level=info msg="Memory available for map entries (0.003% of 67421638656B): 168554096B" subsys=config level=info msg="option bpf-ct-global-tcp-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-ct-global-any-max set by dynamic sizing to 295708" subsys=config level=info msg="option bpf-nat-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-neigh-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-sock-rev-map-max set by dynamic sizing to 295708" subsys=config level=info msg=" --agent-health-port='9879'" subsys=daemon level=info msg=" --agent-labels=''" subsys=daemon level=info msg=" --agent-liveness-update-interval='1s'" subsys=daemon level=info msg=" --agent-not-ready-taint-key='node.cilium.io/agent-not-ready'" subsys=daemon level=info msg=" --allocator-list-timeout='3m0s'" subsys=daemon level=info msg=" --allow-icmp-frag-needed='true'" subsys=daemon level=info msg=" --allow-localhost='auto'" subsys=daemon level=info msg=" --annotate-k8s-node='false'" subsys=daemon level=info msg=" --api-rate-limit=''" subsys=daemon level=info msg=" --arping-refresh-period='30s'" subsys=daemon level=info msg=" --auto-create-cilium-node-resource='true'" subsys=daemon level=info msg=" --auto-direct-node-routes='false'" subsys=daemon level=info msg=" --bgp-announce-lb-ip='false'" subsys=daemon level=info msg=" --bgp-announce-pod-cidr='false'" subsys=daemon level=info msg=" --bgp-config-path='/var/lib/cilium/bgp/config.yaml'" subsys=daemon level=info msg=" --bpf-auth-map-max='524288'" subsys=daemon level=info msg=" --bpf-ct-global-any-max='262144'" subsys=daemon level=info msg=" --bpf-ct-global-tcp-max='524288'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-fin='10s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-syn='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp-grace='1m0s'" subsys=daemon level=info msg=" --bpf-filter-priority='1'" subsys=daemon level=info msg=" --bpf-fragments-map-max='8192'" subsys=daemon level=info msg=" --bpf-lb-acceleration='disabled'" subsys=daemon level=info msg=" --bpf-lb-affinity-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-algorithm='random'" subsys=daemon level=info msg=" --bpf-lb-dev-ip-addr-inherit=''" subsys=daemon level=info msg=" --bpf-lb-dsr-dispatch='opt'" subsys=daemon level=info msg=" --bpf-lb-dsr-l4-xlate='frontend'" subsys=daemon level=info msg=" --bpf-lb-external-clusterip='false'" subsys=daemon level=info msg=" --bpf-lb-maglev-hash-seed='JLfvgnHc2kaSUFaI'" subsys=daemon level=info msg=" --bpf-lb-maglev-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-maglev-table-size='16381'" subsys=daemon level=info msg=" --bpf-lb-map-max='65536'" subsys=daemon level=info msg=" --bpf-lb-mode='snat'" subsys=daemon level=info msg=" --bpf-lb-rev-nat-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-rss-ipv4-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-rss-ipv6-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-service-backend-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-service-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-sock='false'" subsys=daemon level=info msg=" --bpf-lb-sock-hostns-only='false'" subsys=daemon level=info msg=" --bpf-lb-source-range-map-max='0'" subsys=daemon level=info msg=" --bpf-map-dynamic-size-ratio='0.0025'" subsys=daemon level=info msg=" --bpf-map-event-buffers=''" subsys=daemon level=info msg=" --bpf-nat-global-max='524288'" subsys=daemon level=info msg=" --bpf-neigh-global-max='524288'" subsys=daemon level=info msg=" --bpf-policy-map-full-reconciliation-interval='15m0s'" subsys=daemon level=info msg=" --bpf-policy-map-max='16384'" subsys=daemon level=info msg=" --bpf-root='/sys/fs/bpf'" subsys=daemon level=info msg=" --bpf-sock-rev-map-max='262144'" subsys=daemon level=info msg=" --bypass-ip-availability-upon-restore='false'" subsys=daemon level=info msg=" --certificates-directory='/var/run/cilium/certs'" subsys=daemon level=info msg=" --cflags=''" subsys=daemon level=info msg=" --cgroup-root='/run/cilium/cgroupv2'" subsys=daemon level=info msg=" --cilium-endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --cluster-health-port='4240'" subsys=daemon level=info msg=" --cluster-id='0'" subsys=daemon level=info msg=" --cluster-name='default'" subsys=daemon level=info msg=" --cluster-pool-ipv4-cidr='10.0.0.0/8'" subsys=daemon level=info msg=" --cluster-pool-ipv4-mask-size='24'" subsys=daemon level=info msg=" --clustermesh-config='/var/lib/cilium/clustermesh/'" subsys=daemon level=info msg=" --clustermesh-ip-identities-sync-timeout='1m0s'" subsys=daemon level=info msg=" --cmdref=''" subsys=daemon level=info msg=" --cni-chaining-mode='none'" subsys=daemon level=info msg=" --cni-chaining-target=''" subsys=daemon level=info msg=" --cni-exclusive='true'" subsys=daemon level=info msg=" --cni-external-routing='false'" subsys=daemon level=info msg=" --cni-log-file='/var/run/cilium/cilium-cni.log'" subsys=daemon level=info msg=" --cnp-node-status-gc-interval='0s'" subsys=daemon level=info msg=" --config=''" subsys=daemon level=info msg=" --config-dir='/tmp/cilium/config-map'" subsys=daemon level=info msg=" --config-sources='config-map:kube-system/cilium-config'" subsys=daemon level=info msg=" --conntrack-gc-interval='0s'" subsys=daemon level=info msg=" --conntrack-gc-max-interval='0s'" subsys=daemon level=info msg=" --crd-wait-timeout='5m0s'" subsys=daemon level=info msg=" --custom-cni-conf='false'" subsys=daemon level=info msg=" --datapath-mode='veth'" subsys=daemon level=info msg=" --debug='false'" subsys=daemon level=info msg=" --debug-verbose=''" subsys=daemon level=info msg=" --derive-masquerade-ip-addr-from-device=''" subsys=daemon level=info msg=" --devices=''" subsys=daemon level=info msg=" --direct-routing-device=''" subsys=daemon level=info msg=" --disable-cnp-status-updates='true'" subsys=daemon level=info msg=" --disable-endpoint-crd='false'" subsys=daemon level=info msg=" --disable-envoy-version-check='false'" subsys=daemon level=info msg=" --disable-iptables-feeder-rules=''" subsys=daemon level=info msg=" --dns-max-ips-per-restored-rule='1000'" subsys=daemon level=info msg=" --dns-policy-unload-on-shutdown='false'" subsys=daemon level=info msg=" --dnsproxy-concurrency-limit='0'" subsys=daemon level=info msg=" --dnsproxy-concurrency-processing-grace-period='0s'" subsys=daemon level=info msg=" --dnsproxy-enable-transparent-mode='true'" subsys=daemon level=info msg=" --dnsproxy-lock-count='128'" subsys=daemon level=info msg=" --dnsproxy-lock-timeout='500ms'" subsys=daemon level=info msg=" --egress-gateway-policy-map-max='16384'" subsys=daemon level=info msg=" --egress-gateway-reconciliation-trigger-interval='1s'" subsys=daemon level=info msg=" --egress-masquerade-interfaces=''" subsys=daemon level=info msg=" --egress-multi-home-ip-rule-compat='false'" subsys=daemon level=info msg=" --enable-auto-protect-node-port-range='true'" subsys=daemon level=info msg=" --enable-bandwidth-manager='false'" subsys=daemon level=info msg=" --enable-bbr='false'" subsys=daemon level=info msg=" --enable-bgp-control-plane='false'" subsys=daemon level=info msg=" --enable-bpf-clock-probe='false'" subsys=daemon level=info msg=" --enable-bpf-masquerade='false'" subsys=daemon level=info msg=" --enable-bpf-tproxy='false'" subsys=daemon level=info msg=" --enable-cilium-api-server-access='*'" subsys=daemon level=info msg=" --enable-cilium-endpoint-slice='false'" subsys=daemon level=info msg=" --enable-cilium-health-api-server-access='*'" subsys=daemon level=info msg=" --enable-custom-calls='false'" subsys=daemon level=info msg=" --enable-endpoint-health-checking='true'" subsys=daemon level=info msg=" --enable-endpoint-routes='false'" subsys=daemon level=info msg=" --enable-envoy-config='false'" subsys=daemon level=info msg=" --enable-external-ips='false'" subsys=daemon level=info msg=" --enable-health-check-nodeport='true'" subsys=daemon level=info msg=" --enable-health-checking='true'" subsys=daemon level=info msg=" --enable-high-scale-ipcache='false'" subsys=daemon level=info msg=" --enable-host-firewall='false'" subsys=daemon level=info msg=" --enable-host-legacy-routing='false'" subsys=daemon level=info msg=" --enable-host-port='false'" subsys=daemon level=info msg=" --enable-hubble='false'" subsys=daemon level=info msg=" --enable-hubble-recorder-api='true'" subsys=daemon level=info msg=" --enable-icmp-rules='true'" subsys=daemon level=info msg=" --enable-identity-mark='true'" subsys=daemon level=info msg=" --enable-ip-masq-agent='false'" subsys=daemon level=info msg=" --enable-ipsec='false'" subsys=daemon level=info msg=" --enable-ipsec-key-watcher='true'" subsys=daemon level=info msg=" --enable-ipv4='true'" subsys=daemon level=info msg=" --enable-ipv4-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv4-egress-gateway='false'" subsys=daemon level=info msg=" --enable-ipv4-fragment-tracking='true'" subsys=daemon level=info msg=" --enable-ipv4-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6='false'" subsys=daemon level=info msg=" --enable-ipv6-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv6-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6-ndp='false'" subsys=daemon level=info msg=" --enable-k8s='true'" subsys=daemon level=info msg=" --enable-k8s-api-discovery='false'" subsys=daemon level=info msg=" --enable-k8s-endpoint-slice='true'" subsys=daemon level=info msg=" --enable-k8s-event-handover='false'" subsys=daemon level=info msg=" --enable-k8s-networkpolicy='true'" subsys=daemon level=info msg=" --enable-k8s-terminating-endpoint='true'" subsys=daemon level=info msg=" --enable-l2-announcements='false'" subsys=daemon level=info msg=" --enable-l2-neigh-discovery='true'" subsys=daemon level=info msg=" --enable-l2-pod-announcements='false'" subsys=daemon level=info msg=" --enable-l7-proxy='true'" subsys=daemon level=info msg=" --enable-local-node-route='true'" subsys=daemon level=info msg=" --enable-local-redirect-policy='false'" subsys=daemon level=info msg=" --enable-mke='false'" subsys=daemon level=info msg=" --enable-monitor='true'" subsys=daemon level=info msg=" --enable-nat46x64-gateway='false'" subsys=daemon level=info msg=" --enable-node-port='false'" subsys=daemon level=info msg=" --enable-pmtu-discovery='false'" subsys=daemon level=info msg=" --enable-policy='default'" subsys=daemon level=info msg=" --enable-recorder='false'" subsys=daemon level=info msg=" --enable-remote-node-identity='true'" subsys=daemon level=info msg=" --enable-runtime-device-detection='false'" subsys=daemon level=info msg=" --enable-sctp='false'" subsys=daemon level=info msg=" --enable-service-topology='false'" subsys=daemon level=info msg=" --enable-session-affinity='false'" subsys=daemon level=info msg=" --enable-srv6='false'" subsys=daemon level=info msg=" --enable-stale-cilium-endpoint-cleanup='true'" subsys=daemon level=info msg=" --enable-svc-source-range-check='true'" subsys=daemon level=info msg=" --enable-tracing='false'" subsys=daemon level=info msg=" --enable-unreachable-routes='false'" subsys=daemon level=info msg=" --enable-vtep='false'" subsys=daemon level=info msg=" --enable-well-known-identities='false'" subsys=daemon level=info msg=" --enable-wireguard='false'" subsys=daemon level=info msg=" --enable-wireguard-userspace-fallback='false'" subsys=daemon level=info msg=" --enable-xdp-prefilter='false'" subsys=daemon level=info msg=" --enable-xt-socket-fallback='true'" subsys=daemon level=info msg=" --encrypt-interface=''" subsys=daemon level=info msg=" --encrypt-node='false'" subsys=daemon level=info msg=" --endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --endpoint-queue-size='25'" subsys=daemon level=info msg=" --endpoint-status=''" subsys=daemon level=info msg=" --envoy-config-timeout='2m0s'" subsys=daemon level=info msg=" --envoy-log=''" subsys=daemon level=info msg=" --exclude-local-address=''" subsys=daemon level=info msg=" --external-envoy-proxy='false'" subsys=daemon level=info msg=" --fixed-identity-mapping=''" subsys=daemon level=info msg=" --fqdn-regex-compile-lru-size='1024'" subsys=daemon level=info msg=" --gops-port='9890'" subsys=daemon level=info msg=" --http-403-msg=''" subsys=daemon level=info msg=" --http-idle-timeout='0'" subsys=daemon level=info msg=" --http-max-grpc-timeout='0'" subsys=daemon level=info msg=" --http-normalize-path='true'" subsys=daemon level=info msg=" --http-request-timeout='3600'" subsys=daemon level=info msg=" --http-retry-count='3'" subsys=daemon level=info msg=" --http-retry-timeout='0'" subsys=daemon level=info msg=" --hubble-disable-tls='false'" subsys=daemon level=info msg=" --hubble-event-buffer-capacity='4095'" subsys=daemon level=info msg=" --hubble-event-queue-size='0'" subsys=daemon level=info msg=" --hubble-export-file-compress='false'" subsys=daemon level=info msg=" --hubble-export-file-max-backups='5'" subsys=daemon level=info msg=" --hubble-export-file-max-size-mb='10'" subsys=daemon level=info msg=" --hubble-export-file-path=''" subsys=daemon level=info msg=" --hubble-listen-address=''" subsys=daemon level=info msg=" --hubble-metrics=''" subsys=daemon level=info msg=" --hubble-metrics-server=''" subsys=daemon level=info msg=" --hubble-monitor-events=''" subsys=daemon level=info msg=" --hubble-prefer-ipv6='false'" subsys=daemon level=info msg=" --hubble-recorder-sink-queue-size='1024'" subsys=daemon level=info msg=" --hubble-recorder-storage-path='/var/run/cilium/pcaps'" subsys=daemon level=info msg=" --hubble-skip-unknown-cgroup-ids='true'" subsys=daemon level=info msg=" --hubble-socket-path='/var/run/cilium/hubble.sock'" subsys=daemon level=info msg=" --hubble-tls-cert-file=''" subsys=daemon level=info msg=" --hubble-tls-client-ca-files=''" subsys=daemon level=info msg=" --hubble-tls-key-file=''" subsys=daemon level=info msg=" --identity-allocation-mode='crd'" subsys=daemon level=info msg=" --identity-change-grace-period='5s'" subsys=daemon level=info msg=" --identity-gc-interval='15m0s'" subsys=daemon level=info msg=" --identity-heartbeat-timeout='30m0s'" subsys=daemon level=info msg=" --identity-restore-grace-period='10m0s'" subsys=daemon level=info msg=" --install-egress-gateway-routes='false'" subsys=daemon level=info msg=" --install-iptables-rules='true'" subsys=daemon level=info msg=" --install-no-conntrack-iptables-rules='false'" subsys=daemon level=info msg=" --ip-allocation-timeout='2m0s'" subsys=daemon level=info msg=" --ip-masq-agent-config-path='/etc/config/ip-masq-agent'" subsys=daemon level=info msg=" --ipam='cluster-pool'" subsys=daemon level=info msg=" --ipam-cilium-node-update-rate='15s'" subsys=daemon level=info msg=" --ipam-multi-pool-pre-allocation='default=8'" subsys=daemon level=info msg=" --ipsec-key-file=''" subsys=daemon level=info msg=" --ipsec-key-rotation-duration='5m0s'" subsys=daemon level=info msg=" --iptables-lock-timeout='5s'" subsys=daemon level=info msg=" --iptables-random-fully='false'" subsys=daemon level=info msg=" --ipv4-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv4-node='auto'" subsys=daemon level=info msg=" --ipv4-pod-subnets=''" subsys=daemon level=info msg=" --ipv4-range='auto'" subsys=daemon level=info msg=" --ipv4-service-loopback-address='169.254.42.1'" subsys=daemon level=info msg=" --ipv4-service-range='auto'" subsys=daemon level=info msg=" --ipv6-cluster-alloc-cidr='f00d::/64'" subsys=daemon level=info msg=" --ipv6-mcast-device=''" subsys=daemon level=info msg=" --ipv6-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv6-node='auto'" subsys=daemon level=info msg=" --ipv6-pod-subnets=''" subsys=daemon level=info msg=" --ipv6-range='auto'" subsys=daemon level=info msg=" --ipv6-service-range='auto'" subsys=daemon level=info msg=" --join-cluster='false'" subsys=daemon level=info msg=" --k8s-api-server=''" subsys=daemon level=info msg=" --k8s-client-burst='10'" subsys=daemon level=info msg=" --k8s-client-qps='5'" subsys=daemon level=info msg=" --k8s-heartbeat-timeout='30s'" subsys=daemon level=info msg=" --k8s-kubeconfig-path=''" subsys=daemon level=info msg=" --k8s-namespace='kube-system'" subsys=daemon level=info msg=" --k8s-require-ipv4-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-require-ipv6-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-service-cache-size='128'" subsys=daemon level=info msg=" --k8s-service-proxy-name=''" subsys=daemon level=info msg=" --k8s-sync-timeout='3m0s'" subsys=daemon level=info msg=" --k8s-watcher-endpoint-selector='metadata.name!=kube-scheduler,metadata.name!=kube-controller-manager,metadata.name!=etcd-operator,metadata.name!=gcp-controller-manager'" subsys=daemon level=info msg=" --keep-config='false'" subsys=daemon level=info msg=" --kube-proxy-replacement='disabled'" subsys=daemon level=info msg=" --kube-proxy-replacement-healthz-bind-address=''" subsys=daemon level=info msg=" --kvstore=''" subsys=daemon level=info msg=" --kvstore-connectivity-timeout='2m0s'" subsys=daemon level=info msg=" --kvstore-lease-ttl='15m0s'" subsys=daemon level=info msg=" --kvstore-max-consecutive-quorum-errors='2'" subsys=daemon level=info msg=" --kvstore-opt=''" subsys=daemon level=info msg=" --kvstore-periodic-sync='5m0s'" subsys=daemon level=info msg=" --l2-announcements-lease-duration='15s'" subsys=daemon level=info msg=" --l2-announcements-renew-deadline='5s'" subsys=daemon level=info msg=" --l2-announcements-retry-period='2s'" subsys=daemon level=info msg=" --l2-pod-announcements-interface=''" subsys=daemon level=info msg=" --label-prefix-file=''" subsys=daemon level=info msg=" --labels=''" subsys=daemon level=info msg=" --lib-dir='/var/lib/cilium'" subsys=daemon level=info msg=" --local-max-addr-scope='252'" subsys=daemon level=info msg=" --local-router-ipv4=''" subsys=daemon level=info msg=" --local-router-ipv6=''" subsys=daemon level=info msg=" --log-driver=''" subsys=daemon level=info msg=" --log-opt=''" subsys=daemon level=info msg=" --log-system-load='false'" subsys=daemon level=info msg=" --max-controller-interval='0'" subsys=daemon level=info msg=" --mesh-auth-enabled='true'" subsys=daemon level=info msg=" --mesh-auth-gc-interval='5m0s'" subsys=daemon level=info msg=" --mesh-auth-mutual-listener-port='0'" subsys=daemon level=info msg=" --mesh-auth-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-rotated-identities-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-signal-backoff-duration='1s'" subsys=daemon level=info msg=" --mesh-auth-spiffe-trust-domain='spiffe.cilium'" subsys=daemon level=info msg=" --mesh-auth-spire-admin-socket=''" subsys=daemon level=info msg=" --metrics=''" subsys=daemon level=info msg=" --mke-cgroup-mount=''" subsys=daemon level=info msg=" --monitor-aggregation='medium'" subsys=daemon level=info msg=" --monitor-aggregation-flags='all'" subsys=daemon level=info msg=" --monitor-aggregation-interval='5s'" subsys=daemon level=info msg=" --monitor-queue-size='0'" subsys=daemon level=info msg=" --mtu='0'" subsys=daemon level=info msg=" --node-encryption-opt-out-labels='node-role.kubernetes.io/control-plane'" subsys=daemon level=info msg=" --node-port-acceleration='disabled'" subsys=daemon level=info msg=" --node-port-algorithm='random'" subsys=daemon level=info msg=" --node-port-bind-protection='true'" subsys=daemon level=info msg=" --node-port-mode='snat'" subsys=daemon level=info msg=" --node-port-range='30000,32767'" subsys=daemon level=info msg=" --nodes-gc-interval='5m0s'" subsys=daemon level=info msg=" --operator-api-serve-addr='127.0.0.1:9234'" subsys=daemon level=info msg=" --policy-audit-mode='false'" subsys=daemon level=info msg=" --policy-queue-size='100'" subsys=daemon level=info msg=" --policy-trigger-interval='1s'" subsys=daemon level=info msg=" --pprof='false'" subsys=daemon level=info msg=" --pprof-address='localhost'" subsys=daemon level=info msg=" --pprof-port='6060'" subsys=daemon level=info msg=" --preallocate-bpf-maps='false'" subsys=daemon level=info msg=" --prepend-iptables-chains='true'" subsys=daemon level=info msg=" --procfs='/host/proc'" subsys=daemon level=info msg=" --prometheus-serve-addr=':9962'" subsys=daemon level=info msg=" --proxy-connect-timeout='2'" subsys=daemon level=info msg=" --proxy-gid='1337'" subsys=daemon level=info msg=" --proxy-idle-timeout-seconds='60'" subsys=daemon level=info msg=" --proxy-max-connection-duration-seconds='0'" subsys=daemon level=info msg=" --proxy-max-requests-per-connection='0'" subsys=daemon level=info msg=" --proxy-prometheus-port='9964'" subsys=daemon level=info msg=" --read-cni-conf=''" subsys=daemon level=info msg=" --remove-cilium-node-taints='true'" subsys=daemon level=info msg=" --restore='true'" subsys=daemon level=info msg=" --route-metric='0'" subsys=daemon level=info msg=" --routing-mode='tunnel'" subsys=daemon level=info msg=" --set-cilium-is-up-condition='true'" subsys=daemon level=info msg=" --set-cilium-node-taints='true'" subsys=daemon level=info msg=" --sidecar-istio-proxy-image='cilium/istio_proxy'" subsys=daemon level=info msg=" --single-cluster-route='false'" subsys=daemon level=info msg=" --skip-cnp-status-startup-clean='false'" subsys=daemon level=info msg=" --socket-path='/var/run/cilium/cilium.sock'" subsys=daemon level=info msg=" --srv6-encap-mode='reduced'" subsys=daemon level=info msg=" --state-dir='/var/run/cilium'" subsys=daemon level=info msg=" --synchronize-k8s-nodes='true'" subsys=daemon level=info msg=" --tofqdns-dns-reject-response-code='refused'" subsys=daemon level=info msg=" --tofqdns-enable-dns-compression='true'" subsys=daemon level=info msg=" --tofqdns-endpoint-max-ip-per-hostname='50'" subsys=daemon level=info msg=" --tofqdns-idle-connection-grace-period='0s'" subsys=daemon level=info msg=" --tofqdns-max-deferred-connection-deletes='10000'" subsys=daemon level=info msg=" --tofqdns-min-ttl='0'" subsys=daemon level=info msg=" --tofqdns-pre-cache=''" subsys=daemon level=info msg=" --tofqdns-proxy-port='0'" subsys=daemon level=info msg=" --tofqdns-proxy-response-max-delay='100ms'" subsys=daemon level=info msg=" --trace-payloadlen='128'" subsys=daemon level=info msg=" --trace-sock='true'" subsys=daemon level=info msg=" --tunnel=''" subsys=daemon level=info msg=" --tunnel-port='6082'" subsys=daemon level=info msg=" --tunnel-protocol='geneve'" subsys=daemon level=info msg=" --unmanaged-pod-watcher-interval='15'" subsys=daemon level=info msg=" --use-cilium-internal-ip-for-ipsec='false'" subsys=daemon level=info msg=" --version='false'" subsys=daemon level=info msg=" --vlan-bpf-bypass=''" subsys=daemon level=info msg=" --vtep-cidr=''" subsys=daemon level=info msg=" --vtep-endpoint=''" subsys=daemon level=info msg=" --vtep-mac=''" subsys=daemon level=info msg=" --vtep-mask=''" subsys=daemon level=info msg=" --wireguard-encapsulate='false'" subsys=daemon level=info msg=" --write-cni-conf-when-ready='/host/etc/cni/net.d/05-cilium.conflist'" subsys=daemon level=info msg=" _ _ _" subsys=daemon level=info msg=" ___|_| |_|_ _ _____" subsys=daemon level=info msg="| _| | | | | | |" subsys=daemon level=info msg="|___|_|_|_|___|_|_|_|" subsys=daemon level=info msg="Cilium 1.14.8 cf6e022e 2024-03-13T12:23:35-04:00 go version go1.21.8 linux/amd64" subsys=daemon level=info msg="clang (10.0.0) and kernel (5.15.0) versions: OK!" subsys=linux-datapath level=info msg="linking environment: OK!" subsys=linux-datapath level=info msg="Kernel config file not found: if the agent fails to start, check the system requirements at https://docs.cilium.io/en/stable/operations/system_requirements" subsys=probes level=info msg="Detected mounted BPF filesystem at /sys/fs/bpf" subsys=bpf level=info msg="Mounted cgroupv2 filesystem at /run/cilium/cgroupv2" subsys=cgroups level=info msg="Parsing base label prefixes from default label list" subsys=labels-filter level=info msg="Parsing additional label prefixes from user inputs: []" subsys=labels-filter level=info msg="Final label prefixes to be used for identity evaluation:" subsys=labels-filter level=info msg=" - reserved:.*" subsys=labels-filter level=info msg=" - :io\\.kubernetes\\.pod\\.namespace" subsys=labels-filter level=info msg=" - :io\\.cilium\\.k8s\\.namespace\\.labels" subsys=labels-filter level=info msg=" - :app\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:io\\.kubernetes" subsys=labels-filter level=info msg=" - !:kubernetes\\.io" subsys=labels-filter level=info msg=" - !:.*beta\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:k8s\\.io" subsys=labels-filter level=info msg=" - !:pod-template-generation" subsys=labels-filter level=info msg=" - !:pod-template-hash" subsys=labels-filter level=info msg=" - !:controller-revision-hash" subsys=labels-filter level=info msg=" - !:annotation.*" subsys=labels-filter level=info msg=" - !:etcd_node" subsys=labels-filter level=info msg=Invoked duration=1.155753ms function="pprof.glob..func1 (cell.go:50)" subsys=hive level=info msg=Invoked duration="54.841µs" function="gops.registerGopsHooks (cell.go:38)" subsys=hive level=info msg=Invoked duration=1.38721ms function="metrics.NewRegistry (registry.go:65)" subsys=hive level=info msg=Invoked duration="14.701µs" function="metrics.glob..func1 (cell.go:12)" subsys=hive level=info msg="Spire Delegate API Client is disabled as no socket path is configured" subsys=spire-delegate level=info msg="Mutual authentication handler is disabled as no port is configured" subsys=auth level=info msg=Invoked duration=100.984527ms function="cmd.glob..func4 (daemon_main.go:1607)" subsys=hive level=info msg=Invoked duration="14.97µs" function="gc.registerSignalHandler (cell.go:47)" subsys=hive level=info msg=Invoked duration="17.251µs" function="utime.initUtimeSync (cell.go:29)" subsys=hive level=info msg=Invoked duration="67.791µs" function="agentliveness.newAgentLivenessUpdater (agent_liveness.go:43)" subsys=hive level=info msg=Invoked duration="58.301µs" function="l2responder.NewL2ResponderReconciler (l2responder.go:63)" subsys=hive level=info msg=Invoked duration="66.282µs" function="garp.newGARPProcessor (processor.go:27)" subsys=hive level=info msg=Starting subsys=hive level=info msg="Started gops server" address="127.0.0.1:9890" subsys=gops level=info msg="Start hook executed" duration="663.353µs" function="gops.registerGopsHooks.func1 (cell.go:43)" subsys=hive level=info msg="Start hook executed" duration="2.31µs" function="metrics.NewRegistry.func1 (registry.go:86)" subsys=hive level=info msg="Establishing connection to apiserver" host="https://10.96.0.1:443" subsys=k8s-client level=info msg="Serving prometheus metrics on :9962" subsys=metrics level=info msg="Connected to apiserver" subsys=k8s-client level=info msg="Start hook executed" duration=10.824995ms function="client.