level=info msg="Memory available for map entries (0.003% of 67421642752B): 168554106B" subsys=config level=info msg="option bpf-ct-global-tcp-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-ct-global-any-max set by dynamic sizing to 295708" subsys=config level=info msg="option bpf-nat-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-neigh-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-sock-rev-map-max set by dynamic sizing to 295708" subsys=config level=info msg=" --agent-health-port='9879'" subsys=daemon level=info msg=" --agent-labels=''" subsys=daemon level=info msg=" --agent-liveness-update-interval='1s'" subsys=daemon level=info msg=" --agent-not-ready-taint-key='node.cilium.io/agent-not-ready'" subsys=daemon level=info msg=" --allocator-list-timeout='3m0s'" subsys=daemon level=info msg=" --allow-icmp-frag-needed='true'" subsys=daemon level=info msg=" --allow-localhost='auto'" subsys=daemon level=info msg=" --annotate-k8s-node='false'" subsys=daemon level=info msg=" --api-rate-limit=''" subsys=daemon level=info msg=" --arping-refresh-period='30s'" subsys=daemon level=info msg=" --auto-create-cilium-node-resource='true'" subsys=daemon level=info msg=" --auto-direct-node-routes='false'" subsys=daemon level=info msg=" --bgp-announce-lb-ip='false'" subsys=daemon level=info msg=" --bgp-announce-pod-cidr='false'" subsys=daemon level=info msg=" --bgp-config-path='/var/lib/cilium/bgp/config.yaml'" subsys=daemon level=info msg=" --bpf-auth-map-max='524288'" subsys=daemon level=info msg=" --bpf-ct-global-any-max='262144'" subsys=daemon level=info msg=" --bpf-ct-global-tcp-max='524288'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-fin='10s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-syn='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp-grace='1m0s'" subsys=daemon level=info msg=" --bpf-filter-priority='1'" subsys=daemon level=info msg=" --bpf-fragments-map-max='8192'" subsys=daemon level=info msg=" --bpf-lb-acceleration='disabled'" subsys=daemon level=info msg=" --bpf-lb-affinity-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-algorithm='random'" subsys=daemon level=info msg=" --bpf-lb-dev-ip-addr-inherit=''" subsys=daemon level=info msg=" --bpf-lb-dsr-dispatch='opt'" subsys=daemon level=info msg=" --bpf-lb-dsr-l4-xlate='frontend'" subsys=daemon level=info msg=" --bpf-lb-external-clusterip='false'" subsys=daemon level=info msg=" --bpf-lb-maglev-hash-seed='JLfvgnHc2kaSUFaI'" subsys=daemon level=info msg=" --bpf-lb-maglev-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-maglev-table-size='16381'" subsys=daemon level=info msg=" --bpf-lb-map-max='65536'" subsys=daemon level=info msg=" --bpf-lb-mode='snat'" subsys=daemon level=info msg=" --bpf-lb-rev-nat-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-rss-ipv4-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-rss-ipv6-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-service-backend-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-service-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-sock='false'" subsys=daemon level=info msg=" --bpf-lb-sock-hostns-only='false'" subsys=daemon level=info msg=" --bpf-lb-source-range-map-max='0'" subsys=daemon level=info msg=" --bpf-map-dynamic-size-ratio='0.0025'" subsys=daemon level=info msg=" --bpf-map-event-buffers=''" subsys=daemon level=info msg=" --bpf-nat-global-max='524288'" subsys=daemon level=info msg=" --bpf-neigh-global-max='524288'" subsys=daemon level=info msg=" --bpf-policy-map-full-reconciliation-interval='15m0s'" subsys=daemon level=info msg=" --bpf-policy-map-max='16384'" subsys=daemon level=info msg=" --bpf-root='/sys/fs/bpf'" subsys=daemon level=info msg=" --bpf-sock-rev-map-max='262144'" subsys=daemon level=info msg=" --bypass-ip-availability-upon-restore='false'" subsys=daemon level=info msg=" --certificates-directory='/var/run/cilium/certs'" subsys=daemon level=info msg=" --cflags=''" subsys=daemon level=info msg=" --cgroup-root='/run/cilium/cgroupv2'" subsys=daemon level=info msg=" --cilium-endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --cluster-health-port='4240'" subsys=daemon level=info msg=" --cluster-id='0'" subsys=daemon level=info msg=" --cluster-name='default'" subsys=daemon level=info msg=" --cluster-pool-ipv4-cidr='10.0.0.0/8'" subsys=daemon level=info msg=" --cluster-pool-ipv4-mask-size='24'" subsys=daemon level=info msg=" --clustermesh-config='/var/lib/cilium/clustermesh/'" subsys=daemon level=info msg=" --clustermesh-ip-identities-sync-timeout='1m0s'" subsys=daemon level=info msg=" --cmdref=''" subsys=daemon level=info msg=" --cni-chaining-mode='none'" subsys=daemon level=info msg=" --cni-chaining-target=''" subsys=daemon level=info msg=" --cni-exclusive='true'" subsys=daemon level=info msg=" --cni-external-routing='false'" subsys=daemon level=info msg=" --cni-log-file='/var/run/cilium/cilium-cni.log'" subsys=daemon level=info msg=" --cnp-node-status-gc-interval='0s'" subsys=daemon level=info msg=" --config=''" subsys=daemon level=info msg=" --config-dir='/tmp/cilium/config-map'" subsys=daemon level=info msg=" --config-sources='config-map:kube-system/cilium-config'" subsys=daemon level=info msg=" --conntrack-gc-interval='0s'" subsys=daemon level=info msg=" --conntrack-gc-max-interval='0s'" subsys=daemon level=info msg=" --crd-wait-timeout='5m0s'" subsys=daemon level=info msg=" --custom-cni-conf='false'" subsys=daemon level=info msg=" --datapath-mode='veth'" subsys=daemon level=info msg=" --debug='false'" subsys=daemon level=info msg=" --debug-verbose=''" subsys=daemon level=info msg=" --derive-masquerade-ip-addr-from-device=''" subsys=daemon level=info msg=" --devices=''" subsys=daemon level=info msg=" --direct-routing-device=''" subsys=daemon level=info msg=" --disable-cnp-status-updates='true'" subsys=daemon level=info msg=" --disable-endpoint-crd='false'" subsys=daemon level=info msg=" --disable-envoy-version-check='false'" subsys=daemon level=info msg=" --disable-iptables-feeder-rules=''" subsys=daemon level=info msg=" --dns-max-ips-per-restored-rule='1000'" subsys=daemon level=info msg=" --dns-policy-unload-on-shutdown='false'" subsys=daemon level=info msg=" --dnsproxy-concurrency-limit='0'" subsys=daemon level=info msg=" --dnsproxy-concurrency-processing-grace-period='0s'" subsys=daemon level=info msg=" --dnsproxy-enable-transparent-mode='true'" subsys=daemon level=info msg=" --dnsproxy-lock-count='128'" subsys=daemon level=info msg=" --dnsproxy-lock-timeout='500ms'" subsys=daemon level=info msg=" --egress-gateway-policy-map-max='16384'" subsys=daemon level=info msg=" --egress-gateway-reconciliation-trigger-interval='1s'" subsys=daemon level=info msg=" --egress-masquerade-interfaces=''" subsys=daemon level=info msg=" --egress-multi-home-ip-rule-compat='false'" subsys=daemon level=info msg=" --enable-auto-protect-node-port-range='true'" subsys=daemon level=info msg=" --enable-bandwidth-manager='false'" subsys=daemon level=info msg=" --enable-bbr='false'" subsys=daemon level=info msg=" --enable-bgp-control-plane='false'" subsys=daemon level=info msg=" --enable-bpf-clock-probe='false'" subsys=daemon level=info msg=" --enable-bpf-masquerade='false'" subsys=daemon level=info msg=" --enable-bpf-tproxy='false'" subsys=daemon level=info msg=" --enable-cilium-api-server-access='*'" subsys=daemon level=info msg=" --enable-cilium-endpoint-slice='false'" subsys=daemon level=info msg=" --enable-cilium-health-api-server-access='*'" subsys=daemon level=info msg=" --enable-custom-calls='false'" subsys=daemon level=info msg=" --enable-endpoint-health-checking='true'" subsys=daemon level=info msg=" --enable-endpoint-routes='false'" subsys=daemon level=info msg=" --enable-envoy-config='false'" subsys=daemon level=info msg=" --enable-external-ips='false'" subsys=daemon level=info msg=" --enable-health-check-nodeport='true'" subsys=daemon level=info msg=" --enable-health-checking='true'" subsys=daemon level=info msg=" --enable-high-scale-ipcache='false'" subsys=daemon level=info msg=" --enable-host-firewall='false'" subsys=daemon level=info msg=" --enable-host-legacy-routing='false'" subsys=daemon level=info msg=" --enable-host-port='false'" subsys=daemon level=info msg=" --enable-hubble='false'" subsys=daemon level=info msg=" --enable-hubble-recorder-api='true'" subsys=daemon level=info msg=" --enable-icmp-rules='true'" subsys=daemon level=info msg=" --enable-identity-mark='true'" subsys=daemon level=info msg=" --enable-ip-masq-agent='false'" subsys=daemon level=info msg=" --enable-ipsec='false'" subsys=daemon level=info msg=" --enable-ipsec-key-watcher='true'" subsys=daemon level=info msg=" --enable-ipv4='true'" subsys=daemon level=info msg=" --enable-ipv4-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv4-egress-gateway='false'" subsys=daemon level=info msg=" --enable-ipv4-fragment-tracking='true'" subsys=daemon level=info msg=" --enable-ipv4-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6='false'" subsys=daemon level=info msg=" --enable-ipv6-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv6-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6-ndp='false'" subsys=daemon level=info msg=" --enable-k8s='true'" subsys=daemon level=info msg=" --enable-k8s-api-discovery='false'" subsys=daemon level=info msg=" --enable-k8s-endpoint-slice='true'" subsys=daemon level=info msg=" --enable-k8s-event-handover='false'" subsys=daemon level=info msg=" --enable-k8s-networkpolicy='true'" subsys=daemon level=info msg=" --enable-k8s-terminating-endpoint='true'" subsys=daemon level=info msg=" --enable-l2-announcements='false'" subsys=daemon level=info msg=" --enable-l2-neigh-discovery='true'" subsys=daemon level=info msg=" --enable-l2-pod-announcements='false'" subsys=daemon level=info msg=" --enable-l7-proxy='true'" subsys=daemon level=info msg=" --enable-local-node-route='true'" subsys=daemon level=info msg=" --enable-local-redirect-policy='false'" subsys=daemon level=info msg=" --enable-mke='false'" subsys=daemon level=info msg=" --enable-monitor='true'" subsys=daemon level=info msg=" --enable-nat46x64-gateway='false'" subsys=daemon level=info msg=" --enable-node-port='false'" subsys=daemon level=info msg=" --enable-pmtu-discovery='false'" subsys=daemon level=info msg=" --enable-policy='default'" subsys=daemon level=info msg=" --enable-recorder='false'" subsys=daemon level=info msg=" --enable-remote-node-identity='true'" subsys=daemon level=info msg=" --enable-runtime-device-detection='false'" subsys=daemon level=info msg=" --enable-sctp='false'" subsys=daemon level=info msg=" --enable-service-topology='false'" subsys=daemon level=info msg=" --enable-session-affinity='false'" subsys=daemon level=info msg=" --enable-srv6='false'" subsys=daemon level=info msg=" --enable-stale-cilium-endpoint-cleanup='true'" subsys=daemon level=info msg=" --enable-svc-source-range-check='true'" subsys=daemon level=info msg=" --enable-tracing='false'" subsys=daemon level=info msg=" --enable-unreachable-routes='false'" subsys=daemon level=info msg=" --enable-vtep='false'" subsys=daemon level=info msg=" --enable-well-known-identities='false'" subsys=daemon level=info msg=" --enable-wireguard='false'" subsys=daemon level=info msg=" --enable-wireguard-userspace-fallback='false'" subsys=daemon level=info msg=" --enable-xdp-prefilter='false'" subsys=daemon level=info msg=" --enable-xt-socket-fallback='true'" subsys=daemon level=info msg=" --encrypt-interface=''" subsys=daemon level=info msg=" --encrypt-node='false'" subsys=daemon level=info msg=" --endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --endpoint-queue-size='25'" subsys=daemon level=info msg=" --endpoint-status=''" subsys=daemon level=info msg=" --envoy-config-timeout='2m0s'" subsys=daemon level=info msg=" --envoy-log=''" subsys=daemon level=info msg=" --exclude-local-address=''" subsys=daemon level=info msg=" --external-envoy-proxy='false'" subsys=daemon level=info msg=" --fixed-identity-mapping=''" subsys=daemon level=info msg=" --fqdn-regex-compile-lru-size='1024'" subsys=daemon level=info msg=" --gops-port='9890'" subsys=daemon level=info msg=" --http-403-msg=''" subsys=daemon level=info msg=" --http-idle-timeout='0'" subsys=daemon level=info msg=" --http-max-grpc-timeout='0'" subsys=daemon level=info msg=" --http-normalize-path='true'" subsys=daemon level=info msg=" --http-request-timeout='3600'" subsys=daemon level=info msg=" --http-retry-count='3'" subsys=daemon level=info msg=" --http-retry-timeout='0'" subsys=daemon level=info msg=" --hubble-disable-tls='false'" subsys=daemon level=info msg=" --hubble-event-buffer-capacity='4095'" subsys=daemon level=info msg=" --hubble-event-queue-size='0'" subsys=daemon level=info msg=" --hubble-export-file-compress='false'" subsys=daemon level=info msg=" --hubble-export-file-max-backups='5'" subsys=daemon level=info msg=" --hubble-export-file-max-size-mb='10'" subsys=daemon level=info msg=" --hubble-export-file-path=''" subsys=daemon level=info msg=" --hubble-listen-address=''" subsys=daemon level=info msg=" --hubble-metrics=''" subsys=daemon level=info msg=" --hubble-metrics-server=''" subsys=daemon level=info msg=" --hubble-monitor-events=''" subsys=daemon level=info msg=" --hubble-prefer-ipv6='false'" subsys=daemon level=info msg=" --hubble-recorder-sink-queue-size='1024'" subsys=daemon level=info msg=" --hubble-recorder-storage-path='/var/run/cilium/pcaps'" subsys=daemon level=info msg=" --hubble-skip-unknown-cgroup-ids='true'" subsys=daemon level=info msg=" --hubble-socket-path='/var/run/cilium/hubble.sock'" subsys=daemon level=info msg=" --hubble-tls-cert-file=''" subsys=daemon level=info msg=" --hubble-tls-client-ca-files=''" subsys=daemon level=info msg=" --hubble-tls-key-file=''" subsys=daemon level=info msg=" --identity-allocation-mode='crd'" subsys=daemon level=info msg=" --identity-change-grace-period='5s'" subsys=daemon level=info msg=" --identity-gc-interval='15m0s'" subsys=daemon level=info msg=" --identity-heartbeat-timeout='30m0s'" subsys=daemon level=info msg=" --identity-restore-grace-period='10m0s'" subsys=daemon level=info msg=" --install-egress-gateway-routes='false'" subsys=daemon level=info msg=" --install-iptables-rules='true'" subsys=daemon level=info msg=" --install-no-conntrack-iptables-rules='false'" subsys=daemon level=info msg=" --ip-allocation-timeout='2m0s'" subsys=daemon level=info msg=" --ip-masq-agent-config-path='/etc/config/ip-masq-agent'" subsys=daemon level=info msg=" --ipam='cluster-pool'" subsys=daemon level=info msg=" --ipam-cilium-node-update-rate='15s'" subsys=daemon level=info msg=" --ipam-multi-pool-pre-allocation='default=8'" subsys=daemon level=info msg=" --ipsec-key-file=''" subsys=daemon level=info msg=" --ipsec-key-rotation-duration='5m0s'" subsys=daemon level=info msg=" --iptables-lock-timeout='5s'" subsys=daemon level=info msg=" --iptables-random-fully='false'" subsys=daemon level=info msg=" --ipv4-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv4-node='auto'" subsys=daemon level=info msg=" --ipv4-pod-subnets=''" subsys=daemon level=info msg=" --ipv4-range='auto'" subsys=daemon level=info msg=" --ipv4-service-loopback-address='169.254.42.1'" subsys=daemon level=info msg=" --ipv4-service-range='auto'" subsys=daemon level=info msg=" --ipv6-cluster-alloc-cidr='f00d::/64'" subsys=daemon level=info msg=" --ipv6-mcast-device=''" subsys=daemon level=info msg=" --ipv6-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv6-node='auto'" subsys=daemon level=info msg=" --ipv6-pod-subnets=''" subsys=daemon level=info msg=" --ipv6-range='auto'" subsys=daemon level=info msg=" --ipv6-service-range='auto'" subsys=daemon level=info msg=" --join-cluster='false'" subsys=daemon level=info msg=" --k8s-api-server=''" subsys=daemon level=info msg=" --k8s-client-burst='10'" subsys=daemon level=info msg=" --k8s-client-qps='5'" subsys=daemon level=info msg=" --k8s-heartbeat-timeout='30s'" subsys=daemon level=info msg=" --k8s-kubeconfig-path=''" subsys=daemon level=info msg=" --k8s-namespace='kube-system'" subsys=daemon level=info msg=" --k8s-require-ipv4-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-require-ipv6-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-service-cache-size='128'" subsys=daemon level=info msg=" --k8s-service-proxy-name=''" subsys=daemon level=info msg=" --k8s-sync-timeout='3m0s'" subsys=daemon level=info msg=" --k8s-watcher-endpoint-selector='metadata.name!=kube-scheduler,metadata.name!=kube-controller-manager,metadata.name!=etcd-operator,metadata.name!=gcp-controller-manager'" subsys=daemon level=info msg=" --keep-config='false'" subsys=daemon level=info msg=" --kube-proxy-replacement='disabled'" subsys=daemon level=info msg=" --kube-proxy-replacement-healthz-bind-address=''" subsys=daemon level=info msg=" --kvstore=''" subsys=daemon level=info msg=" --kvstore-connectivity-timeout='2m0s'" subsys=daemon level=info msg=" --kvstore-lease-ttl='15m0s'" subsys=daemon level=info msg=" --kvstore-max-consecutive-quorum-errors='2'" subsys=daemon level=info msg=" --kvstore-opt=''" subsys=daemon level=info msg=" --kvstore-periodic-sync='5m0s'" subsys=daemon level=info msg=" --l2-announcements-lease-duration='15s'" subsys=daemon level=info msg=" --l2-announcements-renew-deadline='5s'" subsys=daemon level=info msg=" --l2-announcements-retry-period='2s'" subsys=daemon level=info msg=" --l2-pod-announcements-interface=''" subsys=daemon level=info msg=" --label-prefix-file=''" subsys=daemon level=info msg=" --labels=''" subsys=daemon level=info msg=" --lib-dir='/var/lib/cilium'" subsys=daemon level=info msg=" --local-max-addr-scope='252'" subsys=daemon level=info msg=" --local-router-ipv4=''" subsys=daemon level=info msg=" --local-router-ipv6=''" subsys=daemon level=info msg=" --log-driver=''" subsys=daemon level=info msg=" --log-opt=''" subsys=daemon level=info msg=" --log-system-load='false'" subsys=daemon level=info msg=" --max-controller-interval='0'" subsys=daemon level=info msg=" --mesh-auth-enabled='true'" subsys=daemon level=info msg=" --mesh-auth-gc-interval='5m0s'" subsys=daemon level=info msg=" --mesh-auth-mutual-listener-port='0'" subsys=daemon level=info msg=" --mesh-auth-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-rotated-identities-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-signal-backoff-duration='1s'" subsys=daemon level=info msg=" --mesh-auth-spiffe-trust-domain='spiffe.cilium'" subsys=daemon level=info msg=" --mesh-auth-spire-admin-socket=''" subsys=daemon level=info msg=" --metrics=''" subsys=daemon level=info msg=" --mke-cgroup-mount=''" subsys=daemon level=info msg=" --monitor-aggregation='medium'" subsys=daemon level=info msg=" --monitor-aggregation-flags='all'" subsys=daemon level=info msg=" --monitor-aggregation-interval='5s'" subsys=daemon level=info msg=" --monitor-queue-size='0'" subsys=daemon level=info msg=" --mtu='0'" subsys=daemon level=info msg=" --node-encryption-opt-out-labels='node-role.kubernetes.io/control-plane'" subsys=daemon level=info msg=" --node-port-acceleration='disabled'" subsys=daemon level=info msg=" --node-port-algorithm='random'" subsys=daemon level=info msg=" --node-port-bind-protection='true'" subsys=daemon level=info msg=" --node-port-mode='snat'" subsys=daemon level=info msg=" --node-port-range='30000,32767'" subsys=daemon level=info msg=" --nodes-gc-interval='5m0s'" subsys=daemon level=info msg=" --operator-api-serve-addr='127.0.0.1:9234'" subsys=daemon level=info msg=" --policy-audit-mode='false'" subsys=daemon level=info msg=" --policy-queue-size='100'" subsys=daemon level=info msg=" --policy-trigger-interval='1s'" subsys=daemon level=info msg=" --pprof='false'" subsys=daemon level=info msg=" --pprof-address='localhost'" subsys=daemon level=info msg=" --pprof-port='6060'" subsys=daemon level=info msg=" --preallocate-bpf-maps='false'" subsys=daemon level=info msg=" --prepend-iptables-chains='true'" subsys=daemon level=info msg=" --procfs='/host/proc'" subsys=daemon level=info msg=" --prometheus-serve-addr=':9962'" subsys=daemon level=info msg=" --proxy-connect-timeout='2'" subsys=daemon level=info msg=" --proxy-gid='1337'" subsys=daemon level=info msg=" --proxy-idle-timeout-seconds='60'" subsys=daemon level=info msg=" --proxy-max-connection-duration-seconds='0'" subsys=daemon level=info msg=" --proxy-max-requests-per-connection='0'" subsys=daemon level=info msg=" --proxy-prometheus-port='9964'" subsys=daemon level=info msg=" --read-cni-conf=''" subsys=daemon level=info msg=" --remove-cilium-node-taints='true'" subsys=daemon level=info msg=" --restore='true'" subsys=daemon level=info msg=" --route-metric='0'" subsys=daemon level=info msg=" --routing-mode='tunnel'" subsys=daemon level=info msg=" --set-cilium-is-up-condition='true'" subsys=daemon level=info msg=" --set-cilium-node-taints='true'" subsys=daemon level=info msg=" --sidecar-istio-proxy-image='cilium/istio_proxy'" subsys=daemon level=info msg=" --single-cluster-route='false'" subsys=daemon level=info msg=" --skip-cnp-status-startup-clean='false'" subsys=daemon level=info msg=" --socket-path='/var/run/cilium/cilium.sock'" subsys=daemon level=info msg=" --srv6-encap-mode='reduced'" subsys=daemon level=info msg=" --state-dir='/var/run/cilium'" subsys=daemon level=info msg=" --synchronize-k8s-nodes='true'" subsys=daemon level=info msg=" --tofqdns-dns-reject-response-code='refused'" subsys=daemon level=info msg=" --tofqdns-enable-dns-compression='true'" subsys=daemon level=info msg=" --tofqdns-endpoint-max-ip-per-hostname='50'" subsys=daemon level=info msg=" --tofqdns-idle-connection-grace-period='0s'" subsys=daemon level=info msg=" --tofqdns-max-deferred-connection-deletes='10000'" subsys=daemon level=info msg=" --tofqdns-min-ttl='0'" subsys=daemon level=info msg=" --tofqdns-pre-cache=''" subsys=daemon level=info msg=" --tofqdns-proxy-port='0'" subsys=daemon level=info msg=" --tofqdns-proxy-response-max-delay='100ms'" subsys=daemon level=info msg=" --trace-payloadlen='128'" subsys=daemon level=info msg=" --trace-sock='true'" subsys=daemon level=info msg=" --tunnel=''" subsys=daemon level=info msg=" --tunnel-port='6082'" subsys=daemon level=info msg=" --tunnel-protocol='geneve'" subsys=daemon level=info msg=" --unmanaged-pod-watcher-interval='15'" subsys=daemon level=info msg=" --use-cilium-internal-ip-for-ipsec='false'" subsys=daemon level=info msg=" --version='false'" subsys=daemon level=info msg=" --vlan-bpf-bypass=''" subsys=daemon level=info msg=" --vtep-cidr=''" subsys=daemon level=info msg=" --vtep-endpoint=''" subsys=daemon level=info msg=" --vtep-mac=''" subsys=daemon level=info msg=" --vtep-mask=''" subsys=daemon level=info msg=" --wireguard-encapsulate='false'" subsys=daemon level=info msg=" --write-cni-conf-when-ready='/host/etc/cni/net.d/05-cilium.conflist'" subsys=daemon level=info msg=" _ _ _" subsys=daemon level=info msg=" ___|_| |_|_ _ _____" subsys=daemon level=info msg="| _| | | | | | |" subsys=daemon level=info msg="|___|_|_|_|___|_|_|_|" subsys=daemon level=info msg="Cilium 1.14.8 cf6e022e 2024-03-13T12:23:35-04:00 go version go1.21.8 linux/amd64" subsys=daemon level=info msg="clang (10.0.0) and kernel (5.15.0) versions: OK!" subsys=linux-datapath level=info msg="linking environment: OK!" subsys=linux-datapath level=info msg="Kernel config file not found: if the agent fails to start, check the system requirements at https://docs.cilium.io/en/stable/operations/system_requirements" subsys=probes level=info msg="Detected mounted BPF filesystem at /sys/fs/bpf" subsys=bpf level=info msg="Mounted cgroupv2 filesystem at /run/cilium/cgroupv2" subsys=cgroups level=info msg="Parsing base label prefixes from default label list" subsys=labels-filter level=info msg="Parsing additional label prefixes from user inputs: []" subsys=labels-filter level=info msg="Final label prefixes to be used for identity evaluation:" subsys=labels-filter level=info msg=" - reserved:.*" subsys=labels-filter level=info msg=" - :io\\.kubernetes\\.pod\\.namespace" subsys=labels-filter level=info msg=" - :io\\.cilium\\.k8s\\.namespace\\.labels" subsys=labels-filter level=info msg=" - :app\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:io\\.kubernetes" subsys=labels-filter level=info msg=" - !:kubernetes\\.io" subsys=labels-filter level=info msg=" - !:.*beta\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:k8s\\.io" subsys=labels-filter level=info msg=" - !:pod-template-generation" subsys=labels-filter level=info msg=" - !:pod-template-hash" subsys=labels-filter level=info msg=" - !:controller-revision-hash" subsys=labels-filter level=info msg=" - !:annotation.*" subsys=labels-filter level=info msg=" - !:etcd_node" subsys=labels-filter level=info msg=Invoked duration="904.721µs" function="pprof.glob..func1 (cell.go:50)" subsys=hive level=info msg=Invoked duration="57.751µs" function="gops.registerGopsHooks (cell.go:38)" subsys=hive level=info msg=Invoked duration=1.138316ms function="metrics.NewRegistry (registry.go:65)" subsys=hive level=info msg=Invoked duration="10.57µs" function="metrics.glob..func1 (cell.go:12)" subsys=hive level=info msg="Spire Delegate API Client is disabled as no socket path is configured" subsys=spire-delegate level=info msg="Mutual authentication handler is disabled as no port is configured" subsys=auth level=info msg=Invoked duration=111.131617ms function="cmd.glob..func4 (daemon_main.go:1607)" subsys=hive level=info msg=Invoked duration="14.69µs" function="gc.registerSignalHandler (cell.go:47)" subsys=hive level=info msg=Invoked duration="16.96µs" function="utime.initUtimeSync (cell.go:29)" subsys=hive level=info msg=Invoked duration="72.422µs" function="agentliveness.newAgentLivenessUpdater (agent_liveness.go:43)" subsys=hive level=info msg=Invoked duration="80.212µs" function="l2responder.NewL2ResponderReconciler (l2responder.go:63)" subsys=hive level=info msg=Invoked duration="107.463µs" function="garp.newGARPProcessor (processor.go:27)" subsys=hive level=info msg=Starting subsys=hive level=info msg="Started gops server" address="127.0.0.1:9890" subsys=gops level=info msg="Start hook executed" duration="446.97µs" function="gops.registerGopsHooks.func1 (cell.go:43)" subsys=hive level=info msg="Start hook executed" duration="2.2µs" function="metrics.NewRegistry.func1 (registry.go:86)" subsys=hive level=info msg="Establishing connection to apiserver" host="https://10.96.0.1:443" subsys=k8s-client level=info msg="Serving prometheus metrics on :9962" subsys=metrics level=info msg="Connected to apiserver" subsys=k8s-client level=info msg="Start hook executed" duration=10.468763ms function="client.