9 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.206 d70d65a7-a5ff-485d-b574-17924342aeda default }" containerID=31c8d3cd7505c0f72cf2d5ce3a6a763c48a4f56cd24834bf11b8863914d35e93 datapathConfiguration="&{false false false false false }" interface=lxc8c05ad5d8ed9 k8sPodName=openstack/keystone-db-init-lxs88 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=31c8d3cd75 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3847 ipv4=10.0.0.206 ipv6= k8sPodName=openstack/keystone-db-init-lxs88 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=31c8d3cd75 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3847 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=7dfa364f-c029-4ddc-bca4-96d8361ae7f9,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=7dfa364f-c029-4ddc-bca4-96d8361ae7f9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.206 ipv6= k8sPodName=openstack/keystone-db-init-lxs88 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=31c8d3cd75 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3847 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.206 ipv6= k8sPodName=openstack/keystone-db-init-lxs88 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=7dfa364f-c029-4ddc-bca4-96d8361ae7f9;k8s:batch.kubernetes.io/job-name=keystone-db-init;k8s:component=db-init;k8s:controller-uid=7dfa364f-c029-4ddc-bca4-96d8361ae7f9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=31c8d3cd75 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3847 identity=1329 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=7dfa364f-c029-4ddc-bca4-96d8361ae7f9,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=7dfa364f-c029-4ddc-bca4-96d8361ae7f9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.206 ipv6= k8sPodName=openstack/keystone-db-init-lxs88 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=31c8d3cd75 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3847 identity=1329 ipv4=10.0.0.206 ipv6= k8sPodName=openstack/keystone-db-init-lxs88 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=31c8d3cd75 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3847 identity=1329 ipv4=10.0.0.206 ipv6= k8sPodName=openstack/keystone-db-init-lxs88 subsys=endpoint level=info msg="Successful endpoint creation" containerID=31c8d3cd75 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3847 identity=1329 ipv4=10.0.0.206 ipv6= k8sPodName=openstack/keystone-db-init-lxs88 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=31c8d3cd75 endpointID=3847 k8sNamespace=openstack k8sPodName=keystone-db-init-lxs88 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=7dfa364f-c029-4ddc-bca4-96d8361ae7f9 k8s:batch.kubernetes.io/job-name=keystone-db-init k8s:component=db-init k8s:controller-uid=7dfa364f-c029-4ddc-bca4-96d8361ae7f9 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=31c8d3cd75 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3847 identity=1329 ipv4=10.0.0.206 ipv6= k8sPodName=openstack/keystone-db-init-lxs88 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.89 f5844230-27e4-4425-b85a-24477e02fdd7 default }" containerID=c621e3fb964cb7ace29cb38dc3e5842980a18bd4852d2e83b9e54184b3841dad datapathConfiguration="&{false false false false false }" interface=lxcbdce7880b377 k8sPodName=openstack/keystone-fernet-setup-8vjf9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c621e3fb96 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2741 ipv4=10.0.0.89 ipv6= k8sPodName=openstack/keystone-fernet-setup-8vjf9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c621e3fb96 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2741 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=21adde5f-4dac-48bb-b4a5-7437ced8e49c,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=21adde5f-4dac-48bb-b4a5-7437ced8e49c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.89 ipv6= k8sPodName=openstack/keystone-fernet-setup-8vjf9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=c621e3fb96 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2741 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.89 ipv6= k8sPodName=openstack/keystone-fernet-setup-8vjf9 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=21adde5f-4dac-48bb-b4a5-7437ced8e49c;k8s:batch.kubernetes.io/job-name=keystone-fernet-setup;k8s:component=fernet-setup;k8s:controller-uid=21adde5f-4dac-48bb-b4a5-7437ced8e49c;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-fernet-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c621e3fb96 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2741 identity=18444 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=21adde5f-4dac-48bb-b4a5-7437ced8e49c,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=21adde5f-4dac-48bb-b4a5-7437ced8e49c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.89 ipv6= k8sPodName=openstack/keystone-fernet-setup-8vjf9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c621e3fb96 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2741 identity=18444 ipv4=10.0.0.89 ipv6= k8sPodName=openstack/keystone-fernet-setup-8vjf9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c621e3fb96 