(*compositeClientset).onStart" subsys=hive level=info msg="Start hook executed" duration=7.056078ms function="authmap.newAuthMap.func1 (cell.go:27)" subsys=hive level=info msg="Start hook executed" duration="46.051µs" function="configmap.newMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="49.951µs" function="signalmap.newMap.func1 (cell.go:44)" subsys=hive level=info msg="Start hook executed" duration="247.405µs" function="nodemap.newNodeMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="129.023µs" function="eventsmap.newEventsMap.func1 (cell.go:35)" subsys=hive level=info msg="Start hook executed" duration="122.512µs" function="*cni.cniConfigManager.Start" subsys=hive level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Wrote CNI configuration file to /host/etc/cni/net.d/05-cilium.conflist" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Start hook executed" duration=45.915633ms function="datapath.newDatapath.func1 (cells.go:113)" subsys=hive level=info msg="Restored 0 node IDs from the BPF map" subsys=linux-datapath level=info msg="Start hook executed" duration="90.172µs" function="datapath.newDatapath.func2 (cells.go:126)" subsys=hive level=info msg="Start hook executed" duration="13.82µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Node].Start" subsys=hive level=info msg="Start hook executed" duration="2.571µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNode].Start" subsys=hive level=info msg="Using autogenerated IPv4 allocation range" subsys=node v4Prefix=10.129.0.0/16 level=info msg="no local ciliumnode found, will not restore cilium internal ips from k8s" subsys=daemon level=info msg="Start hook executed" duration=103.717424ms function="node.NewLocalNodeStore.func1 (local_node_store.go:76)" subsys=hive level=info msg="Start hook executed" duration="34.641µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration=100.253013ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration="9.1µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Using discoveryv1.EndpointSlice" subsys=k8s level=info msg="Start hook executed" duration=201.103027ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Start hook executed" duration="3.83µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Pod].Start" subsys=hive level=info msg="Start hook executed" duration="2.82µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Namespace].Start" subsys=hive level=info msg="Start hook executed" duration="2.22µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="3.52µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumClusterwideNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="3.03µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumCIDRGroup].Start" subsys=hive level=info msg="Start hook executed" duration="28.011µs" function="endpointmanager.newDefaultEndpointManager.func1 (cell.go:203)" subsys=hive level=info msg="Start hook executed" duration="19.15µs" function="cmd.newPolicyTrifecta.func1 (policy.go:135)" subsys=hive level=info msg="Start hook executed" duration="66.481µs" function="*manager.manager.Start" subsys=hive level=info msg="Serving cilium node monitor v1.2 API at unix:///var/run/cilium/monitor1_2.sock" subsys=monitor-agent level=info msg="Start hook executed" duration="289.826µs" function="agent.newMonitorAgent.func1 (cell.go:61)" subsys=hive level=info msg="Start hook executed" duration="3.82µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumL2AnnouncementPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="9.8µs" function="*job.group.Start" subsys=hive level=info msg="Start hook executed" duration="223.144µs" function="proxy.newProxy.func1 (cell.go:55)" subsys=hive level=info msg="Envoy: Starting xDS gRPC server listening on /var/run/cilium/envoy/sockets/xds.sock" subsys=envoy-manager level=info msg="Start hook executed" duration="721.156µs" function="signal.provideSignalManager.func1 (cell.go:25)" subsys=hive level=info msg="Datapath signal listener running" subsys=signal level=info msg="Start hook executed" duration="870.068µs" function="auth.registerAuthManager.func1 (cell.go:109)" subsys=hive level=info msg="Start hook executed" duration="4.72µs" function="auth.registerGCJobs.func1 (cell.go:158)" subsys=hive level=info msg="Start hook executed" duration="25.311µs" function="*job.group.Start" subsys=hive level=warning msg="Deprecated value for --kube-proxy-replacement: disabled (use either \"true\", or \"false\")" subsys=daemon level=info msg="Auto-disabling \"enable-node-port\", \"enable-external-ips\", \"bpf-lb-sock\", \"enable-host-port\" features and falling back to \"enable-host-legacy-routing\"" subsys=daemon level=info msg="Inheriting MTU from external network interface" device=ens3 ipAddr=199.204.45.129 mtu=1500 subsys=mtu level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_ipcache, recreating and re-pinning map cilium_ipcache" file-path=/sys/fs/bpf/tc/globals/cilium_ipcache name=cilium_ipcache subsys=bpf level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_tunnel_map, recreating and re-pinning map cilium_tunnel_map" file-path=/sys/fs/bpf/tc/globals/cilium_tunnel_map name=cilium_tunnel_map subsys=bpf level=info msg="Restored services from maps" failedServices=0 restoredServices=0 subsys=service level=info msg="Restored backends from maps" failedBackends=0 restoredBackends=0 skippedBackends=0 subsys=service level=info msg="Reading old endpoints..." subsys=daemon level=info msg="No old endpoints found." subsys=daemon level=info msg="Waiting until all Cilium CRDs are available" subsys=k8s level=info msg="All Cilium CRDs have been found and are available" subsys=k8s level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=info msg="Successfully created CiliumNode resource" subsys=nodediscovery level=warning msg="Unable to create CiliumNode resource, will retry" error="ciliumnodes.cilium.io \"instance\" already exists" subsys=nodediscovery level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=warning msg="Waiting for k8s node information" error="required IPv4 PodCIDR not available" subsys=k8s level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=info msg="Received own node information from API server" ipAddr.ipv4=199.204.45.129 ipAddr.ipv6="" k8sNodeIP=199.204.45.129 labels="map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:]" nodeName=instance subsys=k8s v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="k8s mode: Allowing localhost to reach local endpoints" subsys=daemon level=info msg="Detected devices" devices="[]" subsys=linux-datapath level=info msg="Enabling k8s event listener" subsys=k8s-watcher level=info msg="Removing stale endpoint interfaces" subsys=daemon level=info msg="Waiting until local node addressing before starting watchers depending on it" subsys=k8s-watcher level=info msg="Skipping kvstore configuration" subsys=daemon level=info msg="Initializing node addressing" subsys=daemon level=info msg="Initializing cluster-pool IPAM" subsys=ipam v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="Restoring endpoints..." subsys=daemon level=info msg="Endpoints restored" failed=0 restored=0 subsys=daemon level=info msg="Addressing information:" subsys=daemon level=info msg=" Cluster-Name: default" subsys=daemon level=info msg=" Cluster-ID: 0" subsys=daemon level=info msg=" Local node-name: instance" subsys=daemon level=info msg=" Node-IPv6: " subsys=daemon level=info msg=" External-Node IPv4: 199.204.45.129" subsys=daemon level=info msg=" Internal-Node IPv4: 10.0.0.15" subsys=daemon level=info msg=" IPv4 allocation prefix: 10.0.0.0/24" subsys=daemon level=info msg=" Loopback IPv4: 169.254.42.1" subsys=daemon level=info msg=" Local IPv4 addresses:" subsys=daemon level=info msg=" - 199.204.45.129" subsys=daemon level=info msg=" - 172.17.0.100" subsys=daemon level=info msg=" - 10.96.240.200" subsys=daemon level=info msg="Node updated" clusterName=default nodeName=instance subsys=nodemanager level=info msg="Adding local node to cluster" node="{instance default [{InternalIP 199.204.45.129} {CiliumInternalIP 10.0.0.15}] 10.0.0.0/24 [] [] 10.0.0.242 0 local 0 map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:] map[] 1 }" subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Waiting until all pre-existing resources have been received" subsys=k8s-watcher level=info msg="Initializing identity allocator" subsys=identity-cache level=info msg="Allocating identities between range" cluster-id=0 max=65535 min=256 subsys=identity-cache level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.core.bpf_jit_enable sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.all.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.fib_multipath_use_neigh sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.unprivileged_bpf_disabled sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.timer_migration sysParamValue=0 level=info msg="Setting up BPF datapath" bpfClockSource=ktime bpfInsnSet="" subsys=datapath-loader level=info msg="Iptables rules installed" subsys=iptables level=info msg="Adding new proxy port rules for cilium-dns-egress:42551" id=cilium-dns-egress subsys=proxy level=info msg="Iptables proxy rules installed" subsys=iptables level=info msg="Start hook executed" duration=2.424001112s function="cmd.newDaemonPromise.func1 (daemon_main.go:1663)" subsys=hive level=info msg="Starting IP identity watcher" subsys=ipcache level=info msg="Start hook executed" duration="15.961µs" function="utime.initUtimeSync.func1 (cell.go:33)" subsys=hive level=info msg="Initializing daemon" subsys=daemon level=info msg="Start hook executed" duration="9.381µs" function="*job.group.Start" subsys=hive level=info msg="Validating configured node address ranges" subsys=daemon level=info msg="Start hook executed" duration="42.201µs" function="l2respondermap.newMap.func1 (l2_responder_map4.go:44)" subsys=hive level=info msg="Starting connection tracking garbage collector" subsys=daemon level=info msg="Start hook executed" duration="50.541µs" function="*job.group.Start" subsys=hive level=info msg="Initial scan of connection tracking completed" subsys=ct-gc level=info msg="Regenerating restored endpoints" numRestored=0 subsys=daemon level=info msg="Creating host endpoint" subsys=daemon level=info msg="Finished regenerating restored endpoints" regenerated=0 subsys=daemon total=0 level=info msg="Deleted orphan backends" orphanBackends=0 subsys=service level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1385 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1385 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1385 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Launching Cilium health daemon" subsys=daemon level=info msg="Launching Cilium health endpoint" subsys=daemon level=info msg="Started healthz status API server" address="127.0.0.1:9879" subsys=daemon level=info msg="Processing queued endpoint deletion requests from /var/run/cilium/deleteQueue" subsys=daemon level=info msg="processing 0 queued deletion requests" subsys=daemon level=info msg="Initializing Cilium API" subsys=daemon level=info msg="Daemon initialization completed" bootstrapTime=3.498532939s subsys=daemon level=info msg="Hubble server is disabled" subsys=hubble level=info msg="Serving cilium API at unix:///var/run/cilium/cilium.sock" subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.141 caf49182-ff21-4032-9616-a16178a14990 default }" containerID=8c6f7e7122d22df636cee5120ec5a9b4713cabbd1c9114ee0125bf699484b199 datapathConfiguration="&{false false false false false }" interface=lxcd0d613b5f5e9 k8sPodName=kube-system/coredns-7c96b6546b-2shq8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8c6f7e7122 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3854 ipv4=10.0.0.141 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-2shq8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8c6f7e7122 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3854 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.141 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-2shq8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:kube-system]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=coredns;k8s:io.kubernetes.pod.namespace=kube-system;k8s:k8s-app=kube-dns;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=8c6f7e7122 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3854 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.141 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-2shq8 line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=8c6f7e7122 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3854 identity=12883 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.141 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-2shq8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8c6f7e7122 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3854 identity=12883 ipv4=10.0.0.141 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-2shq8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.218 ac54b1bf-d158-49b0-8f40-9f10fda85845 default }" containerID=b2c712cf853338ab0813a9d0f1de27947fe2f2818d3e6fd3d79de3cb58312eab datapathConfiguration="&{false false false false false }" interface=lxc9d4c3efbff78 k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-67n56 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b2c712cf85 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=629 ipv4=10.0.0.218 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-67n56 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b2c712cf85 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=629 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=19d396f9-c8e1-466a-8b0e-5e79717a0654,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=19d396f9-c8e1-466a-8b0e-5e79717a0654,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.218 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-67n56 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=certgen;k8s:batch.kubernetes.io/controller-uid=19d396f9-c8e1-466a-8b0e-5e79717a0654;k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen;k8s:controller-uid=19d396f9-c8e1-466a-8b0e-5e79717a0654;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;k8s:job-name=envoy-gateway-gateway-helm-certgen;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b2c712cf85 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=629 identity=63076 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=19d396f9-c8e1-466a-8b0e-5e79717a0654,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=19d396f9-c8e1-466a-8b0e-5e79717a0654,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.218 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-67n56 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b2c712cf85 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=629 identity=63076 ipv4=10.0.0.218 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-67n56 subsys=endpoint level=info msg="Compiled new BPF template" BPFCompilationTime=300.49078ms file-path=/var/run/cilium/state/templates/1e474096b5b5247ec72a51dac77c3806982e4f5d705abab2ee7eea04bd280577/bpf_host.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1385 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1087 ipv4=10.0.0.242 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1087 identityLabels="reserved:health" ipv4=10.0.0.242 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1087 identity=4 identityLabels="reserved:health" ipv4=10.0.0.242 ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Compiled new BPF template" BPFCompilationTime=1.059715188s file-path=/var/run/cilium/state/templates/10ba07b49d0091edc7bd17171dd5077d1df1b160723c4a3c2ac8fca45da1e69f/bpf_lxc.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1087 identity=4 ipv4=10.0.0.242 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b2c712cf85 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=629 identity=63076 ipv4=10.0.0.218 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-67n56 subsys=endpoint level=info msg="Successful endpoint creation" containerID=b2c712cf85 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=629 identity=63076 ipv4=10.0.0.218 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-67n56 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=8c6f7e7122 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3854 identity=12883 ipv4=10.0.0.141 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-2shq8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=8c6f7e7122 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3854 identity=12883 ipv4=10.0.0.141 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-2shq8 subsys=daemon level=info msg="Serving cilium health API at unix:///var/run/cilium/health.sock" subsys=health-server level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=b2c712cf85 endpointID=629 k8sNamespace=envoy-gateway-system k8sPodName=envoy-gateway-gateway-helm-certgen-67n56 subsys=daemon level=info msg="Releasing key" key="[k8s:app=certgen k8s:batch.kubernetes.io/controller-uid=19d396f9-c8e1-466a-8b0e-5e79717a0654 k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen k8s:controller-uid=19d396f9-c8e1-466a-8b0e-5e79717a0654 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen k8s:io.kubernetes.pod.namespace=envoy-gateway-system k8s:job-name=envoy-gateway-gateway-helm-certgen]" subsys=allocator level=info msg="Removed endpoint" containerID=b2c712cf85 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=629 identity=63076 ipv4=10.0.0.218 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-67n56 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.9 9e81a95b-1735-4881-a467-87248e92762c default }" containerID=732ec8830f8cb61d6f4b4a4e25e60e42faa3f1e5863cc98c9cba242b0ba0e7bb datapathConfiguration="&{false false false false false }" interface=lxc7929d3ae5507 k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-hbntr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=732ec8830f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2281 ipv4=10.0.0.9 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-hbntr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=732ec8830f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2281 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.9 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-hbntr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=envoy-gateway;k8s:app.kubernetes.io/name=gateway-helm;k8s:control-plane=envoy-gateway;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=732ec8830f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2281 identity=2778 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.9 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-hbntr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=732ec8830f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2281 identity=2778 ipv4=10.0.0.9 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-hbntr subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=732ec8830f datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2281 identity=2778 ipv4=10.0.0.9 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-hbntr subsys=endpoint level=info msg="Successful endpoint creation" containerID=732ec8830f datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2281 identity=2778 ipv4=10.0.0.9 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-hbntr subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1385 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_01385 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_01385 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_01385 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_01385:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1385 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.82 890022eb-cec4-437e-bed1-00d058581317 default }" containerID=74a5588d2fb0aa58de77ef86efb66f402d7db475f510ba17cdcf85fda555f7c3 datapathConfiguration="&{false false false false false }" interface=lxc2bcc19ebada7 k8sPodName=kube-system/coredns-67659f764b-7jx99 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=74a5588d2f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3246 ipv4=10.0.0.82 ipv6= k8sPodName=kube-system/coredns-67659f764b-7jx99 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=74a5588d2f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3246 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.82 ipv6= k8sPodName=kube-system/coredns-67659f764b-7jx99 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=74a5588d2f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3246 identity=12883 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.82 ipv6= k8sPodName=kube-system/coredns-67659f764b-7jx99 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=74a5588d2f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3246 identity=12883 ipv4=10.0.0.82 ipv6= k8sPodName=kube-system/coredns-67659f764b-7jx99 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.89 25e653e3-e6d1-4a89-84e3-8aee1222e58f default }" containerID=ef53d46b4ca6803bc3e95dc2a6655668538dcccf2afee2893f96d0eb0a5cb33c datapathConfiguration="&{false false false false false }" interface=lxc3b62c5c7641c k8sPodName=kube-system/coredns-67659f764b-8775v labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ef53d46b4c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1371 ipv4=10.0.0.89 ipv6= k8sPodName=kube-system/coredns-67659f764b-8775v subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ef53d46b4c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1371 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.89 ipv6= k8sPodName=kube-system/coredns-67659f764b-8775v subsys=endpoint level=info msg="Identity of endpoint changed" containerID=ef53d46b4c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1371 identity=12883 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.89 ipv6= k8sPodName=kube-system/coredns-67659f764b-8775v oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ef53d46b4c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1371 identity=12883 ipv4=10.0.0.89 ipv6= k8sPodName=kube-system/coredns-67659f764b-8775v subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=74a5588d2f datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3246 identity=12883 ipv4=10.0.0.82 ipv6= k8sPodName=kube-system/coredns-67659f764b-7jx99 subsys=endpoint level=info msg="Successful endpoint creation" containerID=74a5588d2f datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3246 identity=12883 ipv4=10.0.0.82 ipv6= k8sPodName=kube-system/coredns-67659f764b-7jx99 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=ef53d46b4c datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1371 identity=12883 ipv4=10.0.0.89 ipv6= k8sPodName=kube-system/coredns-67659f764b-8775v subsys=endpoint level=info msg="Successful endpoint creation" containerID=ef53d46b4c datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1371 identity=12883 ipv4=10.0.0.89 ipv6= k8sPodName=kube-system/coredns-67659f764b-8775v subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.104 0c2f88b1-4d43-42b8-838f-cd6b605839a0 default }" containerID=42394ab767cea384f5343e15fc6c9bbd8943488e76488b8a0329a83d8b31efaf datapathConfiguration="&{false false false false false }" interface=lxc7d475ad3e3dc k8sPodName=local-path-storage/local-path-provisioner-679c578f5-p2psl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=42394ab767 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=774 ipv4=10.0.0.104 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-p2psl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=42394ab767 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=774 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.104 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-p2psl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=local-path-provisioner;k8s:app.kubernetes.io/name=local-path-provisioner;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=42394ab767 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=774 identity=26431 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.104 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-p2psl oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=42394ab767 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=774 identity=26431 ipv4=10.0.0.104 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-p2psl subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=42394ab767 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=774 identity=26431 ipv4=10.0.0.104 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-p2psl subsys=endpoint level=info msg="Successful endpoint creation" containerID=42394ab767 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=774 identity=26431 ipv4=10.0.0.104 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-p2psl subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=8c6f7e7122 endpointID=3854 k8sNamespace=kube-system k8sPodName=coredns-7c96b6546b-2shq8 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=coredns k8s:io.kubernetes.pod.namespace=kube-system k8s:k8s-app=kube-dns]" subsys=allocator level=info msg="Removed endpoint" containerID=8c6f7e7122 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3854 identity=12883 ipv4=10.0.0.141 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-2shq8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.71 ff3b295a-8041-4518-b704-163d75613fc0 default }" containerID=dfa1a7759c81812e36f53c6f28058840db32d04722d0a1c30c312f26bfe3bbea datapathConfiguration="&{false false false false false }" interface=lxc1501700cdb73 k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-59h85 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=dfa1a7759c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=635 ipv4=10.0.0.71 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-59h85 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=dfa1a7759c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=635 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.71 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-59h85 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=cainjector;k8s:app.kubernetes.io/component=cainjector;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cainjector;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=dfa1a7759c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=635 identity=22836 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.71 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-59h85 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=dfa1a7759c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=635 identity=22836 ipv4=10.0.0.71 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-59h85 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.79 66e3a3b0-5909-4e48-8864-933cf32331f5 default }" containerID=930c81d605210e9c66fd26298afb071b43965447dd8f625e38d591cfeed86039 datapathConfiguration="&{false false false false false }" interface=lxc7e6dd0be5fa8 k8sPodName=cert-manager/cert-manager-75c4c745bc-t6585 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=930c81d605 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1378 ipv4=10.0.0.79 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-t6585 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=930c81d605 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1378 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.79 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-t6585 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.114 27e7c98c-15c0-4a9b-b55c-f6c3f51a9639 default }" containerID=67fbd7bd3ca9b02fd3967f2769f3b2c7192f9e446d7216b1aab162a577dc0a66 datapathConfiguration="&{false false false false false }" interface=lxcf716fe79419b k8sPodName=cert-manager/cert-manager-webhook-548949fc64-rmhq5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=67fbd7bd3c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1232 ipv4=10.0.0.114 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-rmhq5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=67fbd7bd3c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1232 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.114 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-rmhq5 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=cert-manager;k8s:app.kubernetes.io/component=controller;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cert-manager;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=930c81d605 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1378 identity=35213 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.79 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-t6585 oldIdentity="no identity" subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Waiting for endpoint to be generated" containerID=930c81d605 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1378 identity=35213 ipv4=10.0.0.79 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-t6585 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=webhook;k8s:app.kubernetes.io/component=webhook;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=webhook;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=67fbd7bd3c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1232 identity=64245 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.114 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-rmhq5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=67fbd7bd3c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1232 identity=64245 ipv4=10.0.0.114 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-rmhq5 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=dfa1a7759c datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=635 identity=22836 ipv4=10.0.0.71 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-59h85 subsys=endpoint level=info msg="Successful endpoint creation" containerID=dfa1a7759c datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=635 identity=22836 ipv4=10.0.0.71 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-59h85 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=930c81d605 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1378 identity=35213 ipv4=10.0.0.79 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-t6585 subsys=endpoint level=info msg="Successful endpoint creation" containerID=930c81d605 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1378 identity=35213 ipv4=10.0.0.79 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-t6585 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=67fbd7bd3c datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1232 identity=64245 ipv4=10.0.0.114 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-rmhq5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=67fbd7bd3c datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1232 identity=64245 ipv4=10.0.0.114 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-rmhq5 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.24 b7f4ef48-6c3b-4bac-9401-a2482da5677b default }" containerID=d7896afa36971e5615623eff23f2c1b33977aa2403c9c913c10861cfe6e3ab98 datapathConfiguration="&{false false false false false }" interface=lxcbe7889abeb77 k8sPodName=cert-manager/cert-manager-startupapicheck-kj6pw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d7896afa36 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1863 ipv4=10.0.0.24 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-kj6pw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d7896afa36 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1863 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=c4c17e19-2d99-4859-990b-3479959cab35,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=c4c17e19-2d99-4859-990b-3479959cab35,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.24 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-kj6pw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=startupapicheck;k8s:app.kubernetes.io/component=startupapicheck;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=startupapicheck;k8s:app.kubernetes.io/version=v1.11.5;k8s:batch.kubernetes.io/controller-uid=c4c17e19-2d99-4859-990b-3479959cab35;k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck;k8s:controller-uid=c4c17e19-2d99-4859-990b-3479959cab35;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck;k8s:io.kubernetes.pod.namespace=cert-manager;k8s:job-name=cert-manager-startupapicheck;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d7896afa36 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1863 identity=28375 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=c4c17e19-2d99-4859-990b-3479959cab35,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=c4c17e19-2d99-4859-990b-3479959cab35,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.24 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-kj6pw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d7896afa36 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1863 identity=28375 ipv4=10.0.0.24 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-kj6pw subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d7896afa36 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1863 identity=28375 ipv4=10.0.0.24 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-kj6pw subsys=endpoint level=info msg="Successful endpoint creation" containerID=d7896afa36 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1863 identity=28375 ipv4=10.0.0.24 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-kj6pw subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=d7896afa36 endpointID=1863 k8sNamespace=cert-manager k8sPodName=cert-manager-startupapicheck-kj6pw subsys=daemon level=info msg="Releasing key" key="[k8s:app=startupapicheck k8s:app.kubernetes.io/component=startupapicheck k8s:app.kubernetes.io/instance=cert-manager k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=startupapicheck k8s:app.kubernetes.io/version=v1.11.5 k8s:batch.kubernetes.io/controller-uid=c4c17e19-2d99-4859-990b-3479959cab35 k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck k8s:controller-uid=c4c17e19-2d99-4859-990b-3479959cab35 k8s:helm.sh/chart=cert-manager-v1.11.5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager k8s:io.cilium.k8s.namespace.labels.name=cert-manager k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck k8s:io.kubernetes.pod.namespace=cert-manager k8s:job-name=cert-manager-startupapicheck]" subsys=allocator level=info msg="Removed endpoint" containerID=d7896afa36 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1863 identity=28375 ipv4=10.0.0.24 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-kj6pw subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.213 9ceebc83-fd4b-45dd-8a80-1ff45804457c default }" containerID=bf64ac22195f3715135dba64d7d1cf4dfd56fd6f359f284b4a6deeaf69ba4004 datapathConfiguration="&{false false false false false }" interface=lxc2220c4177566 k8sPodName=ingress-nginx/ingress-nginx-admission-create-c4hpz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bf64ac2219 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=504 ipv4=10.0.0.213 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-c4hpz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bf64ac2219 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=504 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=6d9571f0-d6f2-4ea9-b553-b47f2392f688,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=6d9571f0-d6f2-4ea9-b553-b47f2392f688,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.213 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-c4hpz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=6d9571f0-d6f2-4ea9-b553-b47f2392f688;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create;k8s:controller-uid=6d9571f0-d6f2-4ea9-b553-b47f2392f688;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-create;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=bf64ac2219 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=504 identity=3019 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=6d9571f0-d6f2-4ea9-b553-b47f2392f688,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=6d9571f0-d6f2-4ea9-b553-b47f2392f688,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.213 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-c4hpz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=bf64ac2219 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=504 identity=3019 ipv4=10.0.0.213 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-c4hpz subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=bf64ac2219 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=504 identity=3019 ipv4=10.0.0.213 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-c4hpz subsys=endpoint level=info msg="Successful endpoint creation" containerID=bf64ac2219 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=504 identity=3019 ipv4=10.0.0.213 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-c4hpz subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=bf64ac2219 endpointID=504 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-create-c4hpz subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=6d9571f0-d6f2-4ea9-b553-b47f2392f688 k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create k8s:controller-uid=6d9571f0-d6f2-4ea9-b553-b47f2392f688 k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-create]" subsys=allocator level=info msg="Removed endpoint" containerID=bf64ac2219 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=504 identity=3019 ipv4=10.0.0.213 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-c4hpz subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.2 29cb90f1-f581-4481-9674-409662900f90 default }" containerID=2bf892251978f309beaedded6b7875a4e85b7cef4744b35104fc1bd12920de7e datapathConfiguration="&{false false false false false }" interface=lxc01f9b678dbbb k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-qxtkc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2bf8922519 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3217 ipv4=10.0.0.2 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-qxtkc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2bf8922519 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3217 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.2 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-qxtkc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=default-backend;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend;k8s:io.kubernetes.pod.namespace=ingress-nginx;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2bf8922519 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3217 identity=64322 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.2 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-qxtkc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2bf8922519 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3217 identity=64322 ipv4=10.0.0.2 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-qxtkc subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=2bf8922519 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3217 identity=64322 ipv4=10.0.0.2 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-qxtkc subsys=endpoint level=info msg="Successful endpoint creation" containerID=2bf8922519 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3217 identity=64322 ipv4=10.0.0.2 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-qxtkc subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.47 fd9654a8-9052-4df4-80f4-bc223ca19fa4 default }" containerID=ad246ba04e3864285a8f8f11f85a602dec71a313ad9cf7fe7047c1fd4287e08c datapathConfiguration="&{false false false false false }" interface=lxc0abfe070f6a0 k8sPodName=ingress-nginx/ingress-nginx-admission-patch-9nfd4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ad246ba04e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2731 ipv4=10.0.0.47 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-9nfd4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ad246ba04e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2731 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=70e5d029-42ec-471d-a307-ca1d4484ec75,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=70e5d029-42ec-471d-a307-ca1d4484ec75,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.47 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-9nfd4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=70e5d029-42ec-471d-a307-ca1d4484ec75;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch;k8s:controller-uid=70e5d029-42ec-471d-a307-ca1d4484ec75;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-patch;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ad246ba04e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2731 identity=9358 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=70e5d029-42ec-471d-a307-ca1d4484ec75,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=70e5d029-42ec-471d-a307-ca1d4484ec75,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.47 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-9nfd4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ad246ba04e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2731 identity=9358 ipv4=10.0.0.47 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-9nfd4 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ad246ba04e datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2731 identity=9358 ipv4=10.0.0.47 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-9nfd4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=ad246ba04e datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2731 identity=9358 ipv4=10.0.0.47 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-9nfd4 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=ad246ba04e endpointID=2731 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-patch-9nfd4 subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=70e5d029-42ec-471d-a307-ca1d4484ec75 k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch k8s:controller-uid=70e5d029-42ec-471d-a307-ca1d4484ec75 k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-patch]" subsys=allocator level=info msg="Removed endpoint" containerID=ad246ba04e datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2731 identity=9358 ipv4=10.0.0.47 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-9nfd4 subsys=endpoint level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"messaging-topology-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9443 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-messaging-topology-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=12f284c7-5db5-4e2e-9c0d-cc4495a422f6] Description:}]" policyAddRequest=203db174-8c70-4d85-bbc8-ea3c1221e5ac subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-messaging-topology-operator subsys=k8s-watcher level=info msg="Policy imported via API, recalculating..." policyAddRequest=203db174-8c70-4d85-bbc8-ea3c1221e5ac policyRevision=2 subsys=daemon level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"rabbitmq-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-cluster-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=81bf05f9-5d36-4550-b03a-3d313894317c] Description:}]" policyAddRequest=02db4d93-f768-45c4-8e05-3ba2dfde030c subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=02db4d93-f768-45c4-8e05-3ba2dfde030c policyRevision=3 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-cluster-operator subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.65 a7f31407-46dd-4870-81bb-f7467336eb1f default }" containerID=cd8f54c5576ef9fd33832d2110a2e99953d69ed94f8bd5062eb59e273ac76903 datapathConfiguration="&{false false false false false }" interface=lxce6da29e12719 k8sPodName=openstack/rabbitmq-messaging-topology-operator-5c9876cc97-kjz28 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=cd8f54c557 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1216 ipv4=10.0.0.65 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-5c9876cc97-kjz28 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=cd8f54c557 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1216 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.13.0,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.2.4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.65 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-5c9876cc97-kjz28 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.73 6521ffc3-88b8-48b3-8a09-20ae314afde9 default }" containerID=a7212635e7a12d5538a91aa3542515fcbd4bb3dbb3e784e20d74cd92b38b9168 datapathConfiguration="&{false false false false false }" interface=lxcd7fbe6d4f4bd k8sPodName=openstack/rabbitmq-cluster-operator-67fdb85b4f-rwlc6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a7212635e7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=50 ipv4=10.0.0.73 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-67fdb85b4f-rwlc6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a7212635e7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=50 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.8.0,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.2.4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.73 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-67fdb85b4f-rwlc6 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=cd8f54c557 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1216 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.65 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-5c9876cc97-kjz28 line=611 subsys=endpoint level=info msg="Invalid state transition skipped" containerID=a7212635e7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=50 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.73 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-67fdb85b4f-rwlc6 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=messaging-topology-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=1.13.0;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.2.4;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Identity of endpoint changed" containerID=cd8f54c557 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1216 identity=50958 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.13.0,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.2.4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.65 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-5c9876cc97-kjz28 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=cd8f54c557 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1216 identity=50958 ipv4=10.0.0.65 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-5c9876cc97-kjz28 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=2.8.0;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.2.4;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a7212635e7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=50 identity=29447 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.8.0,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.2.4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.73 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-67fdb85b4f-rwlc6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a7212635e7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=50 identity=29447 ipv4=10.0.0.73 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-67fdb85b4f-rwlc6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=cd8f54c557 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1216 identity=50958 ipv4=10.0.0.65 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-5c9876cc97-kjz28 subsys=endpoint level=info msg="Successful endpoint creation" containerID=cd8f54c557 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1216 identity=50958 ipv4=10.0.0.65 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-5c9876cc97-kjz28 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=a7212635e7 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=50 identity=29447 ipv4=10.0.0.73 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-67fdb85b4f-rwlc6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=a7212635e7 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=50 identity=29447 ipv4=10.0.0.73 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-67fdb85b4f-rwlc6 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.110 d4a92567-d2fa-4d04-be7a-831085d94561 default }" containerID=ca034adc3ae6009764bd081fda3036564f5d6664e310ea67e01e2383d230e260 datapathConfiguration="&{false false false false false }" interface=lxc1c7510ba605b k8sPodName=openstack/pxc-operator-7cff949c8b-qs2fl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ca034adc3a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2962 ipv4=10.0.0.110 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-qs2fl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ca034adc3a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2962 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.110 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-qs2fl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=operator;k8s:app.kubernetes.io/instance=pxc-operator;k8s:app.kubernetes.io/name=pxc-operator;k8s:app.kubernetes.io/part-of=pxc-operator;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ca034adc3a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2962 identity=43326 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.110 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-qs2fl oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=ca034adc3a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2962 identity=43326 ipv4=10.0.0.110 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-qs2fl subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ca034adc3a datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=2962 identity=43326 ipv4=10.0.0.110 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-qs2fl subsys=endpoint level=info msg="Successful endpoint creation" containerID=ca034adc3a datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=2962 identity=43326 ipv4=10.0.0.110 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-qs2fl subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.75 801d2933-6c3f-4d8f-b644-1222ba0e599b default }" containerID=6b845d55f51bde03f886dcff4c250f2cc782091e2d0e2b39dc032e81510e8936 datapathConfiguration="&{false false false false false }" interface=lxcf84632bbda31 k8sPodName=openstack/percona-xtradb-haproxy-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6b845d55f5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=190 ipv4=10.0.0.75 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6b845d55f5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=190 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.75 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=haproxy;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6b845d55f5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=190 identity=39932 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.75 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6b845d55f5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=190 identity=39932 ipv4=10.0.0.75 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.106 592ca09b-c4b5-4c55-8f03-0a4da387cb5f default }" containerID=c6d0c76f7cae9ec3d1bdf31c392308f6c17c9d0206a4994bcd4700dc63d6b5d8 datapathConfiguration="&{false false false false false }" interface=lxc6dca2f128b55 k8sPodName=local-path-storage/helper-pod-create-pvc-a66da341-ca9c-464c-97f3-f0ec0ebd272d labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c6d0c76f7c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1403 ipv4=10.0.0.106 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a66da341-ca9c-464c-97f3-f0ec0ebd272d subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c6d0c76f7c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1403 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.106 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a66da341-ca9c-464c-97f3-f0ec0ebd272d subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c6d0c76f7c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1403 identity=55999 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.106 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a66da341-ca9c-464c-97f3-f0ec0ebd272d oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c6d0c76f7c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1403 identity=55999 ipv4=10.0.0.106 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a66da341-ca9c-464c-97f3-f0ec0ebd272d subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6b845d55f5 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=190 identity=39932 ipv4=10.0.0.75 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=6b845d55f5 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=190 identity=39932 ipv4=10.0.0.75 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=c6d0c76f7c datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1403 identity=55999 ipv4=10.0.0.106 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a66da341-ca9c-464c-97f3-f0ec0ebd272d subsys=endpoint level=info msg="Successful endpoint creation" containerID=c6d0c76f7c datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1403 identity=55999 ipv4=10.0.0.106 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a66da341-ca9c-464c-97f3-f0ec0ebd272d subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=c6d0c76f7c endpointID=1403 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-a66da341-ca9c-464c-97f3-f0ec0ebd272d subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=c6d0c76f7c datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1403 identity=55999 ipv4=10.0.0.106 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a66da341-ca9c-464c-97f3-f0ec0ebd272d subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.201 2f272f7e-6196-4230-805f-4fcc87277e02 default }" containerID=b41fa60532aff541cab67ba93131a286054ea73ab3789587846d8429e4e42978 datapathConfiguration="&{false false false false false }" interface=lxc3d27108dbab4 k8sPodName=openstack/percona-xtradb-pxc-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b41fa60532 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=612 ipv4=10.0.0.201 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b41fa60532 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=612 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.201 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=b41fa60532 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=612 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.201 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=pxc;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b41fa60532 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=612 identity=45437 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.201 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b41fa60532 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=612 identity=45437 ipv4=10.0.0.201 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b41fa60532 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=612 identity=45437 ipv4=10.0.0.201 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=b41fa60532 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=612 identity=45437 ipv4=10.0.0.201 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"keycloak\",\"k8s:app.kubernetes.io/instance\":\"keycloak\",\"k8s:app.kubernetes.io/name\":\"keycloak\",\"k8s:io.kubernetes.pod.namespace\":\"auth-system\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:7800 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:8080 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=keycloak k8s:io.cilium.k8s.policy.namespace=auth-system k8s:io.cilium.k8s.policy.uid=c9f7daad-e68a-466a-8604-69ccf0761af5] Description:}]" policyAddRequest=685eb82f-55b4-49b6-b96b-21367f307e45 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=keycloak subsys=k8s-watcher level=info msg="Policy imported via API, recalculating..." policyAddRequest=685eb82f-55b4-49b6-b96b-21367f307e45 policyRevision=4 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.42 60c16c88-8ddb-4f43-adca-26ca22a0a1e4 default }" containerID=1397cf93e7816b05c6334ae5aed49d3ba72090cba3324dbe5ed09f0427da6e86 datapathConfiguration="&{false false false false false }" interface=lxc4c7d4f973045 k8sPodName=auth-system/keycloak-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1397cf93e7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3857 ipv4=10.0.0.42 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1397cf93e7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3857 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=23.0.7,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-20.0.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.42 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:auth-system k8s:io.cilium.k8s.namespace.labels.name:auth-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=keycloak;k8s:app.kubernetes.io/instance=keycloak;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=keycloak;k8s:app.kubernetes.io/version=23.0.7;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=keycloak-20.0.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system;k8s:io.cilium.k8s.namespace.labels.name=auth-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keycloak;k8s:io.kubernetes.pod.namespace=auth-system;k8s:statefulset.kubernetes.io/pod-name=keycloak-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1397cf93e7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3857 identity=6396 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=23.0.7,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-20.0.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.42 ipv6= k8sPodName=auth-system/keycloak-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1397cf93e7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3857 identity=6396 ipv4=10.0.0.42 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=1397cf93e7 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3857 identity=6396 ipv4=10.0.0.42 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=1397cf93e7 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3857 identity=6396 ipv4=10.0.0.42 ipv6= k8sPodName=auth-system/keycloak-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.0097461008833038 newInterval=7m30s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.213 f477d4e9-6e32-46b6-86c5-340a294f5c3d default }" containerID=c78a2a36c70d9fc29f3395a2c94c939d9496ed0d4529c0756f7780d5ad3aaa3b datapathConfiguration="&{false false false false false }" interface=lxc9bb5f7b9724b k8sPodName=monitoring/node-feature-discovery-worker-k5dhg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c78a2a36c7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=130 ipv4=10.0.0.213 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-k5dhg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c78a2a36c7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=130 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.213 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-k5dhg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=worker;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c78a2a36c7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=130 identity=10917 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.213 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-k5dhg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c78a2a36c7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=130 identity=10917 ipv4=10.0.0.213 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-k5dhg subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c78a2a36c7 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=130 identity=10917 ipv4=10.0.0.213 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-k5dhg subsys=endpoint level=info msg="Successful endpoint creation" containerID=c78a2a36c7 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=130 identity=10917 ipv4=10.0.0.213 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-k5dhg subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.69 7530525c-15b8-4590-84a0-617da56c08c8 default }" containerID=e3dda1a65689fee118ec9fed04b8fa5b8ec8747b3692d0ff5a4beeb5d2e8e5b7 datapathConfiguration="&{false false false false false }" interface=lxc0b630f5f2af7 k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-lfpl2 labels="[]" subsys=daemon sync-build=true level=info msg="Create endpoint request" addressing="&{10.0.0.21 3e51477f-6311-4ce2-aa3d-17d2bde8f514 default }" containerID=df5a52bf28bc9bf50346aa64559e954cbab5db246e45292c19e1decee0934c3f datapathConfiguration="&{false false false false false }" interface=lxc942c380a52e3 k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-lbprm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e3dda1a656 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=75 ipv4=10.0.0.69 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-lfpl2 subsys=endpoint level=info msg="New endpoint" containerID=df5a52bf28 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3840 ipv4=10.0.0.21 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-lbprm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e3dda1a656 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=75 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.69 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-lfpl2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Resolving identity labels (blocking)" containerID=df5a52bf28 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3840 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.21 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-lbprm subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=master;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e3dda1a656 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=75 identity=15549 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.69 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-lfpl2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e3dda1a656 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=75 identity=15549 ipv4=10.0.0.69 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-lfpl2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=gc;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=df5a52bf28 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3840 identity=6677 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.21 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-lbprm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=df5a52bf28 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3840 identity=6677 ipv4=10.0.0.21 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-lbprm subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=df5a52bf28 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3840 identity=6677 ipv4=10.0.0.21 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-lbprm subsys=endpoint level=info msg="Successful endpoint creation" containerID=df5a52bf28 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3840 identity=6677 ipv4=10.0.0.21 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-lbprm subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=e3dda1a656 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=75 identity=15549 ipv4=10.0.0.69 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-lfpl2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=e3dda1a656 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=75 identity=15549 ipv4=10.0.0.69 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-lfpl2 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.243 379a4c4f-7933-4ead-a621-63971d45c4e3 default }" containerID=7736f43023e2b32068fb68fa9a6f4a1a8deee4978639dc6c4d78fbbea1204125 datapathConfiguration="&{false false false false false }" interface=lxcf879b7c07d37 k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-n2vgf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7736f43023 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1772 ipv4=10.0.0.243 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-n2vgf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7736f43023 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1772 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.243 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-n2vgf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:secretgen-controller]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=secretgen-controller;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa;k8s:io.kubernetes.pod.namespace=secretgen-controller;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7736f43023 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1772 identity=20204 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.243 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-n2vgf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7736f43023 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1772 identity=20204 ipv4=10.0.0.243 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-n2vgf subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7736f43023 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1772 identity=20204 ipv4=10.0.0.243 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-n2vgf subsys=endpoint level=info msg="Successful endpoint creation" containerID=7736f43023 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1772 identity=20204 ipv4=10.0.0.243 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-n2vgf subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1385 identity=1 identityLabels="k8s:feature.node.kubernetes.io/cpu-cpuid.ADX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AESNI=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX2=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CLZERO=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CMPXCHG8=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FMA3=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSROPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.HYPERVISOR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IA32_ARCH_CAP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBPB=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBRS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.LAHF=true,k8s:feature.node.kubernetes.io/cpu-cpuid.MOVBE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.NRIPS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.OSXSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SHA=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SPEC_CTRL_SSBD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SSE4A=true,k8s:feature.node.kubernetes.io/cpu-cpuid.STIBP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVM=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVMNP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSCALL=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSEE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.TOPEXT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.WBNOINVD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.X87=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XGETBV1=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEC=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEOPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVES=true,k8s:feature.node.kubernetes.io/cpu-hardware_multithreading=false,k8s:feature.node.kubernetes.io/cpu-model.family=23,k8s:feature.node.kubernetes.io/cpu-model.id=49,k8s:feature.node.kubernetes.io/cpu-model.vendor_id=AMD,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ=true,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ_IDLE=true,k8s:feature.node.kubernetes.io/kernel-version.full=5.15.0-174-generic,k8s:feature.node.kubernetes.io/kernel-version.major=5,k8s:feature.node.kubernetes.io/kernel-version.minor=15,k8s:feature.node.kubernetes.io/kernel-version.revision=0,k8s:feature.node.kubernetes.io/pci-0300_1af4.present=true,k8s:feature.node.kubernetes.io/system-os_release.ID=ubuntu,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.major=22,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.minor=04,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID=22.04,k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_01385 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_01385 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_01385 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_01385:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1385 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.183 7dcd6c87-3c3e-4819-94d9-adb3eb64a478 default }" containerID=9abd489e970d614daf1cd0bf460cf97feac3d9d423694cc5b057b04255189ec3 datapathConfiguration="&{false false false false false }" interface=lxce6855edff585 k8sPodName=monitoring/kube-prometheus-stack-admission-create-ncxq5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9abd489e97 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=95 ipv4=10.0.0.183 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-ncxq5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9abd489e97 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=95 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=58.2.1,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=3309bcad-a994-49bc-b4aa-ed3d42b04ae7,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-58.2.1,k8s:controller-uid=3309bcad-a994-49bc-b4aa-ed3d42b04ae7,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.183 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-ncxq5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=9abd489e97 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=95 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.183 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-ncxq5 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-create;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=58.2.1;k8s:batch.kubernetes.io/controller-uid=3309bcad-a994-49bc-b4aa-ed3d42b04ae7;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create;k8s:chart=kube-prometheus-stack-58.2.1;k8s:controller-uid=3309bcad-a994-49bc-b4aa-ed3d42b04ae7;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-create;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9abd489e97 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=95 identity=62416 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=58.2.1,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=3309bcad-a994-49bc-b4aa-ed3d42b04ae7,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-58.2.1,k8s:controller-uid=3309bcad-a994-49bc-b4aa-ed3d42b04ae7,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.183 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-ncxq5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9abd489e97 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=95 identity=62416 ipv4=10.0.0.183 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-ncxq5 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9abd489e97 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=95 identity=62416 ipv4=10.0.0.183 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-ncxq5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=9abd489e97 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=95 identity=62416 ipv4=10.0.0.183 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-ncxq5 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=9abd489e97 endpointID=95 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-create-ncxq5 subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-create k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=58.2.1 k8s:batch.kubernetes.io/controller-uid=3309bcad-a994-49bc-b4aa-ed3d42b04ae7 k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create k8s:chart=kube-prometheus-stack-58.2.1 k8s:controller-uid=3309bcad-a994-49bc-b4aa-ed3d42b04ae7 k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-create k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=9abd489e97 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=95 identity=62416 ipv4=10.0.0.183 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-ncxq5 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.250 9fbcaf18-06fc-4b92-95e8-9684fc62834d default }" containerID=7cbd0cf87f00e7fd2fd20c404c6b9f24be90f531104bdda80b6cdd8434351047 datapathConfiguration="&{false false false false false }" interface=lxc499e05935769 k8sPodName=monitoring/kube-prometheus-stack-operator-7d58f4b66c-dbpbg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7cbd0cf87f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=479 ipv4=10.0.0.250 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-7d58f4b66c-dbpbg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7cbd0cf87f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=479 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=58.2.1,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-58.2.1,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.250 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-7d58f4b66c-dbpbg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-operator;k8s:app.kubernetes.io/component=prometheus-operator;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=58.2.1;k8s:chart=kube-prometheus-stack-58.2.1;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7cbd0cf87f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=479 identity=65448 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=58.2.1,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-58.2.1,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.250 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-7d58f4b66c-dbpbg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7cbd0cf87f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=479 identity=65448 ipv4=10.0.0.250 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-7d58f4b66c-dbpbg subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.131 d5cbcc4c-795a-47a6-9d54-4ba278a31d94 default }" containerID=52a96f1e55906892a7cbb446992cc018c9524726da689816eaeee00d10c96587 datapathConfiguration="&{false false false false false }" interface=lxc05a7dcba5182 k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-6fbdd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=52a96f1e55 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=310 ipv4=10.0.0.131 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-6fbdd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=52a96f1e55 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=310 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.18.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.131 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-6fbdd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=metrics;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-state-metrics;k8s:app.kubernetes.io/part-of=kube-state-metrics;k8s:app.kubernetes.io/version=2.12.0;k8s:helm.sh/chart=kube-state-metrics-5.18.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=52a96f1e55 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=310 identity=4749 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.18.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.131 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-6fbdd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=52a96f1e55 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=310 identity=4749 ipv4=10.0.0.131 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-6fbdd subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.90 b4744e0d-9e4c-43fb-91e1-9117a802e154 default }" containerID=05f3cf47e6a2cc24af2d3daa2a927cab669cc144ebe77dd6e6c0353b0f4a61f0 datapathConfiguration="&{false false false false false }" interface=lxc13cd7772e16e k8sPodName=monitoring/kube-prometheus-stack-grafana-5b7ddc86fb-tmb5g labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=05f3cf47e6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=273 ipv4=10.0.0.90 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-5b7ddc86fb-tmb5g subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=05f3cf47e6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=273 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.90 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-5b7ddc86fb-tmb5g subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/name=grafana;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=05f3cf47e6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=273 identity=17943 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.90 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-5b7ddc86fb-tmb5g oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=05f3cf47e6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=273 identity=17943 ipv4=10.0.0.90 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-5b7ddc86fb-tmb5g subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7cbd0cf87f datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=479 identity=65448 ipv4=10.0.0.250 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-7d58f4b66c-dbpbg subsys=endpoint level=info msg="Successful endpoint creation" containerID=7cbd0cf87f datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=479 identity=65448 ipv4=10.0.0.250 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-7d58f4b66c-dbpbg subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=52a96f1e55 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=310 identity=4749 ipv4=10.0.0.131 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-6fbdd subsys=endpoint level=info msg="Successful endpoint creation" containerID=52a96f1e55 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=310 identity=4749 ipv4=10.0.0.131 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-6fbdd subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=05f3cf47e6 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=273 identity=17943 ipv4=10.0.0.90 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-5b7ddc86fb-tmb5g subsys=endpoint level=info msg="Successful endpoint creation" containerID=05f3cf47e6 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=273 identity=17943 ipv4=10.0.0.90 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-5b7ddc86fb-tmb5g subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.38 3b806540-c0f1-437e-b6f6-9530d9133a53 default }" containerID=e76a212c41cd67a0db32ebb03a0ac1f1c2b03ccb286c7e2d7379732db3e006f3 datapathConfiguration="&{false false false false false }" interface=lxca624ddc2cfb6 k8sPodName=monitoring/kube-prometheus-stack-admission-patch-dclsl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e76a212c41 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=500 ipv4=10.0.0.38 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-dclsl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e76a212c41 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=500 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=58.2.1,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=bc31e50e-26a5-4703-a51e-4d90fa1b60aa,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-58.2.1,k8s:controller-uid=bc31e50e-26a5-4703-a51e-4d90fa1b60aa,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.38 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-dclsl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-patch;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=58.2.1;k8s:batch.kubernetes.io/controller-uid=bc31e50e-26a5-4703-a51e-4d90fa1b60aa;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch;k8s:chart=kube-prometheus-stack-58.2.1;k8s:controller-uid=bc31e50e-26a5-4703-a51e-4d90fa1b60aa;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-patch;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e76a212c41 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=500 identity=8518 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=58.2.1,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=bc31e50e-26a5-4703-a51e-4d90fa1b60aa,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-58.2.1,k8s:controller-uid=bc31e50e-26a5-4703-a51e-4d90fa1b60aa,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.38 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-dclsl oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e76a212c41 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=500 identity=8518 ipv4=10.0.0.38 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-dclsl subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e76a212c41 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=500 identity=8518 ipv4=10.0.0.38 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-dclsl subsys=endpoint level=info msg="Successful endpoint creation" containerID=e76a212c41 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=500 identity=8518 ipv4=10.0.0.38 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-dclsl subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.106 82797615-c38d-4063-9fad-2ff8f1fc0589 default }" containerID=bb83b5564af8f71b2a14aca9ddb5fb31df28e507d607d53706b34e440a84499b datapathConfiguration="&{false false false false false }" interface=lxcfa97ddf861e5 k8sPodName=local-path-storage/helper-pod-create-pvc-b4703c80-b7e5-4a49-99f1-dec7179dd3b3 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bb83b5564a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1846 ipv4=10.0.0.106 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b4703c80-b7e5-4a49-99f1-dec7179dd3b3 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bb83b5564a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1846 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.106 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b4703c80-b7e5-4a49-99f1-dec7179dd3b3 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=bb83b5564a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1846 identity=55999 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.106 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b4703c80-b7e5-4a49-99f1-dec7179dd3b3 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=bb83b5564a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1846 identity=55999 ipv4=10.0.0.106 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b4703c80-b7e5-4a49-99f1-dec7179dd3b3 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=bb83b5564a datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1846 identity=55999 ipv4=10.0.0.106 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b4703c80-b7e5-4a49-99f1-dec7179dd3b3 subsys=endpoint level=info msg="Successful endpoint creation" containerID=bb83b5564a datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1846 identity=55999 ipv4=10.0.0.106 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b4703c80-b7e5-4a49-99f1-dec7179dd3b3 subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.10 f37abce5-69d8-4ef9-86a2-6dfde5ca32a2 default }" containerID=7e308023898d2599c95216755c17d07377bc6710e959a91fcfd0937a474493ff datapathConfiguration="&{false false false false false }" interface=lxc50a17b510910 k8sPodName=local-path-storage/helper-pod-create-pvc-370bd2df-9a95-4aac-82ae-53f3178b0955 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7e30802389 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2214 ipv4=10.0.0.10 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-370bd2df-9a95-4aac-82ae-53f3178b0955 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7e30802389 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2214 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.10 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-370bd2df-9a95-4aac-82ae-53f3178b0955 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=7e30802389 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2214 identity=55999 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.10 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-370bd2df-9a95-4aac-82ae-53f3178b0955 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7e30802389 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2214 identity=55999 ipv4=10.0.0.10 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-370bd2df-9a95-4aac-82ae-53f3178b0955 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7e30802389 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2214 identity=55999 ipv4=10.0.0.10 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-370bd2df-9a95-4aac-82ae-53f3178b0955 subsys=endpoint level=info msg="Successful endpoint creation" containerID=7e30802389 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2214 identity=55999 ipv4=10.0.0.10 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-370bd2df-9a95-4aac-82ae-53f3178b0955 subsys=daemon level=info msg="Delete endpoint request" containerID=e76a212c41 endpointID=500 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-patch-dclsl subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-patch k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=58.2.1 k8s:batch.kubernetes.io/controller-uid=bc31e50e-26a5-4703-a51e-4d90fa1b60aa k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch k8s:chart=kube-prometheus-stack-58.2.1 k8s:controller-uid=bc31e50e-26a5-4703-a51e-4d90fa1b60aa k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-patch k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=e76a212c41 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=500 identity=8518 ipv4=10.0.0.38 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-dclsl subsys=endpoint level=info msg="Delete endpoint request" containerID=7e30802389 endpointID=2214 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-370bd2df-9a95-4aac-82ae-53f3178b0955 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Delete endpoint request" containerID=bb83b5564a endpointID=1846 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-b4703c80-b7e5-4a49-99f1-dec7179dd3b3 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=bb83b5564a datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1846 identity=55999 ipv4=10.0.0.106 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b4703c80-b7e5-4a49-99f1-dec7179dd3b3 subsys=endpoint level=info msg="Removed endpoint" containerID=7e30802389 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2214 identity=55999 ipv4=10.0.0.10 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-370bd2df-9a95-4aac-82ae-53f3178b0955 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.194 aedecf22-9e59-471a-8903-4683dce900fe default }" containerID=817d60f2bb6f31ebf26357cafcd92c2ff0b0ba8366d22d48482e1827e96367e8 datapathConfiguration="&{false false false false false }" interface=lxca093d31eb919 k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=817d60f2bb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1893 ipv4=10.0.0.194 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=817d60f2bb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1893 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.194 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:alertmanager=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=alertmanager;k8s:app.kubernetes.io/version=0.27.0;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=817d60f2bb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1893 identity=6215 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.194 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=817d60f2bb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1893 identity=6215 ipv4=10.0.0.194 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=817d60f2bb datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1893 identity=6215 ipv4=10.0.0.194 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=817d60f2bb datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1893 identity=6215 ipv4=10.0.0.194 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.244 788e8ab5-eb1c-44be-8dfe-ba629e088687 default }" containerID=8166e5069cfad608f9a2b56edede18af08fc079d22c7b60ec438f2c41d5b7ba4 datapathConfiguration="&{false false false false false }" interface=lxc6424b939f5d1 k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8166e5069c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=128 ipv4=10.0.0.244 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8166e5069c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=128 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.244 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=prometheus;k8s:app.kubernetes.io/version=2.51.2;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus;k8s:io.kubernetes.pod.namespace=monitoring;k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus;k8s:operator.prometheus.io/shard=0;k8s:prometheus=kube-prometheus-stack-prometheus;k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8166e5069c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=128 identity=4319 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.244 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8166e5069c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=128 identity=4319 ipv4=10.0.0.244 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8166e5069c datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=128 identity=4319 ipv4=10.0.0.244 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=8166e5069c datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=128 identity=4319 ipv4=10.0.0.244 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.200 837bbee1-6d9a-40a4-8213-51f34932af77 default }" containerID=74b90bee8c0474032a2d9adca4f299f61753aab5a1b5b21fae5d93bc3a3ccae0 datapathConfiguration="&{false false false false false }" interface=lxc3d1dcbfc37c2 k8sPodName=monitoring/loki-gateway-748b556d75-n2jhw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=74b90bee8c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1689 ipv4=10.0.0.200 ipv6= k8sPodName=monitoring/loki-gateway-748b556d75-n2jhw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=74b90bee8c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1689 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.200 ipv6= k8sPodName=monitoring/loki-gateway-748b556d75-n2jhw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=gateway;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=74b90bee8c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1689 identity=13712 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.200 ipv6= k8sPodName=monitoring/loki-gateway-748b556d75-n2jhw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=74b90bee8c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1689 identity=13712 ipv4=10.0.0.200 ipv6= k8sPodName=monitoring/loki-gateway-748b556d75-n2jhw subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=74b90bee8c datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1689 identity=13712 ipv4=10.0.0.200 ipv6= k8sPodName=monitoring/loki-gateway-748b556d75-n2jhw subsys=endpoint level=info msg="Successful endpoint creation" containerID=74b90bee8c datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1689 identity=13712 ipv4=10.0.0.200 ipv6= k8sPodName=monitoring/loki-gateway-748b556d75-n2jhw subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.112 97340b28-3135-4e02-a5ea-c534c2792b5b default }" containerID=ce35e339ba560a974364fb6a5b983068f1996859038ce415a722a048641b93f0 datapathConfiguration="&{false false false false false }" interface=lxc10abcf9c494b k8sPodName=monitoring/loki-chunks-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ce35e339ba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3631 ipv4=10.0.0.112 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ce35e339ba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3631 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.112 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-chunks-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-chunks-cache;k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ce35e339ba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3631 identity=11391 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.112 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ce35e339ba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3631 identity=11391 ipv4=10.0.0.112 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.188 9dd58a38-98e2-4000-b355-2fb6b7b26983 default }" containerID=c5b9f27cc5a11e585d318fcafd4c8ae171b685a145cbc1eb9f39ab3c50026b0a datapathConfiguration="&{false false false false false }" interface=lxcb7a15c8e26da k8sPodName=local-path-storage/helper-pod-create-pvc-a53b4c0a-c32c-4b02-904f-014500ad165f labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c5b9f27cc5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3372 ipv4=10.0.0.188 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a53b4c0a-c32c-4b02-904f-014500ad165f subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c5b9f27cc5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3372 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.188 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a53b4c0a-c32c-4b02-904f-014500ad165f subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c5b9f27cc5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3372 identity=55999 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.188 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a53b4c0a-c32c-4b02-904f-014500ad165f oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c5b9f27cc5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3372 identity=55999 ipv4=10.0.0.188 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a53b4c0a-c32c-4b02-904f-014500ad165f subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.85 4f107c53-693f-4605-91cc-60c2fe520647 default }" containerID=30132f92c866faffe2b64a6a5f1f0ef72162ed60a91480e3dd9803d63cfbe961 datapathConfiguration="&{false false false false false }" interface=lxc5eac6cf83d35 k8sPodName=monitoring/loki-results-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=30132f92c8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3524 ipv4=10.0.0.85 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=30132f92c8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3524 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.85 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-results-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-results-cache;k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=30132f92c8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3524 identity=379 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.85 ipv6= k8sPodName=monitoring/loki-results-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=30132f92c8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3524 identity=379 ipv4=10.0.0.85 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ce35e339ba datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3631 identity=11391 ipv4=10.0.0.112 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=ce35e339ba datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3631 identity=11391 ipv4=10.0.0.112 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=30132f92c8 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3524 identity=379 ipv4=10.0.0.85 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=30132f92c8 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3524 identity=379 ipv4=10.0.0.85 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=c5b9f27cc5 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3372 identity=55999 ipv4=10.0.0.188 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a53b4c0a-c32c-4b02-904f-014500ad165f subsys=endpoint level=info msg="Successful endpoint creation" containerID=c5b9f27cc5 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3372 identity=55999 ipv4=10.0.0.188 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a53b4c0a-c32c-4b02-904f-014500ad165f subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.192 b91037f4-8e7f-4ce8-84c0-88faf09eef72 default }" containerID=50d9ebd27ab8f3c0814b562521557dcc65d0855558f8d2879513bc4682d6b918 datapathConfiguration="&{false false false false false }" interface=lxc7b606c64ff39 k8sPodName=monitoring/vector-hz8rz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=50d9ebd27a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2642 ipv4=10.0.0.192 ipv6= k8sPodName=monitoring/vector-hz8rz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=50d9ebd27a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2642 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.192 ipv6= k8sPodName=monitoring/vector-hz8rz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=Agent;k8s:app.kubernetes.io/instance=vector;k8s:app.kubernetes.io/name=vector;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=vector;k8s:io.kubernetes.pod.namespace=monitoring;k8s:vector.dev/exclude=true;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=50d9ebd27a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2642 identity=41280 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.192 ipv6= k8sPodName=monitoring/vector-hz8rz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=50d9ebd27a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2642 identity=41280 ipv4=10.0.0.192 ipv6= k8sPodName=monitoring/vector-hz8rz subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=50d9ebd27a datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2642 identity=41280 ipv4=10.0.0.192 ipv6= k8sPodName=monitoring/vector-hz8rz subsys=endpoint level=info msg="Successful endpoint creation" containerID=50d9ebd27a datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2642 identity=41280 ipv4=10.0.0.192 ipv6= k8sPodName=monitoring/vector-hz8rz subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=c5b9f27cc5 endpointID=3372 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-a53b4c0a-c32c-4b02-904f-014500ad165f subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=c5b9f27cc5 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3372 identity=55999 ipv4=10.0.0.188 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a53b4c0a-c32c-4b02-904f-014500ad165f subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.202 c7279093-17a2-4866-b16d-d1a49115719a default }" containerID=c8bf98ad6822024f6a788f85e9f0f2d879ce2998d063adb02c5f160f3b51bcdd datapathConfiguration="&{false false false false false }" interface=lxc644e6e60c2c9 k8sPodName=monitoring/loki-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c8bf98ad68 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3086 ipv4=10.0.0.202 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c8bf98ad68 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3086 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.202 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=c8bf98ad68 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3086 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.202 ipv6= k8sPodName=monitoring/loki-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=single-binary;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:app.kubernetes.io/part-of=memberlist;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=loki-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c8bf98ad68 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3086 identity=50334 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.202 ipv6= k8sPodName=monitoring/loki-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c8bf98ad68 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3086 identity=50334 ipv4=10.0.0.202 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c8bf98ad68 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3086 identity=50334 ipv4=10.0.0.202 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=c8bf98ad68 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3086 identity=50334 ipv4=10.0.0.202 ipv6= k8sPodName=monitoring/loki-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.171 e18f0f19-29ec-408c-a41f-fa3dc03663ec default }" containerID=d21d975c3af81440f5987ed510bbdb3a4a891f5452f22e55d63d578229425134 datapathConfiguration="&{false false false false false }" interface=lxc34dd2c809158 k8sPodName=monitoring/prometheus-pushgateway-7c6f84b96c-7xq48 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d21d975c3a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1340 ipv4=10.0.0.171 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7c6f84b96c-7xq48 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d21d975c3a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1340 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.12.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.171 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7c6f84b96c-7xq48 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=prometheus-pushgateway;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=prometheus-pushgateway;k8s:app.kubernetes.io/version=v1.8.0;k8s:helm.sh/chart=prometheus-pushgateway-2.12.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d21d975c3a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1340 identity=13275 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.12.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.171 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7c6f84b96c-7xq48 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d21d975c3a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1340 identity=13275 ipv4=10.0.0.171 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7c6f84b96c-7xq48 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d21d975c3a datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1340 identity=13275 ipv4=10.0.0.171 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7c6f84b96c-7xq48 subsys=endpoint level=info msg="Successful endpoint creation" containerID=d21d975c3a datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1340 identity=13275 ipv4=10.0.0.171 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7c6f84b96c-7xq48 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.47 ab4482d7-2a14-4550-a871-26860c07b712 default }" containerID=8d5ac45cd2bf890f5a2476ee6a906076724860f6e1e49b2d93ed686ba33af98f datapathConfiguration="&{false false false false false }" interface=lxcbadd39d33da4 k8sPodName=openstack/memcached-memcached-6479589586-w5fwp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8d5ac45cd2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1582 ipv4=10.0.0.47 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-w5fwp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8d5ac45cd2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1582 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.47 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-w5fwp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=memcached;k8s:component=server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=memcached;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8d5ac45cd2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1582 identity=36412 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.47 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-w5fwp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8d5ac45cd2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1582 identity=36412 ipv4=10.0.0.47 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-w5fwp subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=8d5ac45cd2 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1582 identity=36412 ipv4=10.0.0.47 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-w5fwp subsys=endpoint level=info msg="Successful endpoint creation" containerID=8d5ac45cd2 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1582 identity=36412 ipv4=10.0.0.47 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-w5fwp subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.214 35d4fad0-f895-4304-9d77-cdf46e3830f5 default }" containerID=2cc03e16809f9ecaf21f529a7c68465b6d52afaba1b33c81777b500e4204d04b datapathConfiguration="&{false false false false false }" interface=lxcc6adb70267f8 k8sPodName=local-path-storage/helper-pod-create-pvc-4ae89a19-7523-4d61-a87a-f51fa8b505b1 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2cc03e1680 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=845 ipv4=10.0.0.214 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4ae89a19-7523-4d61-a87a-f51fa8b505b1 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2cc03e1680 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=845 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.214 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4ae89a19-7523-4d61-a87a-f51fa8b505b1 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2cc03e1680 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=845 identity=55999 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.214 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4ae89a19-7523-4d61-a87a-f51fa8b505b1 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2cc03e1680 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=845 identity=55999 ipv4=10.0.0.214 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4ae89a19-7523-4d61-a87a-f51fa8b505b1 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2cc03e1680 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=845 identity=55999 ipv4=10.0.0.214 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4ae89a19-7523-4d61-a87a-f51fa8b505b1 subsys=endpoint level=info msg="Successful endpoint creation" containerID=2cc03e1680 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=845 identity=55999 ipv4=10.0.0.214 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4ae89a19-7523-4d61-a87a-f51fa8b505b1 subsys=daemon level=info msg="Delete endpoint request" containerID=2cc03e1680 endpointID=845 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-4ae89a19-7523-4d61-a87a-f51fa8b505b1 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=2cc03e1680 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=845 identity=55999 ipv4=10.0.0.214 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4ae89a19-7523-4d61-a87a-f51fa8b505b1 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.66 33009dc4-6e39-45af-921c-27d4d10a4fb2 default }" containerID=1361efa780c0cfdbea7387bce43cf75abc26f9c9bdc3cb65c417ffb3c3c90d1c datapathConfiguration="&{false false false false false }" interface=lxcb6eec3ff10b2 k8sPodName=openstack/rabbitmq-keystone-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1361efa780 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=202 ipv4=10.0.0.66 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1361efa780 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=202 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.66 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-keystone;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1361efa780 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=202 identity=34471 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.66 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1361efa780 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=202 identity=34471 ipv4=10.0.0.66 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1361efa780 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=202 identity=34471 ipv4=10.0.0.66 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=1361efa780 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=202 identity=34471 ipv4=10.0.0.66 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.57 08af57c3-1dc5-4c01-91d5-be68cb87be9a default }" containerID=f827a98f387fc1c8c2ecb4b1dfe0fda12b6c431d3000e631f8ca3560db3c7647 datapathConfiguration="&{false false false false false }" interface=lxce2c01235b5ca k8sPodName=openstack/keystone-api-867b88f878-lsm6t labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f827a98f38 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=162 ipv4=10.0.0.57 ipv6= k8sPodName=openstack/keystone-api-867b88f878-lsm6t subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f827a98f38 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=162 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.57 ipv6= k8sPodName=openstack/keystone-api-867b88f878-lsm6t subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f827a98f38 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=162 identity=7422 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.57 ipv6= k8sPodName=openstack/keystone-api-867b88f878-lsm6t oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f827a98f38 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=162 identity=7422 ipv4=10.0.0.57 ipv6= k8sPodName=openstack/keystone-api-867b88f878-lsm6t subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.253 839244b2-0448-42f2-814b-fbd31ef7d243 default }" containerID=9a56b2917c6e20832fc60d29dd8b03c011664aa974cdbeef40d5a368798757c3 datapathConfiguration="&{false false false false false }" interface=lxcaf803562fa21 k8sPodName=openstack/keystone-credential-setup-zvq5q labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9a56b2917c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=66 ipv4=10.0.0.253 ipv6= k8sPodName=openstack/keystone-credential-setup-zvq5q subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9a56b2917c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=66 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=2bc0f84f-82c4-4b8f-bf33-2c253c014ab4,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=2bc0f84f-82c4-4b8f-bf33-2c253c014ab4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.253 ipv6= k8sPodName=openstack/keystone-credential-setup-zvq5q subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=2bc0f84f-82c4-4b8f-bf33-2c253c014ab4;k8s:batch.kubernetes.io/job-name=keystone-credential-setup;k8s:component=credential-setup;k8s:controller-uid=2bc0f84f-82c4-4b8f-bf33-2c253c014ab4;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-credential-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9a56b2917c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=66 identity=58846 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=2bc0f84f-82c4-4b8f-bf33-2c253c014ab4,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=2bc0f84f-82c4-4b8f-bf33-2c253c014ab4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.253 ipv6= k8sPodName=openstack/keystone-credential-setup-zvq5q oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9a56b2917c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=66 identity=58846 ipv4=10.0.0.253 ipv6= k8sPodName=openstack/keystone-credential-setup-zvq5q subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f827a98f38 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=162 identity=7422 ipv4=10.0.0.57 ipv6= k8sPodName=openstack/keystone-api-867b88f878-lsm6t subsys=endpoint level=info msg="Successful endpoint creation" containerID=f827a98f38 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=162 identity=7422 ipv4=10.0.0.57 ipv6= k8sPodName=openstack/keystone-api-867b88f878-lsm6t subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=9a56b2917c datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=66 identity=58846 ipv4=10.0.0.253 ipv6= k8sPodName=openstack/keystone-credential-setup-zvq5q subsys=endpoint level=info msg="Successful endpoint creation" containerID=9a56b2917c datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=66 identity=58846 ipv4=10.0.0.253 ipv6= k8sPodName=openstack/keystone-credential-setup-zvq5q subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=9a56b2917c endpointID=66 k8sNamespace=openstack k8sPodName=keystone-credential-setup-zvq5q subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=2bc0f84f-82c4-4b8f-bf33-2c253c014ab4 k8s:batch.kubernetes.io/job-name=keystone-credential-setup k8s:component=credential-setup k8s:controller-uid=2bc0f84f-82c4-4b8f-bf33-2c253c014ab4 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-credential-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=9a56b2917c datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=66 identity=58846 ipv4=10.0.0.253 ipv6= k8sPodName=openstack/keystone-credential-setup-zvq5q subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.155 926681ae-6fd9-40c3-9528-444ba7204093 default }" containerID=76f832e6b2062abf90bc89a4c2d373d3f31b21260a7ec87a98e846baf1bf6d83 datapathConfiguration="&{false false false false false }" interface=lxccb1476c89dcc k8sPodName=openstack/keystone-db-init-fr8dx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=76f832e6b2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2456 ipv4=10.0.0.155 ipv6= k8sPodName=openstack/keystone-db-init-fr8dx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=76f832e6b2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2456 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=bda7fa15-7ff4-424d-959c-86b6874fc212,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=bda7fa15-7ff4-424d-959c-86b6874fc212,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.155 ipv6= k8sPodName=openstack/keystone-db-init-fr8dx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=76f832e6b2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2456 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.155 ipv6= k8sPodName=openstack/keystone-db-init-fr8dx line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=bda7fa15-7ff4-424d-959c-86b6874fc212;k8s:batch.kubernetes.io/job-name=keystone-db-init;k8s:component=db-init;k8s:controller-uid=bda7fa15-7ff4-424d-959c-86b6874fc212;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=76f832e6b2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2456 identity=39086 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=bda7fa15-7ff4-424d-959c-86b6874fc212,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=bda7fa15-7ff4-424d-959c-86b6874fc212,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.155 ipv6= k8sPodName=openstack/keystone-db-init-fr8dx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=76f832e6b2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2456 identity=39086 ipv4=10.0.0.155 ipv6= k8sPodName=openstack/keystone-db-init-fr8dx subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=76f832e6b2 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2456 identity=39086 ipv4=10.0.0.155 ipv6= k8sPodName=openstack/keystone-db-init-fr8dx subsys=endpoint level=info msg="Successful endpoint creation" containerID=76f832e6b2 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2456 identity=39086 ipv4=10.0.0.155 ipv6= k8sPodName=openstack/keystone-db-init-fr8dx subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=76f832e6b2 endpointID=2456 k8sNamespace=openstack k8sPodName=keystone-db-init-fr8dx subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=bda7fa15-7ff4-424d-959c-86b6874fc212 k8s:batch.kubernetes.io/job-name=keystone-db-init k8s:component=db-init k8s:controller-uid=bda7fa15-7ff4-424d-959c-86b6874fc212 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=76f832e6b2 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2456 identity=39086 ipv4=10.0.0.155 ipv6= k8sPodName=openstack/keystone-db-init-fr8dx subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.154 d73170a3-56ba-4d33-8fa5-c2199379977d default }" containerID=15625a8c427ea20d042964cc2a6cc071c7f657921ae557fef739ec7f05f5eec9 datapathConfiguration="&{false false false false false }" interface=lxc1a5e2a0bc13a k8sPodName=openstack/keystone-fernet-setup-v6chr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=15625a8c42 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=34 ipv4=10.0.0.154 ipv6= k8sPodName=openstack/keystone-fernet-setup-v6chr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=15625a8c42 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=34 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=f7108309-17f9-46d3-a013-85fa5204da32,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=f7108309-17f9-46d3-a013-85fa5204da32,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.154 ipv6= k8sPodName=openstack/keystone-fernet-setup-v6chr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=15625a8c42 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=34 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.154 ipv6= k8sPodName=openstack/keystone-fernet-setup-v6chr line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=f7108309-17f9-46d3-a013-85fa5204da32;k8s:batch.kubernetes.io/job-name=keystone-fernet-setup;k8s:component=fernet-setup;k8s:controller-uid=f7108309-17f9-46d3-a013-85fa5204da32;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-fernet-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=15625a8c42 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=34 identity=53911 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=f7108309-17f9-46d3-a013-85fa5204da32,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=f7108309-17f9-46d3-a013-85fa5204da32,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.154 ipv6= k8sPodName=openstack/keystone-fernet-setup-v6chr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=15625a8c42 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=34 identity=53911 ipv4=10.0.0.154 ipv6= k8sPodName=openstack/keystone-fernet-setup-v6chr subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=15625a8c42 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=34 identity=53911 ipv4=10.0.0.154 ipv6= k8sPodName=openstack/keystone-fernet-setup-v6chr subsys=endpoint level=info msg="Successful endpoint creation" containerID=15625a8c42 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=34 identity=53911 ipv4=10.0.0.154 ipv6= k8sPodName=openstack/keystone-fernet-setup-v6chr subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=15625a8c42 endpointID=34 k8sNamespace=openstack k8sPodName=keystone-fernet-setup-v6chr subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=f7108309-17f9-46d3-a013-85fa5204da32 k8s:batch.kubernetes.io/job-name=keystone-fernet-setup k8s:component=fernet-setup k8s:controller-uid=f7108309-17f9-46d3-a013-85fa5204da32 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-fernet-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=15625a8c42 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=34 identity=53911 ipv4=10.0.0.154 ipv6= k8sPodName=openstack/keystone-fernet-setup-v6chr subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.107 ded55e0f-3138-4b73-952c-158dc71c3b46 default }" containerID=420bbb38bf561535a1bb9986afb202acdc589cb4d601ba63e2cca8f504f74dfb datapathConfiguration="&{false false false false false }" interface=lxcd374598ad1f6 k8sPodName=openstack/keystone-db-sync-cptg4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=420bbb38bf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=518 ipv4=10.0.0.107 ipv6= k8sPodName=openstack/keystone-db-sync-cptg4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=420bbb38bf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=518 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=335ccaa6-6eef-4940-b8ac-b164b93defde,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=335ccaa6-6eef-4940-b8ac-b164b93defde,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.107 ipv6= k8sPodName=openstack/keystone-db-sync-cptg4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=335ccaa6-6eef-4940-b8ac-b164b93defde;k8s:batch.kubernetes.io/job-name=keystone-db-sync;k8s:component=db-sync;k8s:controller-uid=335ccaa6-6eef-4940-b8ac-b164b93defde;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-sync;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=420bbb38bf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=518 identity=3565 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=335ccaa6-6eef-4940-b8ac-b164b93defde,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=335ccaa6-6eef-4940-b8ac-b164b93defde,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.107 ipv6= k8sPodName=openstack/keystone-db-sync-cptg4 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=420bbb38bf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=518 identity=3565 ipv4=10.0.0.107 ipv6= k8sPodName=openstack/keystone-db-sync-cptg4 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=420bbb38bf datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=518 identity=3565 ipv4=10.0.0.107 ipv6= k8sPodName=openstack/keystone-db-sync-cptg4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=420bbb38bf datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=518 identity=3565 ipv4=10.0.0.107 ipv6= k8sPodName=openstack/keystone-db-sync-cptg4 subsys=daemon level=info msg="Delete endpoint request" containerID=420bbb38bf endpointID=518 k8sNamespace=openstack k8sPodName=keystone-db-sync-cptg4 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=335ccaa6-6eef-4940-b8ac-b164b93defde k8s:batch.kubernetes.io/job-name=keystone-db-sync k8s:component=db-sync k8s:controller-uid=335ccaa6-6eef-4940-b8ac-b164b93defde k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-sync k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=420bbb38bf datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=518 identity=3565 ipv4=10.0.0.107 ipv6= k8sPodName=openstack/keystone-db-sync-cptg4 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.33 4d6f166f-20eb-40b7-8225-e558463bd9d9 default }" containerID=761a35cc7bf4c985acbb03a72d88eb41023ca8002156ca2e372afc374fc8fb83 datapathConfiguration="&{false false false false false }" interface=lxc3bed947346b5 k8sPodName=openstack/keystone-rabbit-init-4smj9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=761a35cc7b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=665 ipv4=10.0.0.33 ipv6= k8sPodName=openstack/keystone-rabbit-init-4smj9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=761a35cc7b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=665 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=4bccb211-26e1-40ff-804c-9af6571f8dbf,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=4bccb211-26e1-40ff-804c-9af6571f8dbf,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.33 ipv6= k8sPodName=openstack/keystone-rabbit-init-4smj9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=4bccb211-26e1-40ff-804c-9af6571f8dbf;k8s:batch.kubernetes.io/job-name=keystone-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=4bccb211-26e1-40ff-804c-9af6571f8dbf;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-rabbit-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=761a35cc7b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=665 identity=27874 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=4bccb211-26e1-40ff-804c-9af6571f8dbf,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=4bccb211-26e1-40ff-804c-9af6571f8dbf,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.33 ipv6= k8sPodName=openstack/keystone-rabbit-init-4smj9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=761a35cc7b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=665 identity=27874 ipv4=10.0.0.33 ipv6= k8sPodName=openstack/keystone-rabbit-init-4smj9 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=761a35cc7b datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=665 identity=27874 ipv4=10.0.0.33 ipv6= k8sPodName=openstack/keystone-rabbit-init-4smj9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=761a35cc7b datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=665 identity=27874 ipv4=10.0.0.33 ipv6= k8sPodName=openstack/keystone-rabbit-init-4smj9 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=761a35cc7b endpointID=665 k8sNamespace=openstack k8sPodName=keystone-rabbit-init-4smj9 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=4bccb211-26e1-40ff-804c-9af6571f8dbf k8s:batch.kubernetes.io/job-name=keystone-rabbit-init k8s:component=rabbit-init k8s:controller-uid=4bccb211-26e1-40ff-804c-9af6571f8dbf k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-rabbit-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=761a35cc7b datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=665 identity=27874 ipv4=10.0.0.33 ipv6= k8sPodName=openstack/keystone-rabbit-init-4smj9 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.1 76d8ece1-ab2e-4d4f-accd-190233efc672 default }" containerID=d69928af447dc3a6d86889ce154a8317b66ac2c58c37576f5cffe9fb8e6e727d datapathConfiguration="&{false false false false false }" interface=lxc15343babcf6b k8sPodName=openstack/keystone-domain-manage-c52sj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d69928af44 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3223 ipv4=10.0.0.1 ipv6= k8sPodName=openstack/keystone-domain-manage-c52sj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d69928af44 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3223 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=0d866eed-22f7-44a1-a020-a4894b65f7c7,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=0d866eed-22f7-44a1-a020-a4894b65f7c7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.1 ipv6= k8sPodName=openstack/keystone-domain-manage-c52sj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=0d866eed-22f7-44a1-a020-a4894b65f7c7;k8s:batch.kubernetes.io/job-name=keystone-domain-manage;k8s:component=domain-manage;k8s:controller-uid=0d866eed-22f7-44a1-a020-a4894b65f7c7;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-domain-manage;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d69928af44 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3223 identity=9481 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=0d866eed-22f7-44a1-a020-a4894b65f7c7,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=0d866eed-22f7-44a1-a020-a4894b65f7c7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.1 ipv6= k8sPodName=openstack/keystone-domain-manage-c52sj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d69928af44 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3223 identity=9481 ipv4=10.0.0.1 ipv6= k8sPodName=openstack/keystone-domain-manage-c52sj subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=d69928af44 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3223 identity=9481 ipv4=10.0.0.1 ipv6= k8sPodName=openstack/keystone-domain-manage-c52sj subsys=endpoint level=info msg="Successful endpoint creation" containerID=d69928af44 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3223 identity=9481 ipv4=10.0.0.1 ipv6= k8sPodName=openstack/keystone-domain-manage-c52sj subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=d69928af44 endpointID=3223 k8sNamespace=openstack k8sPodName=keystone-domain-manage-c52sj subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=0d866eed-22f7-44a1-a020-a4894b65f7c7 k8s:batch.kubernetes.io/job-name=keystone-domain-manage k8s:component=domain-manage k8s:controller-uid=0d866eed-22f7-44a1-a020-a4894b65f7c7 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-domain-manage k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=d69928af44 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3223 identity=9481 ipv4=10.0.0.1 ipv6= k8sPodName=openstack/keystone-domain-manage-c52sj subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.91 5528bee1-b1c6-47a6-8c36-3a7da12b370b default }" containerID=60e2432e861e66fef3ef1976ab85b2314238764f6a18231d2dd892e37c2a1e51 datapathConfiguration="&{false false false false false }" interface=lxcb12b7c86c8b0 k8sPodName=openstack/keystone-bootstrap-svftw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=60e2432e86 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1546 ipv4=10.0.0.91 ipv6= k8sPodName=openstack/keystone-bootstrap-svftw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=60e2432e86 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1546 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=23208fab-5b38-4169-86d8-7c478caa37d2,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=23208fab-5b38-4169-86d8-7c478caa37d2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.91 ipv6= k8sPodName=openstack/keystone-bootstrap-svftw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=23208fab-5b38-4169-86d8-7c478caa37d2;k8s:batch.kubernetes.io/job-name=keystone-bootstrap;k8s:component=bootstrap;k8s:controller-uid=23208fab-5b38-4169-86d8-7c478caa37d2;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-bootstrap;k8s:release_group=keystone;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=60e2432e86 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1546 identity=11113 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=23208fab-5b38-4169-86d8-7c478caa37d2,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=23208fab-5b38-4169-86d8-7c478caa37d2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.91 ipv6= k8sPodName=openstack/keystone-bootstrap-svftw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=60e2432e86 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1546 identity=11113 ipv4=10.0.0.91 ipv6= k8sPodName=openstack/keystone-bootstrap-svftw subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=60e2432e86 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1546 identity=11113 ipv4=10.0.0.91 ipv6= k8sPodName=openstack/keystone-bootstrap-svftw subsys=endpoint level=info msg="Successful endpoint creation" containerID=60e2432e86 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1546 identity=11113 ipv4=10.0.0.91 ipv6= k8sPodName=openstack/keystone-bootstrap-svftw subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=60e2432e86 endpointID=1546 k8sNamespace=openstack k8sPodName=keystone-bootstrap-svftw subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=23208fab-5b38-4169-86d8-7c478caa37d2 k8s:batch.kubernetes.io/job-name=keystone-bootstrap k8s:component=bootstrap k8s:controller-uid=23208fab-5b38-4169-86d8-7c478caa37d2 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-bootstrap k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=60e2432e86 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1546 identity=11113 ipv4=10.0.0.91 ipv6= k8sPodName=openstack/keystone-bootstrap-svftw subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.22 112a0000-a4e1-4db4-9583-67acc4b00cd3 default }" containerID=bc4ddcfadde0352048ee706394a3dc8ca9a6314ded21e3f993c548af0c78a950 datapathConfiguration="&{false false false false false }" interface=lxc98e58c559259 k8sPodName=local-path-storage/helper-pod-create-pvc-05a6b761-5bd8-4bfb-b6e1-05da6a6fdc15 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bc4ddcfadd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1327 ipv4=10.0.0.22 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-05a6b761-5bd8-4bfb-b6e1-05da6a6fdc15 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bc4ddcfadd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1327 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.22 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-05a6b761-5bd8-4bfb-b6e1-05da6a6fdc15 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=bc4ddcfadd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1327 identity=55999 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.22 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-05a6b761-5bd8-4bfb-b6e1-05da6a6fdc15 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=bc4ddcfadd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1327 identity=55999 ipv4=10.0.0.22 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-05a6b761-5bd8-4bfb-b6e1-05da6a6fdc15 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=bc4ddcfadd datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1327 identity=55999 ipv4=10.0.0.22 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-05a6b761-5bd8-4bfb-b6e1-05da6a6fdc15 subsys=endpoint level=info msg="Successful endpoint creation" containerID=bc4ddcfadd datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1327 identity=55999 ipv4=10.0.0.22 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-05a6b761-5bd8-4bfb-b6e1-05da6a6fdc15 subsys=daemon level=info msg="Delete endpoint request" containerID=bc4ddcfadd endpointID=1327 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-05a6b761-5bd8-4bfb-b6e1-05da6a6fdc15 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=bc4ddcfadd datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1327 identity=55999 ipv4=10.0.0.22 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-05a6b761-5bd8-4bfb-b6e1-05da6a6fdc15 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.31 43d64a9e-0f31-4aff-869d-afa5da575218 default }" containerID=19cde323da56798f05c9a907158cdbf55c36b7908a89346648a4367fdb7a77d8 datapathConfiguration="&{false false false false false }" interface=lxc216640f0069d k8sPodName=openstack/rabbitmq-barbican-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=19cde323da datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1512 ipv4=10.0.0.31 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=19cde323da datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1512 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.31 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-barbican;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=19cde323da datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1512 identity=50253 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.31 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=19cde323da datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1512 identity=50253 ipv4=10.0.0.31 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=19cde323da datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1512 identity=50253 ipv4=10.0.0.31 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=19cde323da datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1512 identity=50253 ipv4=10.0.0.31 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.103 282b37df-5361-4147-9650-932b32323878 default }" containerID=979813cbd51235fe36230343e38fda1102c87e55d72729d5f0c8aad8d6591ab1 datapathConfiguration="&{false false false false false }" interface=lxcc109e83797e4 k8sPodName=openstack/barbican-api-949d45c8d-jrvsq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=979813cbd5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=396 ipv4=10.0.0.103 ipv6= k8sPodName=openstack/barbican-api-949d45c8d-jrvsq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=979813cbd5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=396 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.103 ipv6= k8sPodName=openstack/barbican-api-949d45c8d-jrvsq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=979813cbd5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=396 identity=35597 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.103 ipv6= k8sPodName=openstack/barbican-api-949d45c8d-jrvsq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=979813cbd5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=396 identity=35597 ipv4=10.0.0.103 ipv6= k8sPodName=openstack/barbican-api-949d45c8d-jrvsq subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.232 4ac3df04-3660-4530-b5e9-ae1c0862cc26 default }" containerID=585555078c14d11f09a647a739e69cb245a44ffe9238f97f159b9e85e14f09d3 datapathConfiguration="&{false false false false false }" interface=lxc104592b76e4a k8sPodName=openstack/barbican-db-init-tg28h labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=585555078c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=457 ipv4=10.0.0.232 ipv6= k8sPodName=openstack/barbican-db-init-tg28h subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=585555078c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=457 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=1b746d84-c1f5-4941-8e17-ac34e69f327a,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=1b746d84-c1f5-4941-8e17-ac34e69f327a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.232 ipv6= k8sPodName=openstack/barbican-db-init-tg28h subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=1b746d84-c1f5-4941-8e17-ac34e69f327a;k8s:batch.kubernetes.io/job-name=barbican-db-init;k8s:component=db-init;k8s:controller-uid=1b746d84-c1f5-4941-8e17-ac34e69f327a;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=585555078c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=457 identity=3919 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=1b746d84-c1f5-4941-8e17-ac34e69f327a,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=1b746d84-c1f5-4941-8e17-ac34e69f327a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.232 ipv6= k8sPodName=openstack/barbican-db-init-tg28h oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=585555078c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=457 identity=3919 ipv4=10.0.0.232 ipv6= k8sPodName=openstack/barbican-db-init-tg28h subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=979813cbd5 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=396 identity=35597 ipv4=10.0.0.103 ipv6= k8sPodName=openstack/barbican-api-949d45c8d-jrvsq subsys=endpoint level=info msg="Successful endpoint creation" containerID=979813cbd5 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=396 identity=35597 ipv4=10.0.0.103 ipv6= k8sPodName=openstack/barbican-api-949d45c8d-jrvsq subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=585555078c datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=457 identity=3919 ipv4=10.0.0.232 ipv6= k8sPodName=openstack/barbican-db-init-tg28h subsys=endpoint level=info msg="Successful endpoint creation" containerID=585555078c datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=457 identity=3919 ipv4=10.0.0.232 ipv6= k8sPodName=openstack/barbican-db-init-tg28h subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=585555078c endpointID=457 k8sNamespace=openstack k8sPodName=barbican-db-init-tg28h subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=1b746d84-c1f5-4941-8e17-ac34e69f327a k8s:batch.kubernetes.io/job-name=barbican-db-init k8s:component=db-init k8s:controller-uid=1b746d84-c1f5-4941-8e17-ac34e69f327a k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=585555078c datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=457 identity=3919 ipv4=10.0.0.232 ipv6= k8sPodName=openstack/barbican-db-init-tg28h subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.127 09249434-a8ad-48ac-8ce9-eccf061fefbd default }" containerID=0d26053a379d1ed2fd5ae3f98f87c764d37b70fce8c0cf4076b47fd52686c0e4 datapathConfiguration="&{false false false false false }" interface=lxca6e98bcaee63 k8sPodName=openstack/barbican-db-sync-44nmh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0d26053a37 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1280 ipv4=10.0.0.127 ipv6= k8sPodName=openstack/barbican-db-sync-44nmh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0d26053a37 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1280 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=cdee0dd9-1ddf-480f-a2b4-9a3f2d9bd73e,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=cdee0dd9-1ddf-480f-a2b4-9a3f2d9bd73e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.127 ipv6= k8sPodName=openstack/barbican-db-sync-44nmh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=cdee0dd9-1ddf-480f-a2b4-9a3f2d9bd73e;k8s:batch.kubernetes.io/job-name=barbican-db-sync;k8s:component=db-sync;k8s:controller-uid=cdee0dd9-1ddf-480f-a2b4-9a3f2d9bd73e;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-sync;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0d26053a37 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1280 identity=52424 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=cdee0dd9-1ddf-480f-a2b4-9a3f2d9bd73e,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=cdee0dd9-1ddf-480f-a2b4-9a3f2d9bd73e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.127 ipv6= k8sPodName=openstack/barbican-db-sync-44nmh oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=0d26053a37 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1280 identity=52424 ipv4=10.0.0.127 ipv6= k8sPodName=openstack/barbican-db-sync-44nmh subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0d26053a37 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1280 identity=52424 ipv4=10.0.0.127 ipv6= k8sPodName=openstack/barbican-db-sync-44nmh subsys=endpoint level=info msg="Successful endpoint creation" containerID=0d26053a37 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1280 identity=52424 ipv4=10.0.0.127 ipv6= k8sPodName=openstack/barbican-db-sync-44nmh subsys=daemon level=info msg="Delete endpoint request" containerID=0d26053a37 endpointID=1280 k8sNamespace=openstack k8sPodName=barbican-db-sync-44nmh subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=cdee0dd9-1ddf-480f-a2b4-9a3f2d9bd73e k8s:batch.kubernetes.io/job-name=barbican-db-sync k8s:component=db-sync k8s:controller-uid=cdee0dd9-1ddf-480f-a2b4-9a3f2d9bd73e k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-sync k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=0d26053a37 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1280 identity=52424 ipv4=10.0.0.127 ipv6= k8sPodName=openstack/barbican-db-sync-44nmh subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.225 e9103760-d65b-403f-a894-3b31fa1e2225 default }" containerID=b42591cf329ea38e70a8749bb57eb1d1099a6c1b717f0dad0e0874b39601fad0 datapathConfiguration="&{false false false false false }" interface=lxce828cb8a7fba k8sPodName=openstack/barbican-rabbit-init-lqgxt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b42591cf32 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2009 ipv4=10.0.0.225 ipv6= k8sPodName=openstack/barbican-rabbit-init-lqgxt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b42591cf32 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2009 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=bc434fc3-f80b-4e40-804d-31f815d0afcd,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=bc434fc3-f80b-4e40-804d-31f815d0afcd,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.225 ipv6= k8sPodName=openstack/barbican-rabbit-init-lqgxt subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=b42591cf32 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2009 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.225 ipv6= k8sPodName=openstack/barbican-rabbit-init-lqgxt line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=bc434fc3-f80b-4e40-804d-31f815d0afcd;k8s:batch.kubernetes.io/job-name=barbican-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=bc434fc3-f80b-4e40-804d-31f815d0afcd;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-rabbit-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b42591cf32 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2009 identity=39658 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=bc434fc3-f80b-4e40-804d-31f815d0afcd,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=bc434fc3-f80b-4e40-804d-31f815d0afcd,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.225 ipv6= k8sPodName=openstack/barbican-rabbit-init-lqgxt oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b42591cf32 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2009 identity=39658 ipv4=10.0.0.225 ipv6= k8sPodName=openstack/barbican-rabbit-init-lqgxt subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b42591cf32 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2009 identity=39658 ipv4=10.0.0.225 ipv6= k8sPodName=openstack/barbican-rabbit-init-lqgxt subsys=endpoint level=info msg="Successful endpoint creation" containerID=b42591cf32 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2009 identity=39658 ipv4=10.0.0.225 ipv6= k8sPodName=openstack/barbican-rabbit-init-lqgxt subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=b42591cf32 endpointID=2009 k8sNamespace=openstack k8sPodName=barbican-rabbit-init-lqgxt subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=bc434fc3-f80b-4e40-804d-31f815d0afcd k8s:batch.kubernetes.io/job-name=barbican-rabbit-init k8s:component=rabbit-init k8s:controller-uid=bc434fc3-f80b-4e40-804d-31f815d0afcd k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-rabbit-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=b42591cf32 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2009 identity=39658 ipv4=10.0.0.225 ipv6= k8sPodName=openstack/barbican-rabbit-init-lqgxt subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.136 a41e6b98-b182-43f8-8c5e-615826516cc2 default }" containerID=62d7696427f4ec18b49777be21ac25bf0a7c5aa0f1bb432b0043117e3b390c3d datapathConfiguration="&{false false false false false }" interface=lxc51c273aed155 k8sPodName=openstack/barbican-ks-service-5lg8k labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=62d7696427 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=122 ipv4=10.0.0.136 ipv6= k8sPodName=openstack/barbican-ks-service-5lg8k subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=62d7696427 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=122 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=be7dedb4-98fc-4a5f-a6b8-fde171504fde,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=be7dedb4-98fc-4a5f-a6b8-fde171504fde,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.136 ipv6= k8sPodName=openstack/barbican-ks-service-5lg8k subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=be7dedb4-98fc-4a5f-a6b8-fde171504fde;k8s:batch.kubernetes.io/job-name=barbican-ks-service;k8s:component=ks-service;k8s:controller-uid=be7dedb4-98fc-4a5f-a6b8-fde171504fde;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-service;k8s:release_group=barbican;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=62d7696427 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=122 identity=38255 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=be7dedb4-98fc-4a5f-a6b8-fde171504fde,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=be7dedb4-98fc-4a5f-a6b8-fde171504fde,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.136 ipv6= k8sPodName=openstack/barbican-ks-service-5lg8k oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=62d7696427 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=122 identity=38255 ipv4=10.0.0.136 ipv6= k8sPodName=openstack/barbican-ks-service-5lg8k subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=62d7696427 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=122 identity=38255 ipv4=10.0.0.136 ipv6= k8sPodName=openstack/barbican-ks-service-5lg8k subsys=endpoint level=info msg="Successful endpoint creation" containerID=62d7696427 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=122 identity=38255 ipv4=10.0.0.136 ipv6= k8sPodName=openstack/barbican-ks-service-5lg8k subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.03549785599307425 newInterval=11m15s subsys=map-ct level=info msg="Delete endpoint request" containerID=62d7696427 endpointID=122 k8sNamespace=openstack k8sPodName=barbican-ks-service-5lg8k subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=be7dedb4-98fc-4a5f-a6b8-fde171504fde k8s:batch.kubernetes.io/job-name=barbican-ks-service k8s:component=ks-service k8s:controller-uid=be7dedb4-98fc-4a5f-a6b8-fde171504fde k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-service k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=62d7696427 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=122 identity=38255 ipv4=10.0.0.136 ipv6= k8sPodName=openstack/barbican-ks-service-5lg8k subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.214 460895ee-1d11-4112-9bab-921fdbc55179 default }" containerID=9c79fcd3dd1f8db4ab41c5237d1b0ef17472d28ce92d6f372f4b7f7e955717e7 datapathConfiguration="&{false false false false false }" interface=lxcdf62ee3c31bf k8sPodName=openstack/barbican-ks-endpoints-798vc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9c79fcd3dd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2159 ipv4=10.0.0.214 ipv6= k8sPodName=openstack/barbican-ks-endpoints-798vc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9c79fcd3dd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2159 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=2d6a1bcf-71bf-4cc3-afb3-38398f1e439a,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=2d6a1bcf-71bf-4cc3-afb3-38398f1e439a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.214 ipv6= k8sPodName=openstack/barbican-ks-endpoints-798vc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=2d6a1bcf-71bf-4cc3-afb3-38398f1e439a;k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=2d6a1bcf-71bf-4cc3-afb3-38398f1e439a;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-endpoints;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9c79fcd3dd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2159 identity=602 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=2d6a1bcf-71bf-4cc3-afb3-38398f1e439a,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=2d6a1bcf-71bf-4cc3-afb3-38398f1e439a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.214 ipv6= k8sPodName=openstack/barbican-ks-endpoints-798vc oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=9c79fcd3dd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2159 identity=602 ipv4=10.0.0.214 ipv6= k8sPodName=openstack/barbican-ks-endpoints-798vc subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9c79fcd3dd datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2159 identity=602 ipv4=10.0.0.214 ipv6= k8sPodName=openstack/barbican-ks-endpoints-798vc subsys=endpoint level=info msg="Successful endpoint creation" containerID=9c79fcd3dd datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2159 identity=602 ipv4=10.0.0.214 ipv6= k8sPodName=openstack/barbican-ks-endpoints-798vc subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=9c79fcd3dd endpointID=2159 k8sNamespace=openstack k8sPodName=barbican-ks-endpoints-798vc subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=2d6a1bcf-71bf-4cc3-afb3-38398f1e439a k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=2d6a1bcf-71bf-4cc3-afb3-38398f1e439a k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-endpoints k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=9c79fcd3dd datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2159 identity=602 ipv4=10.0.0.214 ipv6= k8sPodName=openstack/barbican-ks-endpoints-798vc subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.67 f7a4136a-5c22-4175-a5fc-2e331f622686 default }" containerID=9cc2cf00704bceb9e77b81faa3c7439a4083342eeb36b993e8e8f7d765862fe8 datapathConfiguration="&{false false false false false }" interface=lxc825d009b2491 k8sPodName=openstack/barbican-ks-user-q4qq5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9cc2cf0070 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1086 ipv4=10.0.0.67 ipv6= k8sPodName=openstack/barbican-ks-user-q4qq5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9cc2cf0070 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1086 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=f7e62472-1d17-4fd7-aa64-eac34fce61b2,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=f7e62472-1d17-4fd7-aa64-eac34fce61b2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.67 ipv6= k8sPodName=openstack/barbican-ks-user-q4qq5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=f7e62472-1d17-4fd7-aa64-eac34fce61b2;k8s:batch.kubernetes.io/job-name=barbican-ks-user;k8s:component=ks-user;k8s:controller-uid=f7e62472-1d17-4fd7-aa64-eac34fce61b2;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-user;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9cc2cf0070 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1086 identity=56367 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=f7e62472-1d17-4fd7-aa64-eac34fce61b2,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=f7e62472-1d17-4fd7-aa64-eac34fce61b2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.67 ipv6= k8sPodName=openstack/barbican-ks-user-q4qq5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9cc2cf0070 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1086 identity=56367 ipv4=10.0.0.67 ipv6= k8sPodName=openstack/barbican-ks-user-q4qq5 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9cc2cf0070 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1086 identity=56367 ipv4=10.0.0.67 ipv6= k8sPodName=openstack/barbican-ks-user-q4qq5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=9cc2cf0070 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1086 identity=56367 ipv4=10.0.0.67 ipv6= k8sPodName=openstack/barbican-ks-user-q4qq5 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=9cc2cf0070 endpointID=1086 k8sNamespace=openstack k8sPodName=barbican-ks-user-q4qq5 subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=f7e62472-1d17-4fd7-aa64-eac34fce61b2 k8s:batch.kubernetes.io/job-name=barbican-ks-user k8s:component=ks-user k8s:controller-uid=f7e62472-1d17-4fd7-aa64-eac34fce61b2 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-user k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=9cc2cf0070 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1086 identity=56367 ipv4=10.0.0.67 ipv6= k8sPodName=openstack/barbican-ks-user-q4qq5 subsys=endpoint level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Create endpoint request" addressing="&{10.0.0.196 453667fc-64b0-41bf-8cc9-6d36c1be0d6a default }" containerID=af8a99bc21e2b7b3d7e9e5bce364c040501192aae6ddbdfd9073ae33e339cd58 datapathConfiguration="&{false false false false false }" interface=lxca339b32b895d k8sPodName=rook-ceph/rook-ceph-operator-76c484c45f-xn8bq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=af8a99bc21 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3084 ipv4=10.0.0.196 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76c484c45f-xn8bq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=af8a99bc21 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3084 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.14.2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.196 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76c484c45f-xn8bq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:rook-ceph k8s:io.cilium.k8s.namespace.labels.name:rook-ceph]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-operator;k8s:helm.sh/chart=rook-ceph-v1.14.2;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph;k8s:io.cilium.k8s.namespace.labels.name=rook-ceph;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system;k8s:io.kubernetes.pod.namespace=rook-ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=af8a99bc21 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3084 identity=47215 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.14.2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.196 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76c484c45f-xn8bq oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=af8a99bc21 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3084 identity=47215 ipv4=10.0.0.196 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76c484c45f-xn8bq subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=af8a99bc21 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3084 identity=47215 ipv4=10.0.0.196 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76c484c45f-xn8bq subsys=endpoint level=info msg="Successful endpoint creation" containerID=af8a99bc21 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3084 identity=47215 ipv4=10.0.0.196 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76c484c45f-xn8bq subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.221 fc6b5a7b-87be-48e7-8c10-5c7e0d97ac9e default }" containerID=af10c88e46258fa002b77a69ce843160db774542714eeb2e75909d6645080550 datapathConfiguration="&{false false false false false }" interface=lxcfb4139a74a30 k8sPodName=openstack/rook-ceph-detect-version-q8x7z labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=af10c88e46 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2210 ipv4=10.0.0.221 ipv6= k8sPodName=openstack/rook-ceph-detect-version-q8x7z subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=af10c88e46 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2210 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=01f306f7-ebb1-4dfe-9c8c-95aae1f4bcc9,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=01f306f7-ebb1-4dfe-9c8c-95aae1f4bcc9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.14.2" ipv4=10.0.0.221 ipv6= k8sPodName=openstack/rook-ceph-detect-version-q8x7z subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=af10c88e46 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2210 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.221 ipv6= k8sPodName=openstack/rook-ceph-detect-version-q8x7z line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=rook-ceph-detect-version;k8s:batch.kubernetes.io/controller-uid=01f306f7-ebb1-4dfe-9c8c-95aae1f4bcc9;k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version;k8s:controller-uid=01f306f7-ebb1-4dfe-9c8c-95aae1f4bcc9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=rook-ceph-detect-version;k8s:rook-version=v1.14.2;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=af10c88e46 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2210 identity=12244 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=01f306f7-ebb1-4dfe-9c8c-95aae1f4bcc9,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=01f306f7-ebb1-4dfe-9c8c-95aae1f4bcc9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.14.2" ipv4=10.0.0.221 ipv6= k8sPodName=openstack/rook-ceph-detect-version-q8x7z oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=af10c88e46 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2210 identity=12244 ipv4=10.0.0.221 ipv6= k8sPodName=openstack/rook-ceph-detect-version-q8x7z subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=af10c88e46 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2210 identity=12244 ipv4=10.0.0.221 ipv6= k8sPodName=openstack/rook-ceph-detect-version-q8x7z subsys=endpoint level=info msg="Successful endpoint creation" containerID=af10c88e46 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2210 identity=12244 ipv4=10.0.0.221 ipv6= k8sPodName=openstack/rook-ceph-detect-version-q8x7z subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=af10c88e46 endpointID=2210 k8sNamespace=openstack k8sPodName=rook-ceph-detect-version-q8x7z subsys=daemon level=info msg="Releasing key" key="[k8s:app=rook-ceph-detect-version k8s:batch.kubernetes.io/controller-uid=01f306f7-ebb1-4dfe-9c8c-95aae1f4bcc9 k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version k8s:controller-uid=01f306f7-ebb1-4dfe-9c8c-95aae1f4bcc9 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=rook-ceph-detect-version k8s:rook-version=v1.14.2]" subsys=allocator level=info msg="Removed endpoint" containerID=af10c88e46 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2210 identity=12244 ipv4=10.0.0.221 ipv6= k8sPodName=openstack/rook-ceph-detect-version-q8x7z subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.234 a85fcb30-1fed-43ef-a57b-cd2041d01507 default }" containerID=dd9a91340ae673a4ffa85fffe89c1aedfe978d76643a282be5995a192534f31b datapathConfiguration="&{false false false false false }" interface=lxc7110045031be k8sPodName=local-path-storage/helper-pod-create-pvc-287e6927-fdb8-4a16-b9eb-12055a53676f labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=dd9a91340a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=927 ipv4=10.0.0.234 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-287e6927-fdb8-4a16-b9eb-12055a53676f subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=dd9a91340a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=927 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.234 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-287e6927-fdb8-4a16-b9eb-12055a53676f subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=dd9a91340a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=927 identity=55999 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.234 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-287e6927-fdb8-4a16-b9eb-12055a53676f oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=dd9a91340a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=927 identity=55999 ipv4=10.0.0.234 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-287e6927-fdb8-4a16-b9eb-12055a53676f subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=dd9a91340a datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=927 identity=55999 ipv4=10.0.0.234 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-287e6927-fdb8-4a16-b9eb-12055a53676f subsys=endpoint level=info msg="Successful endpoint creation" containerID=dd9a91340a datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=927 identity=55999 ipv4=10.0.0.234 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-287e6927-fdb8-4a16-b9eb-12055a53676f subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.72 1bdec94d-4965-495e-9a9f-015266ee1e5a default }" containerID=57258a9d2dc6607a68178bacb812aae357088f72620846b09507734dc630c643 datapathConfiguration="&{false false false false false }" interface=lxc4620849537d7 k8sPodName=openstack/ceph-object-controller-detect-version-z7jmj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=57258a9d2d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=543 ipv4=10.0.0.72 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-z7jmj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=57258a9d2d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=543 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=b70d3198-7f5a-423b-be26-ab3e12c11f44,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=b70d3198-7f5a-423b-be26-ab3e12c11f44,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.14.2" ipv4=10.0.0.72 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-z7jmj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=57258a9d2d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=543 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.72 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-z7jmj line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=ceph-object-controller-detect-version;k8s:batch.kubernetes.io/controller-uid=b70d3198-7f5a-423b-be26-ab3e12c11f44;k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version;k8s:controller-uid=b70d3198-7f5a-423b-be26-ab3e12c11f44;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=ceph-object-controller-detect-version;k8s:rook-version=v1.14.2;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=57258a9d2d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=543 identity=55105 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=b70d3198-7f5a-423b-be26-ab3e12c11f44,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=b70d3198-7f5a-423b-be26-ab3e12c11f44,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.14.2" ipv4=10.0.0.72 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-z7jmj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=57258a9d2d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=543 identity=55105 ipv4=10.0.0.72 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-z7jmj subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=57258a9d2d datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=543 identity=55105 ipv4=10.0.0.72 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-z7jmj subsys=endpoint level=info msg="Successful endpoint creation" containerID=57258a9d2d datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=543 identity=55105 ipv4=10.0.0.72 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-z7jmj subsys=daemon level=info msg="Delete endpoint request" containerID=dd9a91340a endpointID=927 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-287e6927-fdb8-4a16-b9eb-12055a53676f subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=dd9a91340a datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=927 identity=55999 ipv4=10.0.0.234 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-287e6927-fdb8-4a16-b9eb-12055a53676f subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=57258a9d2d endpointID=543 k8sNamespace=openstack k8sPodName=ceph-object-controller-detect-version-z7jmj subsys=daemon level=info msg="Releasing key" key="[k8s:app=ceph-object-controller-detect-version k8s:batch.kubernetes.io/controller-uid=b70d3198-7f5a-423b-be26-ab3e12c11f44 k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version k8s:controller-uid=b70d3198-7f5a-423b-be26-ab3e12c11f44 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=ceph-object-controller-detect-version k8s:rook-version=v1.14.2]" subsys=allocator level=info msg="Removed endpoint" containerID=57258a9d2d datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=543 identity=55105 ipv4=10.0.0.72 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-z7jmj subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.177 e1fcedc2-85eb-40fa-8c81-9c3f418301aa default }" containerID=8346c220976621940caae2f62d3d57fe2f9261994598643ad5a9659184f4fb72 datapathConfiguration="&{false false false false false }" interface=lxc04837e0af5fe k8sPodName=openstack/rabbitmq-glance-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8346c22097 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=311 ipv4=10.0.0.177 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8346c22097 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=311 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.177 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-glance;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8346c22097 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=311 identity=57902 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.177 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=8346c22097 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=311 identity=57902 ipv4=10.0.0.177 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8346c22097 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=311 identity=57902 ipv4=10.0.0.177 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=8346c22097 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=311 identity=57902 ipv4=10.0.0.177 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.68 c61184f1-3af2-4938-9c7c-ff85324eacd7 default }" containerID=493ac2e62ab9157d5a213a597c70d7a4e998bdf66a962f4ed010e8f37b94ed11 datapathConfiguration="&{false false false false false }" interface=lxc9d0065bd13dc k8sPodName=openstack/glance-db-init-x2fsf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=493ac2e62a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1215 ipv4=10.0.0.68 ipv6= k8sPodName=openstack/glance-db-init-x2fsf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=493ac2e62a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1215 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=ac0d4e72-f22c-46f5-b386-ca40e001a5c0,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=ac0d4e72-f22c-46f5-b386-ca40e001a5c0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.68 ipv6= k8sPodName=openstack/glance-db-init-x2fsf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=ac0d4e72-f22c-46f5-b386-ca40e001a5c0;k8s:batch.kubernetes.io/job-name=glance-db-init;k8s:component=db-init;k8s:controller-uid=ac0d4e72-f22c-46f5-b386-ca40e001a5c0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=493ac2e62a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1215 identity=808 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=ac0d4e72-f22c-46f5-b386-ca40e001a5c0,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=ac0d4e72-f22c-46f5-b386-ca40e001a5c0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.68 ipv6= k8sPodName=openstack/glance-db-init-x2fsf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=493ac2e62a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1215 identity=808 ipv4=10.0.0.68 ipv6= k8sPodName=openstack/glance-db-init-x2fsf subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=493ac2e62a datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1215 identity=808 ipv4=10.0.0.68 ipv6= k8sPodName=openstack/glance-db-init-x2fsf subsys=endpoint level=info msg="Successful endpoint creation" containerID=493ac2e62a datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1215 identity=808 ipv4=10.0.0.68 ipv6= k8sPodName=openstack/glance-db-init-x2fsf subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=493ac2e62a endpointID=1215 k8sNamespace=openstack k8sPodName=glance-db-init-x2fsf subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=ac0d4e72-f22c-46f5-b386-ca40e001a5c0 k8s:batch.kubernetes.io/job-name=glance-db-init k8s:component=db-init k8s:controller-uid=ac0d4e72-f22c-46f5-b386-ca40e001a5c0 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=493ac2e62a datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1215 identity=808 ipv4=10.0.0.68 ipv6= k8sPodName=openstack/glance-db-init-x2fsf subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.168 4548dd2d-71f4-4145-8524-3b93027ce1eb default }" containerID=75c1130c2157fe658cfc82ead064169feb01e3f164966d6c40c94fdd75fd39a3 datapathConfiguration="&{false false false false false }" interface=lxc5ff7032f0c1a k8sPodName=openstack/glance-db-sync-jmdz6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=75c1130c21 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3523 ipv4=10.0.0.168 ipv6= k8sPodName=openstack/glance-db-sync-jmdz6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=75c1130c21 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3523 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=5feba223-8120-4fbe-a442-beb557c58149,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=5feba223-8120-4fbe-a442-beb557c58149,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.168 ipv6= k8sPodName=openstack/glance-db-sync-jmdz6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=5feba223-8120-4fbe-a442-beb557c58149;k8s:batch.kubernetes.io/job-name=glance-db-sync;k8s:component=db-sync;k8s:controller-uid=5feba223-8120-4fbe-a442-beb557c58149;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-sync;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=75c1130c21 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3523 identity=57194 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=5feba223-8120-4fbe-a442-beb557c58149,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=5feba223-8120-4fbe-a442-beb557c58149,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.168 ipv6= k8sPodName=openstack/glance-db-sync-jmdz6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=75c1130c21 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3523 identity=57194 ipv4=10.0.0.168 ipv6= k8sPodName=openstack/glance-db-sync-jmdz6 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=75c1130c21 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3523 identity=57194 ipv4=10.0.0.168 ipv6= k8sPodName=openstack/glance-db-sync-jmdz6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=75c1130c21 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3523 identity=57194 ipv4=10.0.0.168 ipv6= k8sPodName=openstack/glance-db-sync-jmdz6 subsys=daemon level=info msg="Delete endpoint request" containerID=75c1130c21 endpointID=3523 k8sNamespace=openstack k8sPodName=glance-db-sync-jmdz6 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=5feba223-8120-4fbe-a442-beb557c58149 k8s:batch.kubernetes.io/job-name=glance-db-sync k8s:component=db-sync k8s:controller-uid=5feba223-8120-4fbe-a442-beb557c58149 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-sync k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=75c1130c21 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3523 identity=57194 ipv4=10.0.0.168 ipv6= k8sPodName=openstack/glance-db-sync-jmdz6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.54 90fe1fb5-e36b-4419-8ba6-93acbe364151 default }" containerID=2d1c9adde74e19620fd577a10e8813bbfe922ab30ca0194d0c9ded853db6b2e3 datapathConfiguration="&{false false false false false }" interface=lxc93d711ea9f9d k8sPodName=openstack/glance-rabbit-init-mmcdd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2d1c9adde7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3254 ipv4=10.0.0.54 ipv6= k8sPodName=openstack/glance-rabbit-init-mmcdd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2d1c9adde7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3254 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=b8797d6d-531d-4e77-af6f-025f58d7894e,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=b8797d6d-531d-4e77-af6f-025f58d7894e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.54 ipv6= k8sPodName=openstack/glance-rabbit-init-mmcdd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=b8797d6d-531d-4e77-af6f-025f58d7894e;k8s:batch.kubernetes.io/job-name=glance-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=b8797d6d-531d-4e77-af6f-025f58d7894e;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-rabbit-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2d1c9adde7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3254 identity=16193 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=b8797d6d-531d-4e77-af6f-025f58d7894e,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=b8797d6d-531d-4e77-af6f-025f58d7894e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.54 ipv6= k8sPodName=openstack/glance-rabbit-init-mmcdd oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=2d1c9adde7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3254 identity=16193 ipv4=10.0.0.54 ipv6= k8sPodName=openstack/glance-rabbit-init-mmcdd subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2d1c9adde7 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3254 identity=16193 ipv4=10.0.0.54 ipv6= k8sPodName=openstack/glance-rabbit-init-mmcdd subsys=endpoint level=info msg="Successful endpoint creation" containerID=2d1c9adde7 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3254 identity=16193 ipv4=10.0.0.54 ipv6= k8sPodName=openstack/glance-rabbit-init-mmcdd subsys=daemon level=info msg="Delete endpoint request" containerID=2d1c9adde7 endpointID=3254 k8sNamespace=openstack k8sPodName=glance-rabbit-init-mmcdd subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=b8797d6d-531d-4e77-af6f-025f58d7894e k8s:batch.kubernetes.io/job-name=glance-rabbit-init k8s:component=rabbit-init k8s:controller-uid=b8797d6d-531d-4e77-af6f-025f58d7894e k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-rabbit-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=2d1c9adde7 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3254 identity=16193 ipv4=10.0.0.54 ipv6= k8sPodName=openstack/glance-rabbit-init-mmcdd subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.72 24897979-171d-49c2-99f1-52809f6dcfc3 default }" containerID=4b6e1f7113b34ff1df416cd724d1f38019d6167427ddc1e8a26cad7d0c5f6c33 datapathConfiguration="&{false false false false false }" interface=lxc216af3f17d89 k8sPodName=openstack/rook-ceph-rgw-ceph-a-cf9f85b9f-vntqv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4b6e1f7113 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=742 ipv4=10.0.0.72 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-cf9f85b9f-vntqv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4b6e1f7113 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=742 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.72 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-cf9f85b9f-vntqv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-rgw;k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io;k8s:app.kubernetes.io/created-by=rook-ceph-operator;k8s:app.kubernetes.io/instance=ceph;k8s:app.kubernetes.io/managed-by=rook-ceph-operator;k8s:app.kubernetes.io/name=ceph-rgw;k8s:app.kubernetes.io/part-of=ceph;k8s:ceph_daemon_id=ceph;k8s:ceph_daemon_type=rgw;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw;k8s:io.kubernetes.pod.namespace=openstack;k8s:rgw=ceph;k8s:rook.io/operator-namespace=rook-ceph;k8s:rook_cluster=openstack;k8s:rook_object_store=ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4b6e1f7113 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=742 identity=27829 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.72 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-cf9f85b9f-vntqv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4b6e1f7113 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=742 identity=27829 ipv4=10.0.0.72 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-cf9f85b9f-vntqv subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=4b6e1f7113 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=742 identity=27829 ipv4=10.0.0.72 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-cf9f85b9f-vntqv subsys=endpoint level=info msg="Successful endpoint creation" containerID=4b6e1f7113 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=742 identity=27829 ipv4=10.0.0.72 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-cf9f85b9f-vntqv subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.95 a1a93336-1b7d-4802-97dd-f10a63ca4614 default }" containerID=0bb3e7d02fdcbd133ea86b990de039674f491ff06d47d41724c6c9fddc2a626b datapathConfiguration="&{false false false false false }" interface=lxc1728669b654c k8sPodName=openstack/glance-ks-service-zkgh8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0bb3e7d02f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1631 ipv4=10.0.0.95 ipv6= k8sPodName=openstack/glance-ks-service-zkgh8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0bb3e7d02f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1631 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=d95074bf-ac4a-424c-b58c-31fe1e5371c5,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=d95074bf-ac4a-424c-b58c-31fe1e5371c5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.95 ipv6= k8sPodName=openstack/glance-ks-service-zkgh8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=d95074bf-ac4a-424c-b58c-31fe1e5371c5;k8s:batch.kubernetes.io/job-name=glance-ks-service;k8s:component=ks-service;k8s:controller-uid=d95074bf-ac4a-424c-b58c-31fe1e5371c5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-service;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0bb3e7d02f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1631 identity=25436 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=d95074bf-ac4a-424c-b58c-31fe1e5371c5,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=d95074bf-ac4a-424c-b58c-31fe1e5371c5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.95 ipv6= k8sPodName=openstack/glance-ks-service-zkgh8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0bb3e7d02f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1631 identity=25436 ipv4=10.0.0.95 ipv6= k8sPodName=openstack/glance-ks-service-zkgh8 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0bb3e7d02f datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1631 identity=25436 ipv4=10.0.0.95 ipv6= k8sPodName=openstack/glance-ks-service-zkgh8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=0bb3e7d02f datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1631 identity=25436 ipv4=10.0.0.95 ipv6= k8sPodName=openstack/glance-ks-service-zkgh8 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.83 c985b005-53af-4c1c-a704-9b9f3b2f43d2 default }" containerID=a5d07156d671c84c6ef720ee4ba1896ae7626969a55ba68f07e066660681fb3a datapathConfiguration="&{false false false false false }" interface=lxcb2bd8c480c6c k8sPodName=openstack/rook-ceph-crashcollector-instance-7c8df6f89b-x9jq9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a5d07156d6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3256 ipv4=10.0.0.83 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-7c8df6f89b-x9jq9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a5d07156d6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3256 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.1-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.83 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-7c8df6f89b-x9jq9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-crashcollector;k8s:ceph-version=18.2.1-0;k8s:ceph_daemon_id=crash;k8s:crashcollector=crash;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default;k8s:io.kubernetes.pod.namespace=openstack;k8s:node_name=instance;k8s:rook_cluster=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a5d07156d6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3256 identity=4183 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.1-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.83 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-7c8df6f89b-x9jq9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a5d07156d6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3256 identity=4183 ipv4=10.0.0.83 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-7c8df6f89b-x9jq9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a5d07156d6 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3256 identity=4183 ipv4=10.0.0.83 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-7c8df6f89b-x9jq9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=a5d07156d6 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3256 identity=4183 ipv4=10.0.0.83 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-7c8df6f89b-x9jq9 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=0bb3e7d02f endpointID=1631 k8sNamespace=openstack k8sPodName=glance-ks-service-zkgh8 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=d95074bf-ac4a-424c-b58c-31fe1e5371c5 k8s:batch.kubernetes.io/job-name=glance-ks-service k8s:component=ks-service k8s:controller-uid=d95074bf-ac4a-424c-b58c-31fe1e5371c5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-service k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=0bb3e7d02f datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1631 identity=25436 ipv4=10.0.0.95 ipv6= k8sPodName=openstack/glance-ks-service-zkgh8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.197 9e37967a-5408-4f24-9fb0-a6fdde9c7701 default }" containerID=137c47f8c4fdd676c6824b4897238eb67587dd0fbb65742f6d9f8997bc08c3b4 datapathConfiguration="&{false false false false false }" interface=lxcd130b6527591 k8sPodName=openstack/glance-ks-endpoints-6xm5q labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=137c47f8c4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2693 ipv4=10.0.0.197 ipv6= k8sPodName=openstack/glance-ks-endpoints-6xm5q subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=137c47f8c4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2693 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=58117347-ddde-4d72-905b-1ceed1534814,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=58117347-ddde-4d72-905b-1ceed1534814,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.197 ipv6= k8sPodName=openstack/glance-ks-endpoints-6xm5q subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=58117347-ddde-4d72-905b-1ceed1534814;k8s:batch.kubernetes.io/job-name=glance-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=58117347-ddde-4d72-905b-1ceed1534814;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-endpoints;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=137c47f8c4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2693 identity=1037 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=58117347-ddde-4d72-905b-1ceed1534814,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=58117347-ddde-4d72-905b-1ceed1534814,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.197 ipv6= k8sPodName=openstack/glance-ks-endpoints-6xm5q oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=137c47f8c4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2693 identity=1037 ipv4=10.0.0.197 ipv6= k8sPodName=openstack/glance-ks-endpoints-6xm5q subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=137c47f8c4 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2693 identity=1037 ipv4=10.0.0.197 ipv6= k8sPodName=openstack/glance-ks-endpoints-6xm5q subsys=endpoint level=info msg="Successful endpoint creation" containerID=137c47f8c4 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2693 identity=1037 ipv4=10.0.0.197 ipv6= k8sPodName=openstack/glance-ks-endpoints-6xm5q subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.161 59639d5c-2a04-4a33-96d0-099604428eab default }" containerID=7a6b83678355d1774d2533b54efb00d48d802637e899a9ba02ca2ab7bec036a7 datapathConfiguration="&{false false false false false }" interface=lxc3401298b7262 k8sPodName=openstack/ceph-object-controller-detect-version-79mvl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7a6b836783 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2736 ipv4=10.0.0.161 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-79mvl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7a6b836783 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2736 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=b8f422af-00c1-4623-9465-1070295d13b7,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=b8f422af-00c1-4623-9465-1070295d13b7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.14.2" ipv4=10.0.0.161 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-79mvl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app=ceph-object-controller-detect-version;k8s:batch.kubernetes.io/controller-uid=b8f422af-00c1-4623-9465-1070295d13b7;k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version;k8s:controller-uid=b8f422af-00c1-4623-9465-1070295d13b7;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=ceph-object-controller-detect-version;k8s:rook-version=v1.14.2;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7a6b836783 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2736 identity=8693 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=b8f422af-00c1-4623-9465-1070295d13b7,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=b8f422af-00c1-4623-9465-1070295d13b7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.14.2" ipv4=10.0.0.161 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-79mvl oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7a6b836783 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2736 identity=8693 ipv4=10.0.0.161 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-79mvl subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7a6b836783 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2736 identity=8693 ipv4=10.0.0.161 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-79mvl subsys=endpoint level=info msg="Successful endpoint creation" containerID=7a6b836783 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2736 identity=8693 ipv4=10.0.0.161 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-79mvl subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=137c47f8c4 endpointID=2693 k8sNamespace=openstack k8sPodName=glance-ks-endpoints-6xm5q subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=58117347-ddde-4d72-905b-1ceed1534814 k8s:batch.kubernetes.io/job-name=glance-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=58117347-ddde-4d72-905b-1ceed1534814 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-endpoints k8s:release_group=glance]" subsys=allocator level=info msg="Delete endpoint request" containerID=7a6b836783 endpointID=2736 k8sNamespace=openstack k8sPodName=ceph-object-controller-detect-version-79mvl subsys=daemon level=info msg="Releasing key" key="[k8s:app=ceph-object-controller-detect-version k8s:batch.kubernetes.io/controller-uid=b8f422af-00c1-4623-9465-1070295d13b7 k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version k8s:controller-uid=b8f422af-00c1-4623-9465-1070295d13b7 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=ceph-object-controller-detect-version k8s:rook-version=v1.14.2]" subsys=allocator level=info msg="Removed endpoint" containerID=7a6b836783 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2736 identity=8693 ipv4=10.0.0.161 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-79mvl subsys=endpoint level=info msg="Removed endpoint" containerID=137c47f8c4 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2693 identity=1037 ipv4=10.0.0.197 ipv6= k8sPodName=openstack/glance-ks-endpoints-6xm5q subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.95 85cc3465-835b-48d0-9ca8-5eb53b2ce8c3 default }" containerID=b8d992b49acf5314a50e3c83b5b29219c126638b8428e48a51cae6e5200acc46 datapathConfiguration="&{false false false false false }" interface=lxcf7d44ea99ee7 k8sPodName=openstack/glance-ks-user-5t6ml labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b8d992b49a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=647 ipv4=10.0.0.95 ipv6= k8sPodName=openstack/glance-ks-user-5t6ml subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b8d992b49a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=647 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=5ec5c41a-32e3-4d0a-933a-08569698fa6c,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=5ec5c41a-32e3-4d0a-933a-08569698fa6c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.95 ipv6= k8sPodName=openstack/glance-ks-user-5t6ml subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=5ec5c41a-32e3-4d0a-933a-08569698fa6c;k8s:batch.kubernetes.io/job-name=glance-ks-user;k8s:component=ks-user;k8s:controller-uid=5ec5c41a-32e3-4d0a-933a-08569698fa6c;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-user;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b8d992b49a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=647 identity=6637 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=5ec5c41a-32e3-4d0a-933a-08569698fa6c,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=5ec5c41a-32e3-4d0a-933a-08569698fa6c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.95 ipv6= k8sPodName=openstack/glance-ks-user-5t6ml oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b8d992b49a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=647 identity=6637 ipv4=10.0.0.95 ipv6= k8sPodName=openstack/glance-ks-user-5t6ml subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=b8d992b49a datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=647 identity=6637 ipv4=10.0.0.95 ipv6= k8sPodName=openstack/glance-ks-user-5t6ml subsys=endpoint level=info msg="Successful endpoint creation" containerID=b8d992b49a datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=647 identity=6637 ipv4=10.0.0.95 ipv6= k8sPodName=openstack/glance-ks-user-5t6ml subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=b8d992b49a endpointID=647 k8sNamespace=openstack k8sPodName=glance-ks-user-5t6ml subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=5ec5c41a-32e3-4d0a-933a-08569698fa6c k8s:batch.kubernetes.io/job-name=glance-ks-user k8s:component=ks-user k8s:controller-uid=5ec5c41a-32e3-4d0a-933a-08569698fa6c k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-user k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=b8d992b49a datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=647 identity=6637 ipv4=10.0.0.95 ipv6= k8sPodName=openstack/glance-ks-user-5t6ml subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.29 2c481b27-9e19-445d-9bc5-76a1fc2317ab default }" containerID=b6a61ebfa72b22295c68c01ad09da8271fdb3127c070c47bdeda3cdaa6b2feff datapathConfiguration="&{false false false false false }" interface=lxc66704cf54302 k8sPodName=openstack/glance-metadefs-load-tdlkp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b6a61ebfa7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1169 ipv4=10.0.0.29 ipv6= k8sPodName=openstack/glance-metadefs-load-tdlkp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b6a61ebfa7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1169 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=9f9a4c7c-e799-4b45-9537-011e76f696df,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=9f9a4c7c-e799-4b45-9537-011e76f696df,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.29 ipv6= k8sPodName=openstack/glance-metadefs-load-tdlkp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=9f9a4c7c-e799-4b45-9537-011e76f696df;k8s:batch.kubernetes.io/job-name=glance-metadefs-load;k8s:component=metadefs_load;k8s:controller-uid=9f9a4c7c-e799-4b45-9537-011e76f696df;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-metadefs-load;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b6a61ebfa7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1169 identity=7912 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=9f9a4c7c-e799-4b45-9537-011e76f696df,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=9f9a4c7c-e799-4b45-9537-011e76f696df,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.29 ipv6= k8sPodName=openstack/glance-metadefs-load-tdlkp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b6a61ebfa7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1169 identity=7912 ipv4=10.0.0.29 ipv6= k8sPodName=openstack/glance-metadefs-load-tdlkp subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b6a61ebfa7 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1169 identity=7912 ipv4=10.0.0.29 ipv6= k8sPodName=openstack/glance-metadefs-load-tdlkp subsys=endpoint level=info msg="Successful endpoint creation" containerID=b6a61ebfa7 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1169 identity=7912 ipv4=10.0.0.29 ipv6= k8sPodName=openstack/glance-metadefs-load-tdlkp subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=b6a61ebfa7 endpointID=1169 k8sNamespace=openstack k8sPodName=glance-metadefs-load-tdlkp subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=9f9a4c7c-e799-4b45-9537-011e76f696df k8s:batch.kubernetes.io/job-name=glance-metadefs-load k8s:component=metadefs_load k8s:controller-uid=9f9a4c7c-e799-4b45-9537-011e76f696df k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-metadefs-load k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=b6a61ebfa7 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1169 identity=7912 ipv4=10.0.0.29 ipv6= k8sPodName=openstack/glance-metadefs-load-tdlkp subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.190 1a0d31f4-ca39-4e81-ba01-e4909e18068d default }" containerID=f138b44fb837f94c3d5bcf483e2cf0adceb6d400bd0425f5ec4ceb6412d2c667 datapathConfiguration="&{false false false false false }" interface=lxca9cd62079301 k8sPodName=openstack/glance-storage-init-7bq8s labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f138b44fb8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3008 ipv4=10.0.0.190 ipv6= k8sPodName=openstack/glance-storage-init-7bq8s subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f138b44fb8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3008 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=020ac4d8-1f6d-4523-a8bf-8508c52eb05c,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=020ac4d8-1f6d-4523-a8bf-8508c52eb05c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.190 ipv6= k8sPodName=openstack/glance-storage-init-7bq8s subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=020ac4d8-1f6d-4523-a8bf-8508c52eb05c;k8s:batch.kubernetes.io/job-name=glance-storage-init;k8s:component=storage-init;k8s:controller-uid=020ac4d8-1f6d-4523-a8bf-8508c52eb05c;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-storage-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f138b44fb8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3008 identity=3738 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=020ac4d8-1f6d-4523-a8bf-8508c52eb05c,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=020ac4d8-1f6d-4523-a8bf-8508c52eb05c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.190 ipv6= k8sPodName=openstack/glance-storage-init-7bq8s oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f138b44fb8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3008 identity=3738 ipv4=10.0.0.190 ipv6= k8sPodName=openstack/glance-storage-init-7bq8s subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f138b44fb8 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3008 identity=3738 ipv4=10.0.0.190 ipv6= k8sPodName=openstack/glance-storage-init-7bq8s subsys=endpoint level=info msg="Successful endpoint creation" containerID=f138b44fb8 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3008 identity=3738 ipv4=10.0.0.190 ipv6= k8sPodName=openstack/glance-storage-init-7bq8s subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=f138b44fb8 endpointID=3008 k8sNamespace=openstack k8sPodName=glance-storage-init-7bq8s subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=020ac4d8-1f6d-4523-a8bf-8508c52eb05c k8s:batch.kubernetes.io/job-name=glance-storage-init k8s:component=storage-init k8s:controller-uid=020ac4d8-1f6d-4523-a8bf-8508c52eb05c k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-storage-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=f138b44fb8 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3008 identity=3738 ipv4=10.0.0.190 ipv6= k8sPodName=openstack/glance-storage-init-7bq8s subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.181 b85b87ac-fb8e-4c3f-99b4-0d37558e213c default }" containerID=2ae570741dca252acd95cc06426025c2310d4cc5206f261aab7c5397e59e66cf datapathConfiguration="&{false false false false false }" interface=lxc89b119c9b746 k8sPodName=openstack/glance-api-666cb5cf65-5htdz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2ae570741d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1696 ipv4=10.0.0.181 ipv6= k8sPodName=openstack/glance-api-666cb5cf65-5htdz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2ae570741d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1696 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.181 ipv6= k8sPodName=openstack/glance-api-666cb5cf65-5htdz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2ae570741d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1696 identity=25437 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.181 ipv6= k8sPodName=openstack/glance-api-666cb5cf65-5htdz oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=2ae570741d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1696 identity=25437 ipv4=10.0.0.181 ipv6= k8sPodName=openstack/glance-api-666cb5cf65-5htdz subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2ae570741d datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1696 identity=25437 ipv4=10.0.0.181 ipv6= k8sPodName=openstack/glance-api-666cb5cf65-5htdz subsys=endpoint level=info msg="Successful endpoint creation" containerID=2ae570741d datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1696 identity=25437 ipv4=10.0.0.181 ipv6= k8sPodName=openstack/glance-api-666cb5cf65-5htdz subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.27 6bbe1e4b-5c06-4640-8e2f-605b0d3fd356 default }" containerID=15d4a14e95c9abffb765889c2df48690e0ef6da9e718804e9e3baa86dc7e8083 datapathConfiguration="&{false false false false false }" interface=lxc7938188db38b k8sPodName=openstack/staffeln-conductor-8694c48585-k4bxz labels="[]" subsys=daemon sync-build=true level=info msg="Create endpoint request" addressing="&{10.0.0.182 a482a646-92b8-40ab-b25e-46f9731052ac default }" containerID=ba535bd454ae9a2c242513da29c0333d3884cb080e036a39db5bc86aefc205b0 datapathConfiguration="&{false false false false false }" interface=lxcfe41b2fca00a k8sPodName=openstack/staffeln-api-89f8c4ffd-gsc9l labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=15d4a14e95 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1125 ipv4=10.0.0.27 ipv6= k8sPodName=openstack/staffeln-conductor-8694c48585-k4bxz subsys=endpoint level=info msg="New endpoint" containerID=ba535bd454 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1673 ipv4=10.0.0.182 ipv6= k8sPodName=openstack/staffeln-api-89f8c4ffd-gsc9l subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ba535bd454 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1673 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.182 ipv6= k8sPodName=openstack/staffeln-api-89f8c4ffd-gsc9l subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Resolving identity labels (blocking)" containerID=15d4a14e95 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1125 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.27 ipv6= k8sPodName=openstack/staffeln-conductor-8694c48585-k4bxz subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=ba535bd454 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1673 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.182 ipv6= k8sPodName=openstack/staffeln-api-89f8c4ffd-gsc9l line=611 subsys=endpoint level=info msg="Invalid state transition skipped" containerID=15d4a14e95 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1125 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.27 ipv6= k8sPodName=openstack/staffeln-conductor-8694c48585-k4bxz line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ba535bd454 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1673 identity=62855 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.182 ipv6= k8sPodName=openstack/staffeln-api-89f8c4ffd-gsc9l oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ba535bd454 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1673 identity=62855 ipv4=10.0.0.182 ipv6= k8sPodName=openstack/staffeln-api-89f8c4ffd-gsc9l subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=conductor;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=15d4a14e95 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1125 identity=40762 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.27 ipv6= k8sPodName=openstack/staffeln-conductor-8694c48585-k4bxz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=15d4a14e95 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1125 identity=40762 ipv4=10.0.0.27 ipv6= k8sPodName=openstack/staffeln-conductor-8694c48585-k4bxz subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.61 c5194617-0b47-4bf1-885c-5d3cc90db650 default }" containerID=d2312dd054fd35b9e6d392591c1171c8054e8c151bcc1b265f3efeacbdd5487a datapathConfiguration="&{false false false false false }" interface=lxcd28f1e9bec2f k8sPodName=openstack/staffeln-db-init-hxhsp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d2312dd054 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3858 ipv4=10.0.0.61 ipv6= k8sPodName=openstack/staffeln-db-init-hxhsp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d2312dd054 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3858 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=e27c3fab-6d4a-40db-96a6-d7c05419e42d,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=e27c3fab-6d4a-40db-96a6-d7c05419e42d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.61 ipv6= k8sPodName=openstack/staffeln-db-init-hxhsp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=e27c3fab-6d4a-40db-96a6-d7c05419e42d;k8s:batch.kubernetes.io/job-name=staffeln-db-init;k8s:component=db-init;k8s:controller-uid=e27c3fab-6d4a-40db-96a6-d7c05419e42d;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-init;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d2312dd054 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3858 identity=46178 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=e27c3fab-6d4a-40db-96a6-d7c05419e42d,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=e27c3fab-6d4a-40db-96a6-d7c05419e42d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.61 ipv6= k8sPodName=openstack/staffeln-db-init-hxhsp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d2312dd054 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3858 identity=46178 ipv4=10.0.0.61 ipv6= k8sPodName=openstack/staffeln-db-init-hxhsp subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ba535bd454 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1673 identity=62855 ipv4=10.0.0.182 ipv6= k8sPodName=openstack/staffeln-api-89f8c4ffd-gsc9l subsys=endpoint level=info msg="Successful endpoint creation" containerID=ba535bd454 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1673 identity=62855 ipv4=10.0.0.182 ipv6= k8sPodName=openstack/staffeln-api-89f8c4ffd-gsc9l subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=15d4a14e95 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1125 identity=40762 ipv4=10.0.0.27 ipv6= k8sPodName=openstack/staffeln-conductor-8694c48585-k4bxz subsys=endpoint level=info msg="Successful endpoint creation" containerID=15d4a14e95 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1125 identity=40762 ipv4=10.0.0.27 ipv6= k8sPodName=openstack/staffeln-conductor-8694c48585-k4bxz subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=d2312dd054 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3858 identity=46178 ipv4=10.0.0.61 ipv6= k8sPodName=openstack/staffeln-db-init-hxhsp subsys=endpoint level=info msg="Successful endpoint creation" containerID=d2312dd054 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3858 identity=46178 ipv4=10.0.0.61 ipv6= k8sPodName=openstack/staffeln-db-init-hxhsp subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=d2312dd054 endpointID=3858 k8sNamespace=openstack k8sPodName=staffeln-db-init-hxhsp subsys=daemon level=info msg="Releasing key" key="[k8s:application=staffeln k8s:batch.kubernetes.io/controller-uid=e27c3fab-6d4a-40db-96a6-d7c05419e42d k8s:batch.kubernetes.io/job-name=staffeln-db-init k8s:component=db-init k8s:controller-uid=e27c3fab-6d4a-40db-96a6-d7c05419e42d k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=staffeln-db-init k8s:release_group=staffeln]" subsys=allocator level=info msg="Removed endpoint" containerID=d2312dd054 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3858 identity=46178 ipv4=10.0.0.61 ipv6= k8sPodName=openstack/staffeln-db-init-hxhsp subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.41 102972db-0a7d-4acd-9252-7606ea995c74 default }" containerID=ad0d71616e3ea4d89f63a88902480f5f14545439fc3a28307d0f7ac4d994af6c datapathConfiguration="&{false false false false false }" interface=lxc9dcada6dbd73 k8sPodName=openstack/staffeln-db-sync-pf9tl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ad0d71616e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=142 ipv4=10.0.0.41 ipv6= k8sPodName=openstack/staffeln-db-sync-pf9tl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ad0d71616e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=142 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=a7ab56c8-320b-4fdc-a46d-c63ee1944a0c,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=a7ab56c8-320b-4fdc-a46d-c63ee1944a0c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.41 ipv6= k8sPodName=openstack/staffeln-db-sync-pf9tl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=ad0d71616e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=142 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.41 ipv6= k8sPodName=openstack/staffeln-db-sync-pf9tl line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=a7ab56c8-320b-4fdc-a46d-c63ee1944a0c;k8s:batch.kubernetes.io/job-name=staffeln-db-sync;k8s:component=db-sync;k8s:controller-uid=a7ab56c8-320b-4fdc-a46d-c63ee1944a0c;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-sync;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ad0d71616e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=142 identity=60353 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=a7ab56c8-320b-4fdc-a46d-c63ee1944a0c,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=a7ab56c8-320b-4fdc-a46d-c63ee1944a0c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.41 ipv6= k8sPodName=openstack/staffeln-db-sync-pf9tl oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ad0d71616e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=142 identity=60353 ipv4=10.0.0.41 ipv6= k8sPodName=openstack/staffeln-db-sync-pf9tl subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ad0d71616e datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=142 identity=60353 ipv4=10.0.0.41 ipv6= k8sPodName=openstack/staffeln-db-sync-pf9tl subsys=endpoint level=info msg="Successful endpoint creation" containerID=ad0d71616e datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=142 identity=60353 ipv4=10.0.0.41 ipv6= k8sPodName=openstack/staffeln-db-sync-pf9tl subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager