level=info msg="Memory available for map entries (0.003% of 67421642752B): 168554106B" subsys=config level=info msg="option bpf-ct-global-tcp-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-ct-global-any-max set by dynamic sizing to 295708" subsys=config level=info msg="option bpf-nat-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-neigh-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-sock-rev-map-max set by dynamic sizing to 295708" subsys=config level=info msg=" --agent-health-port='9879'" subsys=daemon level=info msg=" --agent-labels=''" subsys=daemon level=info msg=" --agent-liveness-update-interval='1s'" subsys=daemon level=info msg=" --agent-not-ready-taint-key='node.cilium.io/agent-not-ready'" subsys=daemon level=info msg=" --allocator-list-timeout='3m0s'" subsys=daemon level=info msg=" --allow-icmp-frag-needed='true'" subsys=daemon level=info msg=" --allow-localhost='auto'" subsys=daemon level=info msg=" --annotate-k8s-node='false'" subsys=daemon level=info msg=" --api-rate-limit=''" subsys=daemon level=info msg=" --arping-refresh-period='30s'" subsys=daemon level=info msg=" --auto-create-cilium-node-resource='true'" subsys=daemon level=info msg=" --auto-direct-node-routes='false'" subsys=daemon level=info msg=" --bgp-announce-lb-ip='false'" subsys=daemon level=info msg=" --bgp-announce-pod-cidr='false'" subsys=daemon level=info msg=" --bgp-config-path='/var/lib/cilium/bgp/config.yaml'" subsys=daemon level=info msg=" --bpf-auth-map-max='524288'" subsys=daemon level=info msg=" --bpf-ct-global-any-max='262144'" subsys=daemon level=info msg=" --bpf-ct-global-tcp-max='524288'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-fin='10s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-syn='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp-grace='1m0s'" subsys=daemon level=info msg=" --bpf-filter-priority='1'" subsys=daemon level=info msg=" --bpf-fragments-map-max='8192'" subsys=daemon level=info msg=" --bpf-lb-acceleration='disabled'" subsys=daemon level=info msg=" --bpf-lb-affinity-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-algorithm='random'" subsys=daemon level=info msg=" --bpf-lb-dev-ip-addr-inherit=''" subsys=daemon level=info msg=" --bpf-lb-dsr-dispatch='opt'" subsys=daemon level=info msg=" --bpf-lb-dsr-l4-xlate='frontend'" subsys=daemon level=info msg=" --bpf-lb-external-clusterip='false'" subsys=daemon level=info msg=" --bpf-lb-maglev-hash-seed='JLfvgnHc2kaSUFaI'" subsys=daemon level=info msg=" --bpf-lb-maglev-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-maglev-table-size='16381'" subsys=daemon level=info msg=" --bpf-lb-map-max='65536'" subsys=daemon level=info msg=" --bpf-lb-mode='snat'" subsys=daemon level=info msg=" --bpf-lb-rev-nat-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-rss-ipv4-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-rss-ipv6-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-service-backend-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-service-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-sock='false'" subsys=daemon level=info msg=" --bpf-lb-sock-hostns-only='false'" subsys=daemon level=info msg=" --bpf-lb-source-range-map-max='0'" subsys=daemon level=info msg=" --bpf-map-dynamic-size-ratio='0.0025'" subsys=daemon level=info msg=" --bpf-map-event-buffers=''" subsys=daemon level=info msg=" --bpf-nat-global-max='524288'" subsys=daemon level=info msg=" --bpf-neigh-global-max='524288'" subsys=daemon level=info msg=" --bpf-policy-map-full-reconciliation-interval='15m0s'" subsys=daemon level=info msg=" --bpf-policy-map-max='16384'" subsys=daemon level=info msg=" --bpf-root='/sys/fs/bpf'" subsys=daemon level=info msg=" --bpf-sock-rev-map-max='262144'" subsys=daemon level=info msg=" --bypass-ip-availability-upon-restore='false'" subsys=daemon level=info msg=" --certificates-directory='/var/run/cilium/certs'" subsys=daemon level=info msg=" --cflags=''" subsys=daemon level=info msg=" --cgroup-root='/run/cilium/cgroupv2'" subsys=daemon level=info msg=" --cilium-endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --cluster-health-port='4240'" subsys=daemon level=info msg=" --cluster-id='0'" subsys=daemon level=info msg=" --cluster-name='default'" subsys=daemon level=info msg=" --cluster-pool-ipv4-cidr='10.0.0.0/8'" subsys=daemon level=info msg=" --cluster-pool-ipv4-mask-size='24'" subsys=daemon level=info msg=" --clustermesh-config='/var/lib/cilium/clustermesh/'" subsys=daemon level=info msg=" --clustermesh-ip-identities-sync-timeout='1m0s'" subsys=daemon level=info msg=" --cmdref=''" subsys=daemon level=info msg=" --cni-chaining-mode='none'" subsys=daemon level=info msg=" --cni-chaining-target=''" subsys=daemon level=info msg=" --cni-exclusive='true'" subsys=daemon level=info msg=" --cni-external-routing='false'" subsys=daemon level=info msg=" --cni-log-file='/var/run/cilium/cilium-cni.log'" subsys=daemon level=info msg=" --cnp-node-status-gc-interval='0s'" subsys=daemon level=info msg=" --config=''" subsys=daemon level=info msg=" --config-dir='/tmp/cilium/config-map'" subsys=daemon level=info msg=" --config-sources='config-map:kube-system/cilium-config'" subsys=daemon level=info msg=" --conntrack-gc-interval='0s'" subsys=daemon level=info msg=" --conntrack-gc-max-interval='0s'" subsys=daemon level=info msg=" --crd-wait-timeout='5m0s'" subsys=daemon level=info msg=" --custom-cni-conf='false'" subsys=daemon level=info msg=" --datapath-mode='veth'" subsys=daemon level=info msg=" --debug='false'" subsys=daemon level=info msg=" --debug-verbose=''" subsys=daemon level=info msg=" --derive-masquerade-ip-addr-from-device=''" subsys=daemon level=info msg=" --devices=''" subsys=daemon level=info msg=" --direct-routing-device=''" subsys=daemon level=info msg=" --disable-cnp-status-updates='true'" subsys=daemon level=info msg=" --disable-endpoint-crd='false'" subsys=daemon level=info msg=" --disable-envoy-version-check='false'" subsys=daemon level=info msg=" --disable-iptables-feeder-rules=''" subsys=daemon level=info msg=" --dns-max-ips-per-restored-rule='1000'" subsys=daemon level=info msg=" --dns-policy-unload-on-shutdown='false'" subsys=daemon level=info msg=" --dnsproxy-concurrency-limit='0'" subsys=daemon level=info msg=" --dnsproxy-concurrency-processing-grace-period='0s'" subsys=daemon level=info msg=" --dnsproxy-enable-transparent-mode='true'" subsys=daemon level=info msg=" --dnsproxy-lock-count='128'" subsys=daemon level=info msg=" --dnsproxy-lock-timeout='500ms'" subsys=daemon level=info msg=" --egress-gateway-policy-map-max='16384'" subsys=daemon level=info msg=" --egress-gateway-reconciliation-trigger-interval='1s'" subsys=daemon level=info msg=" --egress-masquerade-interfaces=''" subsys=daemon level=info msg=" --egress-multi-home-ip-rule-compat='false'" subsys=daemon level=info msg=" --enable-auto-protect-node-port-range='true'" subsys=daemon level=info msg=" --enable-bandwidth-manager='false'" subsys=daemon level=info msg=" --enable-bbr='false'" subsys=daemon level=info msg=" --enable-bgp-control-plane='false'" subsys=daemon level=info msg=" --enable-bpf-clock-probe='false'" subsys=daemon level=info msg=" --enable-bpf-masquerade='false'" subsys=daemon level=info msg=" --enable-bpf-tproxy='false'" subsys=daemon level=info msg=" --enable-cilium-api-server-access='*'" subsys=daemon level=info msg=" --enable-cilium-endpoint-slice='false'" subsys=daemon level=info msg=" --enable-cilium-health-api-server-access='*'" subsys=daemon level=info msg=" --enable-custom-calls='false'" subsys=daemon level=info msg=" --enable-endpoint-health-checking='true'" subsys=daemon level=info msg=" --enable-endpoint-routes='false'" subsys=daemon level=info msg=" --enable-envoy-config='false'" subsys=daemon level=info msg=" --enable-external-ips='false'" subsys=daemon level=info msg=" --enable-health-check-nodeport='true'" subsys=daemon level=info msg=" --enable-health-checking='true'" subsys=daemon level=info msg=" --enable-high-scale-ipcache='false'" subsys=daemon level=info msg=" --enable-host-firewall='false'" subsys=daemon level=info msg=" --enable-host-legacy-routing='false'" subsys=daemon level=info msg=" --enable-host-port='false'" subsys=daemon level=info msg=" --enable-hubble='false'" subsys=daemon level=info msg=" --enable-hubble-recorder-api='true'" subsys=daemon level=info msg=" --enable-icmp-rules='true'" subsys=daemon level=info msg=" --enable-identity-mark='true'" subsys=daemon level=info msg=" --enable-ip-masq-agent='false'" subsys=daemon level=info msg=" --enable-ipsec='false'" subsys=daemon level=info msg=" --enable-ipsec-key-watcher='true'" subsys=daemon level=info msg=" --enable-ipv4='true'" subsys=daemon level=info msg=" --enable-ipv4-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv4-egress-gateway='false'" subsys=daemon level=info msg=" --enable-ipv4-fragment-tracking='true'" subsys=daemon level=info msg=" --enable-ipv4-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6='false'" subsys=daemon level=info msg=" --enable-ipv6-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv6-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6-ndp='false'" subsys=daemon level=info msg=" --enable-k8s='true'" subsys=daemon level=info msg=" --enable-k8s-api-discovery='false'" subsys=daemon level=info msg=" --enable-k8s-endpoint-slice='true'" subsys=daemon level=info msg=" --enable-k8s-event-handover='false'" subsys=daemon level=info msg=" --enable-k8s-networkpolicy='true'" subsys=daemon level=info msg=" --enable-k8s-terminating-endpoint='true'" subsys=daemon level=info msg=" --enable-l2-announcements='false'" subsys=daemon level=info msg=" --enable-l2-neigh-discovery='true'" subsys=daemon level=info msg=" --enable-l2-pod-announcements='false'" subsys=daemon level=info msg=" --enable-l7-proxy='true'" subsys=daemon level=info msg=" --enable-local-node-route='true'" subsys=daemon level=info msg=" --enable-local-redirect-policy='false'" subsys=daemon level=info msg=" --enable-mke='false'" subsys=daemon level=info msg=" --enable-monitor='true'" subsys=daemon level=info msg=" --enable-nat46x64-gateway='false'" subsys=daemon level=info msg=" --enable-node-port='false'" subsys=daemon level=info msg=" --enable-pmtu-discovery='false'" subsys=daemon level=info msg=" --enable-policy='default'" subsys=daemon level=info msg=" --enable-recorder='false'" subsys=daemon level=info msg=" --enable-remote-node-identity='true'" subsys=daemon level=info msg=" --enable-runtime-device-detection='false'" subsys=daemon level=info msg=" --enable-sctp='false'" subsys=daemon level=info msg=" --enable-service-topology='false'" subsys=daemon level=info msg=" --enable-session-affinity='false'" subsys=daemon level=info msg=" --enable-srv6='false'" subsys=daemon level=info msg=" --enable-stale-cilium-endpoint-cleanup='true'" subsys=daemon level=info msg=" --enable-svc-source-range-check='true'" subsys=daemon level=info msg=" --enable-tracing='false'" subsys=daemon level=info msg=" --enable-unreachable-routes='false'" subsys=daemon level=info msg=" --enable-vtep='false'" subsys=daemon level=info msg=" --enable-well-known-identities='false'" subsys=daemon level=info msg=" --enable-wireguard='false'" subsys=daemon level=info msg=" --enable-wireguard-userspace-fallback='false'" subsys=daemon level=info msg=" --enable-xdp-prefilter='false'" subsys=daemon level=info msg=" --enable-xt-socket-fallback='true'" subsys=daemon level=info msg=" --encrypt-interface=''" subsys=daemon level=info msg=" --encrypt-node='false'" subsys=daemon level=info msg=" --endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --endpoint-queue-size='25'" subsys=daemon level=info msg=" --endpoint-status=''" subsys=daemon level=info msg=" --envoy-config-timeout='2m0s'" subsys=daemon level=info msg=" --envoy-log=''" subsys=daemon level=info msg=" --exclude-local-address=''" subsys=daemon level=info msg=" --external-envoy-proxy='false'" subsys=daemon level=info msg=" --fixed-identity-mapping=''" subsys=daemon level=info msg=" --fqdn-regex-compile-lru-size='1024'" subsys=daemon level=info msg=" --gops-port='9890'" subsys=daemon level=info msg=" --http-403-msg=''" subsys=daemon level=info msg=" --http-idle-timeout='0'" subsys=daemon level=info msg=" --http-max-grpc-timeout='0'" subsys=daemon level=info msg=" --http-normalize-path='true'" subsys=daemon level=info msg=" --http-request-timeout='3600'" subsys=daemon level=info msg=" --http-retry-count='3'" subsys=daemon level=info msg=" --http-retry-timeout='0'" subsys=daemon level=info msg=" --hubble-disable-tls='false'" subsys=daemon level=info msg=" --hubble-event-buffer-capacity='4095'" subsys=daemon level=info msg=" --hubble-event-queue-size='0'" subsys=daemon level=info msg=" --hubble-export-file-compress='false'" subsys=daemon level=info msg=" --hubble-export-file-max-backups='5'" subsys=daemon level=info msg=" --hubble-export-file-max-size-mb='10'" subsys=daemon level=info msg=" --hubble-export-file-path=''" subsys=daemon level=info msg=" --hubble-listen-address=''" subsys=daemon level=info msg=" --hubble-metrics=''" subsys=daemon level=info msg=" --hubble-metrics-server=''" subsys=daemon level=info msg=" --hubble-monitor-events=''" subsys=daemon level=info msg=" --hubble-prefer-ipv6='false'" subsys=daemon level=info msg=" --hubble-recorder-sink-queue-size='1024'" subsys=daemon level=info msg=" --hubble-recorder-storage-path='/var/run/cilium/pcaps'" subsys=daemon level=info msg=" --hubble-skip-unknown-cgroup-ids='true'" subsys=daemon level=info msg=" --hubble-socket-path='/var/run/cilium/hubble.sock'" subsys=daemon level=info msg=" --hubble-tls-cert-file=''" subsys=daemon level=info msg=" --hubble-tls-client-ca-files=''" subsys=daemon level=info msg=" --hubble-tls-key-file=''" subsys=daemon level=info msg=" --identity-allocation-mode='crd'" subsys=daemon level=info msg=" --identity-change-grace-period='5s'" subsys=daemon level=info msg=" --identity-gc-interval='15m0s'" subsys=daemon level=info msg=" --identity-heartbeat-timeout='30m0s'" subsys=daemon level=info msg=" --identity-restore-grace-period='10m0s'" subsys=daemon level=info msg=" --install-egress-gateway-routes='false'" subsys=daemon level=info msg=" --install-iptables-rules='true'" subsys=daemon level=info msg=" --install-no-conntrack-iptables-rules='false'" subsys=daemon level=info msg=" --ip-allocation-timeout='2m0s'" subsys=daemon level=info msg=" --ip-masq-agent-config-path='/etc/config/ip-masq-agent'" subsys=daemon level=info msg=" --ipam='cluster-pool'" subsys=daemon level=info msg=" --ipam-cilium-node-update-rate='15s'" subsys=daemon level=info msg=" --ipam-multi-pool-pre-allocation='default=8'" subsys=daemon level=info msg=" --ipsec-key-file=''" subsys=daemon level=info msg=" --ipsec-key-rotation-duration='5m0s'" subsys=daemon level=info msg=" --iptables-lock-timeout='5s'" subsys=daemon level=info msg=" --iptables-random-fully='false'" subsys=daemon level=info msg=" --ipv4-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv4-node='auto'" subsys=daemon level=info msg=" --ipv4-pod-subnets=''" subsys=daemon level=info msg=" --ipv4-range='auto'" subsys=daemon level=info msg=" --ipv4-service-loopback-address='169.254.42.1'" subsys=daemon level=info msg=" --ipv4-service-range='auto'" subsys=daemon level=info msg=" --ipv6-cluster-alloc-cidr='f00d::/64'" subsys=daemon level=info msg=" --ipv6-mcast-device=''" subsys=daemon level=info msg=" --ipv6-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv6-node='auto'" subsys=daemon level=info msg=" --ipv6-pod-subnets=''" subsys=daemon level=info msg=" --ipv6-range='auto'" subsys=daemon level=info msg=" --ipv6-service-range='auto'" subsys=daemon level=info msg=" --join-cluster='false'" subsys=daemon level=info msg=" --k8s-api-server=''" subsys=daemon level=info msg=" --k8s-client-burst='10'" subsys=daemon level=info msg=" --k8s-client-qps='5'" subsys=daemon level=info msg=" --k8s-heartbeat-timeout='30s'" subsys=daemon level=info msg=" --k8s-kubeconfig-path=''" subsys=daemon level=info msg=" --k8s-namespace='kube-system'" subsys=daemon level=info msg=" --k8s-require-ipv4-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-require-ipv6-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-service-cache-size='128'" subsys=daemon level=info msg=" --k8s-service-proxy-name=''" subsys=daemon level=info msg=" --k8s-sync-timeout='3m0s'" subsys=daemon level=info msg=" --k8s-watcher-endpoint-selector='metadata.name!=kube-scheduler,metadata.name!=kube-controller-manager,metadata.name!=etcd-operator,metadata.name!=gcp-controller-manager'" subsys=daemon level=info msg=" --keep-config='false'" subsys=daemon level=info msg=" --kube-proxy-replacement='disabled'" subsys=daemon level=info msg=" --kube-proxy-replacement-healthz-bind-address=''" subsys=daemon level=info msg=" --kvstore=''" subsys=daemon level=info msg=" --kvstore-connectivity-timeout='2m0s'" subsys=daemon level=info msg=" --kvstore-lease-ttl='15m0s'" subsys=daemon level=info msg=" --kvstore-max-consecutive-quorum-errors='2'" subsys=daemon level=info msg=" --kvstore-opt=''" subsys=daemon level=info msg=" --kvstore-periodic-sync='5m0s'" subsys=daemon level=info msg=" --l2-announcements-lease-duration='15s'" subsys=daemon level=info msg=" --l2-announcements-renew-deadline='5s'" subsys=daemon level=info msg=" --l2-announcements-retry-period='2s'" subsys=daemon level=info msg=" --l2-pod-announcements-interface=''" subsys=daemon level=info msg=" --label-prefix-file=''" subsys=daemon level=info msg=" --labels=''" subsys=daemon level=info msg=" --lib-dir='/var/lib/cilium'" subsys=daemon level=info msg=" --local-max-addr-scope='252'" subsys=daemon level=info msg=" --local-router-ipv4=''" subsys=daemon level=info msg=" --local-router-ipv6=''" subsys=daemon level=info msg=" --log-driver=''" subsys=daemon level=info msg=" --log-opt=''" subsys=daemon level=info msg=" --log-system-load='false'" subsys=daemon level=info msg=" --max-controller-interval='0'" subsys=daemon level=info msg=" --mesh-auth-enabled='true'" subsys=daemon level=info msg=" --mesh-auth-gc-interval='5m0s'" subsys=daemon level=info msg=" --mesh-auth-mutual-listener-port='0'" subsys=daemon level=info msg=" --mesh-auth-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-rotated-identities-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-signal-backoff-duration='1s'" subsys=daemon level=info msg=" --mesh-auth-spiffe-trust-domain='spiffe.cilium'" subsys=daemon level=info msg=" --mesh-auth-spire-admin-socket=''" subsys=daemon level=info msg=" --metrics=''" subsys=daemon level=info msg=" --mke-cgroup-mount=''" subsys=daemon level=info msg=" --monitor-aggregation='medium'" subsys=daemon level=info msg=" --monitor-aggregation-flags='all'" subsys=daemon level=info msg=" --monitor-aggregation-interval='5s'" subsys=daemon level=info msg=" --monitor-queue-size='0'" subsys=daemon level=info msg=" --mtu='0'" subsys=daemon level=info msg=" --node-encryption-opt-out-labels='node-role.kubernetes.io/control-plane'" subsys=daemon level=info msg=" --node-port-acceleration='disabled'" subsys=daemon level=info msg=" --node-port-algorithm='random'" subsys=daemon level=info msg=" --node-port-bind-protection='true'" subsys=daemon level=info msg=" --node-port-mode='snat'" subsys=daemon level=info msg=" --node-port-range='30000,32767'" subsys=daemon level=info msg=" --nodes-gc-interval='5m0s'" subsys=daemon level=info msg=" --operator-api-serve-addr='127.0.0.1:9234'" subsys=daemon level=info msg=" --policy-audit-mode='false'" subsys=daemon level=info msg=" --policy-queue-size='100'" subsys=daemon level=info msg=" --policy-trigger-interval='1s'" subsys=daemon level=info msg=" --pprof='false'" subsys=daemon level=info msg=" --pprof-address='localhost'" subsys=daemon level=info msg=" --pprof-port='6060'" subsys=daemon level=info msg=" --preallocate-bpf-maps='false'" subsys=daemon level=info msg=" --prepend-iptables-chains='true'" subsys=daemon level=info msg=" --procfs='/host/proc'" subsys=daemon level=info msg=" --prometheus-serve-addr=':9962'" subsys=daemon level=info msg=" --proxy-connect-timeout='2'" subsys=daemon level=info msg=" --proxy-gid='1337'" subsys=daemon level=info msg=" --proxy-idle-timeout-seconds='60'" subsys=daemon level=info msg=" --proxy-max-connection-duration-seconds='0'" subsys=daemon level=info msg=" --proxy-max-requests-per-connection='0'" subsys=daemon level=info msg=" --proxy-prometheus-port='9964'" subsys=daemon level=info msg=" --read-cni-conf=''" subsys=daemon level=info msg=" --remove-cilium-node-taints='true'" subsys=daemon level=info msg=" --restore='true'" subsys=daemon level=info msg=" --route-metric='0'" subsys=daemon level=info msg=" --routing-mode='tunnel'" subsys=daemon level=info msg=" --set-cilium-is-up-condition='true'" subsys=daemon level=info msg=" --set-cilium-node-taints='true'" subsys=daemon level=info msg=" --sidecar-istio-proxy-image='cilium/istio_proxy'" subsys=daemon level=info msg=" --single-cluster-route='false'" subsys=daemon level=info msg=" --skip-cnp-status-startup-clean='false'" subsys=daemon level=info msg=" --socket-path='/var/run/cilium/cilium.sock'" subsys=daemon level=info msg=" --srv6-encap-mode='reduced'" subsys=daemon level=info msg=" --state-dir='/var/run/cilium'" subsys=daemon level=info msg=" --synchronize-k8s-nodes='true'" subsys=daemon level=info msg=" --tofqdns-dns-reject-response-code='refused'" subsys=daemon level=info msg=" --tofqdns-enable-dns-compression='true'" subsys=daemon level=info msg=" --tofqdns-endpoint-max-ip-per-hostname='50'" subsys=daemon level=info msg=" --tofqdns-idle-connection-grace-period='0s'" subsys=daemon level=info msg=" --tofqdns-max-deferred-connection-deletes='10000'" subsys=daemon level=info msg=" --tofqdns-min-ttl='0'" subsys=daemon level=info msg=" --tofqdns-pre-cache=''" subsys=daemon level=info msg=" --tofqdns-proxy-port='0'" subsys=daemon level=info msg=" --tofqdns-proxy-response-max-delay='100ms'" subsys=daemon level=info msg=" --trace-payloadlen='128'" subsys=daemon level=info msg=" --trace-sock='true'" subsys=daemon level=info msg=" --tunnel=''" subsys=daemon level=info msg=" --tunnel-port='6082'" subsys=daemon level=info msg=" --tunnel-protocol='geneve'" subsys=daemon level=info msg=" --unmanaged-pod-watcher-interval='15'" subsys=daemon level=info msg=" --use-cilium-internal-ip-for-ipsec='false'" subsys=daemon level=info msg=" --version='false'" subsys=daemon level=info msg=" --vlan-bpf-bypass=''" subsys=daemon level=info msg=" --vtep-cidr=''" subsys=daemon level=info msg=" --vtep-endpoint=''" subsys=daemon level=info msg=" --vtep-mac=''" subsys=daemon level=info msg=" --vtep-mask=''" subsys=daemon level=info msg=" --wireguard-encapsulate='false'" subsys=daemon level=info msg=" --write-cni-conf-when-ready='/host/etc/cni/net.d/05-cilium.conflist'" subsys=daemon level=info msg=" _ _ _" subsys=daemon level=info msg=" ___|_| |_|_ _ _____" subsys=daemon level=info msg="| _| | | | | | |" subsys=daemon level=info msg="|___|_|_|_|___|_|_|_|" subsys=daemon level=info msg="Cilium 1.14.8 cf6e022e 2024-03-13T12:23:35-04:00 go version go1.21.8 linux/amd64" subsys=daemon level=info msg="clang (10.0.0) and kernel (5.15.0) versions: OK!" subsys=linux-datapath level=info msg="linking environment: OK!" subsys=linux-datapath level=info msg="Kernel config file not found: if the agent fails to start, check the system requirements at https://docs.cilium.io/en/stable/operations/system_requirements" subsys=probes level=info msg="Detected mounted BPF filesystem at /sys/fs/bpf" subsys=bpf level=info msg="Mounted cgroupv2 filesystem at /run/cilium/cgroupv2" subsys=cgroups level=info msg="Parsing base label prefixes from default label list" subsys=labels-filter level=info msg="Parsing additional label prefixes from user inputs: []" subsys=labels-filter level=info msg="Final label prefixes to be used for identity evaluation:" subsys=labels-filter level=info msg=" - reserved:.*" subsys=labels-filter level=info msg=" - :io\\.kubernetes\\.pod\\.namespace" subsys=labels-filter level=info msg=" - :io\\.cilium\\.k8s\\.namespace\\.labels" subsys=labels-filter level=info msg=" - :app\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:io\\.kubernetes" subsys=labels-filter level=info msg=" - !:kubernetes\\.io" subsys=labels-filter level=info msg=" - !:.*beta\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:k8s\\.io" subsys=labels-filter level=info msg=" - !:pod-template-generation" subsys=labels-filter level=info msg=" - !:pod-template-hash" subsys=labels-filter level=info msg=" - !:controller-revision-hash" subsys=labels-filter level=info msg=" - !:annotation.*" subsys=labels-filter level=info msg=" - !:etcd_node" subsys=labels-filter level=info msg=Invoked duration=1.027974ms function="pprof.glob..func1 (cell.go:50)" subsys=hive level=info msg=Invoked duration="60.921µs" function="gops.registerGopsHooks (cell.go:38)" subsys=hive level=info msg=Invoked duration="971.132µs" function="metrics.NewRegistry (registry.go:65)" subsys=hive level=info msg=Invoked duration="7.69µs" function="metrics.glob..func1 (cell.go:12)" subsys=hive level=info msg="Spire Delegate API Client is disabled as no socket path is configured" subsys=spire-delegate level=info msg="Mutual authentication handler is disabled as no port is configured" subsys=auth level=info msg=Invoked duration=97.50156ms function="cmd.glob..func4 (daemon_main.go:1607)" subsys=hive level=info msg=Invoked duration="14.111µs" function="gc.registerSignalHandler (cell.go:47)" subsys=hive level=info msg=Invoked duration="24.28µs" function="utime.initUtimeSync (cell.go:29)" subsys=hive level=info msg=Invoked duration="70.931µs" function="agentliveness.newAgentLivenessUpdater (agent_liveness.go:43)" subsys=hive level=info msg=Invoked duration="75.601µs" function="l2responder.NewL2ResponderReconciler (l2responder.go:63)" subsys=hive level=info msg=Invoked duration="88.802µs" function="garp.newGARPProcessor (processor.go:27)" subsys=hive level=info msg=Starting subsys=hive level=info msg="Started gops server" address="127.0.0.1:9890" subsys=gops level=info msg="Start hook executed" duration="448.079µs" function="gops.registerGopsHooks.func1 (cell.go:43)" subsys=hive level=info msg="Start hook executed" duration="3.68µs" function="metrics.NewRegistry.func1 (registry.go:86)" subsys=hive level=info msg="Establishing connection to apiserver" host="https://10.96.0.1:443" subsys=k8s-client level=info msg="Serving prometheus metrics on :9962" subsys=metrics level=info msg="Connected to apiserver" subsys=k8s-client level=info msg="Start hook executed" duration=84.345039ms function="client.(*compositeClientset).onStart" subsys=hive level=info msg="Start hook executed" duration=7.76766ms function="authmap.newAuthMap.func1 (cell.go:27)" subsys=hive level=info msg="Start hook executed" duration="31.241µs" function="configmap.newMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="27.411µs" function="signalmap.newMap.func1 (cell.go:44)" subsys=hive level=info msg="Start hook executed" duration="155.654µs" function="nodemap.newNodeMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="74.982µs" function="eventsmap.newEventsMap.func1 (cell.go:35)" subsys=hive level=info msg="Start hook executed" duration="66.052µs" function="*cni.cniConfigManager.Start" subsys=hive level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Wrote CNI configuration file to /host/etc/cni/net.d/05-cilium.conflist" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Start hook executed" duration=123.708628ms function="datapath.newDatapath.func1 (cells.go:113)" subsys=hive level=info msg="Restored 0 node IDs from the BPF map" subsys=linux-datapath level=info msg="Start hook executed" duration="86.032µs" function="datapath.newDatapath.func2 (cells.go:126)" subsys=hive level=info msg="Start hook executed" duration="16.55µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Node].Start" subsys=hive level=info msg="Start hook executed" duration="2.02µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNode].Start" subsys=hive level=info msg="Using autogenerated IPv4 allocation range" subsys=node v4Prefix=10.115.0.0/16 level=info msg="no local ciliumnode found, will not restore cilium internal ips from k8s" subsys=daemon level=info msg="Start hook executed" duration=103.90903ms function="node.NewLocalNodeStore.func1 (local_node_store.go:76)" subsys=hive level=info msg="Start hook executed" duration="16.91µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration=201.014161ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration="8.67µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Using discoveryv1.EndpointSlice" subsys=k8s level=info msg="Start hook executed" duration=100.977326ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Start hook executed" duration="1.96µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Pod].Start" subsys=hive level=info msg="Start hook executed" duration="1.14µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Namespace].Start" subsys=hive level=info msg="Start hook executed" duration=810ns function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration=980ns function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumClusterwideNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration=880ns function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumCIDRGroup].Start" subsys=hive level=info msg="Start hook executed" duration="21.181µs" function="endpointmanager.newDefaultEndpointManager.func1 (cell.go:203)" subsys=hive level=info msg="Start hook executed" duration="11.29µs" function="cmd.newPolicyTrifecta.func1 (policy.go:135)" subsys=hive level=info msg="Start hook executed" duration="62.861µs" function="*manager.manager.Start" subsys=hive level=info msg="Serving cilium node monitor v1.2 API at unix:///var/run/cilium/monitor1_2.sock" subsys=monitor-agent level=info msg="Start hook executed" duration="197.954µs" function="agent.newMonitorAgent.func1 (cell.go:61)" subsys=hive level=info msg="Start hook executed" duration="1.54µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumL2AnnouncementPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="6.451µs" function="*job.group.Start" subsys=hive level=info msg="Start hook executed" duration="188.734µs" function="proxy.newProxy.func1 (cell.go:55)" subsys=hive level=info msg="Envoy: Starting xDS gRPC server listening on /var/run/cilium/envoy/sockets/xds.sock" subsys=envoy-manager level=info msg="Start hook executed" duration="681.595µs" function="signal.provideSignalManager.func1 (cell.go:25)" subsys=hive level=info msg="Datapath signal listener running" subsys=signal level=info msg="Start hook executed" duration="965.312µs" function="auth.registerAuthManager.func1 (cell.go:109)" subsys=hive level=info msg="Start hook executed" duration="3.57µs" function="auth.registerGCJobs.func1 (cell.go:158)" subsys=hive level=info msg="Start hook executed" duration="16.241µs" function="*job.group.Start" subsys=hive level=warning msg="Deprecated value for --kube-proxy-replacement: disabled (use either \"true\", or \"false\")" subsys=daemon level=info msg="Auto-disabling \"enable-node-port\", \"enable-external-ips\", \"bpf-lb-sock\", \"enable-host-port\" features and falling back to \"enable-host-legacy-routing\"" subsys=daemon level=info msg="Inheriting MTU from external network interface" device=ens3 ipAddr=199.204.45.115 mtu=1500 subsys=mtu level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_ipcache, recreating and re-pinning map cilium_ipcache" file-path=/sys/fs/bpf/tc/globals/cilium_ipcache name=cilium_ipcache subsys=bpf level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_tunnel_map, recreating and re-pinning map cilium_tunnel_map" file-path=/sys/fs/bpf/tc/globals/cilium_tunnel_map name=cilium_tunnel_map subsys=bpf level=info msg="Restored services from maps" failedServices=0 restoredServices=0 subsys=service level=info msg="Restored backends from maps" failedBackends=0 restoredBackends=0 skippedBackends=0 subsys=service level=info msg="Reading old endpoints..." subsys=daemon level=info msg="No old endpoints found." subsys=daemon level=info msg="Waiting until all Cilium CRDs are available" subsys=k8s level=info msg="All Cilium CRDs have been found and are available" subsys=k8s level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=info msg="Successfully created CiliumNode resource" subsys=nodediscovery level=warning msg="Unable to create CiliumNode resource, will retry" error="ciliumnodes.cilium.io \"instance\" already exists" subsys=nodediscovery level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=info msg="Received own node information from API server" ipAddr.ipv4=199.204.45.115 ipAddr.ipv6="" k8sNodeIP=199.204.45.115 labels="map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:]" nodeName=instance subsys=k8s v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="k8s mode: Allowing localhost to reach local endpoints" subsys=daemon level=info msg="Detected devices" devices="[]" subsys=linux-datapath level=info msg="Enabling k8s event listener" subsys=k8s-watcher level=info msg="Removing stale endpoint interfaces" subsys=daemon level=info msg="Skipping kvstore configuration" subsys=daemon level=info msg="Waiting until local node addressing before starting watchers depending on it" subsys=k8s-watcher level=info msg="Initializing node addressing" subsys=daemon level=info msg="Initializing cluster-pool IPAM" subsys=ipam v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="Restoring endpoints..." subsys=daemon level=info msg="Endpoints restored" failed=0 restored=0 subsys=daemon level=info msg="Addressing information:" subsys=daemon level=info msg=" Cluster-Name: default" subsys=daemon level=info msg=" Cluster-ID: 0" subsys=daemon level=info msg=" Local node-name: instance" subsys=daemon level=info msg=" Node-IPv6: " subsys=daemon level=info msg=" External-Node IPv4: 199.204.45.115" subsys=daemon level=info msg=" Internal-Node IPv4: 10.0.0.121" subsys=daemon level=info msg=" IPv4 allocation prefix: 10.0.0.0/24" subsys=daemon level=info msg=" Loopback IPv4: 169.254.42.1" subsys=daemon level=info msg=" Local IPv4 addresses:" subsys=daemon level=info msg=" - 199.204.45.115" subsys=daemon level=info msg=" - 172.17.0.100" subsys=daemon level=info msg=" - 10.96.240.200" subsys=daemon level=info msg="Node updated" clusterName=default nodeName=instance subsys=nodemanager level=info msg="Adding local node to cluster" node="{instance default [{InternalIP 199.204.45.115} {CiliumInternalIP 10.0.0.121}] 10.0.0.0/24 [] [] 10.0.0.207 0 local 0 map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:] map[] 1 }" subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Waiting until all pre-existing resources have been received" subsys=k8s-watcher level=info msg="Initializing identity allocator" subsys=identity-cache level=info msg="Allocating identities between range" cluster-id=0 max=65535 min=256 subsys=identity-cache level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.core.bpf_jit_enable sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.all.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.fib_multipath_use_neigh sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.unprivileged_bpf_disabled sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.timer_migration sysParamValue=0 level=info msg="Setting up BPF datapath" bpfClockSource=ktime bpfInsnSet="" subsys=datapath-loader level=info msg="Iptables rules installed" subsys=iptables level=info msg="Adding new proxy port rules for cilium-dns-egress:34443" id=cilium-dns-egress subsys=proxy level=info msg="Iptables proxy rules installed" subsys=iptables level=info msg="Start hook executed" duration=2.648295961s function="cmd.newDaemonPromise.func1 (daemon_main.go:1663)" subsys=hive level=info msg="Start hook executed" duration="20.071µs" function="utime.initUtimeSync.func1 (cell.go:33)" subsys=hive level=info msg="Start hook executed" duration="7.251µs" function="*job.group.Start" subsys=hive level=info msg="Start hook executed" duration="44.851µs" function="l2respondermap.newMap.func1 (l2_responder_map4.go:44)" subsys=hive level=info msg="Start hook executed" duration="5.32µs" function="*job.group.Start" subsys=hive level=info msg="Initializing daemon" subsys=daemon level=info msg="Validating configured node address ranges" subsys=daemon level=info msg="Starting IP identity watcher" subsys=ipcache level=info msg="Starting connection tracking garbage collector" subsys=daemon level=info msg="Initial scan of connection tracking completed" subsys=ct-gc level=info msg="Regenerating restored endpoints" numRestored=0 subsys=daemon level=info msg="Creating host endpoint" subsys=daemon level=info msg="Finished regenerating restored endpoints" regenerated=0 subsys=daemon total=0 level=info msg="Deleted orphan backends" orphanBackends=0 subsys=service level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2049 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2049 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2049 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Launching Cilium health daemon" subsys=daemon level=info msg="Launching Cilium health endpoint" subsys=daemon level=info msg="Started healthz status API server" address="127.0.0.1:9879" subsys=daemon level=info msg="Processing queued endpoint deletion requests from /var/run/cilium/deleteQueue" subsys=daemon level=info msg="processing 0 queued deletion requests" subsys=daemon level=info msg="Initializing Cilium API" subsys=daemon level=info msg="Daemon initialization completed" bootstrapTime=4.226560809s subsys=daemon level=info msg="Hubble server is disabled" subsys=hubble level=info msg="Serving cilium API at unix:///var/run/cilium/cilium.sock" subsys=daemon level=info msg="Compiled new BPF template" BPFCompilationTime=349.041593ms file-path=/var/run/cilium/state/templates/b0e95264fd29cde2cdd2bd6040bd214ba7b167cabf8f46def7760ebfa2744690/bpf_host.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2049 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.205 fea9ec16-6b72-41ab-a175-7729baf27de5 default }" containerID=f54ce6427308b3b332e27eedb8349fdd4cb07ae58528cf13b554e98f2b571e0d datapathConfiguration="&{false false false false false }" interface=lxc6efd4efdaee7 k8sPodName=kube-system/coredns-7c96b6546b-qtkj5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f54ce64273 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=670 ipv4=10.0.0.205 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-qtkj5 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.194 471948d3-5728-441f-bd5f-d708031ab4a2 default }" containerID=570c0105ed053fd0fbf7ddf74fce58a74fde288d4cfbec4780946745d1ccf753 datapathConfiguration="&{false false false false false }" interface=lxc429938c5f2a3 k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-slzgg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=570c0105ed datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3693 ipv4=10.0.0.194 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-slzgg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f54ce64273 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=670 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.205 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-qtkj5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:kube-system]" subsys=crd-allocator level=info msg="Resolving identity labels (blocking)" containerID=570c0105ed datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3693 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=1156e912-4ade-4d3c-804a-7dbfc8df092e,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=1156e912-4ade-4d3c-804a-7dbfc8df092e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.194 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-slzgg subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=570c0105ed datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3693 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.194 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-slzgg line=611 subsys=endpoint level=info msg="Invalid state transition skipped" containerID=f54ce64273 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=670 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.205 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-qtkj5 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=coredns;k8s:io.kubernetes.pod.namespace=kube-system;k8s:k8s-app=kube-dns;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f54ce64273 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=670 identity=5056 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.205 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-qtkj5 oldIdentity="no identity" subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="Waiting for endpoint to be generated" containerID=f54ce64273 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=670 identity=5056 ipv4=10.0.0.205 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-qtkj5 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=certgen;k8s:batch.kubernetes.io/controller-uid=1156e912-4ade-4d3c-804a-7dbfc8df092e;k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen;k8s:controller-uid=1156e912-4ade-4d3c-804a-7dbfc8df092e;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;k8s:job-name=envoy-gateway-gateway-helm-certgen;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=570c0105ed datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3693 identity=18509 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=1156e912-4ade-4d3c-804a-7dbfc8df092e,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=1156e912-4ade-4d3c-804a-7dbfc8df092e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.194 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-slzgg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=570c0105ed datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3693 identity=18509 ipv4=10.0.0.194 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-slzgg subsys=endpoint level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=235 ipv4=10.0.0.207 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=235 identityLabels="reserved:health" ipv4=10.0.0.207 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=235 identity=4 identityLabels="reserved:health" ipv4=10.0.0.207 ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Compiled new BPF template" BPFCompilationTime=1.098970025s file-path=/var/run/cilium/state/templates/6d523227748a5c93d9ffaa59569b9252f97f8ead7196daf26d4c134af4665f1c/bpf_lxc.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID=f54ce64273 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=670 identity=5056 ipv4=10.0.0.205 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-qtkj5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f54ce64273 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=670 identity=5056 ipv4=10.0.0.205 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-qtkj5 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=235 identity=4 ipv4=10.0.0.207 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=570c0105ed datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3693 identity=18509 ipv4=10.0.0.194 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-slzgg subsys=endpoint level=info msg="Successful endpoint creation" containerID=570c0105ed datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3693 identity=18509 ipv4=10.0.0.194 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-slzgg subsys=daemon level=info msg="Serving cilium health API at unix:///var/run/cilium/health.sock" subsys=health-server level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=570c0105ed endpointID=3693 k8sNamespace=envoy-gateway-system k8sPodName=envoy-gateway-gateway-helm-certgen-slzgg subsys=daemon level=info msg="Releasing key" key="[k8s:app=certgen k8s:batch.kubernetes.io/controller-uid=1156e912-4ade-4d3c-804a-7dbfc8df092e k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen k8s:controller-uid=1156e912-4ade-4d3c-804a-7dbfc8df092e k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen k8s:io.kubernetes.pod.namespace=envoy-gateway-system k8s:job-name=envoy-gateway-gateway-helm-certgen]" subsys=allocator level=info msg="Removed endpoint" containerID=570c0105ed datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3693 identity=18509 ipv4=10.0.0.194 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-slzgg subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.80 580a63d8-4f50-43fa-8a6a-1aea2d6056e0 default }" containerID=540abc90c3d7b1d549263af2541238ad7047589bc49133ce7a562e494583d9df datapathConfiguration="&{false false false false false }" interface=lxc498e2bec6876 k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-dg2qq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=540abc90c3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1645 ipv4=10.0.0.80 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-dg2qq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=540abc90c3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1645 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.80 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-dg2qq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=envoy-gateway;k8s:app.kubernetes.io/name=gateway-helm;k8s:control-plane=envoy-gateway;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=540abc90c3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1645 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.80 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-dg2qq line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=540abc90c3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1645 identity=54515 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.80 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-dg2qq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=540abc90c3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1645 identity=54515 ipv4=10.0.0.80 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-dg2qq subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=540abc90c3 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1645 identity=54515 ipv4=10.0.0.80 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-dg2qq subsys=endpoint level=info msg="Successful endpoint creation" containerID=540abc90c3 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1645 identity=54515 ipv4=10.0.0.80 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-dg2qq subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2049 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_02049 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_02049 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_02049 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_02049:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2049 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.83 ddb3a984-e791-442c-b8c0-ee75f70180d4 default }" containerID=19fe43e02daa755c404f5f7e9f7319dd3162d300cf65c277f517005d090a8910 datapathConfiguration="&{false false false false false }" interface=lxce5d435fb5a19 k8sPodName=kube-system/coredns-67659f764b-kctw8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=19fe43e02d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1877 ipv4=10.0.0.83 ipv6= k8sPodName=kube-system/coredns-67659f764b-kctw8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=19fe43e02d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1877 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.83 ipv6= k8sPodName=kube-system/coredns-67659f764b-kctw8 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=19fe43e02d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1877 identity=5056 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.83 ipv6= k8sPodName=kube-system/coredns-67659f764b-kctw8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=19fe43e02d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1877 identity=5056 ipv4=10.0.0.83 ipv6= k8sPodName=kube-system/coredns-67659f764b-kctw8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.208 1909bd10-2841-4d56-a844-994beba20df2 default }" containerID=620bd3f1be052b7c2c434ebc580f7c0671b55cb754a63cf85d8b35c348589fa2 datapathConfiguration="&{false false false false false }" interface=lxccf2509a5e9aa k8sPodName=kube-system/coredns-67659f764b-b9nmv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=620bd3f1be datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3058 ipv4=10.0.0.208 ipv6= k8sPodName=kube-system/coredns-67659f764b-b9nmv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=620bd3f1be datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3058 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.208 ipv6= k8sPodName=kube-system/coredns-67659f764b-b9nmv subsys=endpoint level=info msg="Identity of endpoint changed" containerID=620bd3f1be datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3058 identity=5056 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.208 ipv6= k8sPodName=kube-system/coredns-67659f764b-b9nmv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=620bd3f1be datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3058 identity=5056 ipv4=10.0.0.208 ipv6= k8sPodName=kube-system/coredns-67659f764b-b9nmv subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=19fe43e02d datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1877 identity=5056 ipv4=10.0.0.83 ipv6= k8sPodName=kube-system/coredns-67659f764b-kctw8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=19fe43e02d datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1877 identity=5056 ipv4=10.0.0.83 ipv6= k8sPodName=kube-system/coredns-67659f764b-kctw8 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=620bd3f1be datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3058 identity=5056 ipv4=10.0.0.208 ipv6= k8sPodName=kube-system/coredns-67659f764b-b9nmv subsys=endpoint level=info msg="Successful endpoint creation" containerID=620bd3f1be datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3058 identity=5056 ipv4=10.0.0.208 ipv6= k8sPodName=kube-system/coredns-67659f764b-b9nmv subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.209 1f96dd70-7d52-4da2-9765-039184cd55e3 default }" containerID=d8b845352f03d7c36e83488e9b9b96fe8e803a9db30a224804e4c1374a0b37fc datapathConfiguration="&{false false false false false }" interface=lxc48e571bed150 k8sPodName=local-path-storage/local-path-provisioner-679c578f5-nx4c2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d8b845352f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2728 ipv4=10.0.0.209 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-nx4c2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d8b845352f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2728 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.209 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-nx4c2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=d8b845352f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2728 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.209 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-nx4c2 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=local-path-provisioner;k8s:app.kubernetes.io/name=local-path-provisioner;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d8b845352f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2728 identity=43275 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.209 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-nx4c2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d8b845352f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2728 identity=43275 ipv4=10.0.0.209 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-nx4c2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d8b845352f datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2728 identity=43275 ipv4=10.0.0.209 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-nx4c2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=d8b845352f datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2728 identity=43275 ipv4=10.0.0.209 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-nx4c2 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=f54ce64273 endpointID=670 k8sNamespace=kube-system k8sPodName=coredns-7c96b6546b-qtkj5 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=coredns k8s:io.kubernetes.pod.namespace=kube-system k8s:k8s-app=kube-dns]" subsys=allocator level=info msg="Removed endpoint" containerID=f54ce64273 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=670 identity=5056 ipv4=10.0.0.205 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-qtkj5 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.91 54e799c5-607a-49b7-a056-11457f749cc2 default }" containerID=a6299a07231ae6bd30a13dd7714cd089d68cf986bc213953e135acdd5d15d6ca datapathConfiguration="&{false false false false false }" interface=lxc674f4105e290 k8sPodName=cert-manager/cert-manager-75c4c745bc-lg82g labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a6299a0723 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=297 ipv4=10.0.0.91 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-lg82g subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a6299a0723 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=297 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.91 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-lg82g subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.15 fef5c50c-a01d-4653-8073-5276c56f645c default }" containerID=2243db645dbfb4e33d1345c262d3a8802bc7e80f83e749eb1fb773ed155d7378 datapathConfiguration="&{false false false false false }" interface=lxc80c1abd0725a k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-k4556 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2243db645d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2757 ipv4=10.0.0.15 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-k4556 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2243db645d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2757 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.15 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-k4556 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.21 e67a3222-1986-4f29-bc04-beaea8380483 default }" containerID=b273b65fb49bee4a7a558a24fb1a1417a2ae5382743e2e3371d1c3ba3a29075d datapathConfiguration="&{false false false false false }" interface=lxcbf94670f3fdc k8sPodName=cert-manager/cert-manager-webhook-548949fc64-sf2hj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b273b65fb4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3956 ipv4=10.0.0.21 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-sf2hj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b273b65fb4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3956 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.21 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-sf2hj subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=b273b65fb4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3956 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.21 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-sf2hj line=611 subsys=endpoint level=info msg="Invalid state transition skipped" containerID=a6299a0723 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=297 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.91 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-lg82g line=611 subsys=endpoint level=info msg="Invalid state transition skipped" containerID=2243db645d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2757 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.15 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-k4556 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=cert-manager;k8s:app.kubernetes.io/component=controller;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cert-manager;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a6299a0723 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=297 identity=17658 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.91 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-lg82g oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a6299a0723 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=297 identity=17658 ipv4=10.0.0.91 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-lg82g subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Rewrote endpoint BPF program" containerID=a6299a0723 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=297 identity=17658 ipv4=10.0.0.91 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-lg82g subsys=endpoint level=info msg="Successful endpoint creation" containerID=a6299a0723 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=297 identity=17658 ipv4=10.0.0.91 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-lg82g subsys=daemon level=info msg="Allocated new global key" key="k8s:app=cainjector;k8s:app.kubernetes.io/component=cainjector;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cainjector;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2243db645d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2757 identity=23300 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.15 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-k4556 oldIdentity="no identity" subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Waiting for endpoint to be generated" containerID=2243db645d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2757 identity=23300 ipv4=10.0.0.15 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-k4556 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2243db645d datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2757 identity=23300 ipv4=10.0.0.15 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-k4556 subsys=endpoint level=info msg="Successful endpoint creation" containerID=2243db645d datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2757 identity=23300 ipv4=10.0.0.15 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-k4556 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=b273b65fb4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3956 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.21 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-sf2hj line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=webhook;k8s:app.kubernetes.io/component=webhook;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=webhook;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b273b65fb4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3956 identity=22721 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.21 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-sf2hj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b273b65fb4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3956 identity=22721 ipv4=10.0.0.21 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-sf2hj subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b273b65fb4 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3956 identity=22721 ipv4=10.0.0.21 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-sf2hj subsys=endpoint level=info msg="Successful endpoint creation" containerID=b273b65fb4 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3956 identity=22721 ipv4=10.0.0.21 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-sf2hj subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.12 a0aca90f-e438-4ce0-85a6-8793b6bf4efd default }" containerID=d4d2b0c6168182aed9f6c4f4dadb3b5da6f4b33945bc431330a642e6a466357c datapathConfiguration="&{false false false false false }" interface=lxca2df23833458 k8sPodName=cert-manager/cert-manager-startupapicheck-xbsvc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d4d2b0c616 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=289 ipv4=10.0.0.12 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-xbsvc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d4d2b0c616 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=289 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=15569846-dc31-4482-b052-e125e20281f7,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=15569846-dc31-4482-b052-e125e20281f7,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.12 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-xbsvc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=d4d2b0c616 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=289 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.12 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-xbsvc line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=startupapicheck;k8s:app.kubernetes.io/component=startupapicheck;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=startupapicheck;k8s:app.kubernetes.io/version=v1.11.5;k8s:batch.kubernetes.io/controller-uid=15569846-dc31-4482-b052-e125e20281f7;k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck;k8s:controller-uid=15569846-dc31-4482-b052-e125e20281f7;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck;k8s:io.kubernetes.pod.namespace=cert-manager;k8s:job-name=cert-manager-startupapicheck;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d4d2b0c616 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=289 identity=11038 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=15569846-dc31-4482-b052-e125e20281f7,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=15569846-dc31-4482-b052-e125e20281f7,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.12 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-xbsvc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d4d2b0c616 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=289 identity=11038 ipv4=10.0.0.12 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-xbsvc subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d4d2b0c616 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=289 identity=11038 ipv4=10.0.0.12 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-xbsvc subsys=endpoint level=info msg="Successful endpoint creation" containerID=d4d2b0c616 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=289 identity=11038 ipv4=10.0.0.12 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-xbsvc subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=d4d2b0c616 endpointID=289 k8sNamespace=cert-manager k8sPodName=cert-manager-startupapicheck-xbsvc subsys=daemon level=info msg="Releasing key" key="[k8s:app=startupapicheck k8s:app.kubernetes.io/component=startupapicheck k8s:app.kubernetes.io/instance=cert-manager k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=startupapicheck k8s:app.kubernetes.io/version=v1.11.5 k8s:batch.kubernetes.io/controller-uid=15569846-dc31-4482-b052-e125e20281f7 k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck k8s:controller-uid=15569846-dc31-4482-b052-e125e20281f7 k8s:helm.sh/chart=cert-manager-v1.11.5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager k8s:io.cilium.k8s.namespace.labels.name=cert-manager k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck k8s:io.kubernetes.pod.namespace=cert-manager k8s:job-name=cert-manager-startupapicheck]" subsys=allocator level=info msg="Removed endpoint" containerID=d4d2b0c616 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=289 identity=11038 ipv4=10.0.0.12 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-xbsvc subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.210 8c5a567d-749b-419b-a552-3a7223ab17a3 default }" containerID=475e64f1f221bd02271f48c7fbe249aa3959087f3b6dfe6e90eff28e8451572a datapathConfiguration="&{false false false false false }" interface=lxc7da449c16837 k8sPodName=ingress-nginx/ingress-nginx-admission-create-rfm5d labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=475e64f1f2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=129 ipv4=10.0.0.210 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-rfm5d subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=475e64f1f2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=129 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=017f5d2f-0717-443a-9e40-022ff1a0d8ee,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=017f5d2f-0717-443a-9e40-022ff1a0d8ee,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.210 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-rfm5d subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=017f5d2f-0717-443a-9e40-022ff1a0d8ee;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create;k8s:controller-uid=017f5d2f-0717-443a-9e40-022ff1a0d8ee;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-create;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=475e64f1f2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=129 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.210 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-rfm5d line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=475e64f1f2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=129 identity=51896 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=017f5d2f-0717-443a-9e40-022ff1a0d8ee,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=017f5d2f-0717-443a-9e40-022ff1a0d8ee,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.210 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-rfm5d oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=475e64f1f2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=129 identity=51896 ipv4=10.0.0.210 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-rfm5d subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=475e64f1f2 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=129 identity=51896 ipv4=10.0.0.210 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-rfm5d subsys=endpoint level=info msg="Successful endpoint creation" containerID=475e64f1f2 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=129 identity=51896 ipv4=10.0.0.210 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-rfm5d subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=475e64f1f2 endpointID=129 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-create-rfm5d subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=017f5d2f-0717-443a-9e40-022ff1a0d8ee k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create k8s:controller-uid=017f5d2f-0717-443a-9e40-022ff1a0d8ee k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-create]" subsys=allocator level=info msg="Removed endpoint" containerID=475e64f1f2 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=129 identity=51896 ipv4=10.0.0.210 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-rfm5d subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.107 0e4f9f43-043b-4d90-ba2a-87cc2ef5ad1f default }" containerID=a625620fcbfbb28fd0e75ad9eb4bca40b222044d7f6d2f56522175dda1be98b5 datapathConfiguration="&{false false false false false }" interface=lxc921d9ec1d72d k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-q4gjd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a625620fcb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=123 ipv4=10.0.0.107 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-q4gjd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a625620fcb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=123 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.107 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-q4gjd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=default-backend;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend;k8s:io.kubernetes.pod.namespace=ingress-nginx;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a625620fcb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=123 identity=40102 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.107 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-q4gjd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a625620fcb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=123 identity=40102 ipv4=10.0.0.107 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-q4gjd subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=a625620fcb datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=123 identity=40102 ipv4=10.0.0.107 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-q4gjd subsys=endpoint level=info msg="Successful endpoint creation" containerID=a625620fcb datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=123 identity=40102 ipv4=10.0.0.107 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-q4gjd subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.252 d290b414-2a25-460b-89a9-f96b9b920228 default }" containerID=42ac3037e71116f379faf9162d645fb0ac211eb2baa369e2b6d72864a833a8a7 datapathConfiguration="&{false false false false false }" interface=lxccd3ef301d204 k8sPodName=ingress-nginx/ingress-nginx-admission-patch-99kg2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=42ac3037e7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=753 ipv4=10.0.0.252 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-99kg2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=42ac3037e7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=753 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=72aba3fd-0f71-4454-a938-28b048ad0970,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=72aba3fd-0f71-4454-a938-28b048ad0970,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.252 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-99kg2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=72aba3fd-0f71-4454-a938-28b048ad0970;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch;k8s:controller-uid=72aba3fd-0f71-4454-a938-28b048ad0970;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-patch;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=42ac3037e7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=753 identity=19072 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=72aba3fd-0f71-4454-a938-28b048ad0970,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=72aba3fd-0f71-4454-a938-28b048ad0970,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.252 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-99kg2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=42ac3037e7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=753 identity=19072 ipv4=10.0.0.252 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-99kg2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=42ac3037e7 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=753 identity=19072 ipv4=10.0.0.252 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-99kg2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=42ac3037e7 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=753 identity=19072 ipv4=10.0.0.252 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-99kg2 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=42ac3037e7 endpointID=753 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-patch-99kg2 subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=72aba3fd-0f71-4454-a938-28b048ad0970 k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch k8s:controller-uid=72aba3fd-0f71-4454-a938-28b048ad0970 k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-patch]" subsys=allocator level=info msg="Removed endpoint" containerID=42ac3037e7 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=753 identity=19072 ipv4=10.0.0.252 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-99kg2 subsys=endpoint level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"messaging-topology-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9443 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-messaging-topology-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=97122827-45ad-439f-b110-6b1ce3c9fe12] Description:}]" policyAddRequest=7cee9236-1922-4ea4-a67c-191ccb20646f subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=7cee9236-1922-4ea4-a67c-191ccb20646f policyRevision=2 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-messaging-topology-operator subsys=k8s-watcher level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"rabbitmq-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-cluster-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=7636b512-d737-49c0-a15b-ba9e04d50ca5] Description:}]" policyAddRequest=100213f8-86d5-4db5-819c-eae09cce329f subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=100213f8-86d5-4db5-819c-eae09cce329f policyRevision=3 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-cluster-operator subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.251 296ae754-9344-49a8-bd63-f2b763de425d default }" containerID=1fc823845e4c0f8462da6f5544ba175a46b5cc22a0dfe55f115e949468fdabb2 datapathConfiguration="&{false false false false false }" interface=lxc282adb02366b k8sPodName=openstack/rabbitmq-cluster-operator-67fdb85b4f-bk25f labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1fc823845e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2015 ipv4=10.0.0.251 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-67fdb85b4f-bk25f subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1fc823845e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2015 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.8.0,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.2.4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.251 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-67fdb85b4f-bk25f subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=1fc823845e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2015 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.251 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-67fdb85b4f-bk25f line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=2.8.0;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.2.4;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1fc823845e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2015 identity=3337 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.8.0,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.2.4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.251 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-67fdb85b4f-bk25f oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1fc823845e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2015 identity=3337 ipv4=10.0.0.251 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-67fdb85b4f-bk25f subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1fc823845e datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=2015 identity=3337 ipv4=10.0.0.251 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-67fdb85b4f-bk25f subsys=endpoint level=info msg="Successful endpoint creation" containerID=1fc823845e datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=2015 identity=3337 ipv4=10.0.0.251 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-67fdb85b4f-bk25f subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.28 4ade4539-d691-4260-808c-7ed84cbba8f3 default }" containerID=561ac81695f3e858f213fd3be425b070f7c8abb55f1147926cf804d5e70c6292 datapathConfiguration="&{false false false false false }" interface=lxce56f0528db22 k8sPodName=openstack/rabbitmq-messaging-topology-operator-5c9876cc97-gvpx7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=561ac81695 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1977 ipv4=10.0.0.28 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-5c9876cc97-gvpx7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=561ac81695 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1977 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.13.0,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.2.4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.28 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-5c9876cc97-gvpx7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=messaging-topology-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=1.13.0;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.2.4;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=561ac81695 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1977 identity=41693 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.13.0,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.2.4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.28 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-5c9876cc97-gvpx7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=561ac81695 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1977 identity=41693 ipv4=10.0.0.28 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-5c9876cc97-gvpx7 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=561ac81695 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1977 identity=41693 ipv4=10.0.0.28 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-5c9876cc97-gvpx7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=561ac81695 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1977 identity=41693 ipv4=10.0.0.28 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-5c9876cc97-gvpx7 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.102 e77547fe-869f-4a64-b561-653409929288 default }" containerID=5b673b14df93dd2f9609d6afd432e6c9be1f4a7ebcd2991d49408088ceece20e datapathConfiguration="&{false false false false false }" interface=lxc32876116c78f k8sPodName=openstack/pxc-operator-7cff949c8b-rlbwk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5b673b14df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=215 ipv4=10.0.0.102 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-rlbwk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5b673b14df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=215 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.102 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-rlbwk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=operator;k8s:app.kubernetes.io/instance=pxc-operator;k8s:app.kubernetes.io/name=pxc-operator;k8s:app.kubernetes.io/part-of=pxc-operator;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5b673b14df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=215 identity=11826 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.102 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-rlbwk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5b673b14df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=215 identity=11826 ipv4=10.0.0.102 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-rlbwk subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=5b673b14df datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=215 identity=11826 ipv4=10.0.0.102 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-rlbwk subsys=endpoint level=info msg="Successful endpoint creation" containerID=5b673b14df datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=215 identity=11826 ipv4=10.0.0.102 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-rlbwk subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.40 f9b0282a-3b67-4d76-904c-daf5d2d76752 default }" containerID=0eb3849eb238e917584487c09570f549b5784e2547913a126aa0904a9e680d02 datapathConfiguration="&{false false false false false }" interface=lxc727fb32c59e5 k8sPodName=local-path-storage/helper-pod-create-pvc-e2f65b70-9ba8-4f71-bcab-b0b339993d94 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0eb3849eb2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2374 ipv4=10.0.0.40 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e2f65b70-9ba8-4f71-bcab-b0b339993d94 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0eb3849eb2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2374 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.40 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e2f65b70-9ba8-4f71-bcab-b0b339993d94 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0eb3849eb2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2374 identity=3411 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.40 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e2f65b70-9ba8-4f71-bcab-b0b339993d94 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=0eb3849eb2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2374 identity=3411 ipv4=10.0.0.40 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e2f65b70-9ba8-4f71-bcab-b0b339993d94 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0eb3849eb2 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=2374 identity=3411 ipv4=10.0.0.40 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e2f65b70-9ba8-4f71-bcab-b0b339993d94 subsys=endpoint level=info msg="Successful endpoint creation" containerID=0eb3849eb2 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=2374 identity=3411 ipv4=10.0.0.40 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e2f65b70-9ba8-4f71-bcab-b0b339993d94 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.142 1c41b7ce-7360-4ae6-8623-25bca3dbb099 default }" containerID=2e88768c4ffba2b93207b3c9f0d04340046543c783d7140ad7c84274afc433f6 datapathConfiguration="&{false false false false false }" interface=lxcdef38ae7fbcd k8sPodName=openstack/percona-xtradb-haproxy-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2e88768c4f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2256 ipv4=10.0.0.142 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2e88768c4f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2256 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.142 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=haproxy;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2e88768c4f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2256 identity=47665 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.142 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2e88768c4f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2256 identity=47665 ipv4=10.0.0.142 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2e88768c4f datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=2256 identity=47665 ipv4=10.0.0.142 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=2e88768c4f datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=2256 identity=47665 ipv4=10.0.0.142 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=0eb3849eb2 endpointID=2374 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-e2f65b70-9ba8-4f71-bcab-b0b339993d94 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=0eb3849eb2 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=2374 identity=3411 ipv4=10.0.0.40 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e2f65b70-9ba8-4f71-bcab-b0b339993d94 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.169 780a7a3e-500e-47de-b4c7-6d9e4ea888c8 default }" containerID=6b7242cc47a40c174ad20d753bbb935fdd091ad484c5755535d164de2131ef4c datapathConfiguration="&{false false false false false }" interface=lxc5c3696cdc94c k8sPodName=openstack/percona-xtradb-pxc-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6b7242cc47 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3702 ipv4=10.0.0.169 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6b7242cc47 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3702 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.169 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=6b7242cc47 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3702 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.169 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=pxc;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6b7242cc47 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3702 identity=16843 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.169 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6b7242cc47 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3702 identity=16843 ipv4=10.0.0.169 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6b7242cc47 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=3702 identity=16843 ipv4=10.0.0.169 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=6b7242cc47 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=3702 identity=16843 ipv4=10.0.0.169 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"keycloak\",\"k8s:app.kubernetes.io/instance\":\"keycloak\",\"k8s:app.kubernetes.io/name\":\"keycloak\",\"k8s:io.kubernetes.pod.namespace\":\"auth-system\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:7800 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:8080 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=keycloak k8s:io.cilium.k8s.policy.namespace=auth-system k8s:io.cilium.k8s.policy.uid=3550baed-9467-4996-9a4a-421a5402f1c5] Description:}]" policyAddRequest=9f25d925-d472-4134-9ecc-3b93577f779d subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=9f25d925-d472-4134-9ecc-3b93577f779d policyRevision=4 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=keycloak subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.42 2966f008-0f62-4731-a5ef-226558c13542 default }" containerID=7ef83dd1dbec2a0294a8827ec76f84dbfa36a15510bb61bed2b334c739bf5090 datapathConfiguration="&{false false false false false }" interface=lxcda70dd294eee k8sPodName=auth-system/keycloak-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7ef83dd1db datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=548 ipv4=10.0.0.42 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7ef83dd1db datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=548 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=23.0.7,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-20.0.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.42 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:auth-system k8s:io.cilium.k8s.namespace.labels.name:auth-system]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=7ef83dd1db datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=548 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.42 ipv6= k8sPodName=auth-system/keycloak-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=keycloak;k8s:app.kubernetes.io/instance=keycloak;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=keycloak;k8s:app.kubernetes.io/version=23.0.7;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=keycloak-20.0.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system;k8s:io.cilium.k8s.namespace.labels.name=auth-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keycloak;k8s:io.kubernetes.pod.namespace=auth-system;k8s:statefulset.kubernetes.io/pod-name=keycloak-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7ef83dd1db datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=548 identity=42175 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=23.0.7,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-20.0.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.42 ipv6= k8sPodName=auth-system/keycloak-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7ef83dd1db datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=548 identity=42175 ipv4=10.0.0.42 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7ef83dd1db datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=548 identity=42175 ipv4=10.0.0.42 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=7ef83dd1db datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=548 identity=42175 ipv4=10.0.0.42 ipv6= k8sPodName=auth-system/keycloak-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.005532484748468083 newInterval=7m30s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.31 734b28dd-072a-4d9c-a946-cc8f4f39e044 default }" containerID=2db04cf49a01dc5db7dbecd35c7394c2c92e9b420aa6566a74083330ac16ea2e datapathConfiguration="&{false false false false false }" interface=lxc97a32c3254c0 k8sPodName=monitoring/node-feature-discovery-worker-wq8tr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2db04cf49a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1173 ipv4=10.0.0.31 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-wq8tr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2db04cf49a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1173 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.31 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-wq8tr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=worker;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2db04cf49a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1173 identity=23299 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.31 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-wq8tr oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=2db04cf49a datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1173 identity=23299 ipv4=10.0.0.31 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-wq8tr subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.47 a00aa974-31c7-448b-bf3e-0abfdbc9b129 default }" containerID=a647c071df4740f74fa78b657f39b4437ea85ef92eab5af4e8331252fb41c6eb datapathConfiguration="&{false false false false false }" interface=lxcc9b018671906 k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-8jqdv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a647c071df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3897 ipv4=10.0.0.47 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-8jqdv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a647c071df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3897 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.47 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-8jqdv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=gc;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a647c071df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3897 identity=41062 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.47 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-8jqdv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a647c071df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3897 identity=41062 ipv4=10.0.0.47 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-8jqdv subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.238 155db22d-9aad-4082-9e16-01c4e5c1eb95 default }" containerID=583b71b6744e2b98e4485f21810d81f066d0ffc43d9831851ace2b946e2a110e datapathConfiguration="&{false false false false false }" interface=lxc9d29d5222b6c k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-7t59s labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=583b71b674 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=587 ipv4=10.0.0.238 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-7t59s subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=583b71b674 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=587 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.238 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-7t59s subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=master;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=583b71b674 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=587 identity=5019 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.238 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-7t59s oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=583b71b674 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=587 identity=5019 ipv4=10.0.0.238 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-7t59s subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2db04cf49a datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1173 identity=23299 ipv4=10.0.0.31 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-wq8tr subsys=endpoint level=info msg="Successful endpoint creation" containerID=2db04cf49a datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1173 identity=23299 ipv4=10.0.0.31 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-wq8tr subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=a647c071df datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3897 identity=41062 ipv4=10.0.0.47 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-8jqdv subsys=endpoint level=info msg="Successful endpoint creation" containerID=a647c071df datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3897 identity=41062 ipv4=10.0.0.47 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-8jqdv subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=583b71b674 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=587 identity=5019 ipv4=10.0.0.238 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-7t59s subsys=endpoint level=info msg="Successful endpoint creation" containerID=583b71b674 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=587 identity=5019 ipv4=10.0.0.238 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-7t59s subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.104 0ccdd3e9-dcc1-4e20-8131-610a104d6daf default }" containerID=c9a1d1840d67b93d24535f575e4e7e21c65f52507e248f048afa0da5432ed021 datapathConfiguration="&{false false false false false }" interface=lxc055007e2cd8d k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-bwrm5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c9a1d1840d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1380 ipv4=10.0.0.104 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-bwrm5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c9a1d1840d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1380 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.104 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-bwrm5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:secretgen-controller]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=secretgen-controller;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa;k8s:io.kubernetes.pod.namespace=secretgen-controller;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c9a1d1840d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1380 identity=18583 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.104 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-bwrm5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c9a1d1840d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1380 identity=18583 ipv4=10.0.0.104 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-bwrm5 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c9a1d1840d datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1380 identity=18583 ipv4=10.0.0.104 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-bwrm5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=c9a1d1840d datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1380 identity=18583 ipv4=10.0.0.104 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-bwrm5 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2049 identity=1 identityLabels="k8s:feature.node.kubernetes.io/cpu-cpuid.ADX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AESNI=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX2=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CLZERO=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CMPXCHG8=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FMA3=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSROPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.HYPERVISOR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IA32_ARCH_CAP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBPB=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBRS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.LAHF=true,k8s:feature.node.kubernetes.io/cpu-cpuid.MOVBE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.NRIPS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.OSXSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SHA=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SPEC_CTRL_SSBD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SSE4A=true,k8s:feature.node.kubernetes.io/cpu-cpuid.STIBP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVM=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVMNP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSCALL=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSEE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.TOPEXT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.WBNOINVD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.X87=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XGETBV1=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEC=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEOPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVES=true,k8s:feature.node.kubernetes.io/cpu-hardware_multithreading=false,k8s:feature.node.kubernetes.io/cpu-model.family=23,k8s:feature.node.kubernetes.io/cpu-model.id=49,k8s:feature.node.kubernetes.io/cpu-model.vendor_id=AMD,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ=true,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ_IDLE=true,k8s:feature.node.kubernetes.io/kernel-version.full=5.15.0-173-generic,k8s:feature.node.kubernetes.io/kernel-version.major=5,k8s:feature.node.kubernetes.io/kernel-version.minor=15,k8s:feature.node.kubernetes.io/kernel-version.revision=0,k8s:feature.node.kubernetes.io/pci-0300_1af4.present=true,k8s:feature.node.kubernetes.io/system-os_release.ID=ubuntu,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.major=22,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.minor=04,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID=22.04,k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_02049 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_02049 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_02049 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_02049:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2049 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.177 96b53967-18f3-47bd-8db5-a7ae8a11ccbf default }" containerID=6dc81a225ffc7bcc2fd938df1e06500a2f4043e9a5a9c1fafc103cffb9a9206c datapathConfiguration="&{false false false false false }" interface=lxcb08c6dbace7a k8sPodName=monitoring/kube-prometheus-stack-admission-create-j5hrv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6dc81a225f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3567 ipv4=10.0.0.177 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-j5hrv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6dc81a225f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3567 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=58.2.1,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=fcc16efe-0d99-4786-818f-a7c5b0f84d1b,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-58.2.1,k8s:controller-uid=fcc16efe-0d99-4786-818f-a7c5b0f84d1b,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.177 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-j5hrv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-create;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=58.2.1;k8s:batch.kubernetes.io/controller-uid=fcc16efe-0d99-4786-818f-a7c5b0f84d1b;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create;k8s:chart=kube-prometheus-stack-58.2.1;k8s:controller-uid=fcc16efe-0d99-4786-818f-a7c5b0f84d1b;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-create;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6dc81a225f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3567 identity=20541 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=58.2.1,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=fcc16efe-0d99-4786-818f-a7c5b0f84d1b,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-58.2.1,k8s:controller-uid=fcc16efe-0d99-4786-818f-a7c5b0f84d1b,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.177 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-j5hrv oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=6dc81a225f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3567 identity=20541 ipv4=10.0.0.177 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-j5hrv subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6dc81a225f datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3567 identity=20541 ipv4=10.0.0.177 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-j5hrv subsys=endpoint level=info msg="Successful endpoint creation" containerID=6dc81a225f datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3567 identity=20541 ipv4=10.0.0.177 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-j5hrv subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=6dc81a225f endpointID=3567 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-create-j5hrv subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-create k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=58.2.1 k8s:batch.kubernetes.io/controller-uid=fcc16efe-0d99-4786-818f-a7c5b0f84d1b k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create k8s:chart=kube-prometheus-stack-58.2.1 k8s:controller-uid=fcc16efe-0d99-4786-818f-a7c5b0f84d1b k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-create k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=6dc81a225f datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3567 identity=20541 ipv4=10.0.0.177 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-j5hrv subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.73 a1821c3f-7708-4db1-b73d-36eb0b7a01e3 default }" containerID=41169bda18e2f41d0896e47da45a969932a981d87150493e87a603deaf38aa7b datapathConfiguration="&{false false false false false }" interface=lxcca1bbb1acb00 k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-wq4z8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=41169bda18 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=314 ipv4=10.0.0.73 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-wq4z8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=41169bda18 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=314 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.18.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.73 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-wq4z8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=41169bda18 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=314 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.73 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-wq4z8 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=metrics;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-state-metrics;k8s:app.kubernetes.io/part-of=kube-state-metrics;k8s:app.kubernetes.io/version=2.12.0;k8s:helm.sh/chart=kube-state-metrics-5.18.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=41169bda18 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=314 identity=10841 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.18.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.73 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-wq4z8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=41169bda18 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=314 identity=10841 ipv4=10.0.0.73 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-wq4z8 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=41169bda18 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=314 identity=10841 ipv4=10.0.0.73 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-wq4z8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=41169bda18 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=314 identity=10841 ipv4=10.0.0.73 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-wq4z8 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.232 7a5e4463-92ae-4700-b91c-be21da618d3e default }" containerID=f4f331e76939b77aaf6407fa29901a42f872cae2140e42ab6b20a52b5e25669a datapathConfiguration="&{false false false false false }" interface=lxc1780d74377e3 k8sPodName=monitoring/kube-prometheus-stack-operator-7d58f4b66c-2m6zm labels="[]" subsys=daemon sync-build=true level=info msg="Create endpoint request" addressing="&{10.0.0.197 23305659-d249-4554-9c4d-fb791c42edb5 default }" containerID=af35ef1e3034bc73e458e273b2b72943520962e8b4974e1f4a3420ddc9c1dc9b datapathConfiguration="&{false false false false false }" interface=lxcd23be4bad28b k8sPodName=monitoring/kube-prometheus-stack-grafana-85f56d47b5-dktxl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f4f331e769 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=397 ipv4=10.0.0.232 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-7d58f4b66c-2m6zm subsys=endpoint level=info msg="New endpoint" containerID=af35ef1e30 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=880 ipv4=10.0.0.197 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-85f56d47b5-dktxl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f4f331e769 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=397 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=58.2.1,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-58.2.1,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.232 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-7d58f4b66c-2m6zm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Resolving identity labels (blocking)" containerID=af35ef1e30 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=880 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.197 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-85f56d47b5-dktxl subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-operator;k8s:app.kubernetes.io/component=prometheus-operator;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=58.2.1;k8s:chart=kube-prometheus-stack-58.2.1;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f4f331e769 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=397 identity=26291 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=58.2.1,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-58.2.1,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.232 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-7d58f4b66c-2m6zm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f4f331e769 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=397 identity=26291 ipv4=10.0.0.232 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-7d58f4b66c-2m6zm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/name=grafana;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=af35ef1e30 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=880 identity=14083 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.197 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-85f56d47b5-dktxl oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=af35ef1e30 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=880 identity=14083 ipv4=10.0.0.197 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-85f56d47b5-dktxl subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=af35ef1e30 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=880 identity=14083 ipv4=10.0.0.197 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-85f56d47b5-dktxl subsys=endpoint level=info msg="Successful endpoint creation" containerID=af35ef1e30 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=880 identity=14083 ipv4=10.0.0.197 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-85f56d47b5-dktxl subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=f4f331e769 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=397 identity=26291 ipv4=10.0.0.232 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-7d58f4b66c-2m6zm subsys=endpoint level=info msg="Successful endpoint creation" containerID=f4f331e769 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=397 identity=26291 ipv4=10.0.0.232 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-7d58f4b66c-2m6zm subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.212 3240830d-7bf2-4a5f-82cd-e5fa207c2d8a default }" containerID=d241375829aa5fbdd2b387df583980977d82c989d183a36b4d4fd5ef5a069c88 datapathConfiguration="&{false false false false false }" interface=lxc576b9ca67a2e k8sPodName=monitoring/kube-prometheus-stack-admission-patch-rmvvp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d241375829 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=198 ipv4=10.0.0.212 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-rmvvp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d241375829 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=198 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=58.2.1,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=7156a333-bb5f-455e-b9cb-e8135ff3a7fb,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-58.2.1,k8s:controller-uid=7156a333-bb5f-455e-b9cb-e8135ff3a7fb,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.212 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-rmvvp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-patch;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=58.2.1;k8s:batch.kubernetes.io/controller-uid=7156a333-bb5f-455e-b9cb-e8135ff3a7fb;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch;k8s:chart=kube-prometheus-stack-58.2.1;k8s:controller-uid=7156a333-bb5f-455e-b9cb-e8135ff3a7fb;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-patch;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d241375829 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=198 identity=58957 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=58.2.1,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=7156a333-bb5f-455e-b9cb-e8135ff3a7fb,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-58.2.1,k8s:controller-uid=7156a333-bb5f-455e-b9cb-e8135ff3a7fb,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.212 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-rmvvp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d241375829 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=198 identity=58957 ipv4=10.0.0.212 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-rmvvp subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=d241375829 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=198 identity=58957 ipv4=10.0.0.212 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-rmvvp subsys=endpoint level=info msg="Successful endpoint creation" containerID=d241375829 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=198 identity=58957 ipv4=10.0.0.212 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-rmvvp subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=d241375829 endpointID=198 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-patch-rmvvp subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-patch k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=58.2.1 k8s:batch.kubernetes.io/controller-uid=7156a333-bb5f-455e-b9cb-e8135ff3a7fb k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch k8s:chart=kube-prometheus-stack-58.2.1 k8s:controller-uid=7156a333-bb5f-455e-b9cb-e8135ff3a7fb k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-patch k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=d241375829 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=198 identity=58957 ipv4=10.0.0.212 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-rmvvp subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.237 9ebe4ffe-07a9-4d8d-b949-122cc7bab4f1 default }" containerID=1fa867dfebc2b43745fb1bf058a596bba315253a17e048621b816aaee1912884 datapathConfiguration="&{false false false false false }" interface=lxc0f3c18afac77 k8sPodName=local-path-storage/helper-pod-create-pvc-b1c6691c-b848-4115-be9c-cfa1e72b2882 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1fa867dfeb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3293 ipv4=10.0.0.237 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b1c6691c-b848-4115-be9c-cfa1e72b2882 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1fa867dfeb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3293 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.237 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b1c6691c-b848-4115-be9c-cfa1e72b2882 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1fa867dfeb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3293 identity=3411 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.237 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b1c6691c-b848-4115-be9c-cfa1e72b2882 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1fa867dfeb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3293 identity=3411 ipv4=10.0.0.237 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b1c6691c-b848-4115-be9c-cfa1e72b2882 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1fa867dfeb datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3293 identity=3411 ipv4=10.0.0.237 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b1c6691c-b848-4115-be9c-cfa1e72b2882 subsys=endpoint level=info msg="Successful endpoint creation" containerID=1fa867dfeb datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3293 identity=3411 ipv4=10.0.0.237 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b1c6691c-b848-4115-be9c-cfa1e72b2882 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.43 83212c10-1cd0-4c4a-9014-35875dede98d default }" containerID=35119823777ab947b12ca8a0030a7fb31ea32b2247197da2caf6d401ad1f9b46 datapathConfiguration="&{false false false false false }" interface=lxc98bb3e990844 k8sPodName=local-path-storage/helper-pod-create-pvc-9ef08e48-a941-40fd-87cb-9d3f6d561264 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3511982377 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=733 ipv4=10.0.0.43 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-9ef08e48-a941-40fd-87cb-9d3f6d561264 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3511982377 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=733 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.43 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-9ef08e48-a941-40fd-87cb-9d3f6d561264 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=3511982377 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=733 identity=3411 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.43 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-9ef08e48-a941-40fd-87cb-9d3f6d561264 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3511982377 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=733 identity=3411 ipv4=10.0.0.43 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-9ef08e48-a941-40fd-87cb-9d3f6d561264 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3511982377 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=733 identity=3411 ipv4=10.0.0.43 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-9ef08e48-a941-40fd-87cb-9d3f6d561264 subsys=endpoint level=info msg="Successful endpoint creation" containerID=3511982377 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=733 identity=3411 ipv4=10.0.0.43 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-9ef08e48-a941-40fd-87cb-9d3f6d561264 subsys=daemon level=info msg="Delete endpoint request" containerID=1fa867dfeb endpointID=3293 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-b1c6691c-b848-4115-be9c-cfa1e72b2882 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=1fa867dfeb datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3293 identity=3411 ipv4=10.0.0.237 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b1c6691c-b848-4115-be9c-cfa1e72b2882 subsys=endpoint level=info msg="Delete endpoint request" containerID=3511982377 endpointID=733 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-9ef08e48-a941-40fd-87cb-9d3f6d561264 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=3511982377 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=733 identity=3411 ipv4=10.0.0.43 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-9ef08e48-a941-40fd-87cb-9d3f6d561264 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.98 3ba04b47-313a-4933-bb97-635c33793f30 default }" containerID=c2da717cd12230f08220c3e776082d244a58e434aed228bc92f73122398f8f89 datapathConfiguration="&{false false false false false }" interface=lxcfdefeb5ff5ee k8sPodName=monitoring/loki-gateway-748b556d75-s9t4w labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c2da717cd1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=248 ipv4=10.0.0.98 ipv6= k8sPodName=monitoring/loki-gateway-748b556d75-s9t4w subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c2da717cd1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=248 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.98 ipv6= k8sPodName=monitoring/loki-gateway-748b556d75-s9t4w subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=c2da717cd1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=248 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.98 ipv6= k8sPodName=monitoring/loki-gateway-748b556d75-s9t4w line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=gateway;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c2da717cd1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=248 identity=2465 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.98 ipv6= k8sPodName=monitoring/loki-gateway-748b556d75-s9t4w oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c2da717cd1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=248 identity=2465 ipv4=10.0.0.98 ipv6= k8sPodName=monitoring/loki-gateway-748b556d75-s9t4w subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.35 36c367d5-0b63-4aa5-a14a-1c14595165ba default }" containerID=aa6f91d9ee10df6a3d46e5305f20a9205a98c23a53d17d3b21bd580940e393b6 datapathConfiguration="&{false false false false false }" interface=lxcaf0e00fcf09d k8sPodName=monitoring/loki-chunks-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=aa6f91d9ee datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1351 ipv4=10.0.0.35 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=aa6f91d9ee datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1351 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.35 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.200 426e06e0-f607-42b5-897d-9f2e1d84a2ae default }" containerID=46212efd06d2b9efc3fb9340d63155c15120a4a09be7fb30f5cd7725c8433b49 datapathConfiguration="&{false false false false false }" interface=lxcc58e99191791 k8sPodName=monitoring/loki-results-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=46212efd06 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2742 ipv4=10.0.0.200 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=46212efd06 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2742 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.200 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-chunks-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-chunks-cache;k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0;" subsys=allocator level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Identity of endpoint changed" containerID=aa6f91d9ee datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1351 identity=8466 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.35 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=aa6f91d9ee datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1351 identity=8466 ipv4=10.0.0.35 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-results-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-results-cache;k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=46212efd06 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2742 identity=7138 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.200 ipv6= k8sPodName=monitoring/loki-results-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=46212efd06 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2742 identity=7138 ipv4=10.0.0.200 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c2da717cd1 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=248 identity=2465 ipv4=10.0.0.98 ipv6= k8sPodName=monitoring/loki-gateway-748b556d75-s9t4w subsys=endpoint level=info msg="Successful endpoint creation" containerID=c2da717cd1 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=248 identity=2465 ipv4=10.0.0.98 ipv6= k8sPodName=monitoring/loki-gateway-748b556d75-s9t4w subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.29 1676d8a5-da9d-466b-8a5b-e3d7b19e8cec default }" containerID=7f02eda8897a68b97e3506c66a45cc3d0a9d76701143eae7b25d815f4b301722 datapathConfiguration="&{false false false false false }" interface=lxc3c3bda7c2c8a k8sPodName=local-path-storage/helper-pod-create-pvc-d82bba93-4e49-4c49-a79a-f0a513d9a7e0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7f02eda889 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=512 ipv4=10.0.0.29 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d82bba93-4e49-4c49-a79a-f0a513d9a7e0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7f02eda889 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=512 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.29 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d82bba93-4e49-4c49-a79a-f0a513d9a7e0 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7f02eda889 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=512 identity=3411 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.29 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d82bba93-4e49-4c49-a79a-f0a513d9a7e0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7f02eda889 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=512 identity=3411 ipv4=10.0.0.29 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d82bba93-4e49-4c49-a79a-f0a513d9a7e0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=46212efd06 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2742 identity=7138 ipv4=10.0.0.200 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=46212efd06 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2742 identity=7138 ipv4=10.0.0.200 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=aa6f91d9ee datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1351 identity=8466 ipv4=10.0.0.35 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=aa6f91d9ee datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1351 identity=8466 ipv4=10.0.0.35 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=7f02eda889 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=512 identity=3411 ipv4=10.0.0.29 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d82bba93-4e49-4c49-a79a-f0a513d9a7e0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=7f02eda889 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=512 identity=3411 ipv4=10.0.0.29 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d82bba93-4e49-4c49-a79a-f0a513d9a7e0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.84 5be1e073-4040-455f-91ca-368eacf65dd8 default }" containerID=fa88df42f34e636c319058f3fd2981598ed0054984eb1dff063979d5e8769a32 datapathConfiguration="&{false false false false false }" interface=lxcb2bc1afad055 k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fa88df42f3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=15 ipv4=10.0.0.84 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fa88df42f3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=15 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.84 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:alertmanager=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=alertmanager;k8s:app.kubernetes.io/version=0.27.0;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fa88df42f3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=15 identity=20200 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.84 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fa88df42f3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=15 identity=20200 ipv4=10.0.0.84 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=fa88df42f3 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=15 identity=20200 ipv4=10.0.0.84 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=fa88df42f3 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=15 identity=20200 ipv4=10.0.0.84 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.145 9118fbb4-b13a-401b-8046-3e6487cf7fc6 default }" containerID=3458510a1442d5ece6608330676c9cbd8a9d274d3b5c5a393e3f9b0703ab85c5 datapathConfiguration="&{false false false false false }" interface=lxc393e0e9bc38a k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3458510a14 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=356 ipv4=10.0.0.145 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3458510a14 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=356 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.145 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=prometheus;k8s:app.kubernetes.io/version=2.51.2;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus;k8s:io.kubernetes.pod.namespace=monitoring;k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus;k8s:operator.prometheus.io/shard=0;k8s:prometheus=kube-prometheus-stack-prometheus;k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3458510a14 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=356 identity=12683 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.145 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3458510a14 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=356 identity=12683 ipv4=10.0.0.145 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3458510a14 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=356 identity=12683 ipv4=10.0.0.145 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=3458510a14 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=356 identity=12683 ipv4=10.0.0.145 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.6 7d8c57bb-8725-457d-bdf4-a0d0b61cdf9a default }" containerID=7111b8280403e11753622268510fd3bc5d431245f8bc2120b40d6b4e71b73f3a datapathConfiguration="&{false false false false false }" interface=lxc4ab10b90cbab k8sPodName=monitoring/vector-lxsmk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7111b82804 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1453 ipv4=10.0.0.6 ipv6= k8sPodName=monitoring/vector-lxsmk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7111b82804 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1453 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.6 ipv6= k8sPodName=monitoring/vector-lxsmk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=Agent;k8s:app.kubernetes.io/instance=vector;k8s:app.kubernetes.io/name=vector;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=vector;k8s:io.kubernetes.pod.namespace=monitoring;k8s:vector.dev/exclude=true;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7111b82804 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1453 identity=3006 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.6 ipv6= k8sPodName=monitoring/vector-lxsmk oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=7111b82804 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1453 identity=3006 ipv4=10.0.0.6 ipv6= k8sPodName=monitoring/vector-lxsmk subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7111b82804 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1453 identity=3006 ipv4=10.0.0.6 ipv6= k8sPodName=monitoring/vector-lxsmk subsys=endpoint level=info msg="Successful endpoint creation" containerID=7111b82804 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1453 identity=3006 ipv4=10.0.0.6 ipv6= k8sPodName=monitoring/vector-lxsmk subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=7f02eda889 endpointID=512 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-d82bba93-4e49-4c49-a79a-f0a513d9a7e0 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=7f02eda889 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=512 identity=3411 ipv4=10.0.0.29 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d82bba93-4e49-4c49-a79a-f0a513d9a7e0 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.252 8674b995-0838-48d8-8f97-0b9c2c416a6f default }" containerID=1daa3b23a8b009a443233fd15541b0d9a169e382b5a773890958b372e95f166c datapathConfiguration="&{false false false false false }" interface=lxcc485cbabc9ed k8sPodName=monitoring/loki-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1daa3b23a8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2707 ipv4=10.0.0.252 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1daa3b23a8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2707 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.252 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=single-binary;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:app.kubernetes.io/part-of=memberlist;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=loki-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1daa3b23a8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2707 identity=25375 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.252 ipv6= k8sPodName=monitoring/loki-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=1daa3b23a8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2707 identity=25375 ipv4=10.0.0.252 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1daa3b23a8 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2707 identity=25375 ipv4=10.0.0.252 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=1daa3b23a8 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2707 identity=25375 ipv4=10.0.0.252 ipv6= k8sPodName=monitoring/loki-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.201 a3221e31-0db6-463d-96cb-3377045f267e default }" containerID=db34c3d718cdef782aabef0f6a996c4f132a2f570de00faf61e73c1ab1b19ea2 datapathConfiguration="&{false false false false false }" interface=lxc1698304978b5 k8sPodName=monitoring/prometheus-pushgateway-7c6f84b96c-9n8vx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=db34c3d718 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3605 ipv4=10.0.0.201 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7c6f84b96c-9n8vx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=db34c3d718 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3605 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.12.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.201 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7c6f84b96c-9n8vx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=prometheus-pushgateway;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=prometheus-pushgateway;k8s:app.kubernetes.io/version=v1.8.0;k8s:helm.sh/chart=prometheus-pushgateway-2.12.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=db34c3d718 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3605 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.201 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7c6f84b96c-9n8vx line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=db34c3d718 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3605 identity=11457 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.12.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.201 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7c6f84b96c-9n8vx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=db34c3d718 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3605 identity=11457 ipv4=10.0.0.201 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7c6f84b96c-9n8vx subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=db34c3d718 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3605 identity=11457 ipv4=10.0.0.201 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7c6f84b96c-9n8vx subsys=endpoint level=info msg="Successful endpoint creation" containerID=db34c3d718 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3605 identity=11457 ipv4=10.0.0.201 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7c6f84b96c-9n8vx subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.1 18ad7e76-a983-4ace-903f-4aa92bf85566 default }" containerID=b5fdec5b27bd270214f886f48cbc1fa729e20a11e274bcb89bc6ba11cbb60b64 datapathConfiguration="&{false false false false false }" interface=lxc3e738fe8a447 k8sPodName=openstack/memcached-memcached-6479589586-rjvfs labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b5fdec5b27 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2627 ipv4=10.0.0.1 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-rjvfs subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b5fdec5b27 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2627 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.1 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-rjvfs subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=b5fdec5b27 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2627 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.1 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-rjvfs line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=memcached;k8s:component=server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=memcached;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b5fdec5b27 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2627 identity=25997 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.1 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-rjvfs oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b5fdec5b27 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2627 identity=25997 ipv4=10.0.0.1 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-rjvfs subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b5fdec5b27 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2627 identity=25997 ipv4=10.0.0.1 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-rjvfs subsys=endpoint level=info msg="Successful endpoint creation" containerID=b5fdec5b27 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2627 identity=25997 ipv4=10.0.0.1 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-rjvfs subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.112 120e2399-a2d1-4616-a728-d7ed1419fdd8 default }" containerID=68031502bae5466699fb8cb16f8bd787038c2667526c4eda5448842c35d58ac6 datapathConfiguration="&{false false false false false }" interface=lxcc484f58d100c k8sPodName=local-path-storage/helper-pod-create-pvc-1266ae50-32d1-4086-a689-3f7d0fe599b1 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=68031502ba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1547 ipv4=10.0.0.112 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1266ae50-32d1-4086-a689-3f7d0fe599b1 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=68031502ba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1547 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.112 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1266ae50-32d1-4086-a689-3f7d0fe599b1 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=68031502ba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1547 identity=3411 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.112 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1266ae50-32d1-4086-a689-3f7d0fe599b1 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=68031502ba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1547 identity=3411 ipv4=10.0.0.112 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1266ae50-32d1-4086-a689-3f7d0fe599b1 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=68031502ba datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1547 identity=3411 ipv4=10.0.0.112 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1266ae50-32d1-4086-a689-3f7d0fe599b1 subsys=endpoint level=info msg="Successful endpoint creation" containerID=68031502ba datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1547 identity=3411 ipv4=10.0.0.112 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1266ae50-32d1-4086-a689-3f7d0fe599b1 subsys=daemon level=info msg="Delete endpoint request" containerID=68031502ba endpointID=1547 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-1266ae50-32d1-4086-a689-3f7d0fe599b1 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=68031502ba datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1547 identity=3411 ipv4=10.0.0.112 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1266ae50-32d1-4086-a689-3f7d0fe599b1 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.195 1eabea40-7f9d-4c02-a525-99d5c8d0d1f7 default }" containerID=1cbc4172b33474f9e9d8488b79c05e0413c2e4a4215bc01a0ffd06836f1835b6 datapathConfiguration="&{false false false false false }" interface=lxc6fda664dd747 k8sPodName=openstack/rabbitmq-keystone-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1cbc4172b3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1980 ipv4=10.0.0.195 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1cbc4172b3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1980 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.195 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-keystone;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1cbc4172b3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1980 identity=35672 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.195 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1cbc4172b3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1980 identity=35672 ipv4=10.0.0.195 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=1cbc4172b3 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1980 identity=35672 ipv4=10.0.0.195 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=1cbc4172b3 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1980 identity=35672 ipv4=10.0.0.195 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.68 9114e198-3608-4375-8765-c4fdf0115363 default }" containerID=0ff8c11519d8c99564fc90db50fede4c6582c5a05232d5fa63c42193cad9f40c datapathConfiguration="&{false false false false false }" interface=lxcf55e2906d3c1 k8sPodName=openstack/keystone-api-7d798bc6c6-m6rnn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0ff8c11519 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2471 ipv4=10.0.0.68 ipv6= k8sPodName=openstack/keystone-api-7d798bc6c6-m6rnn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0ff8c11519 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2471 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.68 ipv6= k8sPodName=openstack/keystone-api-7d798bc6c6-m6rnn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0ff8c11519 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2471 identity=43838 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.68 ipv6= k8sPodName=openstack/keystone-api-7d798bc6c6-m6rnn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0ff8c11519 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2471 identity=43838 ipv4=10.0.0.68 ipv6= k8sPodName=openstack/keystone-api-7d798bc6c6-m6rnn subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.92 2c9c21b5-f916-4006-ac77-7c52bc051c7f default }" containerID=edda03a2bcc213eb7510daf3bbe779c631512f2418acf662813d4bd0e0746232 datapathConfiguration="&{false false false false false }" interface=lxc237e32d859b7 k8sPodName=openstack/keystone-credential-setup-gfzwz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=edda03a2bc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3754 ipv4=10.0.0.92 ipv6= k8sPodName=openstack/keystone-credential-setup-gfzwz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=edda03a2bc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3754 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=4adb8aa0-2fb1-4f37-b164-7f54f4b50ff8,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=4adb8aa0-2fb1-4f37-b164-7f54f4b50ff8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.92 ipv6= k8sPodName=openstack/keystone-credential-setup-gfzwz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=4adb8aa0-2fb1-4f37-b164-7f54f4b50ff8;k8s:batch.kubernetes.io/job-name=keystone-credential-setup;k8s:component=credential-setup;k8s:controller-uid=4adb8aa0-2fb1-4f37-b164-7f54f4b50ff8;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-credential-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=edda03a2bc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3754 identity=41344 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=4adb8aa0-2fb1-4f37-b164-7f54f4b50ff8,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=4adb8aa0-2fb1-4f37-b164-7f54f4b50ff8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.92 ipv6= k8sPodName=openstack/keystone-credential-setup-gfzwz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=edda03a2bc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3754 identity=41344 ipv4=10.0.0.92 ipv6= k8sPodName=openstack/keystone-credential-setup-gfzwz subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0ff8c11519 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2471 identity=43838 ipv4=10.0.0.68 ipv6= k8sPodName=openstack/keystone-api-7d798bc6c6-m6rnn subsys=endpoint level=info msg="Successful endpoint creation" containerID=0ff8c11519 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2471 identity=43838 ipv4=10.0.0.68 ipv6= k8sPodName=openstack/keystone-api-7d798bc6c6-m6rnn subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=edda03a2bc datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3754 identity=41344 ipv4=10.0.0.92 ipv6= k8sPodName=openstack/keystone-credential-setup-gfzwz subsys=endpoint level=info msg="Successful endpoint creation" containerID=edda03a2bc datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3754 identity=41344 ipv4=10.0.0.92 ipv6= k8sPodName=openstack/keystone-credential-setup-gfzwz subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=edda03a2bc endpointID=3754 k8sNamespace=openstack k8sPodName=keystone-credential-setup-gfzwz subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=4adb8aa0-2fb1-4f37-b164-7f54f4b50ff8 k8s:batch.kubernetes.io/job-name=keystone-credential-setup k8s:component=credential-setup k8s:controller-uid=4adb8aa0-2fb1-4f37-b164-7f54f4b50ff8 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-credential-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=edda03a2bc datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3754 identity=41344 ipv4=10.0.0.92 ipv6= k8sPodName=openstack/keystone-credential-setup-gfzwz subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.137 231491e4-b126-4fe0-adac-dbde5879e5d0 default }" containerID=a9b9d040a18f0c70b9ba8d05891296ec8584fbf6e19291f5d1fd6354f71cbe2d datapathConfiguration="&{false false false false false }" interface=lxc1a1f1b348051 k8sPodName=openstack/keystone-db-init-45vmq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a9b9d040a1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2612 ipv4=10.0.0.137 ipv6= k8sPodName=openstack/keystone-db-init-45vmq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a9b9d040a1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2612 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=1b317fbb-3b9a-4021-8e56-d60682a9f725,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=1b317fbb-3b9a-4021-8e56-d60682a9f725,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.137 ipv6= k8sPodName=openstack/keystone-db-init-45vmq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=1b317fbb-3b9a-4021-8e56-d60682a9f725;k8s:batch.kubernetes.io/job-name=keystone-db-init;k8s:component=db-init;k8s:controller-uid=1b317fbb-3b9a-4021-8e56-d60682a9f725;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a9b9d040a1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2612 identity=22318 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=1b317fbb-3b9a-4021-8e56-d60682a9f725,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=1b317fbb-3b9a-4021-8e56-d60682a9f725,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.137 ipv6= k8sPodName=openstack/keystone-db-init-45vmq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a9b9d040a1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2612 identity=22318 ipv4=10.0.0.137 ipv6= k8sPodName=openstack/keystone-db-init-45vmq subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=a9b9d040a1 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2612 identity=22318 ipv4=10.0.0.137 ipv6= k8sPodName=openstack/keystone-db-init-45vmq subsys=endpoint level=info msg="Successful endpoint creation" containerID=a9b9d040a1 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2612 identity=22318 ipv4=10.0.0.137 ipv6= k8sPodName=openstack/keystone-db-init-45vmq subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=a9b9d040a1 endpointID=2612 k8sNamespace=openstack k8sPodName=keystone-db-init-45vmq subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=1b317fbb-3b9a-4021-8e56-d60682a9f725 k8s:batch.kubernetes.io/job-name=keystone-db-init k8s:component=db-init k8s:controller-uid=1b317fbb-3b9a-4021-8e56-d60682a9f725 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=a9b9d040a1 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2612 identity=22318 ipv4=10.0.0.137 ipv6= k8sPodName=openstack/keystone-db-init-45vmq subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.230 cfba7080-49f5-49b8-a7a7-adcc716c81a6 default }" containerID=9cdfba6e17dcc87fd53daeb4e6dd5d5c898396868b6679581ddbb818f7039069 datapathConfiguration="&{false false false false false }" interface=lxcee732b3090fc k8sPodName=openstack/keystone-fernet-setup-668ms labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9cdfba6e17 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=472 ipv4=10.0.0.230 ipv6= k8sPodName=openstack/keystone-fernet-setup-668ms subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9cdfba6e17 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=472 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=bf9c4cca-a29b-44c6-a41b-9af2a3949935,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=bf9c4cca-a29b-44c6-a41b-9af2a3949935,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.230 ipv6= k8sPodName=openstack/keystone-fernet-setup-668ms subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=bf9c4cca-a29b-44c6-a41b-9af2a3949935;k8s:batch.kubernetes.io/job-name=keystone-fernet-setup;k8s:component=fernet-setup;k8s:controller-uid=bf9c4cca-a29b-44c6-a41b-9af2a3949935;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-fernet-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9cdfba6e17 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=472 identity=40664 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=bf9c4cca-a29b-44c6-a41b-9af2a3949935,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=bf9c4cca-a29b-44c6-a41b-9af2a3949935,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.230 ipv6= k8sPodName=openstack/keystone-fernet-setup-668ms oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9cdfba6e17 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=472 identity=40664 ipv4=10.0.0.230 ipv6= k8sPodName=openstack/keystone-fernet-setup-668ms subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=9cdfba6e17 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=472 identity=40664 ipv4=10.0.0.230 ipv6= k8sPodName=openstack/keystone-fernet-setup-668ms subsys=endpoint level=info msg="Successful endpoint creation" containerID=9cdfba6e17 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=472 identity=40664 ipv4=10.0.0.230 ipv6= k8sPodName=openstack/keystone-fernet-setup-668ms subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=9cdfba6e17 endpointID=472 k8sNamespace=openstack k8sPodName=keystone-fernet-setup-668ms subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=bf9c4cca-a29b-44c6-a41b-9af2a3949935 k8s:batch.kubernetes.io/job-name=keystone-fernet-setup k8s:component=fernet-setup k8s:controller-uid=bf9c4cca-a29b-44c6-a41b-9af2a3949935 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-fernet-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=9cdfba6e17 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=472 identity=40664 ipv4=10.0.0.230 ipv6= k8sPodName=openstack/keystone-fernet-setup-668ms subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.150 8cb05e78-9a16-44a2-8284-5afd4ecdee22 default }" containerID=fa4fe7722ed0465427d55ca215288b135563b02dd6d2359925a913bdddb6d242 datapathConfiguration="&{false false false false false }" interface=lxc71a51c867616 k8sPodName=openstack/keystone-db-sync-kxgdv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fa4fe7722e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=186 ipv4=10.0.0.150 ipv6= k8sPodName=openstack/keystone-db-sync-kxgdv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fa4fe7722e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=186 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=9704c34f-00fa-447c-ab8f-ccc933c9d9ca,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=9704c34f-00fa-447c-ab8f-ccc933c9d9ca,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.150 ipv6= k8sPodName=openstack/keystone-db-sync-kxgdv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=9704c34f-00fa-447c-ab8f-ccc933c9d9ca;k8s:batch.kubernetes.io/job-name=keystone-db-sync;k8s:component=db-sync;k8s:controller-uid=9704c34f-00fa-447c-ab8f-ccc933c9d9ca;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-sync;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fa4fe7722e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=186 identity=5846 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=9704c34f-00fa-447c-ab8f-ccc933c9d9ca,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=9704c34f-00fa-447c-ab8f-ccc933c9d9ca,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.150 ipv6= k8sPodName=openstack/keystone-db-sync-kxgdv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fa4fe7722e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=186 identity=5846 ipv4=10.0.0.150 ipv6= k8sPodName=openstack/keystone-db-sync-kxgdv subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=fa4fe7722e datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=186 identity=5846 ipv4=10.0.0.150 ipv6= k8sPodName=openstack/keystone-db-sync-kxgdv subsys=endpoint level=info msg="Successful endpoint creation" containerID=fa4fe7722e datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=186 identity=5846 ipv4=10.0.0.150 ipv6= k8sPodName=openstack/keystone-db-sync-kxgdv subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=fa4fe7722e endpointID=186 k8sNamespace=openstack k8sPodName=keystone-db-sync-kxgdv subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=9704c34f-00fa-447c-ab8f-ccc933c9d9ca k8s:batch.kubernetes.io/job-name=keystone-db-sync k8s:component=db-sync k8s:controller-uid=9704c34f-00fa-447c-ab8f-ccc933c9d9ca k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-sync k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=fa4fe7722e datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=186 identity=5846 ipv4=10.0.0.150 ipv6= k8sPodName=openstack/keystone-db-sync-kxgdv subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.43 f2320c67-82d0-4928-a07e-bc7c7066095d default }" containerID=8d4e030b38207a478160271b985086e6ebcce04eb37c929eadf4db370fba9d5c datapathConfiguration="&{false false false false false }" interface=lxc3297d1460424 k8sPodName=openstack/keystone-rabbit-init-2bz75 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8d4e030b38 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1254 ipv4=10.0.0.43 ipv6= k8sPodName=openstack/keystone-rabbit-init-2bz75 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8d4e030b38 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1254 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=453ebc94-80e6-46ac-a12f-413c8b2e5c06,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=453ebc94-80e6-46ac-a12f-413c8b2e5c06,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.43 ipv6= k8sPodName=openstack/keystone-rabbit-init-2bz75 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=453ebc94-80e6-46ac-a12f-413c8b2e5c06;k8s:batch.kubernetes.io/job-name=keystone-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=453ebc94-80e6-46ac-a12f-413c8b2e5c06;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-rabbit-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8d4e030b38 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1254 identity=41385 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=453ebc94-80e6-46ac-a12f-413c8b2e5c06,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=453ebc94-80e6-46ac-a12f-413c8b2e5c06,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.43 ipv6= k8sPodName=openstack/keystone-rabbit-init-2bz75 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8d4e030b38 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1254 identity=41385 ipv4=10.0.0.43 ipv6= k8sPodName=openstack/keystone-rabbit-init-2bz75 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=8d4e030b38 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1254 identity=41385 ipv4=10.0.0.43 ipv6= k8sPodName=openstack/keystone-rabbit-init-2bz75 subsys=endpoint level=info msg="Successful endpoint creation" containerID=8d4e030b38 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1254 identity=41385 ipv4=10.0.0.43 ipv6= k8sPodName=openstack/keystone-rabbit-init-2bz75 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=8d4e030b38 endpointID=1254 k8sNamespace=openstack k8sPodName=keystone-rabbit-init-2bz75 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=453ebc94-80e6-46ac-a12f-413c8b2e5c06 k8s:batch.kubernetes.io/job-name=keystone-rabbit-init k8s:component=rabbit-init k8s:controller-uid=453ebc94-80e6-46ac-a12f-413c8b2e5c06 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-rabbit-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=8d4e030b38 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1254 identity=41385 ipv4=10.0.0.43 ipv6= k8sPodName=openstack/keystone-rabbit-init-2bz75 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.254 d63c5cca-da17-400a-80ee-d97d8cabb189 default }" containerID=75f46ca34fad39a4b1f07808f337a7c67fd06ebeb0cdc69561624c1bee658805 datapathConfiguration="&{false false false false false }" interface=lxc07a3f29cd751 k8sPodName=openstack/keystone-domain-manage-qmbrx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=75f46ca34f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3510 ipv4=10.0.0.254 ipv6= k8sPodName=openstack/keystone-domain-manage-qmbrx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=75f46ca34f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3510 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=8b3c6ea0-d627-4042-9a66-3f67b88083f5,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=8b3c6ea0-d627-4042-9a66-3f67b88083f5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.254 ipv6= k8sPodName=openstack/keystone-domain-manage-qmbrx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=8b3c6ea0-d627-4042-9a66-3f67b88083f5;k8s:batch.kubernetes.io/job-name=keystone-domain-manage;k8s:component=domain-manage;k8s:controller-uid=8b3c6ea0-d627-4042-9a66-3f67b88083f5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-domain-manage;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=75f46ca34f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3510 identity=53364 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=8b3c6ea0-d627-4042-9a66-3f67b88083f5,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=8b3c6ea0-d627-4042-9a66-3f67b88083f5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.254 ipv6= k8sPodName=openstack/keystone-domain-manage-qmbrx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=75f46ca34f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3510 identity=53364 ipv4=10.0.0.254 ipv6= k8sPodName=openstack/keystone-domain-manage-qmbrx subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=75f46ca34f datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3510 identity=53364 ipv4=10.0.0.254 ipv6= k8sPodName=openstack/keystone-domain-manage-qmbrx subsys=endpoint level=info msg="Successful endpoint creation" containerID=75f46ca34f datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3510 identity=53364 ipv4=10.0.0.254 ipv6= k8sPodName=openstack/keystone-domain-manage-qmbrx subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.032555764470355894 newInterval=11m15s subsys=map-ct level=info msg="Delete endpoint request" containerID=75f46ca34f endpointID=3510 k8sNamespace=openstack k8sPodName=keystone-domain-manage-qmbrx subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=8b3c6ea0-d627-4042-9a66-3f67b88083f5 k8s:batch.kubernetes.io/job-name=keystone-domain-manage k8s:component=domain-manage k8s:controller-uid=8b3c6ea0-d627-4042-9a66-3f67b88083f5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-domain-manage k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=75f46ca34f datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3510 identity=53364 ipv4=10.0.0.254 ipv6= k8sPodName=openstack/keystone-domain-manage-qmbrx subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.170 7a411b55-4439-4f49-8d1d-974096aa898b default }" containerID=13370172ccbb40c802fc05fcec938c53426acfe62d6e6b3e8b0a2ff15d47fa2f datapathConfiguration="&{false false false false false }" interface=lxca965cd8a9aaa k8sPodName=openstack/keystone-bootstrap-kssfr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=13370172cc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2243 ipv4=10.0.0.170 ipv6= k8sPodName=openstack/keystone-bootstrap-kssfr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=13370172cc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2243 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=cce6bde3-3571-488a-a4b6-86dcab6a2869,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=cce6bde3-3571-488a-a4b6-86dcab6a2869,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.170 ipv6= k8sPodName=openstack/keystone-bootstrap-kssfr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=cce6bde3-3571-488a-a4b6-86dcab6a2869;k8s:batch.kubernetes.io/job-name=keystone-bootstrap;k8s:component=bootstrap;k8s:controller-uid=cce6bde3-3571-488a-a4b6-86dcab6a2869;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-bootstrap;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=13370172cc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2243 identity=4190 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=cce6bde3-3571-488a-a4b6-86dcab6a2869,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=cce6bde3-3571-488a-a4b6-86dcab6a2869,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.170 ipv6= k8sPodName=openstack/keystone-bootstrap-kssfr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=13370172cc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2243 identity=4190 ipv4=10.0.0.170 ipv6= k8sPodName=openstack/keystone-bootstrap-kssfr subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=13370172cc datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2243 identity=4190 ipv4=10.0.0.170 ipv6= k8sPodName=openstack/keystone-bootstrap-kssfr subsys=endpoint level=info msg="Successful endpoint creation" containerID=13370172cc datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2243 identity=4190 ipv4=10.0.0.170 ipv6= k8sPodName=openstack/keystone-bootstrap-kssfr subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=13370172cc endpointID=2243 k8sNamespace=openstack k8sPodName=keystone-bootstrap-kssfr subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=cce6bde3-3571-488a-a4b6-86dcab6a2869 k8s:batch.kubernetes.io/job-name=keystone-bootstrap k8s:component=bootstrap k8s:controller-uid=cce6bde3-3571-488a-a4b6-86dcab6a2869 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-bootstrap k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=13370172cc datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2243 identity=4190 ipv4=10.0.0.170 ipv6= k8sPodName=openstack/keystone-bootstrap-kssfr subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.17 467fcdd9-467e-4373-b3e0-a1ec4e0adb74 default }" containerID=970da32a8797c29f68cf2b45c66f5cd2d84be5a0d39455ade11bdaa277a64dd0 datapathConfiguration="&{false false false false false }" interface=lxcf074682550b7 k8sPodName=local-path-storage/helper-pod-create-pvc-0457d522-4b48-4c83-ae5c-547a0e9ab91b labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=970da32a87 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2734 ipv4=10.0.0.17 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0457d522-4b48-4c83-ae5c-547a0e9ab91b subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=970da32a87 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2734 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.17 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0457d522-4b48-4c83-ae5c-547a0e9ab91b subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=970da32a87 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2734 identity=3411 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.17 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0457d522-4b48-4c83-ae5c-547a0e9ab91b oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=970da32a87 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2734 identity=3411 ipv4=10.0.0.17 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0457d522-4b48-4c83-ae5c-547a0e9ab91b subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=970da32a87 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2734 identity=3411 ipv4=10.0.0.17 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0457d522-4b48-4c83-ae5c-547a0e9ab91b subsys=endpoint level=info msg="Successful endpoint creation" containerID=970da32a87 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2734 identity=3411 ipv4=10.0.0.17 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0457d522-4b48-4c83-ae5c-547a0e9ab91b subsys=daemon level=info msg="Delete endpoint request" containerID=970da32a87 endpointID=2734 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-0457d522-4b48-4c83-ae5c-547a0e9ab91b subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=970da32a87 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2734 identity=3411 ipv4=10.0.0.17 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0457d522-4b48-4c83-ae5c-547a0e9ab91b subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.85 cc9fd571-81f9-4435-8495-9f080a4f54b7 default }" containerID=34aad406ed2ae6e28f66ce78640ada4a0910193d4181d6c915d68dae8d5769a7 datapathConfiguration="&{false false false false false }" interface=lxc9c1702304929 k8sPodName=openstack/rabbitmq-barbican-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=34aad406ed datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1539 ipv4=10.0.0.85 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=34aad406ed datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1539 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.85 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-barbican;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=34aad406ed datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1539 identity=4410 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.85 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=34aad406ed datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1539 identity=4410 ipv4=10.0.0.85 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=34aad406ed datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1539 identity=4410 ipv4=10.0.0.85 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=34aad406ed datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1539 identity=4410 ipv4=10.0.0.85 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.44 c831bba7-4ee9-4c3b-993e-4a20caeb869a default }" containerID=c1d9ec827616911acd965e91645b155a6c3f2219b65638b7c85a2055d10b1aaf datapathConfiguration="&{false false false false false }" interface=lxcd192797854ce k8sPodName=openstack/barbican-api-684c4bb795-9ghlm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c1d9ec8276 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=917 ipv4=10.0.0.44 ipv6= k8sPodName=openstack/barbican-api-684c4bb795-9ghlm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c1d9ec8276 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=917 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.44 ipv6= k8sPodName=openstack/barbican-api-684c4bb795-9ghlm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=c1d9ec8276 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=917 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.44 ipv6= k8sPodName=openstack/barbican-api-684c4bb795-9ghlm line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c1d9ec8276 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=917 identity=4338 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.44 ipv6= k8sPodName=openstack/barbican-api-684c4bb795-9ghlm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c1d9ec8276 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=917 identity=4338 ipv4=10.0.0.44 ipv6= k8sPodName=openstack/barbican-api-684c4bb795-9ghlm subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.198 da64c1db-83a8-4961-a4ec-ef086db54247 default }" containerID=ead01b07a538d320a0249101083fcdf939593ff344d57caa6d1dbfb8f6fe74b3 datapathConfiguration="&{false false false false false }" interface=lxcb0795c8cbca3 k8sPodName=openstack/barbican-db-init-5gzfb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ead01b07a5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1784 ipv4=10.0.0.198 ipv6= k8sPodName=openstack/barbican-db-init-5gzfb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ead01b07a5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1784 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=77cc99d1-f06b-4932-9829-e6e26f247f92,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=77cc99d1-f06b-4932-9829-e6e26f247f92,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.198 ipv6= k8sPodName=openstack/barbican-db-init-5gzfb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=77cc99d1-f06b-4932-9829-e6e26f247f92;k8s:batch.kubernetes.io/job-name=barbican-db-init;k8s:component=db-init;k8s:controller-uid=77cc99d1-f06b-4932-9829-e6e26f247f92;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ead01b07a5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1784 identity=16084 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=77cc99d1-f06b-4932-9829-e6e26f247f92,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=77cc99d1-f06b-4932-9829-e6e26f247f92,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.198 ipv6= k8sPodName=openstack/barbican-db-init-5gzfb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ead01b07a5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1784 identity=16084 ipv4=10.0.0.198 ipv6= k8sPodName=openstack/barbican-db-init-5gzfb subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c1d9ec8276 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=917 identity=4338 ipv4=10.0.0.44 ipv6= k8sPodName=openstack/barbican-api-684c4bb795-9ghlm subsys=endpoint level=info msg="Successful endpoint creation" containerID=c1d9ec8276 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=917 identity=4338 ipv4=10.0.0.44 ipv6= k8sPodName=openstack/barbican-api-684c4bb795-9ghlm subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=ead01b07a5 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1784 identity=16084 ipv4=10.0.0.198 ipv6= k8sPodName=openstack/barbican-db-init-5gzfb subsys=endpoint level=info msg="Successful endpoint creation" containerID=ead01b07a5 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1784 identity=16084 ipv4=10.0.0.198 ipv6= k8sPodName=openstack/barbican-db-init-5gzfb subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=ead01b07a5 endpointID=1784 k8sNamespace=openstack k8sPodName=barbican-db-init-5gzfb subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=77cc99d1-f06b-4932-9829-e6e26f247f92 k8s:batch.kubernetes.io/job-name=barbican-db-init k8s:component=db-init k8s:controller-uid=77cc99d1-f06b-4932-9829-e6e26f247f92 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=ead01b07a5 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1784 identity=16084 ipv4=10.0.0.198 ipv6= k8sPodName=openstack/barbican-db-init-5gzfb subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.170 b8fa598b-5d00-47c6-9cad-404c2d710fca default }" containerID=0fd8d979a93a02b631f6630d32a0c20b9f93eb5ec7b721dc90722b6d729045b1 datapathConfiguration="&{false false false false false }" interface=lxce2212bca4eb7 k8sPodName=openstack/barbican-db-sync-tm747 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0fd8d979a9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=670 ipv4=10.0.0.170 ipv6= k8sPodName=openstack/barbican-db-sync-tm747 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0fd8d979a9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=670 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=4f350327-a890-4490-b579-cb56dfc38507,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=4f350327-a890-4490-b579-cb56dfc38507,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.170 ipv6= k8sPodName=openstack/barbican-db-sync-tm747 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=4f350327-a890-4490-b579-cb56dfc38507;k8s:batch.kubernetes.io/job-name=barbican-db-sync;k8s:component=db-sync;k8s:controller-uid=4f350327-a890-4490-b579-cb56dfc38507;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-sync;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0fd8d979a9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=670 identity=63717 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=4f350327-a890-4490-b579-cb56dfc38507,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=4f350327-a890-4490-b579-cb56dfc38507,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.170 ipv6= k8sPodName=openstack/barbican-db-sync-tm747 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0fd8d979a9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=670 identity=63717 ipv4=10.0.0.170 ipv6= k8sPodName=openstack/barbican-db-sync-tm747 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0fd8d979a9 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=670 identity=63717 ipv4=10.0.0.170 ipv6= k8sPodName=openstack/barbican-db-sync-tm747 subsys=endpoint level=info msg="Successful endpoint creation" containerID=0fd8d979a9 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=670 identity=63717 ipv4=10.0.0.170 ipv6= k8sPodName=openstack/barbican-db-sync-tm747 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=0fd8d979a9 endpointID=670 k8sNamespace=openstack k8sPodName=barbican-db-sync-tm747 subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=4f350327-a890-4490-b579-cb56dfc38507 k8s:batch.kubernetes.io/job-name=barbican-db-sync k8s:component=db-sync k8s:controller-uid=4f350327-a890-4490-b579-cb56dfc38507 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-sync k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=0fd8d979a9 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=670 identity=63717 ipv4=10.0.0.170 ipv6= k8sPodName=openstack/barbican-db-sync-tm747 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.30 a1720e69-2367-429f-9a1c-86359d041220 default }" containerID=8c3a7081290d925d02296e1aed475cdfe87df9fc11ded4cc9ce88d50fce9257f datapathConfiguration="&{false false false false false }" interface=lxc29eeae545113 k8sPodName=openstack/barbican-rabbit-init-qbqmm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8c3a708129 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=423 ipv4=10.0.0.30 ipv6= k8sPodName=openstack/barbican-rabbit-init-qbqmm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8c3a708129 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=423 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=4a0b50ae-5ac0-4045-a5de-7f8d9e14d046,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=4a0b50ae-5ac0-4045-a5de-7f8d9e14d046,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.30 ipv6= k8sPodName=openstack/barbican-rabbit-init-qbqmm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=4a0b50ae-5ac0-4045-a5de-7f8d9e14d046;k8s:batch.kubernetes.io/job-name=barbican-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=4a0b50ae-5ac0-4045-a5de-7f8d9e14d046;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-rabbit-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8c3a708129 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=423 identity=31237 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=4a0b50ae-5ac0-4045-a5de-7f8d9e14d046,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=4a0b50ae-5ac0-4045-a5de-7f8d9e14d046,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.30 ipv6= k8sPodName=openstack/barbican-rabbit-init-qbqmm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8c3a708129 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=423 identity=31237 ipv4=10.0.0.30 ipv6= k8sPodName=openstack/barbican-rabbit-init-qbqmm subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=8c3a708129 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=423 identity=31237 ipv4=10.0.0.30 ipv6= k8sPodName=openstack/barbican-rabbit-init-qbqmm subsys=endpoint level=info msg="Successful endpoint creation" containerID=8c3a708129 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=423 identity=31237 ipv4=10.0.0.30 ipv6= k8sPodName=openstack/barbican-rabbit-init-qbqmm subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=8c3a708129 endpointID=423 k8sNamespace=openstack k8sPodName=barbican-rabbit-init-qbqmm subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=4a0b50ae-5ac0-4045-a5de-7f8d9e14d046 k8s:batch.kubernetes.io/job-name=barbican-rabbit-init k8s:component=rabbit-init k8s:controller-uid=4a0b50ae-5ac0-4045-a5de-7f8d9e14d046 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-rabbit-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=8c3a708129 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=423 identity=31237 ipv4=10.0.0.30 ipv6= k8sPodName=openstack/barbican-rabbit-init-qbqmm subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.103 758ea977-6b6f-4bbe-9b12-9882cbbdbf95 default }" containerID=1c8980b8d56ded58cf9d984ed87203657b3f3e9ca328ddf01cfd678a0974941d datapathConfiguration="&{false false false false false }" interface=lxce77af3b2d670 k8sPodName=openstack/barbican-ks-service-rqrdc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1c8980b8d5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=412 ipv4=10.0.0.103 ipv6= k8sPodName=openstack/barbican-ks-service-rqrdc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1c8980b8d5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=412 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=0d6c633c-15fc-4dc9-b485-30a227797fe3,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=0d6c633c-15fc-4dc9-b485-30a227797fe3,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.103 ipv6= k8sPodName=openstack/barbican-ks-service-rqrdc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=1c8980b8d5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=412 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.103 ipv6= k8sPodName=openstack/barbican-ks-service-rqrdc line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=0d6c633c-15fc-4dc9-b485-30a227797fe3;k8s:batch.kubernetes.io/job-name=barbican-ks-service;k8s:component=ks-service;k8s:controller-uid=0d6c633c-15fc-4dc9-b485-30a227797fe3;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-service;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1c8980b8d5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=412 identity=25150 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=0d6c633c-15fc-4dc9-b485-30a227797fe3,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=0d6c633c-15fc-4dc9-b485-30a227797fe3,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.103 ipv6= k8sPodName=openstack/barbican-ks-service-rqrdc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1c8980b8d5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=412 identity=25150 ipv4=10.0.0.103 ipv6= k8sPodName=openstack/barbican-ks-service-rqrdc subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1c8980b8d5 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=412 identity=25150 ipv4=10.0.0.103 ipv6= k8sPodName=openstack/barbican-ks-service-rqrdc subsys=endpoint level=info msg="Successful endpoint creation" containerID=1c8980b8d5 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=412 identity=25150 ipv4=10.0.0.103 ipv6= k8sPodName=openstack/barbican-ks-service-rqrdc subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=1c8980b8d5 endpointID=412 k8sNamespace=openstack k8sPodName=barbican-ks-service-rqrdc subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=0d6c633c-15fc-4dc9-b485-30a227797fe3 k8s:batch.kubernetes.io/job-name=barbican-ks-service k8s:component=ks-service k8s:controller-uid=0d6c633c-15fc-4dc9-b485-30a227797fe3 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-service k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=1c8980b8d5 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=412 identity=25150 ipv4=10.0.0.103 ipv6= k8sPodName=openstack/barbican-ks-service-rqrdc subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.227 4f6c2655-beed-400c-a592-c6a68db7eff4 default }" containerID=9f400331b3cb2f373f06f3fea24d6ec6c499c01db03466ee869d26a7cc445ed8 datapathConfiguration="&{false false false false false }" interface=lxce2110484ec4e k8sPodName=openstack/barbican-ks-endpoints-v689x labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9f400331b3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3570 ipv4=10.0.0.227 ipv6= k8sPodName=openstack/barbican-ks-endpoints-v689x subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9f400331b3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3570 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=710ca55b-b3cd-4c95-be33-1b5ed6964e13,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=710ca55b-b3cd-4c95-be33-1b5ed6964e13,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.227 ipv6= k8sPodName=openstack/barbican-ks-endpoints-v689x subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=710ca55b-b3cd-4c95-be33-1b5ed6964e13;k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=710ca55b-b3cd-4c95-be33-1b5ed6964e13;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-endpoints;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9f400331b3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3570 identity=6914 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=710ca55b-b3cd-4c95-be33-1b5ed6964e13,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=710ca55b-b3cd-4c95-be33-1b5ed6964e13,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.227 ipv6= k8sPodName=openstack/barbican-ks-endpoints-v689x oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9f400331b3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3570 identity=6914 ipv4=10.0.0.227 ipv6= k8sPodName=openstack/barbican-ks-endpoints-v689x subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9f400331b3 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3570 identity=6914 ipv4=10.0.0.227 ipv6= k8sPodName=openstack/barbican-ks-endpoints-v689x subsys=endpoint level=info msg="Successful endpoint creation" containerID=9f400331b3 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3570 identity=6914 ipv4=10.0.0.227 ipv6= k8sPodName=openstack/barbican-ks-endpoints-v689x subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=9f400331b3 endpointID=3570 k8sNamespace=openstack k8sPodName=barbican-ks-endpoints-v689x subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=710ca55b-b3cd-4c95-be33-1b5ed6964e13 k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=710ca55b-b3cd-4c95-be33-1b5ed6964e13 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-endpoints k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=9f400331b3 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3570 identity=6914 ipv4=10.0.0.227 ipv6= k8sPodName=openstack/barbican-ks-endpoints-v689x subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.74 67d21252-9ce8-44e6-98f3-31fdc0e55f06 default }" containerID=ba08b05035ce6f0218f4136cd298ead28f91a8016fd2c29a16d85539b68c0e1c datapathConfiguration="&{false false false false false }" interface=lxcc0854a2d2e4c k8sPodName=openstack/barbican-ks-user-wrwzq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ba08b05035 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=126 ipv4=10.0.0.74 ipv6= k8sPodName=openstack/barbican-ks-user-wrwzq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ba08b05035 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=126 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=214a3ebb-297e-40b5-a50c-e76c2230c57d,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=214a3ebb-297e-40b5-a50c-e76c2230c57d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.74 ipv6= k8sPodName=openstack/barbican-ks-user-wrwzq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=214a3ebb-297e-40b5-a50c-e76c2230c57d;k8s:batch.kubernetes.io/job-name=barbican-ks-user;k8s:component=ks-user;k8s:controller-uid=214a3ebb-297e-40b5-a50c-e76c2230c57d;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-user;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ba08b05035 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=126 identity=62726 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=214a3ebb-297e-40b5-a50c-e76c2230c57d,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=214a3ebb-297e-40b5-a50c-e76c2230c57d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.74 ipv6= k8sPodName=openstack/barbican-ks-user-wrwzq oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=ba08b05035 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=126 identity=62726 ipv4=10.0.0.74 ipv6= k8sPodName=openstack/barbican-ks-user-wrwzq subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ba08b05035 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=126 identity=62726 ipv4=10.0.0.74 ipv6= k8sPodName=openstack/barbican-ks-user-wrwzq subsys=endpoint level=info msg="Successful endpoint creation" containerID=ba08b05035 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=126 identity=62726 ipv4=10.0.0.74 ipv6= k8sPodName=openstack/barbican-ks-user-wrwzq subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=ba08b05035 endpointID=126 k8sNamespace=openstack k8sPodName=barbican-ks-user-wrwzq subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=214a3ebb-297e-40b5-a50c-e76c2230c57d k8s:batch.kubernetes.io/job-name=barbican-ks-user k8s:component=ks-user k8s:controller-uid=214a3ebb-297e-40b5-a50c-e76c2230c57d k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-user k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=ba08b05035 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=126 identity=62726 ipv4=10.0.0.74 ipv6= k8sPodName=openstack/barbican-ks-user-wrwzq subsys=endpoint level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Create endpoint request" addressing="&{10.0.0.170 b5d54526-b2e2-414e-b54c-5282d432d41d default }" containerID=ce69ce293d94c8520b2b6eda0b60785b6a42131e7fff5689f47772f08814b7d8 datapathConfiguration="&{false false false false false }" interface=lxc83cbd455929c k8sPodName=rook-ceph/rook-ceph-operator-76c484c45f-kh4xh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ce69ce293d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3749 ipv4=10.0.0.170 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76c484c45f-kh4xh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ce69ce293d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3749 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.14.2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.170 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76c484c45f-kh4xh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:rook-ceph k8s:io.cilium.k8s.namespace.labels.name:rook-ceph]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-operator;k8s:helm.sh/chart=rook-ceph-v1.14.2;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph;k8s:io.cilium.k8s.namespace.labels.name=rook-ceph;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system;k8s:io.kubernetes.pod.namespace=rook-ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ce69ce293d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3749 identity=19986 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.14.2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.170 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76c484c45f-kh4xh oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=ce69ce293d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3749 identity=19986 ipv4=10.0.0.170 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76c484c45f-kh4xh subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ce69ce293d datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3749 identity=19986 ipv4=10.0.0.170 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76c484c45f-kh4xh subsys=endpoint level=info msg="Successful endpoint creation" containerID=ce69ce293d datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3749 identity=19986 ipv4=10.0.0.170 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76c484c45f-kh4xh subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.72 9693dd4e-f3bc-4128-995c-a1af8ddae53e default }" containerID=dc82e56bced90e38b5f35a3af921f90adef6430153c5549fe64dedb8a35a83f8 datapathConfiguration="&{false false false false false }" interface=lxcaebf40477efd k8sPodName=openstack/rook-ceph-detect-version-bqzv8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=dc82e56bce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1456 ipv4=10.0.0.72 ipv6= k8sPodName=openstack/rook-ceph-detect-version-bqzv8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=dc82e56bce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1456 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=eb21ae6f-85e8-4a7e-9b1b-661e038ed3be,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=eb21ae6f-85e8-4a7e-9b1b-661e038ed3be,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.14.2" ipv4=10.0.0.72 ipv6= k8sPodName=openstack/rook-ceph-detect-version-bqzv8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-detect-version;k8s:batch.kubernetes.io/controller-uid=eb21ae6f-85e8-4a7e-9b1b-661e038ed3be;k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version;k8s:controller-uid=eb21ae6f-85e8-4a7e-9b1b-661e038ed3be;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=rook-ceph-detect-version;k8s:rook-version=v1.14.2;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=dc82e56bce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1456 identity=37215 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=eb21ae6f-85e8-4a7e-9b1b-661e038ed3be,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=eb21ae6f-85e8-4a7e-9b1b-661e038ed3be,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.14.2" ipv4=10.0.0.72 ipv6= k8sPodName=openstack/rook-ceph-detect-version-bqzv8 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=dc82e56bce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1456 identity=37215 ipv4=10.0.0.72 ipv6= k8sPodName=openstack/rook-ceph-detect-version-bqzv8 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=dc82e56bce datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1456 identity=37215 ipv4=10.0.0.72 ipv6= k8sPodName=openstack/rook-ceph-detect-version-bqzv8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=dc82e56bce datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1456 identity=37215 ipv4=10.0.0.72 ipv6= k8sPodName=openstack/rook-ceph-detect-version-bqzv8 subsys=daemon level=info msg="Delete endpoint request" containerID=dc82e56bce endpointID=1456 k8sNamespace=openstack k8sPodName=rook-ceph-detect-version-bqzv8 subsys=daemon level=info msg="Releasing key" key="[k8s:app=rook-ceph-detect-version k8s:batch.kubernetes.io/controller-uid=eb21ae6f-85e8-4a7e-9b1b-661e038ed3be k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version k8s:controller-uid=eb21ae6f-85e8-4a7e-9b1b-661e038ed3be k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=rook-ceph-detect-version k8s:rook-version=v1.14.2]" subsys=allocator level=info msg="Removed endpoint" containerID=dc82e56bce datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1456 identity=37215 ipv4=10.0.0.72 ipv6= k8sPodName=openstack/rook-ceph-detect-version-bqzv8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.108 27a356ea-ae9b-48c5-a698-c84b6147c6d0 default }" containerID=0b595ef4dae26b98067bb3c05912f1be00da00b65c10696432ac4f993d3228e7 datapathConfiguration="&{false false false false false }" interface=lxc798307342f1c k8sPodName=openstack/ceph-object-controller-detect-version-928bg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0b595ef4da datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1726 ipv4=10.0.0.108 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-928bg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0b595ef4da datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1726 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=13708c3a-7b7f-4250-9a98-1a6f92c73981,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=13708c3a-7b7f-4250-9a98-1a6f92c73981,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.14.2" ipv4=10.0.0.108 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-928bg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=ceph-object-controller-detect-version;k8s:batch.kubernetes.io/controller-uid=13708c3a-7b7f-4250-9a98-1a6f92c73981;k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version;k8s:controller-uid=13708c3a-7b7f-4250-9a98-1a6f92c73981;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=ceph-object-controller-detect-version;k8s:rook-version=v1.14.2;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0b595ef4da datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1726 identity=30070 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=13708c3a-7b7f-4250-9a98-1a6f92c73981,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=13708c3a-7b7f-4250-9a98-1a6f92c73981,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.14.2" ipv4=10.0.0.108 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-928bg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0b595ef4da datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1726 identity=30070 ipv4=10.0.0.108 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-928bg subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=0b595ef4da datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1726 identity=30070 ipv4=10.0.0.108 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-928bg subsys=endpoint level=info msg="Successful endpoint creation" containerID=0b595ef4da datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1726 identity=30070 ipv4=10.0.0.108 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-928bg subsys=daemon level=info msg="Delete endpoint request" containerID=0b595ef4da endpointID=1726 k8sNamespace=openstack k8sPodName=ceph-object-controller-detect-version-928bg subsys=daemon level=info msg="Releasing key" key="[k8s:app=ceph-object-controller-detect-version k8s:batch.kubernetes.io/controller-uid=13708c3a-7b7f-4250-9a98-1a6f92c73981 k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version k8s:controller-uid=13708c3a-7b7f-4250-9a98-1a6f92c73981 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=ceph-object-controller-detect-version k8s:rook-version=v1.14.2]" subsys=allocator level=info msg="Removed endpoint" containerID=0b595ef4da datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1726 identity=30070 ipv4=10.0.0.108 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-928bg subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.2 4e4a9a46-9c56-4d4f-84ad-bd16b1c2456a default }" containerID=daac003210d644c34ac7005c26721a6c692739e5d60852d08bd8d8ba89c82be5 datapathConfiguration="&{false false false false false }" interface=lxcb300f8bc7378 k8sPodName=local-path-storage/helper-pod-create-pvc-def5ca0f-0e84-49c4-a6bd-6c06f16d7c54 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=daac003210 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=491 ipv4=10.0.0.2 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-def5ca0f-0e84-49c4-a6bd-6c06f16d7c54 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=daac003210 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=491 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.2 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-def5ca0f-0e84-49c4-a6bd-6c06f16d7c54 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=daac003210 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=491 identity=3411 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.2 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-def5ca0f-0e84-49c4-a6bd-6c06f16d7c54 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=daac003210 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=491 identity=3411 ipv4=10.0.0.2 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-def5ca0f-0e84-49c4-a6bd-6c06f16d7c54 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=daac003210 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=491 identity=3411 ipv4=10.0.0.2 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-def5ca0f-0e84-49c4-a6bd-6c06f16d7c54 subsys=endpoint level=info msg="Successful endpoint creation" containerID=daac003210 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=491 identity=3411 ipv4=10.0.0.2 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-def5ca0f-0e84-49c4-a6bd-6c06f16d7c54 subsys=daemon level=info msg="Delete endpoint request" containerID=daac003210 endpointID=491 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-def5ca0f-0e84-49c4-a6bd-6c06f16d7c54 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=daac003210 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=491 identity=3411 ipv4=10.0.0.2 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-def5ca0f-0e84-49c4-a6bd-6c06f16d7c54 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.133 ad02fe74-cfee-4183-9dfb-b52b47546d7c default }" containerID=6af89e538b1041558f14353a48fc0402eb303405758320488b3a6038bd395f77 datapathConfiguration="&{false false false false false }" interface=lxc737a94714240 k8sPodName=openstack/rabbitmq-glance-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6af89e538b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2710 ipv4=10.0.0.133 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6af89e538b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2710 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.133 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-glance;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6af89e538b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2710 identity=17704 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.133 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=6af89e538b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2710 identity=17704 ipv4=10.0.0.133 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6af89e538b datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2710 identity=17704 ipv4=10.0.0.133 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=6af89e538b datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2710 identity=17704 ipv4=10.0.0.133 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.219 ec71864b-2f1a-4f4a-9422-ea9fbd3c4fb5 default }" containerID=d3935523ad30ddba888d4822b5655c303b1dd3a69a17213ba5b219c1f26b40e2 datapathConfiguration="&{false false false false false }" interface=lxca3129dbde55a k8sPodName=openstack/glance-db-init-ndddq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d3935523ad datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=691 ipv4=10.0.0.219 ipv6= k8sPodName=openstack/glance-db-init-ndddq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d3935523ad datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=691 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=b69bde4c-3d60-464b-8b08-2458fb9b5a48,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=b69bde4c-3d60-464b-8b08-2458fb9b5a48,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.219 ipv6= k8sPodName=openstack/glance-db-init-ndddq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=b69bde4c-3d60-464b-8b08-2458fb9b5a48;k8s:batch.kubernetes.io/job-name=glance-db-init;k8s:component=db-init;k8s:controller-uid=b69bde4c-3d60-464b-8b08-2458fb9b5a48;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-init;k8s:release_group=glance;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=d3935523ad datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=691 identity=25479 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=b69bde4c-3d60-464b-8b08-2458fb9b5a48,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=b69bde4c-3d60-464b-8b08-2458fb9b5a48,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.219 ipv6= k8sPodName=openstack/glance-db-init-ndddq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d3935523ad datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=691 identity=25479 ipv4=10.0.0.219 ipv6= k8sPodName=openstack/glance-db-init-ndddq subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d3935523ad datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=691 identity=25479 ipv4=10.0.0.219 ipv6= k8sPodName=openstack/glance-db-init-ndddq subsys=endpoint level=info msg="Successful endpoint creation" containerID=d3935523ad datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=691 identity=25479 ipv4=10.0.0.219 ipv6= k8sPodName=openstack/glance-db-init-ndddq subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=d3935523ad endpointID=691 k8sNamespace=openstack k8sPodName=glance-db-init-ndddq subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=b69bde4c-3d60-464b-8b08-2458fb9b5a48 k8s:batch.kubernetes.io/job-name=glance-db-init k8s:component=db-init k8s:controller-uid=b69bde4c-3d60-464b-8b08-2458fb9b5a48 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=d3935523ad datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=691 identity=25479 ipv4=10.0.0.219 ipv6= k8sPodName=openstack/glance-db-init-ndddq subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.135 01c04e7a-6d85-427d-8440-7756fd0622da default }" containerID=e6cd0047f96882694826ad5d0a3eb22e0726d5629aed6d8368c2e3f52f8c6ea2 datapathConfiguration="&{false false false false false }" interface=lxc6f2571e428ae k8sPodName=openstack/glance-db-sync-6458m labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e6cd0047f9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=118 ipv4=10.0.0.135 ipv6= k8sPodName=openstack/glance-db-sync-6458m subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e6cd0047f9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=118 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=393cb39f-f109-48ad-8d1d-1ae2bc474e70,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=393cb39f-f109-48ad-8d1d-1ae2bc474e70,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.135 ipv6= k8sPodName=openstack/glance-db-sync-6458m subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=393cb39f-f109-48ad-8d1d-1ae2bc474e70;k8s:batch.kubernetes.io/job-name=glance-db-sync;k8s:component=db-sync;k8s:controller-uid=393cb39f-f109-48ad-8d1d-1ae2bc474e70;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-sync;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e6cd0047f9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=118 identity=5619 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=393cb39f-f109-48ad-8d1d-1ae2bc474e70,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=393cb39f-f109-48ad-8d1d-1ae2bc474e70,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.135 ipv6= k8sPodName=openstack/glance-db-sync-6458m oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=e6cd0047f9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=118 identity=5619 ipv4=10.0.0.135 ipv6= k8sPodName=openstack/glance-db-sync-6458m subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e6cd0047f9 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=118 identity=5619 ipv4=10.0.0.135 ipv6= k8sPodName=openstack/glance-db-sync-6458m subsys=endpoint level=info msg="Successful endpoint creation" containerID=e6cd0047f9 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=118 identity=5619 ipv4=10.0.0.135 ipv6= k8sPodName=openstack/glance-db-sync-6458m subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=e6cd0047f9 endpointID=118 k8sNamespace=openstack k8sPodName=glance-db-sync-6458m subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=393cb39f-f109-48ad-8d1d-1ae2bc474e70 k8s:batch.kubernetes.io/job-name=glance-db-sync k8s:component=db-sync k8s:controller-uid=393cb39f-f109-48ad-8d1d-1ae2bc474e70 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-sync k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=e6cd0047f9 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=118 identity=5619 ipv4=10.0.0.135 ipv6= k8sPodName=openstack/glance-db-sync-6458m subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.254 91cbd047-2b4f-4ed4-bc03-162a4a0f3c51 default }" containerID=311c5c773dfced42b7adc53ca71d5f685b468a97ce3de74804090a4b8a65d84d datapathConfiguration="&{false false false false false }" interface=lxcdfab1ad23f46 k8sPodName=openstack/glance-rabbit-init-vrgf6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=311c5c773d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=851 ipv4=10.0.0.254 ipv6= k8sPodName=openstack/glance-rabbit-init-vrgf6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=311c5c773d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=851 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=30505dc8-0ab2-4327-961d-558f2229e5a9,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=30505dc8-0ab2-4327-961d-558f2229e5a9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.254 ipv6= k8sPodName=openstack/glance-rabbit-init-vrgf6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=311c5c773d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=851 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.254 ipv6= k8sPodName=openstack/glance-rabbit-init-vrgf6 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=30505dc8-0ab2-4327-961d-558f2229e5a9;k8s:batch.kubernetes.io/job-name=glance-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=30505dc8-0ab2-4327-961d-558f2229e5a9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-rabbit-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=311c5c773d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=851 identity=49976 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=30505dc8-0ab2-4327-961d-558f2229e5a9,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=30505dc8-0ab2-4327-961d-558f2229e5a9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.254 ipv6= k8sPodName=openstack/glance-rabbit-init-vrgf6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=311c5c773d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=851 identity=49976 ipv4=10.0.0.254 ipv6= k8sPodName=openstack/glance-rabbit-init-vrgf6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=311c5c773d datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=851 identity=49976 ipv4=10.0.0.254 ipv6= k8sPodName=openstack/glance-rabbit-init-vrgf6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=311c5c773d datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=851 identity=49976 ipv4=10.0.0.254 ipv6= k8sPodName=openstack/glance-rabbit-init-vrgf6 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.45 3fff59d2-5d9c-4a86-b025-727258377ce1 default }" containerID=8e10aae220b0b2f23860585ab99a8c803cf58d6832378cd999dca16e49b8246d datapathConfiguration="&{false false false false false }" interface=lxc520703e565ab k8sPodName=openstack/rook-ceph-crashcollector-instance-7c8df6f89b-tks7t labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8e10aae220 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2655 ipv4=10.0.0.45 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-7c8df6f89b-tks7t subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8e10aae220 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2655 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.1-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.45 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-7c8df6f89b-tks7t subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-crashcollector;k8s:ceph-version=18.2.1-0;k8s:ceph_daemon_id=crash;k8s:crashcollector=crash;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default;k8s:io.kubernetes.pod.namespace=openstack;k8s:node_name=instance;k8s:rook_cluster=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8e10aae220 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2655 identity=41418 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.1-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.45 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-7c8df6f89b-tks7t oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=8e10aae220 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2655 identity=41418 ipv4=10.0.0.45 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-7c8df6f89b-tks7t subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8e10aae220 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2655 identity=41418 ipv4=10.0.0.45 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-7c8df6f89b-tks7t subsys=endpoint level=info msg="Successful endpoint creation" containerID=8e10aae220 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2655 identity=41418 ipv4=10.0.0.45 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-7c8df6f89b-tks7t subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.175 13713654-3cc7-47a2-a89f-8489a4e4c212 default }" containerID=1b8de1676b071f74172fabb923f9935ea981f64a4cbb3acfa514eee8f9dc3a4e datapathConfiguration="&{false false false false false }" interface=lxcbedc3316c4f6 k8sPodName=openstack/rook-ceph-rgw-ceph-a-cf9f85b9f-mrl4f labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1b8de1676b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1646 ipv4=10.0.0.175 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-cf9f85b9f-mrl4f subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1b8de1676b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1646 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.175 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-cf9f85b9f-mrl4f subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-rgw;k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io;k8s:app.kubernetes.io/created-by=rook-ceph-operator;k8s:app.kubernetes.io/instance=ceph;k8s:app.kubernetes.io/managed-by=rook-ceph-operator;k8s:app.kubernetes.io/name=ceph-rgw;k8s:app.kubernetes.io/part-of=ceph;k8s:ceph_daemon_id=ceph;k8s:ceph_daemon_type=rgw;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw;k8s:io.kubernetes.pod.namespace=openstack;k8s:rgw=ceph;k8s:rook.io/operator-namespace=rook-ceph;k8s:rook_cluster=openstack;k8s:rook_object_store=ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1b8de1676b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1646 identity=1633 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.175 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-cf9f85b9f-mrl4f oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1b8de1676b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1646 identity=1633 ipv4=10.0.0.175 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-cf9f85b9f-mrl4f subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1b8de1676b datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1646 identity=1633 ipv4=10.0.0.175 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-cf9f85b9f-mrl4f subsys=endpoint level=info msg="Successful endpoint creation" containerID=1b8de1676b datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1646 identity=1633 ipv4=10.0.0.175 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-cf9f85b9f-mrl4f subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=311c5c773d endpointID=851 k8sNamespace=openstack k8sPodName=glance-rabbit-init-vrgf6 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=30505dc8-0ab2-4327-961d-558f2229e5a9 k8s:batch.kubernetes.io/job-name=glance-rabbit-init k8s:component=rabbit-init k8s:controller-uid=30505dc8-0ab2-4327-961d-558f2229e5a9 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-rabbit-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=311c5c773d datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=851 identity=49976 ipv4=10.0.0.254 ipv6= k8sPodName=openstack/glance-rabbit-init-vrgf6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.221 a056dcbc-dd4b-46f5-89d6-f36563780869 default }" containerID=8812f614c63c1380dd05bef29cf0c43adf8f91fa2da02f1e855a518a4af089d2 datapathConfiguration="&{false false false false false }" interface=lxc9a508f4cfa3f k8sPodName=openstack/glance-ks-service-tcft6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8812f614c6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1689 ipv4=10.0.0.221 ipv6= k8sPodName=openstack/glance-ks-service-tcft6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8812f614c6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1689 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=662e1a63-9129-4001-9197-9afead5537b6,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=662e1a63-9129-4001-9197-9afead5537b6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.221 ipv6= k8sPodName=openstack/glance-ks-service-tcft6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=662e1a63-9129-4001-9197-9afead5537b6;k8s:batch.kubernetes.io/job-name=glance-ks-service;k8s:component=ks-service;k8s:controller-uid=662e1a63-9129-4001-9197-9afead5537b6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-service;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8812f614c6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1689 identity=47093 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=662e1a63-9129-4001-9197-9afead5537b6,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=662e1a63-9129-4001-9197-9afead5537b6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.221 ipv6= k8sPodName=openstack/glance-ks-service-tcft6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8812f614c6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1689 identity=47093 ipv4=10.0.0.221 ipv6= k8sPodName=openstack/glance-ks-service-tcft6 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=8812f614c6 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1689 identity=47093 ipv4=10.0.0.221 ipv6= k8sPodName=openstack/glance-ks-service-tcft6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=8812f614c6 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1689 identity=47093 ipv4=10.0.0.221 ipv6= k8sPodName=openstack/glance-ks-service-tcft6 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=8812f614c6 endpointID=1689 k8sNamespace=openstack k8sPodName=glance-ks-service-tcft6 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=662e1a63-9129-4001-9197-9afead5537b6 k8s:batch.kubernetes.io/job-name=glance-ks-service k8s:component=ks-service k8s:controller-uid=662e1a63-9129-4001-9197-9afead5537b6 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-service k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=8812f614c6 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1689 identity=47093 ipv4=10.0.0.221 ipv6= k8sPodName=openstack/glance-ks-service-tcft6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.165 851d821c-7bb1-48be-9811-0decf48278d0 default }" containerID=f700d7f129c4db6bff7c482aa65b0e365afbaefb5ae1a7f7f9f6502187d077ca datapathConfiguration="&{false false false false false }" interface=lxc7cf9f6e480b9 k8sPodName=openstack/glance-ks-endpoints-sn8tv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f700d7f129 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=353 ipv4=10.0.0.165 ipv6= k8sPodName=openstack/glance-ks-endpoints-sn8tv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f700d7f129 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=353 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=409eef0a-fe2a-468d-95e6-fdf3cf23a2e1,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=409eef0a-fe2a-468d-95e6-fdf3cf23a2e1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.165 ipv6= k8sPodName=openstack/glance-ks-endpoints-sn8tv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=409eef0a-fe2a-468d-95e6-fdf3cf23a2e1;k8s:batch.kubernetes.io/job-name=glance-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=409eef0a-fe2a-468d-95e6-fdf3cf23a2e1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-endpoints;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f700d7f129 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=353 identity=53797 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=409eef0a-fe2a-468d-95e6-fdf3cf23a2e1,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=409eef0a-fe2a-468d-95e6-fdf3cf23a2e1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.165 ipv6= k8sPodName=openstack/glance-ks-endpoints-sn8tv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f700d7f129 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=353 identity=53797 ipv4=10.0.0.165 ipv6= k8sPodName=openstack/glance-ks-endpoints-sn8tv subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=f700d7f129 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=353 identity=53797 ipv4=10.0.0.165 ipv6= k8sPodName=openstack/glance-ks-endpoints-sn8tv subsys=endpoint level=info msg="Successful endpoint creation" containerID=f700d7f129 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=353 identity=53797 ipv4=10.0.0.165 ipv6= k8sPodName=openstack/glance-ks-endpoints-sn8tv subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.154 baa8cf8d-b058-450e-ace5-66a4d14789cd default }" containerID=679bbe3f96cc68253996af1fd1348de9a3bff02ca4a7122a813cf6f6b9b3beea datapathConfiguration="&{false false false false false }" interface=lxc53876fda9736 k8sPodName=openstack/ceph-object-controller-detect-version-kkmql labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=679bbe3f96 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=106 ipv4=10.0.0.154 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-kkmql subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=679bbe3f96 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=106 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=38172203-80e8-4173-ab6f-bf8a3c9b5df7,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=38172203-80e8-4173-ab6f-bf8a3c9b5df7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.14.2" ipv4=10.0.0.154 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-kkmql subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=ceph-object-controller-detect-version;k8s:batch.kubernetes.io/controller-uid=38172203-80e8-4173-ab6f-bf8a3c9b5df7;k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version;k8s:controller-uid=38172203-80e8-4173-ab6f-bf8a3c9b5df7;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=ceph-object-controller-detect-version;k8s:rook-version=v1.14.2;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=679bbe3f96 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=106 identity=28442 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=38172203-80e8-4173-ab6f-bf8a3c9b5df7,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=38172203-80e8-4173-ab6f-bf8a3c9b5df7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.14.2" ipv4=10.0.0.154 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-kkmql oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=679bbe3f96 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=106 identity=28442 ipv4=10.0.0.154 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-kkmql subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=679bbe3f96 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=106 identity=28442 ipv4=10.0.0.154 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-kkmql subsys=endpoint level=info msg="Successful endpoint creation" containerID=679bbe3f96 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=106 identity=28442 ipv4=10.0.0.154 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-kkmql subsys=daemon level=info msg="Delete endpoint request" containerID=679bbe3f96 endpointID=106 k8sNamespace=openstack k8sPodName=ceph-object-controller-detect-version-kkmql subsys=daemon level=info msg="Releasing key" key="[k8s:app=ceph-object-controller-detect-version k8s:batch.kubernetes.io/controller-uid=38172203-80e8-4173-ab6f-bf8a3c9b5df7 k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version k8s:controller-uid=38172203-80e8-4173-ab6f-bf8a3c9b5df7 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=ceph-object-controller-detect-version k8s:rook-version=v1.14.2]" subsys=allocator level=info msg="Removed endpoint" containerID=679bbe3f96 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=106 identity=28442 ipv4=10.0.0.154 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-kkmql subsys=endpoint level=info msg="Delete endpoint request" containerID=f700d7f129 endpointID=353 k8sNamespace=openstack k8sPodName=glance-ks-endpoints-sn8tv subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=409eef0a-fe2a-468d-95e6-fdf3cf23a2e1 k8s:batch.kubernetes.io/job-name=glance-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=409eef0a-fe2a-468d-95e6-fdf3cf23a2e1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-endpoints k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=f700d7f129 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=353 identity=53797 ipv4=10.0.0.165 ipv6= k8sPodName=openstack/glance-ks-endpoints-sn8tv subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.239 1c4a330c-3bcf-49ed-9298-b2d184bc3c86 default }" containerID=ed69751185a034022ce249ffa406d6df19f055a6f346c061d4c6c3846453e50f datapathConfiguration="&{false false false false false }" interface=lxc392d8b4df1fe k8sPodName=openstack/glance-ks-user-tc69p labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ed69751185 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=252 ipv4=10.0.0.239 ipv6= k8sPodName=openstack/glance-ks-user-tc69p subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ed69751185 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=252 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=cd123c0b-2143-4d34-96a8-0432205b19b1,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=cd123c0b-2143-4d34-96a8-0432205b19b1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.239 ipv6= k8sPodName=openstack/glance-ks-user-tc69p subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=cd123c0b-2143-4d34-96a8-0432205b19b1;k8s:batch.kubernetes.io/job-name=glance-ks-user;k8s:component=ks-user;k8s:controller-uid=cd123c0b-2143-4d34-96a8-0432205b19b1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-user;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ed69751185 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=252 identity=4976 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=cd123c0b-2143-4d34-96a8-0432205b19b1,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=cd123c0b-2143-4d34-96a8-0432205b19b1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.239 ipv6= k8sPodName=openstack/glance-ks-user-tc69p oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ed69751185 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=252 identity=4976 ipv4=10.0.0.239 ipv6= k8sPodName=openstack/glance-ks-user-tc69p subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=ed69751185 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=252 identity=4976 ipv4=10.0.0.239 ipv6= k8sPodName=openstack/glance-ks-user-tc69p subsys=endpoint level=info msg="Successful endpoint creation" containerID=ed69751185 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=252 identity=4976 ipv4=10.0.0.239 ipv6= k8sPodName=openstack/glance-ks-user-tc69p subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=ed69751185 endpointID=252 k8sNamespace=openstack k8sPodName=glance-ks-user-tc69p subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=cd123c0b-2143-4d34-96a8-0432205b19b1 k8s:batch.kubernetes.io/job-name=glance-ks-user k8s:component=ks-user k8s:controller-uid=cd123c0b-2143-4d34-96a8-0432205b19b1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-user k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=ed69751185 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=252 identity=4976 ipv4=10.0.0.239 ipv6= k8sPodName=openstack/glance-ks-user-tc69p subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.111 66b00fd6-6c32-4bcb-a3a1-cd5dd47650c7 default }" containerID=186a01b9899c85efc135b9c3bfe7263b220d9473d81b3c9fb2934f166d03c2ce datapathConfiguration="&{false false false false false }" interface=lxccca912842acf k8sPodName=openstack/glance-metadefs-load-tdg89 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=186a01b989 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3278 ipv4=10.0.0.111 ipv6= k8sPodName=openstack/glance-metadefs-load-tdg89 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=186a01b989 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3278 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=c95ddf27-22f9-4da3-a843-2f5856996265,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=c95ddf27-22f9-4da3-a843-2f5856996265,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.111 ipv6= k8sPodName=openstack/glance-metadefs-load-tdg89 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=186a01b989 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3278 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.111 ipv6= k8sPodName=openstack/glance-metadefs-load-tdg89 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=c95ddf27-22f9-4da3-a843-2f5856996265;k8s:batch.kubernetes.io/job-name=glance-metadefs-load;k8s:component=metadefs_load;k8s:controller-uid=c95ddf27-22f9-4da3-a843-2f5856996265;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-metadefs-load;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=186a01b989 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3278 identity=62143 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=c95ddf27-22f9-4da3-a843-2f5856996265,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=c95ddf27-22f9-4da3-a843-2f5856996265,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.111 ipv6= k8sPodName=openstack/glance-metadefs-load-tdg89 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=186a01b989 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3278 identity=62143 ipv4=10.0.0.111 ipv6= k8sPodName=openstack/glance-metadefs-load-tdg89 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=186a01b989 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3278 identity=62143 ipv4=10.0.0.111 ipv6= k8sPodName=openstack/glance-metadefs-load-tdg89 subsys=endpoint level=info msg="Successful endpoint creation" containerID=186a01b989 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3278 identity=62143 ipv4=10.0.0.111 ipv6= k8sPodName=openstack/glance-metadefs-load-tdg89 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=186a01b989 endpointID=3278 k8sNamespace=openstack k8sPodName=glance-metadefs-load-tdg89 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=c95ddf27-22f9-4da3-a843-2f5856996265 k8s:batch.kubernetes.io/job-name=glance-metadefs-load k8s:component=metadefs_load k8s:controller-uid=c95ddf27-22f9-4da3-a843-2f5856996265 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-metadefs-load k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=186a01b989 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3278 identity=62143 ipv4=10.0.0.111 ipv6= k8sPodName=openstack/glance-metadefs-load-tdg89 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.210 76d348dc-6e33-4ffa-a6d4-6333930d3894 default }" containerID=def138dc7121294a0a41541d669913296eb08585ba798476070432ca99ec68be datapathConfiguration="&{false false false false false }" interface=lxc6bc71c75707c k8sPodName=openstack/glance-storage-init-fs4vg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=def138dc71 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=903 ipv4=10.0.0.210 ipv6= k8sPodName=openstack/glance-storage-init-fs4vg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=def138dc71 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=903 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=86f11c10-2da7-42d0-93e9-b428e095c738,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=86f11c10-2da7-42d0-93e9-b428e095c738,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.210 ipv6= k8sPodName=openstack/glance-storage-init-fs4vg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=86f11c10-2da7-42d0-93e9-b428e095c738;k8s:batch.kubernetes.io/job-name=glance-storage-init;k8s:component=storage-init;k8s:controller-uid=86f11c10-2da7-42d0-93e9-b428e095c738;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-storage-init;k8s:release_group=glance;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=def138dc71 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=903 identity=1010 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=86f11c10-2da7-42d0-93e9-b428e095c738,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=86f11c10-2da7-42d0-93e9-b428e095c738,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.210 ipv6= k8sPodName=openstack/glance-storage-init-fs4vg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=def138dc71 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=903 identity=1010 ipv4=10.0.0.210 ipv6= k8sPodName=openstack/glance-storage-init-fs4vg subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=def138dc71 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=903 identity=1010 ipv4=10.0.0.210 ipv6= k8sPodName=openstack/glance-storage-init-fs4vg subsys=endpoint level=info msg="Successful endpoint creation" containerID=def138dc71 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=903 identity=1010 ipv4=10.0.0.210 ipv6= k8sPodName=openstack/glance-storage-init-fs4vg subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=def138dc71 endpointID=903 k8sNamespace=openstack k8sPodName=glance-storage-init-fs4vg subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=86f11c10-2da7-42d0-93e9-b428e095c738 k8s:batch.kubernetes.io/job-name=glance-storage-init k8s:component=storage-init k8s:controller-uid=86f11c10-2da7-42d0-93e9-b428e095c738 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-storage-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=def138dc71 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=903 identity=1010 ipv4=10.0.0.210 ipv6= k8sPodName=openstack/glance-storage-init-fs4vg subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.125 b9544a82-4abb-4911-ba0d-f89a24585e1b default }" containerID=de3a24a4feebed660b44de16197ad09692a0248d784799847d5fcea30b833500 datapathConfiguration="&{false false false false false }" interface=lxc7aeb3b7ed6f4 k8sPodName=openstack/glance-api-5b495cc698-xljlj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=de3a24a4fe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2996 ipv4=10.0.0.125 ipv6= k8sPodName=openstack/glance-api-5b495cc698-xljlj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=de3a24a4fe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2996 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.125 ipv6= k8sPodName=openstack/glance-api-5b495cc698-xljlj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=de3a24a4fe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2996 identity=19434 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.125 ipv6= k8sPodName=openstack/glance-api-5b495cc698-xljlj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=de3a24a4fe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2996 identity=19434 ipv4=10.0.0.125 ipv6= k8sPodName=openstack/glance-api-5b495cc698-xljlj subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=de3a24a4fe datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2996 identity=19434 ipv4=10.0.0.125 ipv6= k8sPodName=openstack/glance-api-5b495cc698-xljlj subsys=endpoint level=info msg="Successful endpoint creation" containerID=de3a24a4fe datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2996 identity=19434 ipv4=10.0.0.125 ipv6= k8sPodName=openstack/glance-api-5b495cc698-xljlj subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.151 d3732b97-2867-44ff-a619-d91591bb686f default }" containerID=ad6d1e849dd91dc42e306f5cc5e47c11d04d47f53467b75e930aa3c082ecc0d5 datapathConfiguration="&{false false false false false }" interface=lxc5ce6bf24470b k8sPodName=openstack/staffeln-conductor-5d78556495-d6q49 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ad6d1e849d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1278 ipv4=10.0.0.151 ipv6= k8sPodName=openstack/staffeln-conductor-5d78556495-d6q49 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ad6d1e849d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1278 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.151 ipv6= k8sPodName=openstack/staffeln-conductor-5d78556495-d6q49 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=ad6d1e849d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1278 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.151 ipv6= k8sPodName=openstack/staffeln-conductor-5d78556495-d6q49 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=conductor;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ad6d1e849d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1278 identity=23348 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.151 ipv6= k8sPodName=openstack/staffeln-conductor-5d78556495-d6q49 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ad6d1e849d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1278 identity=23348 ipv4=10.0.0.151 ipv6= k8sPodName=openstack/staffeln-conductor-5d78556495-d6q49 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.69 8764d96f-1a8d-4bd4-885a-9ff072e26d3f default }" containerID=671c961a85c821137c303cdcdbd5be79ae24e3f671f70319cfba5f70929faadf datapathConfiguration="&{false false false false false }" interface=lxc9df28814a452 k8sPodName=openstack/staffeln-api-87d58dc48-hwrvt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=671c961a85 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=835 ipv4=10.0.0.69 ipv6= k8sPodName=openstack/staffeln-api-87d58dc48-hwrvt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=671c961a85 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=835 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.69 ipv6= k8sPodName=openstack/staffeln-api-87d58dc48-hwrvt subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=671c961a85 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=835 identity=30451 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.69 ipv6= k8sPodName=openstack/staffeln-api-87d58dc48-hwrvt oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=671c961a85 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=835 identity=30451 ipv4=10.0.0.69 ipv6= k8sPodName=openstack/staffeln-api-87d58dc48-hwrvt subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.70 dfa9bdb1-3d14-4414-aaff-294a93eb31c0 default }" containerID=6bb0a17865fe42614f614e44286ebfce28c712c625af94fd455bca6a60f5fd5d datapathConfiguration="&{false false false false false }" interface=lxc2f30de6578fb k8sPodName=openstack/staffeln-db-init-m2gjh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6bb0a17865 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=643 ipv4=10.0.0.70 ipv6= k8sPodName=openstack/staffeln-db-init-m2gjh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6bb0a17865 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=643 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=4523a390-e5a1-4936-9428-d9f43dde5927,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=4523a390-e5a1-4936-9428-d9f43dde5927,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.70 ipv6= k8sPodName=openstack/staffeln-db-init-m2gjh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=4523a390-e5a1-4936-9428-d9f43dde5927;k8s:batch.kubernetes.io/job-name=staffeln-db-init;k8s:component=db-init;k8s:controller-uid=4523a390-e5a1-4936-9428-d9f43dde5927;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-init;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6bb0a17865 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=643 identity=64415 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=4523a390-e5a1-4936-9428-d9f43dde5927,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=4523a390-e5a1-4936-9428-d9f43dde5927,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.70 ipv6= k8sPodName=openstack/staffeln-db-init-m2gjh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6bb0a17865 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=643 identity=64415 ipv4=10.0.0.70 ipv6= k8sPodName=openstack/staffeln-db-init-m2gjh subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ad6d1e849d datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1278 identity=23348 ipv4=10.0.0.151 ipv6= k8sPodName=openstack/staffeln-conductor-5d78556495-d6q49 subsys=endpoint level=info msg="Successful endpoint creation" containerID=ad6d1e849d datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1278 identity=23348 ipv4=10.0.0.151 ipv6= k8sPodName=openstack/staffeln-conductor-5d78556495-d6q49 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=671c961a85 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=835 identity=30451 ipv4=10.0.0.69 ipv6= k8sPodName=openstack/staffeln-api-87d58dc48-hwrvt subsys=endpoint level=info msg="Successful endpoint creation" containerID=671c961a85 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=835 identity=30451 ipv4=10.0.0.69 ipv6= k8sPodName=openstack/staffeln-api-87d58dc48-hwrvt subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=6bb0a17865 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=643 identity=64415 ipv4=10.0.0.70 ipv6= k8sPodName=openstack/staffeln-db-init-m2gjh subsys=endpoint level=info msg="Successful endpoint creation" containerID=6bb0a17865 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=643 identity=64415 ipv4=10.0.0.70 ipv6= k8sPodName=openstack/staffeln-db-init-m2gjh subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=6bb0a17865 endpointID=643 k8sNamespace=openstack k8sPodName=staffeln-db-init-m2gjh subsys=daemon level=info msg="Releasing key" key="[k8s:application=staffeln k8s:batch.kubernetes.io/controller-uid=4523a390-e5a1-4936-9428-d9f43dde5927 k8s:batch.kubernetes.io/job-name=staffeln-db-init k8s:component=db-init k8s:controller-uid=4523a390-e5a1-4936-9428-d9f43dde5927 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=staffeln-db-init k8s:release_group=staffeln]" subsys=allocator level=info msg="Removed endpoint" containerID=6bb0a17865 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=643 identity=64415 ipv4=10.0.0.70 ipv6= k8sPodName=openstack/staffeln-db-init-m2gjh subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.53 2268af68-d2d1-40b4-9d11-cdf1b0492c08 default }" containerID=aaed27dd586ed84b0395214f8a3990061a039093ccf8d8a82b35804e9ac01062 datapathConfiguration="&{false false false false false }" interface=lxc3deb85b1216d k8sPodName=openstack/staffeln-db-sync-zmg82 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=aaed27dd58 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1003 ipv4=10.0.0.53 ipv6= k8sPodName=openstack/staffeln-db-sync-zmg82 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=aaed27dd58 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1003 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=ac371c19-0660-4be6-bac5-b7cecb86c276,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=ac371c19-0660-4be6-bac5-b7cecb86c276,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.53 ipv6= k8sPodName=openstack/staffeln-db-sync-zmg82 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=ac371c19-0660-4be6-bac5-b7cecb86c276;k8s:batch.kubernetes.io/job-name=staffeln-db-sync;k8s:component=db-sync;k8s:controller-uid=ac371c19-0660-4be6-bac5-b7cecb86c276;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-sync;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=aaed27dd58 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1003 identity=6225 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=ac371c19-0660-4be6-bac5-b7cecb86c276,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=ac371c19-0660-4be6-bac5-b7cecb86c276,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.53 ipv6= k8sPodName=openstack/staffeln-db-sync-zmg82 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=aaed27dd58 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1003 identity=6225 ipv4=10.0.0.53 ipv6= k8sPodName=openstack/staffeln-db-sync-zmg82 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=aaed27dd58 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1003 identity=6225 ipv4=10.0.0.53 ipv6= k8sPodName=openstack/staffeln-db-sync-zmg82 subsys=endpoint level=info msg="Successful endpoint creation" containerID=aaed27dd58 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1003 identity=6225 ipv4=10.0.0.53 ipv6= k8sPodName=openstack/staffeln-db-sync-zmg82 subsys=daemon