(*compositeClientset).onStart" subsys=hive level=info msg="Start hook executed" duration=8.624061ms function="authmap.newAuthMap.func1 (cell.go:27)" subsys=hive level=info msg="Start hook executed" duration="105.443µs" function="configmap.newMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="53.031µs" function="signalmap.newMap.func1 (cell.go:44)" subsys=hive level=info msg="Start hook executed" duration="511.742µs" function="nodemap.newNodeMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="193.195µs" function="eventsmap.newEventsMap.func1 (cell.go:35)" subsys=hive level=info msg="Start hook executed" duration="148.354µs" function="*cni.cniConfigManager.Start" subsys=hive level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Wrote CNI configuration file to /host/etc/cni/net.d/05-cilium.conflist" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Start hook executed" duration=49.621865ms function="datapath.newDatapath.func1 (cells.go:113)" subsys=hive level=info msg="Restored 0 node IDs from the BPF map" subsys=linux-datapath level=info msg="Start hook executed" duration="206.955µs" function="datapath.newDatapath.func2 (cells.go:126)" subsys=hive level=info msg="Start hook executed" duration="21.061µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Node].Start" subsys=hive level=info msg="Start hook executed" duration="3.07µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNode].Start" subsys=hive level=info msg="Using autogenerated IPv4 allocation range" subsys=node v4Prefix=10.169.0.0/16 level=info msg="no local ciliumnode found, will not restore cilium internal ips from k8s" subsys=daemon level=info msg="Start hook executed" duration=104.796829ms function="node.NewLocalNodeStore.func1 (local_node_store.go:76)" subsys=hive level=info msg="Start hook executed" duration="16.31µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration=101.012581ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration="6.42µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Using discoveryv1.EndpointSlice" subsys=k8s level=info msg="Start hook executed" duration=100.729285ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Start hook executed" duration="4.4µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Pod].Start" subsys=hive level=info msg="Start hook executed" duration="7.54µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Namespace].Start" subsys=hive level=info msg="Start hook executed" duration="1.21µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="1.301µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumClusterwideNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="1.65µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumCIDRGroup].Start" subsys=hive level=info msg="Start hook executed" duration="24.55µs" function="endpointmanager.newDefaultEndpointManager.func1 (cell.go:203)" subsys=hive level=info msg="Start hook executed" duration="12.87µs" function="cmd.newPolicyTrifecta.func1 (policy.go:135)" subsys=hive level=info msg="Start hook executed" duration="115.452µs" function="*manager.manager.Start" subsys=hive level=info msg="Serving cilium node monitor v1.2 API at unix:///var/run/cilium/monitor1_2.sock" subsys=monitor-agent level=info msg="Start hook executed" duration="363.128µs" function="agent.newMonitorAgent.func1 (cell.go:61)" subsys=hive level=info msg="Start hook executed" duration="4.9µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumL2AnnouncementPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="11.301µs" function="*job.group.Start" subsys=hive level=info msg="Envoy: Starting xDS gRPC server listening on /var/run/cilium/envoy/sockets/xds.sock" subsys=envoy-manager level=info msg="Start hook executed" duration="321.797µs" function="proxy.newProxy.func1 (cell.go:55)" subsys=hive level=info msg="Start hook executed" duration=1.113236ms function="signal.provideSignalManager.func1 (cell.go:25)" subsys=hive level=info msg="Datapath signal listener running" subsys=signal level=info msg="Start hook executed" duration=1.453074ms function="auth.registerAuthManager.func1 (cell.go:109)" subsys=hive level=info msg="Start hook executed" duration="4.81µs" function="auth.registerGCJobs.func1 (cell.go:158)" subsys=hive level=info msg="Start hook executed" duration="18.601µs" function="*job.group.Start" subsys=hive level=warning msg="Deprecated value for --kube-proxy-replacement: disabled (use either \"true\", or \"false\")" subsys=daemon level=info msg="Auto-disabling \"enable-node-port\", \"enable-external-ips\", \"bpf-lb-sock\", \"enable-host-port\" features and falling back to \"enable-host-legacy-routing\"" subsys=daemon level=info msg="Inheriting MTU from external network interface" device=ens3 ipAddr=199.204.45.169 mtu=1500 subsys=mtu level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_ipcache, recreating and re-pinning map cilium_ipcache" file-path=/sys/fs/bpf/tc/globals/cilium_ipcache name=cilium_ipcache subsys=bpf level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_tunnel_map, recreating and re-pinning map cilium_tunnel_map" file-path=/sys/fs/bpf/tc/globals/cilium_tunnel_map name=cilium_tunnel_map subsys=bpf level=info msg="Restored services from maps" failedServices=0 restoredServices=0 subsys=service level=info msg="Restored backends from maps" failedBackends=0 restoredBackends=0 skippedBackends=0 subsys=service level=info msg="Reading old endpoints..." subsys=daemon level=info msg="No old endpoints found." subsys=daemon level=info msg="Waiting until all Cilium CRDs are available" subsys=k8s level=info msg="All Cilium CRDs have been found and are available" subsys=k8s level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=info msg="Successfully created CiliumNode resource" subsys=nodediscovery level=warning msg="Unable to create CiliumNode resource, will retry" error="ciliumnodes.cilium.io \"instance\" already exists" subsys=nodediscovery level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=warning msg="Waiting for k8s node information" error="required IPv4 PodCIDR not available" subsys=k8s level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=info msg="Received own node information from API server" ipAddr.ipv4=199.204.45.169 ipAddr.ipv6="" k8sNodeIP=199.204.45.169 labels="map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:]" nodeName=instance subsys=k8s v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="k8s mode: Allowing localhost to reach local endpoints" subsys=daemon level=info msg="Detected devices" devices="[]" subsys=linux-datapath level=info msg="Enabling k8s event listener" subsys=k8s-watcher level=info msg="Removing stale endpoint interfaces" subsys=daemon level=info msg="Skipping kvstore configuration" subsys=daemon level=info msg="Waiting until local node addressing before starting watchers depending on it" subsys=k8s-watcher level=info msg="Initializing node addressing" subsys=daemon level=info msg="Initializing cluster-pool IPAM" subsys=ipam v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="Restoring endpoints..." subsys=daemon level=info msg="Endpoints restored" failed=0 restored=0 subsys=daemon level=info msg="Addressing information:" subsys=daemon level=info msg=" Cluster-Name: default" subsys=daemon level=info msg=" Cluster-ID: 0" subsys=daemon level=info msg=" Local node-name: instance" subsys=daemon level=info msg=" Node-IPv6: " subsys=daemon level=info msg=" External-Node IPv4: 199.204.45.169" subsys=daemon level=info msg=" Internal-Node IPv4: 10.0.0.136" subsys=daemon level=info msg=" IPv4 allocation prefix: 10.0.0.0/24" subsys=daemon level=info msg=" Loopback IPv4: 169.254.42.1" subsys=daemon level=info msg=" Local IPv4 addresses:" subsys=daemon level=info msg=" - 199.204.45.169" subsys=daemon level=info msg=" - 172.17.0.100" subsys=daemon level=info msg=" - 10.96.240.200" subsys=daemon level=info msg="Node updated" clusterName=default nodeName=instance subsys=nodemanager level=info msg="Adding local node to cluster" node="{instance default [{InternalIP 199.204.45.169} {CiliumInternalIP 10.0.0.136}] 10.0.0.0/24 [] [] 10.0.0.132 0 local 0 map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:] map[] 1 }" subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Waiting until all pre-existing resources have been received" subsys=k8s-watcher level=info msg="Initializing identity allocator" subsys=identity-cache level=info msg="Allocating identities between range" cluster-id=0 max=65535 min=256 subsys=identity-cache level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.core.bpf_jit_enable sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.all.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.fib_multipath_use_neigh sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.unprivileged_bpf_disabled sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.timer_migration sysParamValue=0 level=info msg="Setting up BPF datapath" bpfClockSource=ktime bpfInsnSet="" subsys=datapath-loader level=info msg="Iptables rules installed" subsys=iptables level=info msg="Adding new proxy port rules for cilium-dns-egress:44253" id=cilium-dns-egress subsys=proxy level=info msg="Iptables proxy rules installed" subsys=iptables level=info msg="Start hook executed" duration=2.437813217s function="cmd.newDaemonPromise.func1 (daemon_main.go:1663)" subsys=hive level=info msg="Start hook executed" duration="16.21µs" function="utime.initUtimeSync.func1 (cell.go:33)" subsys=hive level=info msg="Starting IP identity watcher" subsys=ipcache level=info msg="Initializing daemon" subsys=daemon level=info msg="Validating configured node address ranges" subsys=daemon level=info msg="Starting connection tracking garbage collector" subsys=daemon level=info msg="Start hook executed" duration="7.26µs" function="*job.group.Start" subsys=hive level=info msg="Start hook executed" duration="42.201µs" function="l2respondermap.newMap.func1 (l2_responder_map4.go:44)" subsys=hive level=info msg="Start hook executed" duration="8.98µs" function="*job.group.Start" subsys=hive level=info msg="Initial scan of connection tracking completed" subsys=ct-gc level=info msg="Regenerating restored endpoints" numRestored=0 subsys=daemon level=info msg="Creating host endpoint" subsys=daemon level=info msg="Finished regenerating restored endpoints" regenerated=0 subsys=daemon total=0 level=info msg="Deleted orphan backends" orphanBackends=0 subsys=service level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=349 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=349 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=349 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Launching Cilium health daemon" subsys=daemon level=info msg="Launching Cilium health endpoint" subsys=daemon level=info msg="Started healthz status API server" address="127.0.0.1:9879" subsys=daemon level=info msg="Processing queued endpoint deletion requests from /var/run/cilium/deleteQueue" subsys=daemon level=info msg="processing 0 queued deletion requests" subsys=daemon level=info msg="Initializing Cilium API" subsys=daemon level=info msg="Daemon initialization completed" bootstrapTime=3.424336222s subsys=daemon level=info msg="Hubble server is disabled" subsys=hubble level=info msg="Serving cilium API at unix:///var/run/cilium/cilium.sock" subsys=daemon level=info msg="Compiled new BPF template" BPFCompilationTime=316.925697ms file-path=/var/run/cilium/state/templates/98eadd34de13acf6b90a1871c4dc2a09f42e432a252c07266f87126cb1205bbe/bpf_host.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=349 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=431 ipv4=10.0.0.132 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=431 identityLabels="reserved:health" ipv4=10.0.0.132 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=431 identity=4 identityLabels="reserved:health" ipv4=10.0.0.132 ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Serving cilium health API at unix:///var/run/cilium/health.sock" subsys=health-server level=info msg="Compiled new BPF template" BPFCompilationTime=1.124744711s file-path=/var/run/cilium/state/templates/a5e12fc5cec6369de8701ff06606a5fe5434059ed5b846358c21561e3721abe3/bpf_lxc.o subsys=datapath-loader level=info msg="Create endpoint request" addressing="&{10.0.0.196 b7495f16-b12e-4b5a-8a1f-08c1dbb7827b default }" containerID=921238c4ceb9966e0daf2b92f228d326e53045db440ead99e7e0e45cdb2ddd10 datapathConfiguration="&{false false false false false }" interface=lxca7811e01e83f k8sPodName=kube-system/coredns-7c96b6546b-phzcl labels="[]" subsys=daemon sync-build=true level=info msg="Create endpoint request" addressing="&{10.0.0.54 ee304a4a-2bc8-4684-b3cf-827b35c15378 default }" containerID=715676e80d7305e9a59c27c297d4b573816aaf0438d08608f89d6df4b492abbc datapathConfiguration="&{false false false false false }" interface=lxce5a924c96519 k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-fnqd8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=921238c4ce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2676 ipv4=10.0.0.196 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-phzcl subsys=endpoint level=info msg="New endpoint" containerID=715676e80d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=337 ipv4=10.0.0.54 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-fnqd8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=921238c4ce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2676 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.196 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-phzcl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:kube-system]" subsys=crd-allocator level=info msg="Resolving identity labels (blocking)" containerID=715676e80d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=337 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=4fc6aadd-0b27-4945-ba98-4aa1d5ccca7a,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=4fc6aadd-0b27-4945-ba98-4aa1d5ccca7a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.54 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-fnqd8 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=715676e80d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=337 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.54 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-fnqd8 line=611 subsys=endpoint level=info msg="Invalid state transition skipped" containerID=921238c4ce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2676 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.196 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-phzcl line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=coredns;k8s:io.kubernetes.pod.namespace=kube-system;k8s:k8s-app=kube-dns;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=921238c4ce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2676 identity=3507 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.196 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-phzcl oldIdentity="no identity" subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="Waiting for endpoint to be generated" containerID=921238c4ce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2676 identity=3507 ipv4=10.0.0.196 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-phzcl subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=certgen;k8s:batch.kubernetes.io/controller-uid=4fc6aadd-0b27-4945-ba98-4aa1d5ccca7a;k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen;k8s:controller-uid=4fc6aadd-0b27-4945-ba98-4aa1d5ccca7a;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;k8s:job-name=envoy-gateway-gateway-helm-certgen;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=715676e80d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=337 identity=5225 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=4fc6aadd-0b27-4945-ba98-4aa1d5ccca7a,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=4fc6aadd-0b27-4945-ba98-4aa1d5ccca7a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.54 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-fnqd8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=715676e80d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=337 identity=5225 ipv4=10.0.0.54 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-fnqd8 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=431 identity=4 ipv4=10.0.0.132 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=921238c4ce datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2676 identity=3507 ipv4=10.0.0.196 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-phzcl subsys=endpoint level=info msg="Successful endpoint creation" containerID=921238c4ce datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2676 identity=3507 ipv4=10.0.0.196 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-phzcl subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=715676e80d datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=337 identity=5225 ipv4=10.0.0.54 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-fnqd8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=715676e80d datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=337 identity=5225 ipv4=10.0.0.54 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-fnqd8 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=715676e80d endpointID=337 k8sNamespace=envoy-gateway-system k8sPodName=envoy-gateway-gateway-helm-certgen-fnqd8 subsys=daemon level=info msg="Releasing key" key="[k8s:app=certgen k8s:batch.kubernetes.io/controller-uid=4fc6aadd-0b27-4945-ba98-4aa1d5ccca7a k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen k8s:controller-uid=4fc6aadd-0b27-4945-ba98-4aa1d5ccca7a k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen k8s:io.kubernetes.pod.namespace=envoy-gateway-system k8s:job-name=envoy-gateway-gateway-helm-certgen]" subsys=allocator level=info msg="Removed endpoint" containerID=715676e80d datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=337 identity=5225 ipv4=10.0.0.54 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-fnqd8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.245 22e744fe-8db5-4cd6-8357-3a224c4a6f2a default }" containerID=cc7ec166b2cbcc1c2eeeaa319043e62351814b8d0c9371181072903fa87c798a datapathConfiguration="&{false false false false false }" interface=lxc452a0ac60f08 k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-dxqn2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=cc7ec166b2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=6 ipv4=10.0.0.245 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-dxqn2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=cc7ec166b2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=6 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.245 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-dxqn2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=cc7ec166b2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=6 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.245 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-dxqn2 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=envoy-gateway;k8s:app.kubernetes.io/name=gateway-helm;k8s:control-plane=envoy-gateway;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=cc7ec166b2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=6 identity=27164 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.245 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-dxqn2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=cc7ec166b2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=6 identity=27164 ipv4=10.0.0.245 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-dxqn2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=cc7ec166b2 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=6 identity=27164 ipv4=10.0.0.245 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-dxqn2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=cc7ec166b2 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=6 identity=27164 ipv4=10.0.0.245 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-dxqn2 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=349 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_00349 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_00349 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_00349 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_00349:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=349 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.251 314276dc-bd5b-4420-9fd1-de81df15556c default }" containerID=d3abff97517c2c8ec4d9b4c67093731ee58acfdb2d1ff564af30962e705ed715 datapathConfiguration="&{false false false false false }" interface=lxcc2b2866bd863 k8sPodName=kube-system/coredns-67659f764b-npf7v labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d3abff9751 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3315 ipv4=10.0.0.251 ipv6= k8sPodName=kube-system/coredns-67659f764b-npf7v subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d3abff9751 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3315 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.251 ipv6= k8sPodName=kube-system/coredns-67659f764b-npf7v subsys=endpoint level=info msg="Identity of endpoint changed" containerID=d3abff9751 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3315 identity=3507 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.251 ipv6= k8sPodName=kube-system/coredns-67659f764b-npf7v oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d3abff9751 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3315 identity=3507 ipv4=10.0.0.251 ipv6= k8sPodName=kube-system/coredns-67659f764b-npf7v subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.242 9964bbe1-82d4-43f3-ab80-d16e5fd143af default }" containerID=0372ade0fafee425b5f422e88dffab54c850f374bda3bc0deab118767fe35d5e datapathConfiguration="&{false false false false false }" interface=lxc49d4492c15ab k8sPodName=kube-system/coredns-67659f764b-79msx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0372ade0fa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1095 ipv4=10.0.0.242 ipv6= k8sPodName=kube-system/coredns-67659f764b-79msx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0372ade0fa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1095 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.242 ipv6= k8sPodName=kube-system/coredns-67659f764b-79msx subsys=endpoint level=info msg="Identity of endpoint changed" containerID=0372ade0fa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1095 identity=3507 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.242 ipv6= k8sPodName=kube-system/coredns-67659f764b-79msx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0372ade0fa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1095 identity=3507 ipv4=10.0.0.242 ipv6= k8sPodName=kube-system/coredns-67659f764b-79msx subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0372ade0fa datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1095 identity=3507 ipv4=10.0.0.242 ipv6= k8sPodName=kube-system/coredns-67659f764b-79msx subsys=endpoint level=info msg="Successful endpoint creation" containerID=0372ade0fa datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1095 identity=3507 ipv4=10.0.0.242 ipv6= k8sPodName=kube-system/coredns-67659f764b-79msx subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=d3abff9751 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3315 identity=3507 ipv4=10.0.0.251 ipv6= k8sPodName=kube-system/coredns-67659f764b-npf7v subsys=endpoint level=info msg="Successful endpoint creation" containerID=d3abff9751 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3315 identity=3507 ipv4=10.0.0.251 ipv6= k8sPodName=kube-system/coredns-67659f764b-npf7v subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.116 e1cc98ac-f1f4-47e5-8834-b8121c9de517 default }" containerID=3a33dc5d738b920fde43a8904aa79fbb8c8a91e97de106450beeeb429607eae6 datapathConfiguration="&{false false false false false }" interface=lxc04407b8564f3 k8sPodName=local-path-storage/local-path-provisioner-679c578f5-cwtkj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3a33dc5d73 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=566 ipv4=10.0.0.116 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-cwtkj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3a33dc5d73 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=566 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.116 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-cwtkj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=local-path-provisioner;k8s:app.kubernetes.io/name=local-path-provisioner;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3a33dc5d73 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=566 identity=7762 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.116 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-cwtkj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3a33dc5d73 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=566 identity=7762 ipv4=10.0.0.116 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-cwtkj subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=3a33dc5d73 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=566 identity=7762 ipv4=10.0.0.116 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-cwtkj subsys=endpoint level=info msg="Successful endpoint creation" containerID=3a33dc5d73 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=566 identity=7762 ipv4=10.0.0.116 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-cwtkj subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=921238c4ce endpointID=2676 k8sNamespace=kube-system k8sPodName=coredns-7c96b6546b-phzcl subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=coredns k8s:io.kubernetes.pod.namespace=kube-system k8s:k8s-app=kube-dns]" subsys=allocator level=info msg="Removed endpoint" containerID=921238c4ce datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2676 identity=3507 ipv4=10.0.0.196 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-phzcl subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.83 a8a8eba6-0557-40a6-b7c7-20a68a7071c8 default }" containerID=5e59d05eb85ec0d82e197e90dfb965e81ce8a67333633c46587c6e821de469ff datapathConfiguration="&{false false false false false }" interface=lxccd6b79ca06d2 k8sPodName=cert-manager/cert-manager-webhook-548949fc64-5sqb8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5e59d05eb8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3417 ipv4=10.0.0.83 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-5sqb8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5e59d05eb8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3417 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.83 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-5sqb8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=webhook;k8s:app.kubernetes.io/component=webhook;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=webhook;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5e59d05eb8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3417 identity=12305 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.83 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-5sqb8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5e59d05eb8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3417 identity=12305 ipv4=10.0.0.83 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-5sqb8 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.188 c892cc1f-494d-4168-bc35-e234841c942f default }" containerID=aeb4da9f51329249c0b3401f8e92d90a14a29dfa53a33ac5d10224ddf2526b92 datapathConfiguration="&{false false false false false }" interface=lxcd00bcc5c370b k8sPodName=cert-manager/cert-manager-75c4c745bc-cs6ww labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=aeb4da9f51 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2162 ipv4=10.0.0.188 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-cs6ww subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.52 6ad1dd2d-048b-47f0-a4db-c4699ce69fbb default }" containerID=3ed78aae581b0477aa70f6a99e198e671a13413732211a6ad738da51db9ab10b datapathConfiguration="&{false false false false false }" interface=lxc89ab6b11f8db k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-lw5zm labels="[]" subsys=daemon sync-build=true level=info msg="Resolving identity labels (blocking)" containerID=aeb4da9f51 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2162 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.188 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-cs6ww subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="New endpoint" containerID=3ed78aae58 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3173 ipv4=10.0.0.52 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-lw5zm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3ed78aae58 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3173 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.52 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-lw5zm subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=cert-manager;k8s:app.kubernetes.io/component=controller;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cert-manager;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Identity of endpoint changed" containerID=aeb4da9f51 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2162 identity=1573 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.188 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-cs6ww oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=aeb4da9f51 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2162 identity=1573 ipv4=10.0.0.188 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-cs6ww subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=cainjector;k8s:app.kubernetes.io/component=cainjector;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cainjector;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3ed78aae58 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3173 identity=35211 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.52 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-lw5zm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3ed78aae58 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3173 identity=35211 ipv4=10.0.0.52 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-lw5zm subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5e59d05eb8 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3417 identity=12305 ipv4=10.0.0.83 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-5sqb8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=5e59d05eb8 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3417 identity=12305 ipv4=10.0.0.83 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-5sqb8 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=3ed78aae58 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3173 identity=35211 ipv4=10.0.0.52 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-lw5zm subsys=endpoint level=info msg="Successful endpoint creation" containerID=3ed78aae58 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3173 identity=35211 ipv4=10.0.0.52 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-lw5zm subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=aeb4da9f51 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2162 identity=1573 ipv4=10.0.0.188 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-cs6ww subsys=endpoint level=info msg="Successful endpoint creation" containerID=aeb4da9f51 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2162 identity=1573 ipv4=10.0.0.188 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-cs6ww subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.214 a6819fcb-5a5a-48f1-a83c-567996bec1eb default }" containerID=bd5107b0d4bb88908e83bdfb1e2f4c7865be74fa8b911481a9fea6e483a270f8 datapathConfiguration="&{false