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2741 identity=18444 ipv4=10.0.0.89 ipv6= k8sPodName=openstack/keystone-fernet-setup-8vjf9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=c621e3fb96 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2741 identity=18444 ipv4=10.0.0.89 ipv6= k8sPodName=openstack/keystone-fernet-setup-8vjf9 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=c621e3fb96 endpointID=2741 k8sNamespace=openstack k8sPodName=keystone-fernet-setup-8vjf9 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=21adde5f-4dac-48bb-b4a5-7437ced8e49c k8s:batch.kubernetes.io/job-name=keystone-fernet-setup k8s:component=fernet-setup k8s:controller-uid=21adde5f-4dac-48bb-b4a5-7437ced8e49c k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-fernet-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=c621e3fb96 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2741 identity=18444 ipv4=10.0.0.89 ipv6= k8sPodName=openstack/keystone-fernet-setup-8vjf9 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.139 8bc1492d-05f2-418b-bee6-078f44d5028c default }" containerID=a1dce279d414c0179e76b561e846243b327a283789ac589fe94427e3967b1710 datapathConfiguration="&{false false false false false }" interface=lxc36d400431d6d k8sPodName=openstack/keystone-db-sync-8ddwn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a1dce279d4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1248 ipv4=10.0.0.139 ipv6= k8sPodName=openstack/keystone-db-sync-8ddwn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a1dce279d4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1248 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=85cb401d-492f-4ca3-9c88-cb3ad6632a39,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=85cb401d-492f-4ca3-9c88-cb3ad6632a39,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.139 ipv6= k8sPodName=openstack/keystone-db-sync-8ddwn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=85cb401d-492f-4ca3-9c88-cb3ad6632a39;k8s:batch.kubernetes.io/job-name=keystone-db-sync;k8s:component=db-sync;k8s:controller-uid=85cb401d-492f-4ca3-9c88-cb3ad6632a39;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-sync;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a1dce279d4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1248 identity=22974 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=85cb401d-492f-4ca3-9c88-cb3ad6632a39,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=85cb401d-492f-4ca3-9c88-cb3ad6632a39,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.139 ipv6= k8sPodName=openstack/keystone-db-sync-8ddwn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a1dce279d4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1248 identity=22974 ipv4=10.0.0.139 ipv6= k8sPodName=openstack/keystone-db-sync-8ddwn subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a1dce279d4 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1248 identity=22974 ipv4=10.0.0.139 ipv6= k8sPodName=openstack/keystone-db-sync-8ddwn subsys=endpoint level=info msg="Successful endpoint creation" containerID=a1dce279d4 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1248 identity=22974 ipv4=10.0.0.139 ipv6= k8sPodName=openstack/keystone-db-sync-8ddwn subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=a1dce279d4 endpointID=1248 k8sNamespace=openstack k8sPodName=keystone-db-sync-8ddwn subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=85cb401d-492f-4ca3-9c88-cb3ad6632a39 k8s:batch.kubernetes.io/job-name=keystone-db-sync k8s:component=db-sync k8s:controller-uid=85cb401d-492f-4ca3-9c88-cb3ad6632a39 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-sync k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=a1dce279d4 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1248 identity=22974 ipv4=10.0.0.139 ipv6= k8sPodName=openstack/keystone-db-sync-8ddwn subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.66 371575c6-6c23-46c7-98e6-f5a30fea4c23 default }" containerID=3898f3eb55da63d802e8299cab5f78078c1c064961ff1537096d77daf040f532 datapathConfiguration="&{false false false false false }" interface=lxc5763087a7bb5 k8sPodName=openstack/keystone-rabbit-init-vrth6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3898f3eb55 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=706 ipv4=10.0.0.66 ipv6= k8sPodName=openstack/keystone-rabbit-init-vrth6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3898f3eb55 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=706 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=9f892538-9e90-442e-ad95-5b20fd141ada,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=9f892538-9e90-442e-ad95-5b20fd141ada,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.66 ipv6= k8sPodName=openstack/keystone-rabbit-init-vrth6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=9f892538-9e90-442e-ad95-5b20fd141ada;k8s:batch.kubernetes.io/job-name=keystone-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=9f892538-9e90-442e-ad95-5b20fd141ada;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-rabbit-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3898f3eb55 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=706 identity=24367 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=9f892538-9e90-442e-ad95-5b20fd141ada,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=9f892538-9e90-442e-ad95-5b20fd141ada,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.66 ipv6= k8sPodName=openstack/keystone-rabbit-init-vrth6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3898f3eb55 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=706 identity=24367 ipv4=10.0.0.66 ipv6= k8sPodName=openstack/keystone-rabbit-init-vrth6 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=3898f3eb55 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=706 identity=24367 ipv4=10.0.0.66 ipv6= k8sPodName=openstack/keystone-rabbit-init-vrth6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=3898f3eb55 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=706 identity=24367 ipv4=10.0.0.66 ipv6= k8sPodName=openstack/keystone-rabbit-init-vrth6 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=3898f3eb55 endpointID=706 k8sNamespace=openstack k8sPodName=keystone-rabbit-init-vrth6 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=9f892538-9e90-442e-ad95-5b20fd141ada k8s:batch.kubernetes.io/job-name=keystone-rabbit-init k8s:component=rabbit-init k8s:controller-uid=9f892538-9e90-442e-ad95-5b20fd141ada k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-rabbit-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=3898f3eb55 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=706 identity=24367 ipv4=10.0.0.66 ipv6= k8sPodName=openstack/keystone-rabbit-init-vrth6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.121 ec3de1e6-3504-4ec8-8dfe-743d5ff1ad3b default }" containerID=37381e547bc7c2466c813853617a77a208423183fc42243f9777116b0f12cf43 datapathConfiguration="&{false false false false false }" interface=lxc259100403690 k8sPodName=openstack/keystone-domain-manage-tjs8f labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=37381e547b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3082 ipv4=10.0.0.121 ipv6= k8sPodName=openstack/keystone-domain-manage-tjs8f subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=37381e547b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3082 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=5245d111-44a1-4f6d-bd32-b53c840d73c2,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=5245d111-44a1-4f6d-bd32-b53c840d73c2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.121 ipv6= k8sPodName=openstack/keystone-domain-manage-tjs8f subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=5245d111-44a1-4f6d-bd32-b53c840d73c2;k8s:batch.kubernetes.io/job-name=keystone-domain-manage;k8s:component=domain-manage;k8s:controller-uid=5245d111-44a1-4f6d-bd32-b53c840d73c2;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-domain-manage;k8s:release_group=keystone;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=37381e547b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3082 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.121 ipv6= k8sPodName=openstack/keystone-domain-manage-tjs8f line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=37381e547b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3082 identity=65308 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=5245d111-44a1-4f6d-bd32-b53c840d73c2,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=5245d111-44a1-4f6d-bd32-b53c840d73c2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.121 ipv6= k8sPodName=openstack/keystone-domain-manage-tjs8f oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=37381e547b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3082 identity=65308 ipv4=10.0.0.121 ipv6= k8sPodName=openstack/keystone-domain-manage-tjs8f subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=37381e547b datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3082 identity=65308 ipv4=10.0.0.121 ipv6= k8sPodName=openstack/keystone-domain-manage-tjs8f subsys=endpoint level=info msg="Successful endpoint creation" containerID=37381e547b datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3082 identity=65308 ipv4=10.0.0.121 ipv6= k8sPodName=openstack/keystone-domain-manage-tjs8f subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=37381e547b endpointID=3082 k8sNamespace=openstack k8sPodName=keystone-domain-manage-tjs8f subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=5245d111-44a1-4f6d-bd32-b53c840d73c2 k8s:batch.kubernetes.io/job-name=keystone-domain-manage k8s:component=domain-manage k8s:controller-uid=5245d111-44a1-4f6d-bd32-b53c840d73c2 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-domain-manage k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=37381e547b datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3082 identity=65308 ipv4=10.0.0.121 ipv6= k8sPodName=openstack/keystone-domain-manage-tjs8f subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.6 96ced198-f20b-417e-86ec-5f354dd56a40 default }" containerID=329ae5b126e7e32d635f6297c8a8fab028a83e1163c34abfffbdca4756497928 datapathConfiguration="&{false false false false false }" interface=lxcd09f65186b04 k8sPodName=openstack/keystone-bootstrap-5x55s labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=329ae5b126 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=849 ipv4=10.0.0.6 ipv6= k8sPodName=openstack/keystone-bootstrap-5x55s subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=329ae5b126 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=849 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=c1d37eaf-56b4-4512-b6c1-769bbf0f1735,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=c1d37eaf-56b4-4512-b6c1-769bbf0f1735,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.6 ipv6= k8sPodName=openstack/keystone-bootstrap-5x55s subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=c1d37eaf-56b4-4512-b6c1-769bbf0f1735;k8s:batch.kubernetes.io/job-name=keystone-bootstrap;k8s:component=bootstrap;k8s:controller-uid=c1d37eaf-56b4-4512-b6c1-769bbf0f1735;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-bootstrap;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=329ae5b126 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=849 identity=63535 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=c1d37eaf-56b4-4512-b6c1-769bbf0f1735,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=c1d37eaf-56b4-4512-b6c1-769bbf0f1735,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.6 ipv6= k8sPodName=openstack/keystone-bootstrap-5x55s oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=329ae5b126 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=849 identity=63535 ipv4=10.0.0.6 ipv6= k8sPodName=openstack/keystone-bootstrap-5x55s subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=329ae5b126 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=849 identity=63535 ipv4=10.0.0.6 ipv6= k8sPodName=openstack/keystone-bootstrap-5x55s subsys=endpoint level=info msg="Successful endpoint creation" containerID=329ae5b126 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=849 identity=63535 ipv4=10.0.0.6 ipv6= k8sPodName=openstack/keystone-bootstrap-5x55s subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=329ae5b126 endpointID=849 k8sNamespace=openstack k8sPodName=keystone-bootstrap-5x55s subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=c1d37eaf-56b4-4512-b6c1-769bbf0f1735 k8s:batch.kubernetes.io/job-name=keystone-bootstrap k8s:component=bootstrap k8s:controller-uid=c1d37eaf-56b4-4512-b6c1-769bbf0f1735 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-bootstrap k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=329ae5b126 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=849 identity=63535 ipv4=10.0.0.6 ipv6= k8sPodName=openstack/keystone-bootstrap-5x55s subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.106 66746e91-a91e-4164-b5a4-e7727bcb6bc2 default }" containerID=d395ed68e2c8d54f75c848e9eab8ff7d2d8784f850c4272141e2db0f74d59665 datapathConfiguration="&{false false false false false }" interface=lxceffa1d98a35d k8sPodName=openstack/horizon-6759cb98cd-wkkzm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d395ed68e2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3483 ipv4=10.0.0.106 ipv6= k8sPodName=openstack/horizon-6759cb98cd-wkkzm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d395ed68e2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3483 identityLabels="k8s:application=horizon,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=horizon" ipv4=10.0.0.106 ipv6= k8sPodName=openstack/horizon-6759cb98cd-wkkzm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=d395ed68e2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3483 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.106 ipv6= k8sPodName=openstack/horizon-6759cb98cd-wkkzm line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=horizon;k8s:component=server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=horizon;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=horizon;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d395ed68e2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3483 identity=51345 identityLabels="k8s:application=horizon,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=horizon" ipv4=10.0.0.106 ipv6= k8sPodName=openstack/horizon-6759cb98cd-wkkzm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d395ed68e2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3483 identity=51345 ipv4=10.0.0.106 ipv6= k8sPodName=openstack/horizon-6759cb98cd-wkkzm subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d395ed68e2 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3483 identity=51345 ipv4=10.0.0.106 ipv6= k8sPodName=openstack/horizon-6759cb98cd-wkkzm subsys=endpoint level=info msg="Successful endpoint creation" containerID=d395ed68e2 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3483 identity=51345 ipv4=10.0.0.106 ipv6= k8sPodName=openstack/horizon-6759cb98cd-wkkzm subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.123 35c512e2-a28c-4e62-8b92-83ef7e18ed94 default }" containerID=55b5c16924cb8b12eaeb6633dc61e5f4c32ee479d8d04281aff7c7ef52395551 datapathConfiguration="&{false false false false false }" interface=lxc375c75345401 k8sPodName=openstack/horizon-6759cb98cd-rskmr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=55b5c16924 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1479 ipv4=10.0.0.123 ipv6= k8sPodName=openstack/horizon-6759cb98cd-rskmr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=55b5c16924 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1479 identityLabels="k8s:application=horizon,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=horizon" ipv4=10.0.0.123 ipv6= k8sPodName=openstack/horizon-6759cb98cd-rskmr subsys=endpoint level=info msg="Identity of endpoint changed" containerID=55b5c16924 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1479 identity=51345 identityLabels="k8s:application=horizon,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=horizon" ipv4=10.0.0.123 ipv6= k8sPodName=openstack/horizon-6759cb98cd-rskmr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=55b5c16924 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1479 identity=51345 ipv4=10.0.0.123 ipv6= k8sPodName=openstack/horizon-6759cb98cd-rskmr subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.138 e1e47321-1760-4517-8000-c88ad8784d9e default }" containerID=d83014de71ab261c7081ecaf0534c403a1bf09f66428b649131d178da0b0df8c datapathConfiguration="&{false false false false false }" interface=lxcfc0d84699893 k8sPodName=openstack/horizon-db-init-gpz2r labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d83014de71 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3397 ipv4=10.0.0.138 ipv6= k8sPodName=openstack/horizon-db-init-gpz2r subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d83014de71 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3397 identityLabels="k8s:application=horizon,k8s:batch.kubernetes.io/controller-uid=35a8ed47-aa6e-41e3-bf04-aef1626357cb,k8s:batch.kubernetes.io/job-name=horizon-db-init,k8s:component=db-init,k8s:controller-uid=35a8ed47-aa6e-41e3-bf04-aef1626357cb,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=horizon-db-init,k8s:release_group=horizon" ipv4=10.0.0.138 ipv6= k8sPodName=openstack/horizon-db-init-gpz2r subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.55 2ab088cf-21fb-46ca-b88f-6d10a7588333 default }" containerID=f50d3dc314a4d09be8876e67c80ec76852b7882661215cdff533310deaf10196 datapathConfiguration="&{false false false false false }" interface=lxcdbf7448c269a k8sPodName=openstack/horizon-6759cb98cd-9qkcx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f50d3dc314 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1248 ipv4=10.0.0.55 ipv6= k8sPodName=openstack/horizon-6759cb98cd-9qkcx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f50d3dc314 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1248 identityLabels="k8s:application=horizon,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=horizon" ipv4=10.0.0.55 ipv6= k8sPodName=openstack/horizon-6759cb98cd-9qkcx subsys=endpoint level=info msg="Identity of endpoint changed" containerID=f50d3dc314 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1248 identity=51345 identityLabels="k8s:application=horizon,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=horizon" ipv4=10.0.0.55 ipv6= k8sPodName=openstack/horizon-6759cb98cd-9qkcx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f50d3dc314 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1248 identity=51345 ipv4=10.0.0.55 ipv6= k8sPodName=openstack/horizon-6759cb98cd-9qkcx subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=horizon;k8s:batch.kubernetes.io/controller-uid=35a8ed47-aa6e-41e3-bf04-aef1626357cb;k8s:batch.kubernetes.io/job-name=horizon-db-init;k8s:component=db-init;k8s:controller-uid=35a8ed47-aa6e-41e3-bf04-aef1626357cb;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=horizon-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=horizon-db-init;k8s:release_group=horizon;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d83014de71 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3397 identity=34689 identityLabels="k8s:application=horizon,k8s:batch.kubernetes.io/controller-uid=35a8ed47-aa6e-41e3-bf04-aef1626357cb,k8s:batch.kubernetes.io/job-name=horizon-db-init,k8s:component=db-init,k8s:controller-uid=35a8ed47-aa6e-41e3-bf04-aef1626357cb,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=horizon-db-init,k8s:release_group=horizon" ipv4=10.0.0.138 ipv6= k8sPodName=openstack/horizon-db-init-gpz2r oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d83014de71 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3397 identity=34689 ipv4=10.0.0.138 ipv6= k8sPodName=openstack/horizon-db-init-gpz2r subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=55b5c16924 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1479 identity=51345 ipv4=10.0.0.123 ipv6= k8sPodName=openstack/horizon-6759cb98cd-rskmr subsys=endpoint level=info msg="Successful endpoint creation" containerID=55b5c16924 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1479 identity=51345 ipv4=10.0.0.123 ipv6= k8sPodName=openstack/horizon-6759cb98cd-rskmr subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=d83014de71 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3397 identity=34689 ipv4=10.0.0.138 ipv6= k8sPodName=openstack/horizon-db-init-gpz2r subsys=endpoint level=info msg="Successful endpoint creation" containerID=d83014de71 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3397 identity=34689 ipv4=10.0.0.138 ipv6= k8sPodName=openstack/horizon-db-init-gpz2r subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=f50d3dc314 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1248 identity=51345 ipv4=10.0.0.55 ipv6= k8sPodName=openstack/horizon-6759cb98cd-9qkcx subsys=endpoint level=info msg="Successful endpoint creation" containerID=f50d3dc314 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1248 identity=51345 ipv4=10.0.0.55 ipv6= k8sPodName=openstack/horizon-6759cb98cd-9qkcx subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=d83014de71 endpointID=3397 k8sNamespace=openstack k8sPodName=horizon-db-init-gpz2r subsys=daemon level=info msg="Releasing key" key="[k8s:application=horizon k8s:batch.kubernetes.io/controller-uid=35a8ed47-aa6e-41e3-bf04-aef1626357cb k8s:batch.kubernetes.io/job-name=horizon-db-init k8s:component=db-init k8s:controller-uid=35a8ed47-aa6e-41e3-bf04-aef1626357cb k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=horizon-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=horizon-db-init k8s:release_group=horizon]" subsys=allocator level=info msg="Removed endpoint" containerID=d83014de71 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3397 identity=34689 ipv4=10.0.0.138 ipv6= k8sPodName=openstack/horizon-db-init-gpz2r subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.243 090ad25e-00ac-4329-b292-f5a15237a8e6 default }" containerID=1dec51a2afb1bbd39119fdfcad41d5dfdb36270b7071dd27c7013df2d5902411 datapathConfiguration="&{false false false false false }" interface=lxcdc6fde79216d k8sPodName=openstack/horizon-db-sync-fvfx6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1dec51a2af datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3526 ipv4=10.0.0.243 ipv6= k8sPodName=openstack/horizon-db-sync-fvfx6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1dec51a2af datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3526 identityLabels="k8s:application=horizon,k8s:batch.kubernetes.io/controller-uid=7da9baf4-a6af-42c4-a71d-8a5dd3a9afe8,k8s:batch.kubernetes.io/job-name=horizon-db-sync,k8s:component=db-sync,k8s:controller-uid=7da9baf4-a6af-42c4-a71d-8a5dd3a9afe8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=horizon-db-sync,k8s:release_group=horizon" ipv4=10.0.0.243 ipv6= k8sPodName=openstack/horizon-db-sync-fvfx6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=1dec51a2af datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3526 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.243 ipv6= k8sPodName=openstack/horizon-db-sync-fvfx6 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=horizon;k8s:batch.kubernetes.io/controller-uid=7da9baf4-a6af-42c4-a71d-8a5dd3a9afe8;k8s:batch.kubernetes.io/job-name=horizon-db-sync;k8s:component=db-sync;k8s:controller-uid=7da9baf4-a6af-42c4-a71d-8a5dd3a9afe8;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=horizon-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=horizon-db-sync;k8s:release_group=horizon;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1dec51a2af datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3526 identity=15959 identityLabels="k8s:application=horizon,k8s:batch.kubernetes.io/controller-uid=7da9baf4-a6af-42c4-a71d-8a5dd3a9afe8,k8s:batch.kubernetes.io/job-name=horizon-db-sync,k8s:component=db-sync,k8s:controller-uid=7da9baf4-a6af-42c4-a71d-8a5dd3a9afe8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=horizon-db-sync,k8s:release_group=horizon" ipv4=10.0.0.243 ipv6= k8sPodName=openstack/horizon-db-sync-fvfx6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1dec51a2af datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3526 identity=15959 ipv4=10.0.0.243 ipv6= k8sPodName=openstack/horizon-db-sync-fvfx6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1dec51a2af datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3526 identity=15959 ipv4=10.0.0.243 ipv6= k8sPodName=openstack/horizon-db-sync-fvfx6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=1dec51a2af datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3526 identity=15959 ipv4=10.0.0.243 ipv6= k8sPodName=openstack/horizon-db-sync-fvfx6 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=1dec51a2af endpointID=3526 k8sNamespace=openstack k8sPodName=horizon-db-sync-fvfx6 subsys=daemon level=info msg="Releasing key" key="[k8s:application=horizon k8s:batch.kubernetes.io/controller-uid=7da9baf4-a6af-42c4-a71d-8a5dd3a9afe8 k8s:batch.kubernetes.io/job-name=horizon-db-sync k8s:component=db-sync k8s:controller-uid=7da9baf4-a6af-42c4-a71d-8a5dd3a9afe8 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=horizon-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=horizon-db-sync k8s:release_group=horizon]" subsys=allocator level=info msg="Removed endpoint" containerID=1dec51a2af datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3526 identity=15959 ipv4=10.0.0.243 ipv6= k8sPodName=openstack/horizon-db-sync-fvfx6 subsys=endpoint