false false false false }" interface=lxcb48769979673 k8sPodName=cert-manager/cert-manager-startupapicheck-kl8qn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bd5107b0d4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=221 ipv4=10.0.0.214 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-kl8qn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bd5107b0d4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=221 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=93eace32-8825-4ef6-a262-d172490daece,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=93eace32-8825-4ef6-a262-d172490daece,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.214 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-kl8qn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=startupapicheck;k8s:app.kubernetes.io/component=startupapicheck;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=startupapicheck;k8s:app.kubernetes.io/version=v1.11.5;k8s:batch.kubernetes.io/controller-uid=93eace32-8825-4ef6-a262-d172490daece;k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck;k8s:controller-uid=93eace32-8825-4ef6-a262-d172490daece;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck;k8s:io.kubernetes.pod.namespace=cert-manager;k8s:job-name=cert-manager-startupapicheck;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=bd5107b0d4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=221 identity=24465 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=93eace32-8825-4ef6-a262-d172490daece,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=93eace32-8825-4ef6-a262-d172490daece,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.214 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-kl8qn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=bd5107b0d4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=221 identity=24465 ipv4=10.0.0.214 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-kl8qn subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=bd5107b0d4 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=221 identity=24465 ipv4=10.0.0.214 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-kl8qn subsys=endpoint level=info msg="Successful endpoint creation" containerID=bd5107b0d4 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=221 identity=24465 ipv4=10.0.0.214 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-kl8qn subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=bd5107b0d4 endpointID=221 k8sNamespace=cert-manager k8sPodName=cert-manager-startupapicheck-kl8qn subsys=daemon level=info msg="Releasing key" key="[k8s:app=startupapicheck k8s:app.kubernetes.io/component=startupapicheck k8s:app.kubernetes.io/instance=cert-manager k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=startupapicheck k8s:app.kubernetes.io/version=v1.11.5 k8s:batch.kubernetes.io/controller-uid=93eace32-8825-4ef6-a262-d172490daece k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck k8s:controller-uid=93eace32-8825-4ef6-a262-d172490daece k8s:helm.sh/chart=cert-manager-v1.11.5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager k8s:io.cilium.k8s.namespace.labels.name=cert-manager k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck k8s:io.kubernetes.pod.namespace=cert-manager k8s:job-name=cert-manager-startupapicheck]" subsys=allocator level=info msg="Removed endpoint" containerID=bd5107b0d4 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=221 identity=24465 ipv4=10.0.0.214 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-kl8qn subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.106 1805ab76-867d-4642-883a-641a47114abc default }" containerID=9f2853a2900d08aac0bb30c690a6f02755a4ca033625828908933419f7e74850 datapathConfiguration="&{false false false false false }" interface=lxcb1f50c1f6ea5 k8sPodName=ingress-nginx/ingress-nginx-admission-create-2gr2b labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9f2853a290 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=961 ipv4=10.0.0.106 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-2gr2b subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9f2853a290 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=961 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=27556ec7-ec2e-431d-88a2-4fa0b449bdfc,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=27556ec7-ec2e-431d-88a2-4fa0b449bdfc,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.106 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-2gr2b subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=27556ec7-ec2e-431d-88a2-4fa0b449bdfc;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create;k8s:controller-uid=27556ec7-ec2e-431d-88a2-4fa0b449bdfc;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-create;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=9f2853a290 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=961 identity=48190 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=27556ec7-ec2e-431d-88a2-4fa0b449bdfc,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=27556ec7-ec2e-431d-88a2-4fa0b449bdfc,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.106 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-2gr2b oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9f2853a290 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=961 identity=48190 ipv4=10.0.0.106 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-2gr2b subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9f2853a290 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=961 identity=48190 ipv4=10.0.0.106 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-2gr2b subsys=endpoint level=info msg="Successful endpoint creation" containerID=9f2853a290 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=961 identity=48190 ipv4=10.0.0.106 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-2gr2b subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=9f2853a290 endpointID=961 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-create-2gr2b subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=27556ec7-ec2e-431d-88a2-4fa0b449bdfc k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create k8s:controller-uid=27556ec7-ec2e-431d-88a2-4fa0b449bdfc k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-create]" subsys=allocator level=info msg="Removed endpoint" containerID=9f2853a290 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=961 identity=48190 ipv4=10.0.0.106 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-2gr2b subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.26 7086f5bb-80fc-4c90-933c-5cdcfe485f90 default }" containerID=2bfe2512199c18e2a8433174cdd741a7f0156e35b54f3ebd560074311684da06 datapathConfiguration="&{false false false false false }" interface=lxc3eada929170b k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-sdqq6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2bfe251219 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2647 ipv4=10.0.0.26 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-sdqq6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2bfe251219 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2647 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.26 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-sdqq6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=default-backend;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend;k8s:io.kubernetes.pod.namespace=ingress-nginx;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=2bfe251219 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2647 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.26 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-sdqq6 line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=2bfe251219 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2647 identity=269 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.26 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-sdqq6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2bfe251219 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2647 identity=269 ipv4=10.0.0.26 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-sdqq6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2bfe251219 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2647 identity=269 ipv4=10.0.0.26 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-sdqq6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=2bfe251219 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2647 identity=269 ipv4=10.0.0.26 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-sdqq6 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.10 58f82b0f-4465-4c0a-a266-2f7d32d367ef default }" containerID=27daf51d333b90c267bac40e248a54f196b5c890d584a785f5c55ce39ba0314b datapathConfiguration="&{false false false false false }" interface=lxc6a5bf90b4b9b k8sPodName=ingress-nginx/ingress-nginx-admission-patch-2dhw2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=27daf51d33 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3103 ipv4=10.0.0.10 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-2dhw2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=27daf51d33 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3103 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=0326c738-8a48-45ac-909a-a068da6e44e2,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=0326c738-8a48-45ac-909a-a068da6e44e2,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.10 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-2dhw2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=0326c738-8a48-45ac-909a-a068da6e44e2;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch;k8s:controller-uid=0326c738-8a48-45ac-909a-a068da6e44e2;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-patch;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=27daf51d33 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3103 identity=1936 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=0326c738-8a48-45ac-909a-a068da6e44e2,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=0326c738-8a48-45ac-909a-a068da6e44e2,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.10 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-2dhw2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=27daf51d33 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3103 identity=1936 ipv4=10.0.0.10 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-2dhw2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=27daf51d33 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3103 identity=1936 ipv4=10.0.0.10 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-2dhw2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=27daf51d33 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3103 identity=1936 ipv4=10.0.0.10 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-2dhw2 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=27daf51d33 endpointID=3103 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-patch-2dhw2 subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=0326c738-8a48-45ac-909a-a068da6e44e2 k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch k8s:controller-uid=0326c738-8a48-45ac-909a-a068da6e44e2 k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-patch]" subsys=allocator level=info msg="Removed endpoint" containerID=27daf51d33 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3103 identity=1936 ipv4=10.0.0.10 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-2dhw2 subsys=endpoint level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"messaging-topology-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9443 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-messaging-topology-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=d4a94652-385b-4df3-b253-fb8cc1c46e51] Description:}]" policyAddRequest=75398332-7710-4bca-918a-bb932318602c subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=75398332-7710-4bca-918a-bb932318602c policyRevision=2 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-messaging-topology-operator subsys=k8s-watcher level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"rabbitmq-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-cluster-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=461a0fda-d8dd-42c3-b50f-24390e27e604] Description:}]" policyAddRequest=752271ab-89de-4bf9-aaa9-b8509ed0e608 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=752271ab-89de-4bf9-aaa9-b8509ed0e608 policyRevision=3 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-cluster-operator subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.1 c3d087a6-86a5-496b-9699-1df11c71b8cc default }" containerID=6da7f29aa36ed90f8dda7397f2375de0ab889dd895d515634f13c1c6553ded3b datapathConfiguration="&{false false false false false }" interface=lxcbc98ab1ccfe0 k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-6lz9c labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6da7f29aa3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2651 ipv4=10.0.0.1 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-6lz9c subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6da7f29aa3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2651 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.9.0,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.1 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-6lz9c subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=2.9.0;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6da7f29aa3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2651 identity=15794 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.9.0,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.1 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-6lz9c oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6da7f29aa3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2651 identity=15794 ipv4=10.0.0.1 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-6lz9c subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=6da7f29aa3 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=2651 identity=15794 ipv4=10.0.0.1 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-6lz9c subsys=endpoint level=info msg="Successful endpoint creation" containerID=6da7f29aa3 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=2651 identity=15794 ipv4=10.0.0.1 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-6lz9c subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.25 99123cc5-54a8-4caa-8ba9-00d987d83e1b default }" containerID=5c4378089697720e03ad5d057ef9410b090d51b9387e1d2776e3d5280abda33d datapathConfiguration="&{false false false false false }" interface=lxcc61d6b8b7853 k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-qwg85 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5c43780896 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1038 ipv4=10.0.0.25 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-qwg85 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5c43780896 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1038 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.14.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.25 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-qwg85 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=messaging-topology-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=1.14.1;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5c43780896 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1038 identity=2088 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.14.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.25 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-qwg85 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5c43780896 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1038 identity=2088 ipv4=10.0.0.25 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-qwg85 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5c43780896 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1038 identity=2088 ipv4=10.0.0.25 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-qwg85 subsys=endpoint level=info msg="Successful endpoint creation" containerID=5c43780896 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1038 identity=2088 ipv4=10.0.0.25 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-qwg85 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.182 2d64293e-e4df-405d-bd3d-7ed0842da928 default }" containerID=3d0df39677537164edaee48ab3511fd17462f2b290bdd2721a4c4c68df3de723 datapathConfiguration="&{false false false false false }" interface=lxcb5a1fe790e55 k8sPodName=openstack/pxc-operator-7cff949c8b-7dnvz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3d0df39677 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=451 ipv4=10.0.0.182 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-7dnvz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3d0df39677 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=451 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.182 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-7dnvz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=3d0df39677 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=451 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.182 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-7dnvz line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=operator;k8s:app.kubernetes.io/instance=pxc-operator;k8s:app.kubernetes.io/name=pxc-operator;k8s:app.kubernetes.io/part-of=pxc-operator;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3d0df39677 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=451 identity=30691 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.182 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-7dnvz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3d0df39677 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=451 identity=30691 ipv4=10.0.0.182 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-7dnvz subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3d0df39677 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=451 identity=30691 ipv4=10.0.0.182 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-7dnvz subsys=endpoint level=info msg="Successful endpoint creation" containerID=3d0df39677 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=451 identity=30691 ipv4=10.0.0.182 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-7dnvz subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.27 ccd6f7f8-1acd-4ed3-b377-638db6590358 default }" containerID=19c37412677880ccdace74159f8436f43bb346478f5039a4c55bd6ab72913bc1 datapathConfiguration="&{false false false false false }" interface=lxc42e7a2c57548 k8sPodName=local-path-storage/helper-pod-create-pvc-ca16dc81-8f8a-4d3f-b016-640c2c936e42 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=19c3741267 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=62 ipv4=10.0.0.27 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ca16dc81-8f8a-4d3f-b016-640c2c936e42 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=19c3741267 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=62 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.27 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ca16dc81-8f8a-4d3f-b016-640c2c936e42 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=19c3741267 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=62 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.27 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ca16dc81-8f8a-4d3f-b016-640c2c936e42 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=19c3741267 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=62 identity=18403 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.27 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ca16dc81-8f8a-4d3f-b016-640c2c936e42 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=19c3741267 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=62 identity=18403 ipv4=10.0.0.27 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ca16dc81-8f8a-4d3f-b016-640c2c936e42 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=19c3741267 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=62 identity=18403 ipv4=10.0.0.27 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ca16dc81-8f8a-4d3f-b016-640c2c936e42 subsys=endpoint level=info msg="Successful endpoint creation" containerID=19c3741267 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=62 identity=18403 ipv4=10.0.0.27 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ca16dc81-8f8a-4d3f-b016-640c2c936e42 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.206 3f068c90-2aed-46d7-a7a7-f29bc6bdf56e default }" containerID=5be0ca5190095c9490810a02c5f389ce05454aa6304c2c4037f5f559dd09f165 datapathConfiguration="&{false false false false false }" interface=lxcdbfe22996fe3 k8sPodName=openstack/percona-xtradb-haproxy-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5be0ca5190 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=33 ipv4=10.0.0.206 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5be0ca5190 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=33 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.206 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=haproxy;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5be0ca5190 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=33 identity=1944 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.206 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5be0ca5190 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=33 identity=1944 ipv4=10.0.0.206 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5be0ca5190 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=33 identity=1944 ipv4=10.0.0.206 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=5be0ca5190 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=33 identity=1944 ipv4=10.0.0.206 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=19c3741267 endpointID=62 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-ca16dc81-8f8a-4d3f-b016-640c2c936e42 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=19c3741267 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=62 identity=18403 ipv4=10.0.0.27 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ca16dc81-8f8a-4d3f-b016-640c2c936e42 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.167 258ced5a-5f19-4def-b4b6-012599e488a7 default }" containerID=44c7db3a68a27fdf91558269f7ebf875dbfdfe0c63072eb9a39e7c1ce4976fe1 datapathConfiguration="&{false false false false false }" interface=lxcfeac857baff8 k8sPodName=openstack/percona-xtradb-pxc-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=44c7db3a68 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2342 ipv4=10.0.0.167 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=44c7db3a68 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2342 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.167 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=pxc;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=44c7db3a68 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2342 identity=15294 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.167 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=44c7db3a68 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2342 identity=15294 ipv4=10.0.0.167 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=44c7db3a68 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=2342 identity=15294 ipv4=10.0.0.167 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=44c7db3a68 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=2342 identity=15294 ipv4=10.0.0.167 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/instance\":\"valkey\",\"k8s:app.kubernetes.io/name\":\"valkey\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:6379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:26379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:} {IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9121 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=valkey k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=5a87b750-6edf-4a61-b504-14218b167b6a] Description:}]" policyAddRequest=58eb8f8b-4485-48a2-b136-48e150bc16d5 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=58eb8f8b-4485-48a2-b136-48e150bc16d5 policyRevision=4 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=valkey subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.92 ba269615-9d1b-4052-bc88-75dee07429b0 default }" containerID=9f375f4f28de2b3eafdbde5d56edec9b0743c09ff811b66049693e908a4c1653 datapathConfiguration="&{false false false false false }" interface=lxc8b088d02c736 k8sPodName=local-path-storage/helper-pod-create-pvc-aeaddcb5-9c27-49d7-8018-d7b112a5069f labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9f375f4f28 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3436 ipv4=10.0.0.92 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-aeaddcb5-9c27-49d7-8018-d7b112a5069f subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9f375f4f28 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3436 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.92 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-aeaddcb5-9c27-49d7-8018-d7b112a5069f subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9f375f4f28 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3436 identity=18403 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.92 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-aeaddcb5-9c27-49d7-8018-d7b112a5069f oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9f375f4f28 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3436 identity=18403 ipv4=10.0.0.92 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-aeaddcb5-9c27-49d7-8018-d7b112a5069f subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9f375f4f28 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3436 identity=18403 ipv4=10.0.0.92 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-aeaddcb5-9c27-49d7-8018-d7b112a5069f subsys=endpoint level=info msg="Successful endpoint creation" containerID=9f375f4f28 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3436 identity=18403 ipv4=10.0.0.92 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-aeaddcb5-9c27-49d7-8018-d7b112a5069f subsys=daemon level=info msg="Delete endpoint request" containerID=9f375f4f28 endpointID=3436 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-aeaddcb5-9c27-49d7-8018-d7b112a5069f subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=9f375f4f28 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3436 identity=18403 ipv4=10.0.0.92 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-aeaddcb5-9c27-49d7-8018-d7b112a5069f subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.191 819e7766-687b-4f27-8f58-bed23ffdd55f default }" containerID=8263582a8ac7ac0d12cb11316145fcf38b2f9c2442d5c038dc2853e842fe35d4 datapathConfiguration="&{false false false false false }" interface=lxcb3cf2c28fa0d k8sPodName=openstack/valkey-node-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8263582a8a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2029 ipv4=10.0.0.191 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8263582a8a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2029 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.191 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=node;k8s:app.kubernetes.io/instance=valkey;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=valkey;k8s:app.kubernetes.io/version=8.0.2;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=valkey-2.4.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=valkey;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=valkey-node-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8263582a8a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2029 identity=41653 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.191 ipv6= k8sPodName=openstack/valkey-node-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=8263582a8a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2029 identity=41653 ipv4=10.0.0.191 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8263582a8a datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2029 identity=41653 ipv4=10.0.0.191 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=8263582a8a datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2029 identity=41653 ipv4=10.0.0.191 ipv6= k8sPodName=openstack/valkey-node-0 subsys=daemon level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"keycloak\",\"k8s:app.kubernetes.io/instance\":\"keycloak\",\"k8s:app.kubernetes.io/name\":\"keycloak\",\"k8s:io.kubernetes.pod.namespace\":\"auth-system\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:7800 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:8080 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=keycloak k8s:io.cilium.k8s.policy.namespace=auth-system k8s:io.cilium.k8s.policy.uid=9560fe8e-8cbe-4c6d-abff-850ef63048d7] Description:}]" policyAddRequest=7a73e133-8ccb-43f3-a7a4-c7cc91dea5fb subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=7a73e133-8ccb-43f3-a7a4-c7cc91dea5fb policyRevision=5 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=keycloak subsys=k8s-watcher level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.137 fedabd95-05bf-4bc8-9b81-9080a519d23e default }" containerID=a35c582a99d49010fc92bb210b32d7e86e23c7bdc78d26146045f09c2de74baa datapathConfiguration="&{false false false false false }" interface=lxcbba2131ef634 k8sPodName=auth-system/keycloak-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a35c582a99 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3021 ipv4=10.0.0.137 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a35c582a99 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3021 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.137 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:auth-system k8s:io.cilium.k8s.namespace.labels.name:auth-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=keycloak;k8s:app.kubernetes.io/instance=keycloak;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=keycloak;k8s:app.kubernetes.io/version=24.0.5;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=keycloak-21.4.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system;k8s:io.cilium.k8s.namespace.labels.name=auth-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keycloak;k8s:io.kubernetes.pod.namespace=auth-system;k8s:statefulset.kubernetes.io/pod-name=keycloak-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a35c582a99 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3021 identity=52720 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.137 ipv6= k8sPodName=auth-system/keycloak-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a35c582a99 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3021 identity=52720 ipv4=10.0.0.137 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a35c582a99 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3021 identity=52720 ipv4=10.0.0.137 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=a35c582a99 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3021 identity=52720 ipv4=10.0.0.137 ipv6= k8sPodName=auth-system/keycloak-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.01013837975299958 newInterval=7m30s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.232 96e68417-f5c8-4c51-9dc5-0600e3a77600 default }" containerID=bea77f8b5bcee6714367847960d4695a2eacdd91c34f021b783b5133d3f793f9 datapathConfiguration="&{false false false false false }" interface=lxc55db724d33b0 k8sPodName=monitoring/node-feature-discovery-worker-8jb4x labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bea77f8b5b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=409 ipv4=10.0.0.232 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-8jb4x subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bea77f8b5b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=409 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.232 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-8jb4x subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=worker;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=bea77f8b5b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=409 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.232 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-8jb4x line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=bea77f8b5b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=409 identity=6081 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.232 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-8jb4x oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=bea77f8b5b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=409 identity=6081 ipv4=10.0.0.232 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-8jb4x subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.175 d7647466-b675-404b-a503-a122e09fe8c6 default }" containerID=cc739bb979df7440449fbc40df21e04ca6a0e0028a43e3ed268b65ef5932a118 datapathConfiguration="&{false false false false false }" interface=lxc3b3f62b9da81 k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-4jg5n labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=cc739bb979 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2655 ipv4=10.0.0.175 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-4jg5n subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=cc739bb979 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2655 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.175 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-4jg5n subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.252 44fa0b73-2f29-42be-9d80-d09388f31191 default }" containerID=b0d7a32ccdbc26d9c5f70d732bdf856ac9c43a95af19fba67b79cc35e907faa8 datapathConfiguration="&{false false false false false }" interface=lxc5c6792949e75 k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-9w6v8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b0d7a32ccd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3157 ipv4=10.0.0.252 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-9w6v8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b0d7a32ccd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3157 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.252 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-9w6v8 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=gc;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=cc739bb979 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2655 identity=1908 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.175 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-4jg5n oldIdentity="no identity" subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Waiting for endpoint to be generated" containerID=cc739bb979 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2655 identity=1908 ipv4=10.0.0.175 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-4jg5n subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=master;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b0d7a32ccd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3157 identity=55547 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.252 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-9w6v8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b0d7a32ccd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3157 identity=55547 ipv4=10.0.0.252 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-9w6v8 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=bea77f8b5b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=409 identity=6081 ipv4=10.0.0.232 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-8jb4x subsys=endpoint level=info msg="Successful endpoint creation" containerID=bea77f8b5b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=409 identity=6081 ipv4=10.0.0.232 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-8jb4x subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=cc739bb979 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2655 identity=1908 ipv4=10.0.0.175 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-4jg5n subsys=endpoint level=info msg="Successful endpoint creation" containerID=cc739bb979 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2655 identity=1908 ipv4=10.0.0.175 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-4jg5n subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=b0d7a32ccd datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3157 identity=55547 ipv4=10.0.0.252 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-9w6v8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=b0d7a32ccd datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3157 identity=55547 ipv4=10.0.0.252 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-9w6v8 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.8 a89fe7cc-440b-4b3f-88af-76999e2b73f9 default }" containerID=449fd5e3296b0ec094d9ccc17c9a76ed97a01c344fd8b500cca8afcde300286c datapathConfiguration="&{false false false false false }" interface=lxc986330a1d64c k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-ldn77 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=449fd5e329 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1337 ipv4=10.0.0.8 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-ldn77 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=449fd5e329 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1337 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.8 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-ldn77 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:secretgen-controller]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=secretgen-controller;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa;k8s:io.kubernetes.pod.namespace=secretgen-controller;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=449fd5e329 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1337 identity=43504 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.8 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-ldn77 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=449fd5e329 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1337 identity=43504 ipv4=10.0.0.8 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-ldn77 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=449fd5e329 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1337 identity=43504 ipv4=10.0.0.8 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-ldn77 subsys=endpoint level=info msg="Successful endpoint creation" containerID=449fd5e329 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1337 identity=43504 ipv4=10.0.0.8 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-ldn77 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=349 identity=1 identityLabels="k8s:feature.node.kubernetes.io/cpu-cpuid.ADX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AESNI=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX2=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CLZERO=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CMPXCHG8=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FMA3=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSROPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.HYPERVISOR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IA32_ARCH_CAP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBPB=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBRS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.LAHF=true,k8s:feature.node.kubernetes.io/cpu-cpuid.MOVBE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.NRIPS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.OSXSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SHA=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SPEC_CTRL_SSBD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SSE4A=true,k8s:feature.node.kubernetes.io/cpu-cpuid.STIBP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVM=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVMNP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSCALL=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSEE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.TOPEXT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.WBNOINVD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.X87=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XGETBV1=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEC=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEOPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVES=true,k8s:feature.node.kubernetes.io/cpu-hardware_multithreading=false,k8s:feature.node.kubernetes.io/cpu-model.family=23,k8s:feature.node.kubernetes.io/cpu-model.id=49,k8s:feature.node.kubernetes.io/cpu-model.vendor_id=AMD,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ=true,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ_IDLE=true,k8s:feature.node.kubernetes.io/kernel-version.full=5.15.0-174-generic,k8s:feature.node.kubernetes.io/kernel-version.major=5,k8s:feature.node.kubernetes.io/kernel-version.minor=15,k8s:feature.node.kubernetes.io/kernel-version.revision=0,k8s:feature.node.kubernetes.io/pci-0300_1af4.present=true,k8s:feature.node.kubernetes.io/system-os_release.ID=ubuntu,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.major=22,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.minor=04,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID=22.04,k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_00349 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_00349 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_00349 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_00349:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=349 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.209 eab48ee5-7e81-4af8-b562-3140b743ef2c default }" containerID=0149f33bdcfd219f84eef30eaab58e9cadf10c1d86b15bb675d544ee9c9d7e8c datapathConfiguration="&{false false false false false }" interface=lxc6f3c94418c02 k8sPodName=monitoring/kube-prometheus-stack-admission-create-9ltkh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0149f33bdc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2787 ipv4=10.0.0.209 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-9ltkh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0149f33bdc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2787 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=9cb9874e-0604-4e41-8973-45f6c3860049,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=9cb9874e-0604-4e41-8973-45f6c3860049,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.209 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-9ltkh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-create;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=9cb9874e-0604-4e41-8973-45f6c3860049;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=9cb9874e-0604-4e41-8973-45f6c3860049;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-create;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0149f33bdc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2787 identity=32118 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=9cb9874e-0604-4e41-8973-45f6c3860049,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=9cb9874e-0604-4e41-8973-45f6c3860049,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.209 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-9ltkh oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=0149f33bdc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2787 identity=32118 ipv4=10.0.0.209 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-9ltkh subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0149f33bdc datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2787 identity=32118 ipv4=10.0.0.209 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-9ltkh subsys=endpoint level=info msg="Successful endpoint creation" containerID=0149f33bdc datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2787 identity=32118 ipv4=10.0.0.209 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-9ltkh subsys=daemon level=info msg="Delete endpoint request" containerID=0149f33bdc endpointID=2787 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-create-9ltkh subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-create k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=9cb9874e-0604-4e41-8973-45f6c3860049 k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=9cb9874e-0604-4e41-8973-45f6c3860049 k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-create k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=0149f33bdc datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2787 identity=32118 ipv4=10.0.0.209 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-9ltkh subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.212 e53b9827-505d-4c6d-9d6a-ea7a1cbfb48d default }" containerID=8b5f8805fdbcbb834257f9be72402ca51407dcf395b521f8a5c51bfe9136fa75 datapathConfiguration="&{false false false false false }" interface=lxc64de1294ef4e k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-kqhc5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8b5f8805fd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1705 ipv4=10.0.0.212 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-kqhc5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8b5f8805fd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1705 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.212 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-kqhc5 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.236 7e500540-e8e7-4206-a8f9-96bc8b1c3332 default }" containerID=308ee3cbc791e7be7e42f099e6af1ebfc378105bd5a7bb344bd29fe6c4a25ef8 datapathConfiguration="&{false false false false false }" interface=lxc2e34434f6f64 k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-z88m8 labels="[]" subsys=daemon sync-build=true level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="New endpoint" containerID=308ee3cbc7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1444 ipv4=10.0.0.236 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-z88m8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=308ee3cbc7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1444 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.236 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-z88m8 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-operator;k8s:app.kubernetes.io/component=prometheus-operator;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:chart=kube-prometheus-stack-60.2.0;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8b5f8805fd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1705 identity=12748 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.212 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-kqhc5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8b5f8805fd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1705 identity=12748 ipv4=10.0.0.212 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-kqhc5 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Invalid state transition skipped" containerID=308ee3cbc7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1444 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.236 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-z88m8 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=metrics;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-state-metrics;k8s:app.kubernetes.io/part-of=kube-state-metrics;k8s:app.kubernetes.io/version=2.12.0;k8s:helm.sh/chart=kube-state-metrics-5.20.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=308ee3cbc7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1444 identity=59614 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.236 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-z88m8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=308ee3cbc7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1444 identity=59614 ipv4=10.0.0.236 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-z88m8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.148 74e15daa-3341-4785-9404-a52e0254b5f4 default }" containerID=0db20c5ba8305b0e42c6f53fc8f0202301ad333d587314b0f8e40d0787637aed datapathConfiguration="&{false false false false false }" interface=lxc7d6e0020538a k8sPodName=monitoring/kube-prometheus-stack-grafana-5485f6c6fc-z7znd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0db20c5ba8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1621 ipv4=10.0.0.148 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-5485f6c6fc-z7znd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0db20c5ba8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1621 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.148 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-5485f6c6fc-z7znd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/name=grafana;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0db20c5ba8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1621 identity=2072 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.148 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-5485f6c6fc-z7znd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0db20c5ba8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1621 identity=2072 ipv4=10.0.0.148 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-5485f6c6fc-z7znd subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8b5f8805fd datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1705 identity=12748 ipv4=10.0.0.212 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-kqhc5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=8b5f8805fd datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1705 identity=12748 ipv4=10.0.0.212 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-kqhc5 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=308ee3cbc7 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1444 identity=59614 ipv4=10.0.0.236 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-z88m8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=308ee3cbc7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1444 identity=59614 ipv4=10.0.0.236 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-z88m8 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=0db20c5ba8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1621 identity=2072 ipv4=10.0.0.148 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-5485f6c6fc-z7znd subsys=endpoint level=info msg="Successful endpoint creation" containerID=0db20c5ba8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1621 identity=2072 ipv4=10.0.0.148 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-5485f6c6fc-z7znd subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.248 74c61cfd-22d1-40d4-99fd-be7ef1e92d85 default }" containerID=77743c88d0fb8e90a10d413f8c83c3a368841d819af52c52965a88a34ac9bbc4 datapathConfiguration="&{false false false false false }" interface=lxc16b0cc3585ee k8sPodName=monitoring/kube-prometheus-stack-admission-patch-zl7rg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=77743c88d0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3765 ipv4=10.0.0.248 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-zl7rg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=77743c88d0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3765 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=c54103f0-0ff3-426f-a9c0-6400d3e3f51b,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=c54103f0-0ff3-426f-a9c0-6400d3e3f51b,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.248 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-zl7rg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-patch;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=c54103f0-0ff3-426f-a9c0-6400d3e3f51b;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=c54103f0-0ff3-426f-a9c0-6400d3e3f51b;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-patch;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=77743c88d0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3765 identity=25534 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=c54103f0-0ff3-426f-a9c0-6400d3e3f51b,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=c54103f0-0ff3-426f-a9c0-6400d3e3f51b,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.248 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-zl7rg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=77743c88d0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3765 identity=25534 ipv4=10.0.0.248 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-zl7rg subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=77743c88d0 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3765 identity=25534 ipv4=10.0.0.248 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-zl7rg subsys=endpoint level=info msg="Successful endpoint creation" containerID=77743c88d0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3765 identity=25534 ipv4=10.0.0.248 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-zl7rg subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.53 d8af68a9-86d7-4077-a1be-0c874f10989d default }" containerID=a5ae0ff10b4ad60a84ea96f0f6ce2169e9ab0c05eeb02bc9b2ba5945db08fd6c datapathConfiguration="&{false false false false false }" interface=lxca39effefd760 k8sPodName=local-path-storage/helper-pod-create-pvc-30b745b2-825b-4f4a-bf8e-f85184ed7e81 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a5ae0ff10b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2641 ipv4=10.0.0.53 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-30b745b2-825b-4f4a-bf8e-f85184ed7e81 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a5ae0ff10b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2641 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.53 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-30b745b2-825b-4f4a-bf8e-f85184ed7e81 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a5ae0ff10b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2641 identity=18403 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.53 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-30b745b2-825b-4f4a-bf8e-f85184ed7e81 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a5ae0ff10b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2641 identity=18403 ipv4=10.0.0.53 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-30b745b2-825b-4f4a-bf8e-f85184ed7e81 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a5ae0ff10b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2641 identity=18403 ipv4=10.0.0.53 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-30b745b2-825b-4f4a-bf8e-f85184ed7e81 subsys=endpoint level=info msg="Successful endpoint creation" containerID=a5ae0ff10b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2641 identity=18403 ipv4=10.0.0.53 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-30b745b2-825b-4f4a-bf8e-f85184ed7e81 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.165 9b0acd2d-ee45-4346-aba7-4f937a0935ce default }" containerID=353b94acef3af2ef1e9a996adc2d55f674d706304fcb1c8d4f92d9215f52e7ad datapathConfiguration="&{false false false false false }" interface=lxc212dad189450 k8sPodName=local-path-storage/helper-pod-create-pvc-6a01093f-acea-4ca4-a4b2-23b814122cd2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=353b94acef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2698 ipv4=10.0.0.165 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6a01093f-acea-4ca4-a4b2-23b814122cd2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=353b94acef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2698 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.165 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6a01093f-acea-4ca4-a4b2-23b814122cd2 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=353b94acef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2698 identity=18403 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.165 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6a01093f-acea-4ca4-a4b2-23b814122cd2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=353b94acef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2698 identity=18403 ipv4=10.0.0.165 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6a01093f-acea-4ca4-a4b2-23b814122cd2 subsys=endpoint level=info msg="Delete endpoint request" containerID=77743c88d0 endpointID=3765 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-patch-zl7rg subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-patch k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=c54103f0-0ff3-426f-a9c0-6400d3e3f51b k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=c54103f0-0ff3-426f-a9c0-6400d3e3f51b k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-patch k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=77743c88d0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3765 identity=25534 ipv4=10.0.0.248 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-zl7rg subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=353b94acef datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2698 identity=18403 ipv4=10.0.0.165 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6a01093f-acea-4ca4-a4b2-23b814122cd2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=353b94acef datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2698 identity=18403 ipv4=10.0.0.165 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6a01093f-acea-4ca4-a4b2-23b814122cd2 subsys=daemon level=info msg="Delete endpoint request" containerID=a5ae0ff10b endpointID=2641 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-30b745b2-825b-4f4a-bf8e-f85184ed7e81 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Delete endpoint request" containerID=353b94acef endpointID=2698 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-6a01093f-acea-4ca4-a4b2-23b814122cd2 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=a5ae0ff10b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2641 identity=18403 ipv4=10.0.0.53 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-30b745b2-825b-4f4a-bf8e-f85184ed7e81 subsys=endpoint level=info msg="Removed endpoint" containerID=353b94acef datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2698 identity=18403 ipv4=10.0.0.165 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6a01093f-acea-4ca4-a4b2-23b814122cd2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.19 1d727772-edf6-4dae-95a9-216c5784ba32 default }" containerID=6b574b951bee0463df1394afec8d5953db8c3636ddb26fcf81fdf0c45cc4af39 datapathConfiguration="&{false false false false false }" interface=lxc79d2bd492336 k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6b574b951b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2345 ipv4=10.0.0.19 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6b574b951b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2345 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.19 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=6b574b951b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2345 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.19 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:alertmanager=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=alertmanager;k8s:app.kubernetes.io/version=0.27.0;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6b574b951b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2345 identity=20635 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.19 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6b574b951b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2345 identity=20635 ipv4=10.0.0.19 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6b574b951b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2345 identity=20635 ipv4=10.0.0.19 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=6b574b951b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2345 identity=20635 ipv4=10.0.0.19 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.176 a83d0e10-8cd1-4b78-a249-1a232f64c3f8 default }" containerID=81d863c7b1a676271354e9b0af1a6b7f0fb7082b5fc7570e6f2d72befae26e8d datapathConfiguration="&{false false false false false }" interface=lxc6d399bc7b09d k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=81d863c7b1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=953 ipv4=10.0.0.176 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=81d863c7b1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=953 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.176 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=prometheus;k8s:app.kubernetes.io/version=2.51.2;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus;k8s:io.kubernetes.pod.namespace=monitoring;k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus;k8s:operator.prometheus.io/shard=0;k8s:prometheus=kube-prometheus-stack-prometheus;k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=81d863c7b1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=953 identity=53791 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.176 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=81d863c7b1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=953 identity=53791 ipv4=10.0.0.176 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=81d863c7b1 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=953 identity=53791 ipv4=10.0.0.176 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=81d863c7b1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=953 identity=53791 ipv4=10.0.0.176 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.28 549e7475-9c6d-48e6-907e-d24dca48e523 default }" containerID=01411f5e58b8953a12535309b248086bac01efb2e9bca0e1a9989e07ac94b797 datapathConfiguration="&{false false false false false }" interface=lxc5e8fd3cbc30f k8sPodName=monitoring/loki-gateway-cf54cb88c-hbjsf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=01411f5e58 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=455 ipv4=10.0.0.28 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-hbjsf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=01411f5e58 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=455 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.28 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-hbjsf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=gateway;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=01411f5e58 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=455 identity=17548 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.28 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-hbjsf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=01411f5e58 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=455 identity=17548 ipv4=10.0.0.28 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-hbjsf subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.189 11727d9b-0cdd-4986-884b-63f16be5b775 default }" containerID=63a6a1d26c0f29db7b558680e5413e8abfdce573e61e371e0381b5a0acd73c0e datapathConfiguration="&{false false false false false }" interface=lxc1b487ef15f8f k8sPodName=monitoring/loki-results-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=63a6a1d26c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=243 ipv4=10.0.0.189 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=63a6a1d26c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=243 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.189 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-results-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-results-cache;k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=63a6a1d26c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=243 identity=22312 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.189 ipv6= k8sPodName=monitoring/loki-results-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=63a6a1d26c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=243 identity=22312 ipv4=10.0.0.189 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.57 00b5b600-284a-4d5e-95de-13dec80291b7 default }" containerID=5fc2dcb7768a3f8d0900fa36ead723fa9dae9ded6bb345e32b449fc05499e4ee datapathConfiguration="&{false false false false false }" interface=lxc619c9709ce84 k8sPodName=monitoring/loki-chunks-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5fc2dcb776 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2386 ipv4=10.0.0.57 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5fc2dcb776 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2386 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.57 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-chunks-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-chunks-cache;k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5fc2dcb776 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2386 identity=37651 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.57 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5fc2dcb776 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2386 identity=37651 ipv4=10.0.0.57 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=63a6a1d26c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=243 identity=22312 ipv4=10.0.0.189 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=63a6a1d26c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=243 identity=22312 ipv4=10.0.0.189 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=01411f5e58 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=455 identity=17548 ipv4=10.0.0.28 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-hbjsf subsys=endpoint level=info msg="Successful endpoint creation" containerID=01411f5e58 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=455 identity=17548 ipv4=10.0.0.28 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-hbjsf subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.235 09b7803d-b6bd-48db-a6da-b1fc24f29a00 default }" containerID=f3315472608fc5588232916c4c7854d58f94111aebdeae18528b2bd2c9eda89d datapathConfiguration="&{false false false false false }" interface=lxca1777dc278e3 k8sPodName=local-path-storage/helper-pod-create-pvc-ebbb2476-482e-4828-9f24-676e51cbc612 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f331547260 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2852 ipv4=10.0.0.235 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ebbb2476-482e-4828-9f24-676e51cbc612 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f331547260 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2852 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.235 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ebbb2476-482e-4828-9f24-676e51cbc612 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f331547260 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2852 identity=18403 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.235 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ebbb2476-482e-4828-9f24-676e51cbc612 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f331547260 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2852 identity=18403 ipv4=10.0.0.235 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ebbb2476-482e-4828-9f24-676e51cbc612 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5fc2dcb776 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2386 identity=37651 ipv4=10.0.0.57 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=5fc2dcb776 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2386 identity=37651 ipv4=10.0.0.57 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=f331547260 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2852 identity=18403 ipv4=10.0.0.235 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ebbb2476-482e-4828-9f24-676e51cbc612 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f331547260 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2852 identity=18403 ipv4=10.0.0.235 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ebbb2476-482e-4828-9f24-676e51cbc612 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.16 9b97abb9-a4db-4b8a-8ebf-37135bb51855 default }" containerID=8d47dd5640f0f473ddba205e83beed4921e4e1568c1fe50a709399fefa94be38 datapathConfiguration="&{false false false false false }" interface=lxc854cf93c3c1d k8sPodName=monitoring/vector-k28fg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8d47dd5640 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=330 ipv4=10.0.0.16 ipv6= k8sPodName=monitoring/vector-k28fg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8d47dd5640 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=330 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.16 ipv6= k8sPodName=monitoring/vector-k28fg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=Agent;k8s:app.kubernetes.io/instance=vector;k8s:app.kubernetes.io/name=vector;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=vector;k8s:io.kubernetes.pod.namespace=monitoring;k8s:vector.dev/exclude=true;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8d47dd5640 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=330 identity=12038 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.16 ipv6= k8sPodName=monitoring/vector-k28fg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8d47dd5640 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=330 identity=12038 ipv4=10.0.0.16 ipv6= k8sPodName=monitoring/vector-k28fg subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8d47dd5640 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=330 identity=12038 ipv4=10.0.0.16 ipv6= k8sPodName=monitoring/vector-k28fg subsys=endpoint level=info msg="Successful endpoint creation" containerID=8d47dd5640 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=330 identity=12038 ipv4=10.0.0.16 ipv6= k8sPodName=monitoring/vector-k28fg subsys=daemon level=info msg="Delete endpoint request" containerID=f331547260 endpointID=2852 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-ebbb2476-482e-4828-9f24-676e51cbc612 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=f331547260 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2852 identity=18403 ipv4=10.0.0.235 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ebbb2476-482e-4828-9f24-676e51cbc612 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.101 11de49dd-3afd-4beb-9ce5-fdd44ced4c1b default }" containerID=1b13756e4afb875fbb7826222236dd4c99d142627f446680d751c8a12818113c datapathConfiguration="&{false false false false false }" interface=lxc384697ceb89f k8sPodName=monitoring/loki-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1b13756e4a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3888 ipv4=10.0.0.101 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1b13756e4a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3888 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.101 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=single-binary;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:app.kubernetes.io/part-of=memberlist;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=loki-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1b13756e4a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3888 identity=2892 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.101 ipv6= k8sPodName=monitoring/loki-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1b13756e4a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3888 identity=2892 ipv4=10.0.0.101 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1b13756e4a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3888 identity=2892 ipv4=10.0.0.101 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=1b13756e4a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3888 identity=2892 ipv4=10.0.0.101 ipv6= k8sPodName=monitoring/loki-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.41 d0dc85ed-066a-46fc-8747-fe4c6169ee75 default }" containerID=2961816cbe390987c9b8d6349890ace33cccad8b31776826fc22925a7a34c655 datapathConfiguration="&{false false false false false }" interface=lxcdde5c64d2f05 k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-s7hlr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2961816cbe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=556 ipv4=10.0.0.41 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-s7hlr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2961816cbe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=556 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.41 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-s7hlr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=prometheus-pushgateway;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=prometheus-pushgateway;k8s:app.kubernetes.io/version=v1.8.0;k8s:helm.sh/chart=prometheus-pushgateway-2.13.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2961816cbe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=556 identity=35827 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.41 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-s7hlr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2961816cbe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=556 identity=35827 ipv4=10.0.0.41 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-s7hlr subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2961816cbe datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=556 identity=35827 ipv4=10.0.0.41 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-s7hlr subsys=endpoint level=info msg="Successful endpoint creation" containerID=2961816cbe datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=556 identity=35827 ipv4=10.0.0.41 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-s7hlr subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.246 49ae13bf-c5f7-4524-ae82-9365d3cfd76c default }" containerID=0a44521f6256c3d1bfcea4385ebb697569c7f136eed24cf56ef2f0b709226a36 datapathConfiguration="&{false false false false false }" interface=lxc014c07efbd58 k8sPodName=openstack/memcached-memcached-6479589586-5pwgp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0a44521f62 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1072 ipv4=10.0.0.246 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-5pwgp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0a44521f62 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1072 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.246 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-5pwgp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=memcached;k8s:component=server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=memcached;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0a44521f62 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1072 identity=40534 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.246 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-5pwgp oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=0a44521f62 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1072 identity=40534 ipv4=10.0.0.246 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-5pwgp subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0a44521f62 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1072 identity=40534 ipv4=10.0.0.246 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-5pwgp subsys=endpoint level=info msg="Successful endpoint creation" containerID=0a44521f62 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1072 identity=40534 ipv4=10.0.0.246 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-5pwgp subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.195 2f23fa4c-5d3c-4e6a-b7dd-edaca23fe8de default }" containerID=3c3d8ad24e9b3467d589beba815b03bc2723a966d30599626bed404f8815844e datapathConfiguration="&{false false false false false }" interface=lxc654e6d683cfe k8sPodName=local-path-storage/helper-pod-create-pvc-bdd05c8a-a383-42d0-8da4-45026b02fc36 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3c3d8ad24e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=287 ipv4=10.0.0.195 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-bdd05c8a-a383-42d0-8da4-45026b02fc36 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3c3d8ad24e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=287 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.195 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-bdd05c8a-a383-42d0-8da4-45026b02fc36 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3c3d8ad24e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=287 identity=18403 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.195 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-bdd05c8a-a383-42d0-8da4-45026b02fc36 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3c3d8ad24e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=287 identity=18403 ipv4=10.0.0.195 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-bdd05c8a-a383-42d0-8da4-45026b02fc36 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3c3d8ad24e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=287 identity=18403 ipv4=10.0.0.195 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-bdd05c8a-a383-42d0-8da4-45026b02fc36 subsys=endpoint level=info msg="Successful endpoint creation" containerID=3c3d8ad24e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=287 identity=18403 ipv4=10.0.0.195 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-bdd05c8a-a383-42d0-8da4-45026b02fc36 subsys=daemon level=info msg="Delete endpoint request" containerID=3c3d8ad24e endpointID=287 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-bdd05c8a-a383-42d0-8da4-45026b02fc36 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=3c3d8ad24e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=287 identity=18403 ipv4=10.0.0.195 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-bdd05c8a-a383-42d0-8da4-45026b02fc36 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.160 7e20182f-9a7b-4960-8782-da38498f4256 default }" containerID=6da34a9ba005077a977534ebd7c7f3195144c3b689448f60bff13c6a8869f073 datapathConfiguration="&{false false false false false }" interface=lxcaab429df2bef k8sPodName=openstack/rabbitmq-keystone-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6da34a9ba0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2888 ipv4=10.0.0.160 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6da34a9ba0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2888 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.160 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-keystone;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=6da34a9ba0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2888 identity=3409 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.160 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6da34a9ba0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2888 identity=3409 ipv4=10.0.0.160 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6da34a9ba0 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2888 identity=3409 ipv4=10.0.0.160 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=6da34a9ba0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2888 identity=3409 ipv4=10.0.0.160 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.228 1648ea2d-1155-415d-bfdd-8e1aa579c678 default }" containerID=b3532689409975a4bbe59d18a7eb62667631101d89ece7babf5744145a40ff1b datapathConfiguration="&{false false false false false }" interface=lxc54775aba2698 k8sPodName=openstack/keystone-api-5b79948b8-jvs7z labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b353268940 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2799 ipv4=10.0.0.228 ipv6= k8sPodName=openstack/keystone-api-5b79948b8-jvs7z subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b353268940 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2799 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.228 ipv6= k8sPodName=openstack/keystone-api-5b79948b8-jvs7z subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b353268940 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2799 identity=9719 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.228 ipv6= k8sPodName=openstack/keystone-api-5b79948b8-jvs7z oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b353268940 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2799 identity=9719 ipv4=10.0.0.228 ipv6= k8sPodName=openstack/keystone-api-5b79948b8-jvs7z subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.95 77a47abf-f8fb-4599-b7f2-a5672dfb4089 default }" containerID=a1cf56b21ceab983ebf578601388d4413b235616192cc8ed275d3ae48f967fd3 datapathConfiguration="&{false false false false false }" interface=lxc14b63e4d6dfd k8sPodName=openstack/keystone-credential-setup-vj45j labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a1cf56b21c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=142 ipv4=10.0.0.95 ipv6= k8sPodName=openstack/keystone-credential-setup-vj45j subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a1cf56b21c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=142 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=6b072c5d-7c4c-4adf-84f9-1acf5a55a32d,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=6b072c5d-7c4c-4adf-84f9-1acf5a55a32d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.95 ipv6= k8sPodName=openstack/keystone-credential-setup-vj45j subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=6b072c5d-7c4c-4adf-84f9-1acf5a55a32d;k8s:batch.kubernetes.io/job-name=keystone-credential-setup;k8s:component=credential-setup;k8s:controller-uid=6b072c5d-7c4c-4adf-84f9-1acf5a55a32d;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-credential-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a1cf56b21c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=142 identity=6661 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=6b072c5d-7c4c-4adf-84f9-1acf5a55a32d,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=6b072c5d-7c4c-4adf-84f9-1acf5a55a32d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.95 ipv6= k8sPodName=openstack/keystone-credential-setup-vj45j oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a1cf56b21c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=142 identity=6661 ipv4=10.0.0.95 ipv6= k8sPodName=openstack/keystone-credential-setup-vj45j subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b353268940 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2799 identity=9719 ipv4=10.0.0.228 ipv6= k8sPodName=openstack/keystone-api-5b79948b8-jvs7z subsys=endpoint level=info msg="Successful endpoint creation" containerID=b353268940 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2799 identity=9719 ipv4=10.0.0.228 ipv6= k8sPodName=openstack/keystone-api-5b79948b8-jvs7z subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=a1cf56b21c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=142 identity=6661 ipv4=10.0.0.95 ipv6= k8sPodName=openstack/keystone-credential-setup-vj45j subsys=endpoint level=info msg="Successful endpoint creation" containerID=a1cf56b21c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=142 identity=6661 ipv4=10.0.0.95 ipv6= k8sPodName=openstack/keystone-credential-setup-vj45j subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=a1cf56b21c endpointID=142 k8sNamespace=openstack k8sPodName=keystone-credential-setup-vj45j subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=6b072c5d-7c4c-4adf-84f9-1acf5a55a32d k8s:batch.kubernetes.io/job-name=keystone-credential-setup k8s:component=credential-setup k8s:controller-uid=6b072c5d-7c4c-4adf-84f9-1acf5a55a32d k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-credential-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=a1cf56b21c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=142 identity=6661 ipv4=10.0.0.95 ipv6= k8sPodName=openstack/keystone-credential-setup-vj45j subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.27 ebae25d3-17e8-4aa1-a40a-eb8341dfb97c default }" containerID=b51879dd75657af4babd56d07096e99f6deca8b9fc01c60cb382a3bdcdf57e2b datapathConfiguration="&{false false false false false }" interface=lxc55955359db0c k8sPodName=openstack/keystone-db-init-psdgd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b51879dd75 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=104 ipv4=10.0.0.27 ipv6= k8sPodName=openstack/keystone-db-init-psdgd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b51879dd75 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=104 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=ae7f92eb-8258-4671-b988-22974fd1f29f,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=ae7f92eb-8258-4671-b988-22974fd1f29f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.27 ipv6= k8sPodName=openstack/keystone-db-init-psdgd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=ae7f92eb-8258-4671-b988-22974fd1f29f;k8s:batch.kubernetes.io/job-name=keystone-db-init;k8s:component=db-init;k8s:controller-uid=ae7f92eb-8258-4671-b988-22974fd1f29f;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b51879dd75 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=104 identity=39373 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=ae7f92eb-8258-4671-b988-22974fd1f29f,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=ae7f92eb-8258-4671-b988-22974fd1f29f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.27 ipv6= k8sPodName=openstack/keystone-db-init-psdgd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b51879dd75 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=104 identity=39373 ipv4=10.0.0.27 ipv6= k8sPodName=openstack/keystone-db-init-psdgd subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=b51879dd75 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=104 identity=39373 ipv4=10.0.0.27 ipv6= k8sPodName=openstack/keystone-db-init-psdgd subsys=endpoint level=info msg="Successful endpoint creation" containerID=b51879dd75 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=104 identity=39373 ipv4=10.0.0.27 ipv6= k8sPodName=openstack/keystone-db-init-psdgd subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=b51879dd75 endpointID=104 k8sNamespace=openstack k8sPodName=keystone-db-init-psdgd subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=ae7f92eb-8258-4671-b988-22974fd1f29f k8s:batch.kubernetes.io/job-name=keystone-db-init k8s:component=db-init k8s:controller-uid=ae7f92eb-8258-4671-b988-22974fd1f29f k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=b51879dd75 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=104 identity=39373 ipv4=10.0.0.27 ipv6= k8sPodName=openstack/keystone-db-init-psdgd subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.149 da70a44f-44c1-4509-a94a-02e4e684f3db default }" containerID=df9e6c2cc55796c83d178030f6d6280638e0c85e903f85f54a50d0c95c13d98e datapathConfiguration="&{false false false false false }" interface=lxc271047fa082c k8sPodName=openstack/keystone-fernet-setup-b2cqp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=df9e6c2cc5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1090 ipv4=10.0.0.149 ipv6= k8sPodName=openstack/keystone-fernet-setup-b2cqp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=df9e6c2cc5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1090 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=a3791775-85a8-4624-b6c8-3f08d61b4e20,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=a3791775-85a8-4624-b6c8-3f08d61b4e20,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.149 ipv6= k8sPodName=openstack/keystone-fernet-setup-b2cqp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=a3791775-85a8-4624-b6c8-3f08d61b4e20;k8s:batch.kubernetes.io/job-name=keystone-fernet-setup;k8s:component=fernet-setup;k8s:controller-uid=a3791775-85a8-4624-b6c8-3f08d61b4e20;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-fernet-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=df9e6c2cc5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1090 identity=6805 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=a3791775-85a8-4624-b6c8-3f08d61b4e20,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=a3791775-85a8-4624-b6c8-3f08d61b4e20,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.149 ipv6= k8sPodName=openstack/keystone-fernet-setup-b2cqp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=df9e6c2cc5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1090 identity=6805 ipv4=10.0.0.149 ipv6= k8sPodName=openstack/keystone-fernet-setup-b2cqp subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=df9e6c2cc5 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1090 identity=6805 ipv4=10.0.0.149 ipv6= k8sPodName=openstack/keystone-fernet-setup-b2cqp subsys=endpoint level=info msg="Successful endpoint creation" containerID=df9e6c2cc5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1090 identity=6805 ipv4=10.0.0.149 ipv6= k8sPodName=openstack/keystone-fernet-setup-b2cqp subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=df9e6c2cc5 endpointID=1090 k8sNamespace=openstack k8sPodName=keystone-fernet-setup-b2cqp subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=a3791775-85a8-4624-b6c8-3f08d61b4e20 k8s:batch.kubernetes.io/job-name=keystone-fernet-setup k8s:component=fernet-setup k8s:controller-uid=a3791775-85a8-4624-b6c8-3f08d61b4e20 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-fernet-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=df9e6c2cc5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1090 identity=6805 ipv4=10.0.0.149 ipv6= k8sPodName=openstack/keystone-fernet-setup-b2cqp subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.45 16afad0e-d19e-4de2-a17a-c48f5a72142d default }" containerID=58f434a6a78eaf992b569324dfb8078dea6d12252572442d76c5c333f439c4c4 datapathConfiguration="&{false false false false false }" interface=lxc87d6508607bc k8sPodName=openstack/keystone-db-sync-x79wb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=58f434a6a7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1877 ipv4=10.0.0.45 ipv6= k8sPodName=openstack/keystone-db-sync-x79wb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=58f434a6a7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1877 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=fdd3c195-884a-49c1-bb52-f870ed3c0a9e,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=fdd3c195-884a-49c1-bb52-f870ed3c0a9e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.45 ipv6= k8sPodName=openstack/keystone-db-sync-x79wb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=fdd3c195-884a-49c1-bb52-f870ed3c0a9e;k8s:batch.kubernetes.io/job-name=keystone-db-sync;k8s:component=db-sync;k8s:controller-uid=fdd3c195-884a-49c1-bb52-f870ed3c0a9e;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-sync;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=58f434a6a7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1877 identity=35038 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=fdd3c195-884a-49c1-bb52-f870ed3c0a9e,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=fdd3c195-884a-49c1-bb52-f870ed3c0a9e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.45 ipv6= k8sPodName=openstack/keystone-db-sync-x79wb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=58f434a6a7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1877 identity=35038 ipv4=10.0.0.45 ipv6= k8sPodName=openstack/keystone-db-sync-x79wb subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=58f434a6a7 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1877 identity=35038 ipv4=10.0.0.45 ipv6= k8sPodName=openstack/keystone-db-sync-x79wb subsys=endpoint level=info msg="Successful endpoint creation" containerID=58f434a6a7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1877 identity=35038 ipv4=10.0.0.45 ipv6= k8sPodName=openstack/keystone-db-sync-x79wb subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=58f434a6a7 endpointID=1877 k8sNamespace=openstack k8sPodName=keystone-db-sync-x79wb subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=fdd3c195-884a-49c1-bb52-f870ed3c0a9e k8s:batch.kubernetes.io/job-name=keystone-db-sync k8s:component=db-sync k8s:controller-uid=fdd3c195-884a-49c1-bb52-f870ed3c0a9e k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-sync k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=58f434a6a7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1877 identity=35038 ipv4=10.0.0.45 ipv6= k8sPodName=openstack/keystone-db-sync-x79wb subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.9 42a01019-9c62-41fa-9a71-646bb494bcfc default }" containerID=3ed0c61c9e8af7b271a1e5a1c42edc7f2826e93a33ac276828fc401fbce71659 datapathConfiguration="&{false false false false false }" interface=lxc65a45494c005 k8sPodName=openstack/keystone-rabbit-init-4bwcd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3ed0c61c9e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3218 ipv4=10.0.0.9 ipv6= k8sPodName=openstack/keystone-rabbit-init-4bwcd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3ed0c61c9e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3218 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=4f47151b-21a7-41c7-a788-86520c30f105,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=4f47151b-21a7-41c7-a788-86520c30f105,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.9 ipv6= k8sPodName=openstack/keystone-rabbit-init-4bwcd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=4f47151b-21a7-41c7-a788-86520c30f105;k8s:batch.kubernetes.io/job-name=keystone-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=4f47151b-21a7-41c7-a788-86520c30f105;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-rabbit-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3ed0c61c9e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3218 identity=34161 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=4f47151b-21a7-41c7-a788-86520c30f105,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=4f47151b-21a7-41c7-a788-86520c30f105,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.9 ipv6= k8sPodName=openstack/keystone-rabbit-init-4bwcd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3ed0c61c9e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3218 identity=34161 ipv4=10.0.0.9 ipv6= k8sPodName=openstack/keystone-rabbit-init-4bwcd subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=3ed0c61c9e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3218 identity=34161 ipv4=10.0.0.9 ipv6= k8sPodName=openstack/keystone-rabbit-init-4bwcd subsys=endpoint level=info msg="Successful endpoint creation" containerID=3ed0c61c9e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3218 identity=34161 ipv4=10.0.0.9 ipv6= k8sPodName=openstack/keystone-rabbit-init-4bwcd subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=3ed0c61c9e endpointID=3218 k8sNamespace=openstack k8sPodName=keystone-rabbit-init-4bwcd subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=4f47151b-21a7-41c7-a788-86520c30f105 k8s:batch.kubernetes.io/job-name=keystone-rabbit-init k8s:component=rabbit-init k8s:controller-uid=4f47151b-21a7-41c7-a788-86520c30f105 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-rabbit-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=3ed0c61c9e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3218 identity=34161 ipv4=10.0.0.9 ipv6= k8sPodName=openstack/keystone-rabbit-init-4bwcd subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.172 48104b72-6c9f-4dbb-8143-dfa44ad8fc9a default }" containerID=9cfca3ee9794bad0d077c62e6a10dbd24da2b66584d0044025d99212adb42be4 datapathConfiguration="&{false false false false false }" interface=lxcdbfec76eafe8 k8sPodName=openstack/keystone-domain-manage-sth2l labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9cfca3ee97 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=994 ipv4=10.0.0.172 ipv6= k8sPodName=openstack/keystone-domain-manage-sth2l subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9cfca3ee97 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=994 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=198c60bf-b00d-4b15-997a-ce89d9beebf9,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=198c60bf-b00d-4b15-997a-ce89d9beebf9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.172 ipv6= k8sPodName=openstack/keystone-domain-manage-sth2l subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=198c60bf-b00d-4b15-997a-ce89d9beebf9;k8s:batch.kubernetes.io/job-name=keystone-domain-manage;k8s:component=domain-manage;k8s:controller-uid=198c60bf-b00d-4b15-997a-ce89d9beebf9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-domain-manage;k8s:release_group=keystone;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=9cfca3ee97 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=994 identity=64429 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=198c60bf-b00d-4b15-997a-ce89d9beebf9,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=198c60bf-b00d-4b15-997a-ce89d9beebf9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.172 ipv6= k8sPodName=openstack/keystone-domain-manage-sth2l oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9cfca3ee97 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=994 identity=64429 ipv4=10.0.0.172 ipv6= k8sPodName=openstack/keystone-domain-manage-sth2l subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9cfca3ee97 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=994 identity=64429 ipv4=10.0.0.172 ipv6= k8sPodName=openstack/keystone-domain-manage-sth2l subsys=endpoint level=info msg="Successful endpoint creation" containerID=9cfca3ee97 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=994 identity=64429 ipv4=10.0.0.172 ipv6= k8sPodName=openstack/keystone-domain-manage-sth2l subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=9cfca3ee97 endpointID=994 k8sNamespace=openstack k8sPodName=keystone-domain-manage-sth2l subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=198c60bf-b00d-4b15-997a-ce89d9beebf9 k8s:batch.kubernetes.io/job-name=keystone-domain-manage k8s:component=domain-manage k8s:controller-uid=198c60bf-b00d-4b15-997a-ce89d9beebf9 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-domain-manage k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=9cfca3ee97 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=994 identity=64429 ipv4=10.0.0.172 ipv6= k8sPodName=openstack/keystone-domain-manage-sth2l subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.192 47e2d659-cc04-4f85-a7ea-694dccd3f33e default }" containerID=984918adf2da06bab2edf63640a503b7f3b413ad4397471bcc6adb2e617c0d5c datapathConfiguration="&{false false false false false }" interface=lxcdf87d49ea5d6 k8sPodName=openstack/keystone-bootstrap-tvgx8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=984918adf2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=82 ipv4=10.0.0.192 ipv6= k8sPodName=openstack/keystone-bootstrap-tvgx8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=984918adf2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=82 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=c8896b0d-ab2b-4d96-bfc1-563733fa9f72,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=c8896b0d-ab2b-4d96-bfc1-563733fa9f72,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.192 ipv6= k8sPodName=openstack/keystone-bootstrap-tvgx8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=c8896b0d-ab2b-4d96-bfc1-563733fa9f72;k8s:batch.kubernetes.io/job-name=keystone-bootstrap;k8s:component=bootstrap;k8s:controller-uid=c8896b0d-ab2b-4d96-bfc1-563733fa9f72;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-bootstrap;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=984918adf2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=82 identity=31175 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=c8896b0d-ab2b-4d96-bfc1-563733fa9f72,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=c8896b0d-ab2b-4d96-bfc1-563733fa9f72,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.192 ipv6= k8sPodName=openstack/keystone-bootstrap-tvgx8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=984918adf2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=82 identity=31175 ipv4=10.0.0.192 ipv6= k8sPodName=openstack/keystone-bootstrap-tvgx8 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=984918adf2 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=82 identity=31175 ipv4=10.0.0.192 ipv6= k8sPodName=openstack/keystone-bootstrap-tvgx8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=984918adf2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=82 identity=31175 ipv4=10.0.0.192 ipv6= k8sPodName=openstack/keystone-bootstrap-tvgx8 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=984918adf2 endpointID=82 k8sNamespace=openstack k8sPodName=keystone-bootstrap-tvgx8 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=c8896b0d-ab2b-4d96-bfc1-563733fa9f72 k8s:batch.kubernetes.io/job-name=keystone-bootstrap k8s:component=bootstrap k8s:controller-uid=c8896b0d-ab2b-4d96-bfc1-563733fa9f72 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-bootstrap k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=984918adf2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=82 identity=31175 ipv4=10.0.0.192 ipv6= k8sPodName=openstack/keystone-bootstrap-tvgx8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.109 6fb52087-ed64-4a46-bc97-afc765d2ae5c default }" containerID=d7b176e357d8e79420b4ae8a542426b4634e689b9e185f2edf3b52b58afce621 datapathConfiguration="&{false false false false false }" interface=lxc0e9b9698f773 k8sPodName=local-path-storage/helper-pod-create-pvc-3e612224-c9dc-46d8-999f-84e41a0b3e27 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d7b176e357 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2711 ipv4=10.0.0.109 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3e612224-c9dc-46d8-999f-84e41a0b3e27 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d7b176e357 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2711 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.109 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3e612224-c9dc-46d8-999f-84e41a0b3e27 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d7b176e357 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2711 identity=18403 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.109 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3e612224-c9dc-46d8-999f-84e41a0b3e27 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d7b176e357 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2711 identity=18403 ipv4=10.0.0.109 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3e612224-c9dc-46d8-999f-84e41a0b3e27 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d7b176e357 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2711 identity=18403 ipv4=10.0.0.109 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3e612224-c9dc-46d8-999f-84e41a0b3e27 subsys=endpoint level=info msg="Successful endpoint creation" containerID=d7b176e357 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2711 identity=18403 ipv4=10.0.0.109 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3e612224-c9dc-46d8-999f-84e41a0b3e27 subsys=daemon level=info msg="Delete endpoint request" containerID=d7b176e357 endpointID=2711 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-3e612224-c9dc-46d8-999f-84e41a0b3e27 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=d7b176e357 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2711 identity=18403 ipv4=10.0.0.109 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3e612224-c9dc-46d8-999f-84e41a0b3e27 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.203 154dc293-8460-43b8-9078-676ed15c4c4b default }" containerID=328236e01caaa88ed9389491ef50cfe20337158deef48222cf253185693c4170 datapathConfiguration="&{false false false false false }" interface=lxc0761e68d167f k8sPodName=openstack/rabbitmq-barbican-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=328236e01c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1322 ipv4=10.0.0.203 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=328236e01c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1322 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.203 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-barbican;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=328236e01c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1322 identity=14558 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.203 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=328236e01c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1322 identity=14558 ipv4=10.0.0.203 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=328236e01c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1322 identity=14558 ipv4=10.0.0.203 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=328236e01c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1322 identity=14558 ipv4=10.0.0.203 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.60 a06aabcd-28e5-42bc-ae4c-6f9b62919963 default }" containerID=6a0770aef5ac9a81d39d9f99fd7d07385ee2c8c0ec7b43ab10effefedb534e87 datapathConfiguration="&{false false false false false }" interface=lxc309f7832a7a0 k8sPodName=openstack/barbican-api-85c4d64544-jpgvv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6a0770aef5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2772 ipv4=10.0.0.60 ipv6= k8sPodName=openstack/barbican-api-85c4d64544-jpgvv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6a0770aef5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2772 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.60 ipv6= k8sPodName=openstack/barbican-api-85c4d64544-jpgvv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=6a0770aef5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2772 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.60 ipv6= k8sPodName=openstack/barbican-api-85c4d64544-jpgvv line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6a0770aef5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2772 identity=19640 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.60 ipv6= k8sPodName=openstack/barbican-api-85c4d64544-jpgvv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6a0770aef5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2772 identity=19640 ipv4=10.0.0.60 ipv6= k8sPodName=openstack/barbican-api-85c4d64544-jpgvv subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.138 5eab1437-7deb-4280-a5ee-8f42f469e5f3 default }" containerID=8ebeb4297f5e73af5b02f6b106862ed04b625acf28db8b9841074f97cfb2569a datapathConfiguration="&{false false false false false }" interface=lxc831188ffcb08 k8sPodName=openstack/barbican-db-init-52nbk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8ebeb4297f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1914 ipv4=10.0.0.138 ipv6= k8sPodName=openstack/barbican-db-init-52nbk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8ebeb4297f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1914 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=24df6a9f-1a9f-4a74-8ef8-3ecdf67f6d97,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=24df6a9f-1a9f-4a74-8ef8-3ecdf67f6d97,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.138 ipv6= k8sPodName=openstack/barbican-db-init-52nbk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=24df6a9f-1a9f-4a74-8ef8-3ecdf67f6d97;k8s:batch.kubernetes.io/job-name=barbican-db-init;k8s:component=db-init;k8s:controller-uid=24df6a9f-1a9f-4a74-8ef8-3ecdf67f6d97;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8ebeb4297f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1914 identity=5117 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=24df6a9f-1a9f-4a74-8ef8-3ecdf67f6d97,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=24df6a9f-1a9f-4a74-8ef8-3ecdf67f6d97,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.138 ipv6= k8sPodName=openstack/barbican-db-init-52nbk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8ebeb4297f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1914 identity=5117 ipv4=10.0.0.138 ipv6= k8sPodName=openstack/barbican-db-init-52nbk subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6a0770aef5 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2772 identity=19640 ipv4=10.0.0.60 ipv6= k8sPodName=openstack/barbican-api-85c4d64544-jpgvv subsys=endpoint level=info msg="Successful endpoint creation" containerID=6a0770aef5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2772 identity=19640 ipv4=10.0.0.60 ipv6= k8sPodName=openstack/barbican-api-85c4d64544-jpgvv subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=8ebeb4297f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1914 identity=5117 ipv4=10.0.0.138 ipv6= k8sPodName=openstack/barbican-db-init-52nbk subsys=endpoint level=info msg="Successful endpoint creation" containerID=8ebeb4297f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1914 identity=5117 ipv4=10.0.0.138 ipv6= k8sPodName=openstack/barbican-db-init-52nbk subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=8ebeb4297f endpointID=1914 k8sNamespace=openstack k8sPodName=barbican-db-init-52nbk subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=24df6a9f-1a9f-4a74-8ef8-3ecdf67f6d97 k8s:batch.kubernetes.io/job-name=barbican-db-init k8s:component=db-init k8s:controller-uid=24df6a9f-1a9f-4a74-8ef8-3ecdf67f6d97 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=8ebeb4297f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1914 identity=5117 ipv4=10.0.0.138 ipv6= k8sPodName=openstack/barbican-db-init-52nbk subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.195 850acd0c-6f70-4bed-9e07-24f7420396a2 default }" containerID=8d303b6261edc272c239043f24b59171f992584947c1f3c828f53f10ef6c8fde datapathConfiguration="&{false false false false false }" interface=lxcd0bf8226ea08 k8sPodName=openstack/barbican-db-sync-25z9p labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8d303b6261 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=297 ipv4=10.0.0.195 ipv6= k8sPodName=openstack/barbican-db-sync-25z9p subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8d303b6261 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=297 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=23747581-539d-47c0-8ea6-569ae79e2491,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=23747581-539d-47c0-8ea6-569ae79e2491,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.195 ipv6= k8sPodName=openstack/barbican-db-sync-25z9p subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=23747581-539d-47c0-8ea6-569ae79e2491;k8s:batch.kubernetes.io/job-name=barbican-db-sync;k8s:component=db-sync;k8s:controller-uid=23747581-539d-47c0-8ea6-569ae79e2491;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-sync;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8d303b6261 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=297 identity=20851 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=23747581-539d-47c0-8ea6-569ae79e2491,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=23747581-539d-47c0-8ea6-569ae79e2491,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.195 ipv6= k8sPodName=openstack/barbican-db-sync-25z9p oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8d303b6261 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=297 identity=20851 ipv4=10.0.0.195 ipv6= k8sPodName=openstack/barbican-db-sync-25z9p subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8d303b6261 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=297 identity=20851 ipv4=10.0.0.195 ipv6= k8sPodName=openstack/barbican-db-sync-25z9p subsys=endpoint level=info msg="Successful endpoint creation" containerID=8d303b6261 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=297 identity=20851 ipv4=10.0.0.195 ipv6= k8sPodName=openstack/barbican-db-sync-25z9p subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=8d303b6261 endpointID=297 k8sNamespace=openstack k8sPodName=barbican-db-sync-25z9p subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=23747581-539d-47c0-8ea6-569ae79e2491 k8s:batch.kubernetes.io/job-name=barbican-db-sync k8s:component=db-sync k8s:controller-uid=23747581-539d-47c0-8ea6-569ae79e2491 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-sync k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=8d303b6261 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=297 identity=20851 ipv4=10.0.0.195 ipv6= k8sPodName=openstack/barbican-db-sync-25z9p subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.170 adb8b83d-47e3-4080-9fe9-a2b401d735a1 default }" containerID=3816046b9bd7c600f6695cad2c84748420a40f6b06e2147fa286460823f312f9 datapathConfiguration="&{false false false false false }" interface=lxca748131e6423 k8sPodName=openstack/barbican-rabbit-init-92xlb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3816046b9b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2267 ipv4=10.0.0.170 ipv6= k8sPodName=openstack/barbican-rabbit-init-92xlb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3816046b9b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2267 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=7c261b21-5760-4f84-86c2-d9f4a7085785,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=7c261b21-5760-4f84-86c2-d9f4a7085785,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.170 ipv6= k8sPodName=openstack/barbican-rabbit-init-92xlb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=3816046b9b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2267 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.170 ipv6= k8sPodName=openstack/barbican-rabbit-init-92xlb line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=7c261b21-5760-4f84-86c2-d9f4a7085785;k8s:batch.kubernetes.io/job-name=barbican-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=7c261b21-5760-4f84-86c2-d9f4a7085785;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-rabbit-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3816046b9b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2267 identity=5877 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=7c261b21-5760-4f84-86c2-d9f4a7085785,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=7c261b21-5760-4f84-86c2-d9f4a7085785,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.170 ipv6= k8sPodName=openstack/barbican-rabbit-init-92xlb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3816046b9b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2267 identity=5877 ipv4=10.0.0.170 ipv6= k8sPodName=openstack/barbican-rabbit-init-92xlb subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3816046b9b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2267 identity=5877 ipv4=10.0.0.170 ipv6= k8sPodName=openstack/barbican-rabbit-init-92xlb subsys=endpoint level=info msg="Successful endpoint creation" containerID=3816046b9b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2267 identity=5877 ipv4=10.0.0.170 ipv6= k8sPodName=openstack/barbican-rabbit-init-92xlb subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=3816046b9b endpointID=2267 k8sNamespace=openstack k8sPodName=barbican-rabbit-init-92xlb subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=7c261b21-5760-4f84-86c2-d9f4a7085785 k8s:batch.kubernetes.io/job-name=barbican-rabbit-init k8s:component=rabbit-init k8s:controller-uid=7c261b21-5760-4f84-86c2-d9f4a7085785 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-rabbit-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=3816046b9b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2267 identity=5877 ipv4=10.0.0.170 ipv6= k8sPodName=openstack/barbican-rabbit-init-92xlb subsys=endpoint level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.0362113977301933 newInterval=11m15s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.150 87d2340e-ed6b-4e41-b96e-952bd15a1fe4 default }" containerID=6f5606209a45226e77bc7f7591005be6265c0c894ae9397f3ceb2fdb71f27a09 datapathConfiguration="&{false false false false false }" interface=lxc562b469c24d1 k8sPodName=openstack/barbican-ks-service-gcqvq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6f5606209a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2365 ipv4=10.0.0.150 ipv6= k8sPodName=openstack/barbican-ks-service-gcqvq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6f5606209a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2365 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=3d60eb51-9ebb-4074-bf3b-8c2897d2764e,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=3d60eb51-9ebb-4074-bf3b-8c2897d2764e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.150 ipv6= k8sPodName=openstack/barbican-ks-service-gcqvq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=3d60eb51-9ebb-4074-bf3b-8c2897d2764e;k8s:batch.kubernetes.io/job-name=barbican-ks-service;k8s:component=ks-service;k8s:controller-uid=3d60eb51-9ebb-4074-bf3b-8c2897d2764e;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-service;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6f5606209a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2365 identity=51527 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=3d60eb51-9ebb-4074-bf3b-8c2897d2764e,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=3d60eb51-9ebb-4074-bf3b-8c2897d2764e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.150 ipv6= k8sPodName=openstack/barbican-ks-service-gcqvq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6f5606209a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2365 identity=51527 ipv4=10.0.0.150 ipv6= k8sPodName=openstack/barbican-ks-service-gcqvq subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=6f5606209a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2365 identity=51527 ipv4=10.0.0.150 ipv6= k8sPodName=openstack/barbican-ks-service-gcqvq subsys=endpoint level=info msg="Successful endpoint creation" containerID=6f5606209a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2365 identity=51527 ipv4=10.0.0.150 ipv6= k8sPodName=openstack/barbican-ks-service-gcqvq subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=6f5606209a endpointID=2365 k8sNamespace=openstack k8sPodName=barbican-ks-service-gcqvq subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=3d60eb51-9ebb-4074-bf3b-8c2897d2764e k8s:batch.kubernetes.io/job-name=barbican-ks-service k8s:component=ks-service k8s:controller-uid=3d60eb51-9ebb-4074-bf3b-8c2897d2764e k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-service k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=6f5606209a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2365 identity=51527 ipv4=10.0.0.150 ipv6= k8sPodName=openstack/barbican-ks-service-gcqvq subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.123 131eb962-e93c-49ec-a942-ad93d30e12d8 default }" containerID=8613a60ba1cb4c167a4a263d0f3e598b193a6e50812cfc8c4d07783286a63dbe datapathConfiguration="&{false false false false false }" interface=lxcc8a49f2e7fbc k8sPodName=openstack/barbican-ks-endpoints-krq62 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8613a60ba1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1212 ipv4=10.0.0.123 ipv6= k8sPodName=openstack/barbican-ks-endpoints-krq62 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8613a60ba1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1212 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=2cf3f775-533d-4aef-a99c-9c95c5ac1abd,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=2cf3f775-533d-4aef-a99c-9c95c5ac1abd,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.123 ipv6= k8sPodName=openstack/barbican-ks-endpoints-krq62 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=2cf3f775-533d-4aef-a99c-9c95c5ac1abd;k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=2cf3f775-533d-4aef-a99c-9c95c5ac1abd;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-endpoints;k8s:release_group=barbican;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=8613a60ba1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1212 identity=1558 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=2cf3f775-533d-4aef-a99c-9c95c5ac1abd,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=2cf3f775-533d-4aef-a99c-9c95c5ac1abd,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.123 ipv6= k8sPodName=openstack/barbican-ks-endpoints-krq62 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8613a60ba1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1212 identity=1558 ipv4=10.0.0.123 ipv6= k8sPodName=openstack/barbican-ks-endpoints-krq62 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8613a60ba1 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1212 identity=1558 ipv4=10.0.0.123 ipv6= k8sPodName=openstack/barbican-ks-endpoints-krq62 subsys=endpoint level=info msg="Successful endpoint creation" containerID=8613a60ba1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1212 identity=1558 ipv4=10.0.0.123 ipv6= k8sPodName=openstack/barbican-ks-endpoints-krq62 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=8613a60ba1 endpointID=1212 k8sNamespace=openstack k8sPodName=barbican-ks-endpoints-krq62 subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=2cf3f775-533d-4aef-a99c-9c95c5ac1abd k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=2cf3f775-533d-4aef-a99c-9c95c5ac1abd k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-endpoints k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=8613a60ba1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1212 identity=1558 ipv4=10.0.0.123 ipv6= k8sPodName=openstack/barbican-ks-endpoints-krq62 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.192 8275d9c1-d9ca-4805-8e5e-5a928491ff98 default }" containerID=e86e8e01ac751d125e8327be24c55815761c2873617b2262541b57e0fe9782a2 datapathConfiguration="&{false false false false false }" interface=lxc19a959665f8a k8sPodName=openstack/barbican-ks-user-hvtv5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e86e8e01ac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=856 ipv4=10.0.0.192 ipv6= k8sPodName=openstack/barbican-ks-user-hvtv5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e86e8e01ac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=856 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=66251714-adf9-431a-83c6-78a070eacf26,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=66251714-adf9-431a-83c6-78a070eacf26,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.192 ipv6= k8sPodName=openstack/barbican-ks-user-hvtv5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=e86e8e01ac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=856 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.192 ipv6= k8sPodName=openstack/barbican-ks-user-hvtv5 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=66251714-adf9-431a-83c6-78a070eacf26;k8s:batch.kubernetes.io/job-name=barbican-ks-user;k8s:component=ks-user;k8s:controller-uid=66251714-adf9-431a-83c6-78a070eacf26;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-user;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e86e8e01ac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=856 identity=9170 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=66251714-adf9-431a-83c6-78a070eacf26,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=66251714-adf9-431a-83c6-78a070eacf26,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.192 ipv6= k8sPodName=openstack/barbican-ks-user-hvtv5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e86e8e01ac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=856 identity=9170 ipv4=10.0.0.192 ipv6= k8sPodName=openstack/barbican-ks-user-hvtv5 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e86e8e01ac datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=856 identity=9170 ipv4=10.0.0.192 ipv6= k8sPodName=openstack/barbican-ks-user-hvtv5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=e86e8e01ac datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=856 identity=9170 ipv4=10.0.0.192 ipv6= k8sPodName=openstack/barbican-ks-user-hvtv5 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=e86e8e01ac endpointID=856 k8sNamespace=openstack k8sPodName=barbican-ks-user-hvtv5 subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=66251714-adf9-431a-83c6-78a070eacf26 k8s:batch.kubernetes.io/job-name=barbican-ks-user k8s:component=ks-user k8s:controller-uid=66251714-adf9-431a-83c6-78a070eacf26 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-user k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=e86e8e01ac datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=856 identity=9170 ipv4=10.0.0.192 ipv6= k8sPodName=openstack/barbican-ks-user-hvtv5 subsys=endpoint level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Create endpoint request" addressing="&{10.0.0.133 f1da4be6-4db5-43ad-903d-e7df37e5c7a8 default }" containerID=c801b6412eb538544b1d84359f2c9858d0d31a87e191055b10e61ad555d081da datapathConfiguration="&{false false false false false }" interface=lxc8af870401a51 k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-txqks labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c801b6412e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=372 ipv4=10.0.0.133 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-txqks subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c801b6412e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=372 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.15.9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.133 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-txqks subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:rook-ceph k8s:io.cilium.k8s.namespace.labels.name:rook-ceph]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app=rook-ceph-operator;k8s:helm.sh/chart=rook-ceph-v1.15.9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph;k8s:io.cilium.k8s.namespace.labels.name=rook-ceph;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system;k8s:io.kubernetes.pod.namespace=rook-ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c801b6412e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=372 identity=46972 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.15.9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.133 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-txqks oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c801b6412e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=372 identity=46972 ipv4=10.0.0.133 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-txqks subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c801b6412e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=372 identity=46972 ipv4=10.0.0.133 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-txqks subsys=endpoint level=info msg="Successful endpoint creation" containerID=c801b6412e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=372 identity=46972 ipv4=10.0.0.133 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-txqks subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.162 e9235f99-0908-4b32-902a-42c66571e090 default }" containerID=eb00d0652160777adb5a54edebba0c6e5f771a4841c073466a198a22325846ce datapathConfiguration="&{false false false false false }" interface=lxcb81d2e0287f8 k8sPodName=openstack/rook-ceph-detect-version-dhvl2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=eb00d06521 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3536 ipv4=10.0.0.162 ipv6= k8sPodName=openstack/rook-ceph-detect-version-dhvl2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=eb00d06521 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3536 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=34225879-c5a3-44bd-b52a-d116ee38effd,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=34225879-c5a3-44bd-b52a-d116ee38effd,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.162 ipv6= k8sPodName=openstack/rook-ceph-detect-version-dhvl2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app=rook-ceph-detect-version;k8s:batch.kubernetes.io/controller-uid=34225879-c5a3-44bd-b52a-d116ee38effd;k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version;k8s:controller-uid=34225879-c5a3-44bd-b52a-d116ee38effd;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=rook-ceph-detect-version;k8s:rook-version=v1.15.9;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=eb00d06521 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3536 identity=33978 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=34225879-c5a3-44bd-b52a-d116ee38effd,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=34225879-c5a3-44bd-b52a-d116ee38effd,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.162 ipv6= k8sPodName=openstack/rook-ceph-detect-version-dhvl2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=eb00d06521 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3536 identity=33978 ipv4=10.0.0.162 ipv6= k8sPodName=openstack/rook-ceph-detect-version-dhvl2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=eb00d06521 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3536 identity=33978 ipv4=10.0.0.162 ipv6= k8sPodName=openstack/rook-ceph-detect-version-dhvl2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=eb00d06521 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3536 identity=33978 ipv4=10.0.0.162 ipv6= k8sPodName=openstack/rook-ceph-detect-version-dhvl2 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=eb00d06521 endpointID=3536 k8sNamespace=openstack k8sPodName=rook-ceph-detect-version-dhvl2 subsys=daemon level=info msg="Releasing key" key="[k8s:app=rook-ceph-detect-version k8s:batch.kubernetes.io/controller-uid=34225879-c5a3-44bd-b52a-d116ee38effd k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version k8s:controller-uid=34225879-c5a3-44bd-b52a-d116ee38effd k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=rook-ceph-detect-version k8s:rook-version=v1.15.9]" subsys=allocator level=info msg="Removed endpoint" containerID=eb00d06521 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3536 identity=33978 ipv4=10.0.0.162 ipv6= k8sPodName=openstack/rook-ceph-detect-version-dhvl2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.253 609598f2-f371-4bb0-8359-5e1c0c35dc92 default }" containerID=797c0383e8ba76dc9fd9ea663b5bb4bde28016d32fe567a24b8aaa5484b316c4 datapathConfiguration="&{false false false false false }" interface=lxc1e94467fd3e0 k8sPodName=openstack/ceph-object-controller-detect-version-pqnbr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=797c0383e8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=463 ipv4=10.0.0.253 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-pqnbr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=797c0383e8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=463 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=21da8cbb-c55a-40b5-898a-a129f67ea2f5,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=21da8cbb-c55a-40b5-898a-a129f67ea2f5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.253 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-pqnbr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=ceph-object-controller-detect-version;k8s:batch.kubernetes.io/controller-uid=21da8cbb-c55a-40b5-898a-a129f67ea2f5;k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version;k8s:controller-uid=21da8cbb-c55a-40b5-898a-a129f67ea2f5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=ceph-object-controller-detect-version;k8s:rook-version=v1.15.9;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=797c0383e8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=463 identity=62327 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=21da8cbb-c55a-40b5-898a-a129f67ea2f5,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=21da8cbb-c55a-40b5-898a-a129f67ea2f5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.253 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-pqnbr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=797c0383e8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=463 identity=62327 ipv4=10.0.0.253 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-pqnbr subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=797c0383e8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=463 identity=62327 ipv4=10.0.0.253 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-pqnbr subsys=endpoint level=info msg="Successful endpoint creation" containerID=797c0383e8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=463 identity=62327 ipv4=10.0.0.253 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-pqnbr subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=797c0383e8 endpointID=463 k8sNamespace=openstack k8sPodName=ceph-object-controller-detect-version-pqnbr subsys=daemon level=info msg="Releasing key" key="[k8s:app=ceph-object-controller-detect-version k8s:batch.kubernetes.io/controller-uid=21da8cbb-c55a-40b5-898a-a129f67ea2f5 k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version k8s:controller-uid=21da8cbb-c55a-40b5-898a-a129f67ea2f5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=ceph-object-controller-detect-version k8s:rook-version=v1.15.9]" subsys=allocator level=info msg="Removed endpoint" containerID=797c0383e8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=463 identity=62327 ipv4=10.0.0.253 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-pqnbr subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.121 8f08b93c-c952-445e-b1da-72a90295e4a8 default }" containerID=9ee2c9777cd94410999667f28ff54415788348a80ab8f7fda6099a130b9a7e5c datapathConfiguration="&{false false false false false }" interface=lxcd0bb81cce10e k8sPodName=local-path-storage/helper-pod-create-pvc-14d4800e-a9e7-48d6-89fc-fb80e63df766 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9ee2c9777c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=786 ipv4=10.0.0.121 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-14d4800e-a9e7-48d6-89fc-fb80e63df766 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9ee2c9777c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=786 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.121 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-14d4800e-a9e7-48d6-89fc-fb80e63df766 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9ee2c9777c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=786 identity=18403 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.121 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-14d4800e-a9e7-48d6-89fc-fb80e63df766 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9ee2c9777c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=786 identity=18403 ipv4=10.0.0.121 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-14d4800e-a9e7-48d6-89fc-fb80e63df766 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9ee2c9777c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=786 identity=18403 ipv4=10.0.0.121 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-14d4800e-a9e7-48d6-89fc-fb80e63df766 subsys=endpoint level=info msg="Successful endpoint creation" containerID=9ee2c9777c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=786 identity=18403 ipv4=10.0.0.121 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-14d4800e-a9e7-48d6-89fc-fb80e63df766 subsys=daemon level=info msg="Delete endpoint request" containerID=9ee2c9777c endpointID=786 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-14d4800e-a9e7-48d6-89fc-fb80e63df766 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=9ee2c9777c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=786 identity=18403 ipv4=10.0.0.121 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-14d4800e-a9e7-48d6-89fc-fb80e63df766 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.140 c8a17ac9-e26e-4e87-bead-db55aab3a3e4 default }" containerID=6d0bfb4611ce58ec4409620832e38a5ee954215ee374bc31693a9b2c6cc2f713 datapathConfiguration="&{false false false false false }" interface=lxca79499b81810 k8sPodName=openstack/rabbitmq-glance-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6d0bfb4611 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3473 ipv4=10.0.0.140 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6d0bfb4611 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3473 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.140 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-glance;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6d0bfb4611 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3473 identity=21294 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.140 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=6d0bfb4611 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3473 identity=21294 ipv4=10.0.0.140 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6d0bfb4611 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3473 identity=21294 ipv4=10.0.0.140 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=6d0bfb4611 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3473 identity=21294 ipv4=10.0.0.140 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.134 f65c44e1-bd8d-4769-8c9b-859818a760e7 default }" containerID=349bf3ce8b526ab09035598301629eed99af11575adc3cbf67228d7f0752a8ab datapathConfiguration="&{false false false false false }" interface=lxc5128ccd1713c k8sPodName=openstack/glance-db-init-9pzdv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=349bf3ce8b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=413 ipv4=10.0.0.134 ipv6= k8sPodName=openstack/glance-db-init-9pzdv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=349bf3ce8b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=413 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=4b953653-2eb2-4e64-9b68-d2c30680d33a,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=4b953653-2eb2-4e64-9b68-d2c30680d33a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.134 ipv6= k8sPodName=openstack/glance-db-init-9pzdv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=4b953653-2eb2-4e64-9b68-d2c30680d33a;k8s:batch.kubernetes.io/job-name=glance-db-init;k8s:component=db-init;k8s:controller-uid=4b953653-2eb2-4e64-9b68-d2c30680d33a;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=349bf3ce8b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=413 identity=17313 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=4b953653-2eb2-4e64-9b68-d2c30680d33a,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=4b953653-2eb2-4e64-9b68-d2c30680d33a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.134 ipv6= k8sPodName=openstack/glance-db-init-9pzdv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=349bf3ce8b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=413 identity=17313 ipv4=10.0.0.134 ipv6= k8sPodName=openstack/glance-db-init-9pzdv subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=349bf3ce8b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=413 identity=17313 ipv4=10.0.0.134 ipv6= k8sPodName=openstack/glance-db-init-9pzdv subsys=endpoint level=info msg="Successful endpoint creation" containerID=349bf3ce8b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=413 identity=17313 ipv4=10.0.0.134 ipv6= k8sPodName=openstack/glance-db-init-9pzdv subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=349bf3ce8b endpointID=413 k8sNamespace=openstack k8sPodName=glance-db-init-9pzdv subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=4b953653-2eb2-4e64-9b68-d2c30680d33a k8s:batch.kubernetes.io/job-name=glance-db-init k8s:component=db-init k8s:controller-uid=4b953653-2eb2-4e64-9b68-d2c30680d33a k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=349bf3ce8b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=413 identity=17313 ipv4=10.0.0.134 ipv6= k8sPodName=openstack/glance-db-init-9pzdv subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.247 c32ff44e-323b-4524-b950-9d0a8de14384 default }" containerID=2914995da132582fdb603696b946ed34403e64afa16813e27b6e33a940d3ba81 datapathConfiguration="&{false false false false false }" interface=lxc1fd9586a8deb k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-6g4vg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2914995da1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=452 ipv4=10.0.0.247 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-6g4vg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2914995da1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=452 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.247 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-6g4vg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-rgw;k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io;k8s:app.kubernetes.io/created-by=rook-ceph-operator;k8s:app.kubernetes.io/instance=ceph;k8s:app.kubernetes.io/managed-by=rook-ceph-operator;k8s:app.kubernetes.io/name=ceph-rgw;k8s:app.kubernetes.io/part-of=ceph;k8s:ceph_daemon_id=ceph;k8s:ceph_daemon_type=rgw;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw;k8s:io.kubernetes.pod.namespace=openstack;k8s:rgw=ceph;k8s:rook.io/operator-namespace=rook-ceph;k8s:rook_cluster=openstack;k8s:rook_object_store=ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2914995da1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=452 identity=794 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.247 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-6g4vg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2914995da1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=452 identity=794 ipv4=10.0.0.247 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-6g4vg subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.55 aee1b2b7-032c-469c-b14a-2c0ca99780db default }" containerID=d2476f6bc642b16ffde3565ddda7cfd5c09cf9fbebe5da82143cc2c3f4d257b8 datapathConfiguration="&{false false false false false }" interface=lxc862c65b6f88b k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-5cr8p labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d2476f6bc6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1728 ipv4=10.0.0.55 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-5cr8p subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d2476f6bc6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1728 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.55 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-5cr8p subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-crashcollector;k8s:ceph-version=18.2.7-0;k8s:ceph_daemon_id=crash;k8s:crashcollector=crash;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default;k8s:io.kubernetes.pod.namespace=openstack;k8s:node_name=instance;k8s:rook_cluster=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d2476f6bc6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1728 identity=12893 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.55 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-5cr8p oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d2476f6bc6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1728 identity=12893 ipv4=10.0.0.55 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-5cr8p subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2914995da1 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=452 identity=794 ipv4=10.0.0.247 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-6g4vg subsys=endpoint level=info msg="Successful endpoint creation" containerID=2914995da1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=452 identity=794 ipv4=10.0.0.247 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-6g4vg subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.100 44d740aa-740b-4dd1-9313-23392000f6d3 default }" containerID=d105b6cd0bd711e68ec60817427db7e3d557f52911cdd1d89c07238179457496 datapathConfiguration="&{false false false false false }" interface=lxc7e97fdc2e71e k8sPodName=openstack/glance-db-sync-p2lw5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d105b6cd0b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=251 ipv4=10.0.0.100 ipv6= k8sPodName=openstack/glance-db-sync-p2lw5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d105b6cd0b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=251 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=a28508da-82d0-44f8-a9e0-2f685430ba6a,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=a28508da-82d0-44f8-a9e0-2f685430ba6a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.100 ipv6= k8sPodName=openstack/glance-db-sync-p2lw5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=a28508da-82d0-44f8-a9e0-2f685430ba6a;k8s:batch.kubernetes.io/job-name=glance-db-sync;k8s:component=db-sync;k8s:controller-uid=a28508da-82d0-44f8-a9e0-2f685430ba6a;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-sync;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d105b6cd0b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=251 identity=14100 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=a28508da-82d0-44f8-a9e0-2f685430ba6a,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=a28508da-82d0-44f8-a9e0-2f685430ba6a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.100 ipv6= k8sPodName=openstack/glance-db-sync-p2lw5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d105b6cd0b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=251 identity=14100 ipv4=10.0.0.100 ipv6= k8sPodName=openstack/glance-db-sync-p2lw5 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d2476f6bc6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1728 identity=12893 ipv4=10.0.0.55 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-5cr8p subsys=endpoint level=info msg="Successful endpoint creation" containerID=d2476f6bc6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1728 identity=12893 ipv4=10.0.0.55 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-5cr8p subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=d105b6cd0b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=251 identity=14100 ipv4=10.0.0.100 ipv6= k8sPodName=openstack/glance-db-sync-p2lw5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=d105b6cd0b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=251 identity=14100 ipv4=10.0.0.100 ipv6= k8sPodName=openstack/glance-db-sync-p2lw5 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=d105b6cd0b endpointID=251 k8sNamespace=openstack k8sPodName=glance-db-sync-p2lw5 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=a28508da-82d0-44f8-a9e0-2f685430ba6a k8s:batch.kubernetes.io/job-name=glance-db-sync k8s:component=db-sync k8s:controller-uid=a28508da-82d0-44f8-a9e0-2f685430ba6a k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-sync k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=d105b6cd0b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=251 identity=14100 ipv4=10.0.0.100 ipv6= k8sPodName=openstack/glance-db-sync-p2lw5 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.220 880d0e26-f308-4965-904e-e91f1590dbb8 default }" containerID=3d0ffc497fd607676b2bbe4ac1e5f698297337af56c3d134e86bbac510457e26 datapathConfiguration="&{false false false false false }" interface=lxcf1dd320aa8d4 k8sPodName=openstack/glance-rabbit-init-c8b4k labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3d0ffc497f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2714 ipv4=10.0.0.220 ipv6= k8sPodName=openstack/glance-rabbit-init-c8b4k subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3d0ffc497f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2714 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=9f3a34c9-7e94-47ea-9cb2-c1abb1cfda34,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=9f3a34c9-7e94-47ea-9cb2-c1abb1cfda34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.220 ipv6= k8sPodName=openstack/glance-rabbit-init-c8b4k subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=9f3a34c9-7e94-47ea-9cb2-c1abb1cfda34;k8s:batch.kubernetes.io/job-name=glance-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=9f3a34c9-7e94-47ea-9cb2-c1abb1cfda34;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-rabbit-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3d0ffc497f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2714 identity=42241 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=9f3a34c9-7e94-47ea-9cb2-c1abb1cfda34,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=9f3a34c9-7e94-47ea-9cb2-c1abb1cfda34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.220 ipv6= k8sPodName=openstack/glance-rabbit-init-c8b4k oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3d0ffc497f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2714 identity=42241 ipv4=10.0.0.220 ipv6= k8sPodName=openstack/glance-rabbit-init-c8b4k subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=3d0ffc497f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2714 identity=42241 ipv4=10.0.0.220 ipv6= k8sPodName=openstack/glance-rabbit-init-c8b4k subsys=endpoint level=info msg="Successful endpoint creation" containerID=3d0ffc497f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2714 identity=42241 ipv4=10.0.0.220 ipv6= k8sPodName=openstack/glance-rabbit-init-c8b4k subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=3d0ffc497f endpointID=2714 k8sNamespace=openstack k8sPodName=glance-rabbit-init-c8b4k subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=9f3a34c9-7e94-47ea-9cb2-c1abb1cfda34 k8s:batch.kubernetes.io/job-name=glance-rabbit-init k8s:component=rabbit-init k8s:controller-uid=9f3a34c9-7e94-47ea-9cb2-c1abb1cfda34 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-rabbit-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=3d0ffc497f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2714 identity=42241 ipv4=10.0.0.220 ipv6= k8sPodName=openstack/glance-rabbit-init-c8b4k subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.217 00097551-2b34-4845-a014-1367bb81bd0f default }" containerID=eb52a5bd170845654f1781640fa9e3332708050e56bd854bd089f13f7133938f datapathConfiguration="&{false false false false false }" interface=lxc11f0fdc80147 k8sPodName=openstack/glance-ks-service-4szkg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=eb52a5bd17 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=565 ipv4=10.0.0.217 ipv6= k8sPodName=openstack/glance-ks-service-4szkg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=eb52a5bd17 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=565 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=6ca757e4-ab21-4b3f-ad4b-8501fcf99323,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=6ca757e4-ab21-4b3f-ad4b-8501fcf99323,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.217 ipv6= k8sPodName=openstack/glance-ks-service-4szkg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=6ca757e4-ab21-4b3f-ad4b-8501fcf99323;k8s:batch.kubernetes.io/job-name=glance-ks-service;k8s:component=ks-service;k8s:controller-uid=6ca757e4-ab21-4b3f-ad4b-8501fcf99323;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-service;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=eb52a5bd17 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=565 identity=15459 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=6ca757e4-ab21-4b3f-ad4b-8501fcf99323,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=6ca757e4-ab21-4b3f-ad4b-8501fcf99323,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.217 ipv6= k8sPodName=openstack/glance-ks-service-4szkg oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=eb52a5bd17 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=565 identity=15459 ipv4=10.0.0.217 ipv6= k8sPodName=openstack/glance-ks-service-4szkg subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=eb52a5bd17 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=565 identity=15459 ipv4=10.0.0.217 ipv6= k8sPodName=openstack/glance-ks-service-4szkg subsys=endpoint level=info msg="Successful endpoint creation" containerID=eb52a5bd17 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=565 identity=15459 ipv4=10.0.0.217 ipv6= k8sPodName=openstack/glance-ks-service-4szkg subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=eb52a5bd17 endpointID=565 k8sNamespace=openstack k8sPodName=glance-ks-service-4szkg subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=6ca757e4-ab21-4b3f-ad4b-8501fcf99323 k8s:batch.kubernetes.io/job-name=glance-ks-service k8s:component=ks-service k8s:controller-uid=6ca757e4-ab21-4b3f-ad4b-8501fcf99323 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-service k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=eb52a5bd17 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=565 identity=15459 ipv4=10.0.0.217 ipv6= k8sPodName=openstack/glance-ks-service-4szkg subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.110 0757b601-0e9c-47e2-911f-3217499529b8 default }" containerID=612b17bbc4a01eb45f35a5cbd1da0ccbe0825c52430dec6227db2bd5654ad0cb datapathConfiguration="&{false false false false false }" interface=lxc4d93cbdd424f k8sPodName=openstack/glance-ks-endpoints-kx8gs labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=612b17bbc4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3154 ipv4=10.0.0.110 ipv6= k8sPodName=openstack/glance-ks-endpoints-kx8gs subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=612b17bbc4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3154 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=4d900108-0cf4-495c-ba18-185eddc06a62,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=4d900108-0cf4-495c-ba18-185eddc06a62,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.110 ipv6= k8sPodName=openstack/glance-ks-endpoints-kx8gs subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=4d900108-0cf4-495c-ba18-185eddc06a62;k8s:batch.kubernetes.io/job-name=glance-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=4d900108-0cf4-495c-ba18-185eddc06a62;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-endpoints;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=612b17bbc4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3154 identity=9883 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=4d900108-0cf4-495c-ba18-185eddc06a62,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=4d900108-0cf4-495c-ba18-185eddc06a62,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.110 ipv6= k8sPodName=openstack/glance-ks-endpoints-kx8gs oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=612b17bbc4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3154 identity=9883 ipv4=10.0.0.110 ipv6= k8sPodName=openstack/glance-ks-endpoints-kx8gs subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=612b17bbc4 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3154 identity=9883 ipv4=10.0.0.110 ipv6= k8sPodName=openstack/glance-ks-endpoints-kx8gs subsys=endpoint level=info msg="Successful endpoint creation" containerID=612b17bbc4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3154 identity=9883 ipv4=10.0.0.110 ipv6= k8sPodName=openstack/glance-ks-endpoints-kx8gs subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=612b17bbc4 endpointID=3154 k8sNamespace=openstack k8sPodName=glance-ks-endpoints-kx8gs subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=4d900108-0cf4-495c-ba18-185eddc06a62 k8s:batch.kubernetes.io/job-name=glance-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=4d900108-0cf4-495c-ba18-185eddc06a62 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-endpoints k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=612b17bbc4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3154 identity=9883 ipv4=10.0.0.110 ipv6= k8sPodName=openstack/glance-ks-endpoints-kx8gs subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.243 651a90a6-8d87-4f60-9994-efdf5ede26cb default }" containerID=d0eeb16b7536e5d221373f5d1f87ba90743e33e5b2a949da40af30bdcee963ab datapathConfiguration="&{false false false false false }" interface=lxc86bdef0f848c k8sPodName=openstack/glance-ks-user-gg4qr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d0eeb16b75 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3000 ipv4=10.0.0.243 ipv6= k8sPodName=openstack/glance-ks-user-gg4qr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d0eeb16b75 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3000 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=f69e385d-c446-467d-85c0-ac8ccbefc535,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=f69e385d-c446-467d-85c0-ac8ccbefc535,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.243 ipv6= k8sPodName=openstack/glance-ks-user-gg4qr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=f69e385d-c446-467d-85c0-ac8ccbefc535;k8s:batch.kubernetes.io/job-name=glance-ks-user;k8s:component=ks-user;k8s:controller-uid=f69e385d-c446-467d-85c0-ac8ccbefc535;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-user;k8s:release_group=glance;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=d0eeb16b75 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3000 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.243 ipv6= k8sPodName=openstack/glance-ks-user-gg4qr line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=d0eeb16b75 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3000 identity=16260 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=f69e385d-c446-467d-85c0-ac8ccbefc535,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=f69e385d-c446-467d-85c0-ac8ccbefc535,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.243 ipv6= k8sPodName=openstack/glance-ks-user-gg4qr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d0eeb16b75 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3000 identity=16260 ipv4=10.0.0.243 ipv6= k8sPodName=openstack/glance-ks-user-gg4qr subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d0eeb16b75 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3000 identity=16260 ipv4=10.0.0.243 ipv6= k8sPodName=openstack/glance-ks-user-gg4qr subsys=endpoint level=info msg="Successful endpoint creation" containerID=d0eeb16b75 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3000 identity=16260 ipv4=10.0.0.243 ipv6= k8sPodName=openstack/glance-ks-user-gg4qr subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=d0eeb16b75 endpointID=3000 k8sNamespace=openstack k8sPodName=glance-ks-user-gg4qr subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=f69e385d-c446-467d-85c0-ac8ccbefc535 k8s:batch.kubernetes.io/job-name=glance-ks-user k8s:component=ks-user k8s:controller-uid=f69e385d-c446-467d-85c0-ac8ccbefc535 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-user k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=d0eeb16b75 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3000 identity=16260 ipv4=10.0.0.243 ipv6= k8sPodName=openstack/glance-ks-user-gg4qr subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.139 d23ebf34-d18f-4225-9231-633538dea1d7 default }" containerID=4511dca8bd1bb7db01fb551180e433fa211932beb1c5255c4c7bea526d1eac97 datapathConfiguration="&{false false false false false }" interface=lxc14645d4bbe3b k8sPodName=openstack/glance-metadefs-load-jk29r labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4511dca8bd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=950 ipv4=10.0.0.139 ipv6= k8sPodName=openstack/glance-metadefs-load-jk29r subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4511dca8bd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=950 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=efcbc261-8dbc-4d06-ac02-389ad43e1ed0,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=efcbc261-8dbc-4d06-ac02-389ad43e1ed0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.139 ipv6= k8sPodName=openstack/glance-metadefs-load-jk29r subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=efcbc261-8dbc-4d06-ac02-389ad43e1ed0;k8s:batch.kubernetes.io/job-name=glance-metadefs-load;k8s:component=metadefs_load;k8s:controller-uid=efcbc261-8dbc-4d06-ac02-389ad43e1ed0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-metadefs-load;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4511dca8bd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=950 identity=370 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=efcbc261-8dbc-4d06-ac02-389ad43e1ed0,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=efcbc261-8dbc-4d06-ac02-389ad43e1ed0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.139 ipv6= k8sPodName=openstack/glance-metadefs-load-jk29r oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4511dca8bd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=950 identity=370 ipv4=10.0.0.139 ipv6= k8sPodName=openstack/glance-metadefs-load-jk29r subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4511dca8bd datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=950 identity=370 ipv4=10.0.0.139 ipv6= k8sPodName=openstack/glance-metadefs-load-jk29r subsys=endpoint level=info msg="Successful endpoint creation" containerID=4511dca8bd datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=950 identity=370 ipv4=10.0.0.139 ipv6= k8sPodName=openstack/glance-metadefs-load-jk29r subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=4511dca8bd endpointID=950 k8sNamespace=openstack k8sPodName=glance-metadefs-load-jk29r subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=efcbc261-8dbc-4d06-ac02-389ad43e1ed0 k8s:batch.kubernetes.io/job-name=glance-metadefs-load k8s:component=metadefs_load k8s:controller-uid=efcbc261-8dbc-4d06-ac02-389ad43e1ed0 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-metadefs-load k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=4511dca8bd datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=950 identity=370 ipv4=10.0.0.139 ipv6= k8sPodName=openstack/glance-metadefs-load-jk29r subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.17 507e8286-d298-4dc5-8c01-d1561276753d default }" containerID=f5a0d0b8ad68b1a842d3868f39d233b7ab33c6dca1a7c40e6e2f42bf13cf557e datapathConfiguration="&{false false false false false }" interface=lxcacd2bad23fc1 k8sPodName=openstack/glance-storage-init-h7vmb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f5a0d0b8ad datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2263 ipv4=10.0.0.17 ipv6= k8sPodName=openstack/glance-storage-init-h7vmb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f5a0d0b8ad datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2263 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=57ef63c3-cce3-4930-a316-4a92004d2e95,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=57ef63c3-cce3-4930-a316-4a92004d2e95,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.17 ipv6= k8sPodName=openstack/glance-storage-init-h7vmb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=f5a0d0b8ad datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2263 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.17 ipv6= k8sPodName=openstack/glance-storage-init-h7vmb line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=57ef63c3-cce3-4930-a316-4a92004d2e95;k8s:batch.kubernetes.io/job-name=glance-storage-init;k8s:component=storage-init;k8s:controller-uid=57ef63c3-cce3-4930-a316-4a92004d2e95;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-storage-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f5a0d0b8ad datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2263 identity=64935 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=57ef63c3-cce3-4930-a316-4a92004d2e95,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=57ef63c3-cce3-4930-a316-4a92004d2e95,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.17 ipv6= k8sPodName=openstack/glance-storage-init-h7vmb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f5a0d0b8ad datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2263 identity=64935 ipv4=10.0.0.17 ipv6= k8sPodName=openstack/glance-storage-init-h7vmb subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f5a0d0b8ad datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2263 identity=64935 ipv4=10.0.0.17 ipv6= k8sPodName=openstack/glance-storage-init-h7vmb subsys=endpoint level=info msg="Successful endpoint creation" containerID=f5a0d0b8ad datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2263 identity=64935 ipv4=10.0.0.17 ipv6= k8sPodName=openstack/glance-storage-init-h7vmb subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=f5a0d0b8ad endpointID=2263 k8sNamespace=openstack k8sPodName=glance-storage-init-h7vmb subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=57ef63c3-cce3-4930-a316-4a92004d2e95 k8s:batch.kubernetes.io/job-name=glance-storage-init k8s:component=storage-init k8s:controller-uid=57ef63c3-cce3-4930-a316-4a92004d2e95 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-storage-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=f5a0d0b8ad datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2263 identity=64935 ipv4=10.0.0.17 ipv6= k8sPodName=openstack/glance-storage-init-h7vmb subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.217 2c543ce6-8c33-4b3c-8215-60f0bb048157 default }" containerID=94c39db69dff1d99c7af2de7e1b093921d6e0443f77971495f511e9830f35f5e datapathConfiguration="&{false false false false false }" interface=lxc5a8d730d0755 k8sPodName=openstack/glance-api-64b7fdfb8f-4j7kg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=94c39db69d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=689 ipv4=10.0.0.217 ipv6= k8sPodName=openstack/glance-api-64b7fdfb8f-4j7kg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=94c39db69d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=689 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.217 ipv6= k8sPodName=openstack/glance-api-64b7fdfb8f-4j7kg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=94c39db69d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=689 identity=17210 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.217 ipv6= k8sPodName=openstack/glance-api-64b7fdfb8f-4j7kg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=94c39db69d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=689 identity=17210 ipv4=10.0.0.217 ipv6= k8sPodName=openstack/glance-api-64b7fdfb8f-4j7kg subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=94c39db69d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=689 identity=17210 ipv4=10.0.0.217 ipv6= k8sPodName=openstack/glance-api-64b7fdfb8f-4j7kg subsys=endpoint level=info msg="Successful endpoint creation" containerID=94c39db69d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=689 identity=17210 ipv4=10.0.0.217 ipv6= k8sPodName=openstack/glance-api-64b7fdfb8f-4j7kg subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.58 91b17c78-ba19-4b9d-8efd-802371e3d264 default }" containerID=adb33d53633f28fe0b9cc7be074d06af202afd42e65fc1174160da987c2ba85d datapathConfiguration="&{false false false false false }" interface=lxc736a205adcf6 k8sPodName=openstack/staffeln-conductor-777c58d7cc-6xl6n labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=adb33d5363 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=297 ipv4=10.0.0.58 ipv6= k8sPodName=openstack/staffeln-conductor-777c58d7cc-6xl6n subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=adb33d5363 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=297 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.58 ipv6= k8sPodName=openstack/staffeln-conductor-777c58d7cc-6xl6n subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.138 f8288512-78d0-4bc3-9989-674ea908a905 default }" containerID=867b8306d26338073b08b8c1b7a8463a6ddfd60111a175bf08a8721ed90df9e3 datapathConfiguration="&{false false false false false }" interface=lxc95a5b85a9394 k8sPodName=openstack/staffeln-api-644c78bd6b-52cwn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=867b8306d2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=636 ipv4=10.0.0.138 ipv6= k8sPodName=openstack/staffeln-api-644c78bd6b-52cwn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=867b8306d2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=636 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.138 ipv6= k8sPodName=openstack/staffeln-api-644c78bd6b-52cwn subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=conductor;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=867b8306d2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=636 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.138 ipv6= k8sPodName=openstack/staffeln-api-644c78bd6b-52cwn line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=adb33d5363 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=297 identity=47920 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.58 ipv6= k8sPodName=openstack/staffeln-conductor-777c58d7cc-6xl6n oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=adb33d5363 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=297 identity=47920 ipv4=10.0.0.58 ipv6= k8sPodName=openstack/staffeln-conductor-777c58d7cc-6xl6n subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=867b8306d2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=636 identity=9589 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.138 ipv6= k8sPodName=openstack/staffeln-api-644c78bd6b-52cwn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=867b8306d2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=636 identity=9589 ipv4=10.0.0.138 ipv6= k8sPodName=openstack/staffeln-api-644c78bd6b-52cwn subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.74 197ff344-5bac-4fe8-a49c-2e26f8168f68 default }" containerID=5ba3cb5bf99c65e8a1a78c759eb36505e750d4daa8155cdc6ceb7b38147e03e4 datapathConfiguration="&{false false false false false }" interface=lxc6a95196f3340 k8sPodName=openstack/staffeln-db-init-6hzsr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5ba3cb5bf9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=50 ipv4=10.0.0.74 ipv6= k8sPodName=openstack/staffeln-db-init-6hzsr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5ba3cb5bf9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=50 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=748f17a5-23e1-4b53-9a7e-ddfbd41d5851,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=748f17a5-23e1-4b53-9a7e-ddfbd41d5851,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.74 ipv6= k8sPodName=openstack/staffeln-db-init-6hzsr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=748f17a5-23e1-4b53-9a7e-ddfbd41d5851;k8s:batch.kubernetes.io/job-name=staffeln-db-init;k8s:component=db-init;k8s:controller-uid=748f17a5-23e1-4b53-9a7e-ddfbd41d5851;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-init;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5ba3cb5bf9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=50 identity=63684 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=748f17a5-23e1-4b53-9a7e-ddfbd41d5851,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=748f17a5-23e1-4b53-9a7e-ddfbd41d5851,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.74 ipv6= k8sPodName=openstack/staffeln-db-init-6hzsr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5ba3cb5bf9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=50 identity=63684 ipv4=10.0.0.74 ipv6= k8sPodName=openstack/staffeln-db-init-6hzsr subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=adb33d5363 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=297 identity=47920 ipv4=10.0.0.58 ipv6= k8sPodName=openstack/staffeln-conductor-777c58d7cc-6xl6n subsys=endpoint level=info msg="Successful endpoint creation" containerID=adb33d5363 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=297 identity=47920 ipv4=10.0.0.58 ipv6= k8sPodName=openstack/staffeln-conductor-777c58d7cc-6xl6n subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=867b8306d2 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=636 identity=9589 ipv4=10.0.0.138 ipv6= k8sPodName=openstack/staffeln-api-644c78bd6b-52cwn subsys=endpoint level=info msg="Successful endpoint creation" containerID=867b8306d2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=636 identity=9589 ipv4=10.0.0.138 ipv6= k8sPodName=openstack/staffeln-api-644c78bd6b-52cwn subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=5ba3cb5bf9 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=50 identity=63684 ipv4=10.0.0.74 ipv6= k8sPodName=openstack/staffeln-db-init-6hzsr subsys=endpoint level=info msg="Successful endpoint creation" containerID=5ba3cb5bf9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=50 identity=63684 ipv4=10.0.0.74 ipv6= k8sPodName=openstack/staffeln-db-init-6hzsr subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=5ba3cb5bf9 endpointID=50 k8sNamespace=openstack k8sPodName=staffeln-db-init-6hzsr subsys=daemon level=info msg="Releasing key" key="[k8s:application=staffeln k8s:batch.kubernetes.io/controller-uid=748f17a5-23e1-4b53-9a7e-ddfbd41d5851 k8s:batch.kubernetes.io/job-name=staffeln-db-init k8s:component=db-init k8s:controller-uid=748f17a5-23e1-4b53-9a7e-ddfbd41d5851 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=staffeln-db-init k8s:release_group=staffeln]" subsys=allocator level=info msg="Removed endpoint" containerID=5ba3cb5bf9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=50 identity=63684 ipv4=10.0.0.74 ipv6= k8sPodName=openstack/staffeln-db-init-6hzsr subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.130 144cb185-7968-4282-98df-4ab6ea6ab7d9 default }" containerID=277989a6a41374af9305e71ca17b42ec6c5581776ed788b30cb07f26fe4b9b14 datapathConfiguration="&{false false false false false }" interface=lxc4a703fe4697d k8sPodName=openstack/staffeln-db-sync-xcbts labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=277989a6a4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1159 ipv4=10.0.0.130 ipv6= k8sPodName=openstack/staffeln-db-sync-xcbts subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=277989a6a4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1159 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=6238fdea-9c9d-4a96-832e-e1d96945826d,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=6238fdea-9c9d-4a96-832e-e1d96945826d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.130 ipv6= k8sPodName=openstack/staffeln-db-sync-xcbts subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=277989a6a4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1159 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.130 ipv6= k8sPodName=openstack/staffeln-db-sync-xcbts line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=6238fdea-9c9d-4a96-832e-e1d96945826d;k8s:batch.kubernetes.io/job-name=staffeln-db-sync;k8s:component=db-sync;k8s:controller-uid=6238fdea-9c9d-4a96-832e-e1d96945826d;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-sync;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=277989a6a4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1159 identity=55954 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=6238fdea-9c9d-4a96-832e-e1d96945826d,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=6238fdea-9c9d-4a96-832e-e1d96945826d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.130 ipv6= k8sPodName=openstack/staffeln-db-sync-xcbts oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=277989a6a4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1159 identity=55954 ipv4=10.0.0.130 ipv6= k8sPodName=openstack/staffeln-db-sync-xcbts subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=277989a6a4 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1159 identity=55954 ipv4=10.0.0.130 ipv6= k8sPodName=openstack/staffeln-db-sync-xcbts subsys=endpoint level=info msg="Successful endpoint creation" containerID=277989a6a4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1159 identity=55954 ipv4=10.0.0.130 ipv6= k8sPodName=openstack/staffeln-db-sync-xcbts subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager