level=info msg="Memory available for map entries (0.003% of 67421638656B): 168554096B" subsys=config level=info msg="option bpf-ct-global-tcp-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-ct-global-any-max set by dynamic sizing to 295708" subsys=config level=info msg="option bpf-nat-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-neigh-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-sock-rev-map-max set by dynamic sizing to 295708" subsys=config level=info msg=" --agent-health-port='9879'" subsys=daemon level=info msg=" --agent-labels=''" subsys=daemon level=info msg=" --agent-liveness-update-interval='1s'" subsys=daemon level=info msg=" --agent-not-ready-taint-key='node.cilium.io/agent-not-ready'" subsys=daemon level=info msg=" --allocator-list-timeout='3m0s'" subsys=daemon level=info msg=" --allow-icmp-frag-needed='true'" subsys=daemon level=info msg=" --allow-localhost='auto'" subsys=daemon level=info msg=" --annotate-k8s-node='false'" subsys=daemon level=info msg=" --api-rate-limit=''" subsys=daemon level=info msg=" --arping-refresh-period='30s'" subsys=daemon level=info msg=" --auto-create-cilium-node-resource='true'" subsys=daemon level=info msg=" --auto-direct-node-routes='false'" subsys=daemon level=info msg=" --bgp-announce-lb-ip='false'" subsys=daemon level=info msg=" --bgp-announce-pod-cidr='false'" subsys=daemon level=info msg=" --bgp-config-path='/var/lib/cilium/bgp/config.yaml'" subsys=daemon level=info msg=" --bpf-auth-map-max='524288'" subsys=daemon level=info msg=" --bpf-ct-global-any-max='262144'" subsys=daemon level=info msg=" --bpf-ct-global-tcp-max='524288'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-fin='10s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-syn='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp-grace='1m0s'" subsys=daemon level=info msg=" --bpf-filter-priority='1'" subsys=daemon level=info msg=" --bpf-fragments-map-max='8192'" subsys=daemon level=info msg=" --bpf-lb-acceleration='disabled'" subsys=daemon level=info msg=" --bpf-lb-affinity-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-algorithm='random'" subsys=daemon level=info msg=" --bpf-lb-dev-ip-addr-inherit=''" subsys=daemon level=info msg=" --bpf-lb-dsr-dispatch='opt'" subsys=daemon level=info msg=" --bpf-lb-dsr-l4-xlate='frontend'" subsys=daemon level=info msg=" --bpf-lb-external-clusterip='false'" subsys=daemon level=info msg=" --bpf-lb-maglev-hash-seed='JLfvgnHc2kaSUFaI'" subsys=daemon level=info msg=" --bpf-lb-maglev-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-maglev-table-size='16381'" subsys=daemon level=info msg=" --bpf-lb-map-max='65536'" subsys=daemon level=info msg=" --bpf-lb-mode='snat'" subsys=daemon level=info msg=" --bpf-lb-rev-nat-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-rss-ipv4-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-rss-ipv6-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-service-backend-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-service-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-sock='false'" subsys=daemon level=info msg=" --bpf-lb-sock-hostns-only='false'" subsys=daemon level=info msg=" --bpf-lb-source-range-map-max='0'" subsys=daemon level=info msg=" --bpf-map-dynamic-size-ratio='0.0025'" subsys=daemon level=info msg=" --bpf-map-event-buffers=''" subsys=daemon level=info msg=" --bpf-nat-global-max='524288'" subsys=daemon level=info msg=" --bpf-neigh-global-max='524288'" subsys=daemon level=info msg=" --bpf-policy-map-full-reconciliation-interval='15m0s'" subsys=daemon level=info msg=" --bpf-policy-map-max='16384'" subsys=daemon level=info msg=" --bpf-root='/sys/fs/bpf'" subsys=daemon level=info msg=" --bpf-sock-rev-map-max='262144'" subsys=daemon level=info msg=" --bypass-ip-availability-upon-restore='false'" subsys=daemon level=info msg=" --certificates-directory='/var/run/cilium/certs'" subsys=daemon level=info msg=" --cflags=''" subsys=daemon level=info msg=" --cgroup-root='/run/cilium/cgroupv2'" subsys=daemon level=info msg=" --cilium-endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --cluster-health-port='4240'" subsys=daemon level=info msg=" --cluster-id='0'" subsys=daemon level=info msg=" --cluster-name='default'" subsys=daemon level=info msg=" --cluster-pool-ipv4-cidr='10.0.0.0/8'" subsys=daemon level=info msg=" --cluster-pool-ipv4-mask-size='24'" subsys=daemon level=info msg=" --clustermesh-config='/var/lib/cilium/clustermesh/'" subsys=daemon level=info msg=" --clustermesh-ip-identities-sync-timeout='1m0s'" subsys=daemon level=info msg=" --cmdref=''" subsys=daemon level=info msg=" --cni-chaining-mode='none'" subsys=daemon level=info msg=" --cni-chaining-target=''" subsys=daemon level=info msg=" --cni-exclusive='true'" subsys=daemon level=info msg=" --cni-external-routing='false'" subsys=daemon level=info msg=" --cni-log-file='/var/run/cilium/cilium-cni.log'" subsys=daemon level=info msg=" --cnp-node-status-gc-interval='0s'" subsys=daemon level=info msg=" --config=''" subsys=daemon level=info msg=" --config-dir='/tmp/cilium/config-map'" subsys=daemon level=info msg=" --config-sources='config-map:kube-system/cilium-config'" subsys=daemon level=info msg=" --conntrack-gc-interval='0s'" subsys=daemon level=info msg=" --conntrack-gc-max-interval='0s'" subsys=daemon level=info msg=" --crd-wait-timeout='5m0s'" subsys=daemon level=info msg=" --custom-cni-conf='false'" subsys=daemon level=info msg=" --datapath-mode='veth'" subsys=daemon level=info msg=" --debug='false'" subsys=daemon level=info msg=" --debug-verbose=''" subsys=daemon level=info msg=" --derive-masquerade-ip-addr-from-device=''" subsys=daemon level=info msg=" --devices=''" subsys=daemon level=info msg=" --direct-routing-device=''" subsys=daemon level=info msg=" --disable-cnp-status-updates='true'" subsys=daemon level=info msg=" --disable-endpoint-crd='false'" subsys=daemon level=info msg=" --disable-envoy-version-check='false'" subsys=daemon level=info msg=" --disable-iptables-feeder-rules=''" subsys=daemon level=info msg=" --dns-max-ips-per-restored-rule='1000'" subsys=daemon level=info msg=" --dns-policy-unload-on-shutdown='false'" subsys=daemon level=info msg=" --dnsproxy-concurrency-limit='0'" subsys=daemon level=info msg=" --dnsproxy-concurrency-processing-grace-period='0s'" subsys=daemon level=info msg=" --dnsproxy-enable-transparent-mode='true'" subsys=daemon level=info msg=" --dnsproxy-lock-count='128'" subsys=daemon level=info msg=" --dnsproxy-lock-timeout='500ms'" subsys=daemon level=info msg=" --egress-gateway-policy-map-max='16384'" subsys=daemon level=info msg=" --egress-gateway-reconciliation-trigger-interval='1s'" subsys=daemon level=info msg=" --egress-masquerade-interfaces=''" subsys=daemon level=info msg=" --egress-multi-home-ip-rule-compat='false'" subsys=daemon level=info msg=" --enable-auto-protect-node-port-range='true'" subsys=daemon level=info msg=" --enable-bandwidth-manager='false'" subsys=daemon level=info msg=" --enable-bbr='false'" subsys=daemon level=info msg=" --enable-bgp-control-plane='false'" subsys=daemon level=info msg=" --enable-bpf-clock-probe='false'" subsys=daemon level=info msg=" --enable-bpf-masquerade='false'" subsys=daemon level=info msg=" --enable-bpf-tproxy='false'" subsys=daemon level=info msg=" --enable-cilium-api-server-access='*'" subsys=daemon level=info msg=" --enable-cilium-endpoint-slice='false'" subsys=daemon level=info msg=" --enable-cilium-health-api-server-access='*'" subsys=daemon level=info msg=" --enable-custom-calls='false'" subsys=daemon level=info msg=" --enable-endpoint-health-checking='true'" subsys=daemon level=info msg=" --enable-endpoint-routes='false'" subsys=daemon level=info msg=" --enable-envoy-config='false'" subsys=daemon level=info msg=" --enable-external-ips='false'" subsys=daemon level=info msg=" --enable-health-check-nodeport='true'" subsys=daemon level=info msg=" --enable-health-checking='true'" subsys=daemon level=info msg=" --enable-high-scale-ipcache='false'" subsys=daemon level=info msg=" --enable-host-firewall='false'" subsys=daemon level=info msg=" --enable-host-legacy-routing='false'" subsys=daemon level=info msg=" --enable-host-port='false'" subsys=daemon level=info msg=" --enable-hubble='false'" subsys=daemon level=info msg=" --enable-hubble-recorder-api='true'" subsys=daemon level=info msg=" --enable-icmp-rules='true'" subsys=daemon level=info msg=" --enable-identity-mark='true'" subsys=daemon level=info msg=" --enable-ip-masq-agent='false'" subsys=daemon level=info msg=" --enable-ipsec='false'" subsys=daemon level=info msg=" --enable-ipsec-key-watcher='true'" subsys=daemon level=info msg=" --enable-ipv4='true'" subsys=daemon level=info msg=" --enable-ipv4-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv4-egress-gateway='false'" subsys=daemon level=info msg=" --enable-ipv4-fragment-tracking='true'" subsys=daemon level=info msg=" --enable-ipv4-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6='false'" subsys=daemon level=info msg=" --enable-ipv6-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv6-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6-ndp='false'" subsys=daemon level=info msg=" --enable-k8s='true'" subsys=daemon level=info msg=" --enable-k8s-api-discovery='false'" subsys=daemon level=info msg=" --enable-k8s-endpoint-slice='true'" subsys=daemon level=info msg=" --enable-k8s-event-handover='false'" subsys=daemon level=info msg=" --enable-k8s-networkpolicy='true'" subsys=daemon level=info msg=" --enable-k8s-terminating-endpoint='true'" subsys=daemon level=info msg=" --enable-l2-announcements='false'" subsys=daemon level=info msg=" --enable-l2-neigh-discovery='true'" subsys=daemon level=info msg=" --enable-l2-pod-announcements='false'" subsys=daemon level=info msg=" --enable-l7-proxy='true'" subsys=daemon level=info msg=" --enable-local-node-route='true'" subsys=daemon level=info msg=" --enable-local-redirect-policy='false'" subsys=daemon level=info msg=" --enable-mke='false'" subsys=daemon level=info msg=" --enable-monitor='true'" subsys=daemon level=info msg=" --enable-nat46x64-gateway='false'" subsys=daemon level=info msg=" --enable-node-port='false'" subsys=daemon level=info msg=" --enable-pmtu-discovery='false'" subsys=daemon level=info msg=" --enable-policy='default'" subsys=daemon level=info msg=" --enable-recorder='false'" subsys=daemon level=info msg=" --enable-remote-node-identity='true'" subsys=daemon level=info msg=" --enable-runtime-device-detection='false'" subsys=daemon level=info msg=" --enable-sctp='false'" subsys=daemon level=info msg=" --enable-service-topology='false'" subsys=daemon level=info msg=" --enable-session-affinity='false'" subsys=daemon level=info msg=" --enable-srv6='false'" subsys=daemon level=info msg=" --enable-stale-cilium-endpoint-cleanup='true'" subsys=daemon level=info msg=" --enable-svc-source-range-check='true'" subsys=daemon level=info msg=" --enable-tracing='false'" subsys=daemon level=info msg=" --enable-unreachable-routes='false'" subsys=daemon level=info msg=" --enable-vtep='false'" subsys=daemon level=info msg=" --enable-well-known-identities='false'" subsys=daemon level=info msg=" --enable-wireguard='false'" subsys=daemon level=info msg=" --enable-wireguard-userspace-fallback='false'" subsys=daemon level=info msg=" --enable-xdp-prefilter='false'" subsys=daemon level=info msg=" --enable-xt-socket-fallback='true'" subsys=daemon level=info msg=" --encrypt-interface=''" subsys=daemon level=info msg=" --encrypt-node='false'" subsys=daemon level=info msg=" --endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --endpoint-queue-size='25'" subsys=daemon level=info msg=" --endpoint-status=''" subsys=daemon level=info msg=" --envoy-config-timeout='2m0s'" subsys=daemon level=info msg=" --envoy-log=''" subsys=daemon level=info msg=" --exclude-local-address=''" subsys=daemon level=info msg=" --external-envoy-proxy='false'" subsys=daemon level=info msg=" --fixed-identity-mapping=''" subsys=daemon level=info msg=" --fqdn-regex-compile-lru-size='1024'" subsys=daemon level=info msg=" --gops-port='9890'" subsys=daemon level=info msg=" --http-403-msg=''" subsys=daemon level=info msg=" --http-idle-timeout='0'" subsys=daemon level=info msg=" --http-max-grpc-timeout='0'" subsys=daemon level=info msg=" --http-normalize-path='true'" subsys=daemon level=info msg=" --http-request-timeout='3600'" subsys=daemon level=info msg=" --http-retry-count='3'" subsys=daemon level=info msg=" --http-retry-timeout='0'" subsys=daemon level=info msg=" --hubble-disable-tls='false'" subsys=daemon level=info msg=" --hubble-event-buffer-capacity='4095'" subsys=daemon level=info msg=" --hubble-event-queue-size='0'" subsys=daemon level=info msg=" --hubble-export-file-compress='false'" subsys=daemon level=info msg=" --hubble-export-file-max-backups='5'" subsys=daemon level=info msg=" --hubble-export-file-max-size-mb='10'" subsys=daemon level=info msg=" --hubble-export-file-path=''" subsys=daemon level=info msg=" --hubble-listen-address=''" subsys=daemon level=info msg=" --hubble-metrics=''" subsys=daemon level=info msg=" --hubble-metrics-server=''" subsys=daemon level=info msg=" --hubble-monitor-events=''" subsys=daemon level=info msg=" --hubble-prefer-ipv6='false'" subsys=daemon level=info msg=" --hubble-recorder-sink-queue-size='1024'" subsys=daemon level=info msg=" --hubble-recorder-storage-path='/var/run/cilium/pcaps'" subsys=daemon level=info msg=" --hubble-skip-unknown-cgroup-ids='true'" subsys=daemon level=info msg=" --hubble-socket-path='/var/run/cilium/hubble.sock'" subsys=daemon level=info msg=" --hubble-tls-cert-file=''" subsys=daemon level=info msg=" --hubble-tls-client-ca-files=''" subsys=daemon level=info msg=" --hubble-tls-key-file=''" subsys=daemon level=info msg=" --identity-allocation-mode='crd'" subsys=daemon level=info msg=" --identity-change-grace-period='5s'" subsys=daemon level=info msg=" --identity-gc-interval='15m0s'" subsys=daemon level=info msg=" --identity-heartbeat-timeout='30m0s'" subsys=daemon level=info msg=" --identity-restore-grace-period='10m0s'" subsys=daemon level=info msg=" --install-egress-gateway-routes='false'" subsys=daemon level=info msg=" --install-iptables-rules='true'" subsys=daemon level=info msg=" --install-no-conntrack-iptables-rules='false'" subsys=daemon level=info msg=" --ip-allocation-timeout='2m0s'" subsys=daemon level=info msg=" --ip-masq-agent-config-path='/etc/config/ip-masq-agent'" subsys=daemon level=info msg=" --ipam='cluster-pool'" subsys=daemon level=info msg=" --ipam-cilium-node-update-rate='15s'" subsys=daemon level=info msg=" --ipam-multi-pool-pre-allocation='default=8'" subsys=daemon level=info msg=" --ipsec-key-file=''" subsys=daemon level=info msg=" --ipsec-key-rotation-duration='5m0s'" subsys=daemon level=info msg=" --iptables-lock-timeout='5s'" subsys=daemon level=info msg=" --iptables-random-fully='false'" subsys=daemon level=info msg=" --ipv4-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv4-node='auto'" subsys=daemon level=info msg=" --ipv4-pod-subnets=''" subsys=daemon level=info msg=" --ipv4-range='auto'" subsys=daemon level=info msg=" --ipv4-service-loopback-address='169.254.42.1'" subsys=daemon level=info msg=" --ipv4-service-range='auto'" subsys=daemon level=info msg=" --ipv6-cluster-alloc-cidr='f00d::/64'" subsys=daemon level=info msg=" --ipv6-mcast-device=''" subsys=daemon level=info msg=" --ipv6-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv6-node='auto'" subsys=daemon level=info msg=" --ipv6-pod-subnets=''" subsys=daemon level=info msg=" --ipv6-range='auto'" subsys=daemon level=info msg=" --ipv6-service-range='auto'" subsys=daemon level=info msg=" --join-cluster='false'" subsys=daemon level=info msg=" --k8s-api-server=''" subsys=daemon level=info msg=" --k8s-client-burst='10'" subsys=daemon level=info msg=" --k8s-client-qps='5'" subsys=daemon level=info msg=" --k8s-heartbeat-timeout='30s'" subsys=daemon level=info msg=" --k8s-kubeconfig-path=''" subsys=daemon level=info msg=" --k8s-namespace='kube-system'" subsys=daemon level=info msg=" --k8s-require-ipv4-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-require-ipv6-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-service-cache-size='128'" subsys=daemon level=info msg=" --k8s-service-proxy-name=''" subsys=daemon level=info msg=" --k8s-sync-timeout='3m0s'" subsys=daemon level=info msg=" --k8s-watcher-endpoint-selector='metadata.name!=kube-scheduler,metadata.name!=kube-controller-manager,metadata.name!=etcd-operator,metadata.name!=gcp-controller-manager'" subsys=daemon level=info msg=" --keep-config='false'" subsys=daemon level=info msg=" --kube-proxy-replacement='disabled'" subsys=daemon level=info msg=" --kube-proxy-replacement-healthz-bind-address=''" subsys=daemon level=info msg=" --kvstore=''" subsys=daemon level=info msg=" --kvstore-connectivity-timeout='2m0s'" subsys=daemon level=info msg=" --kvstore-lease-ttl='15m0s'" subsys=daemon level=info msg=" --kvstore-max-consecutive-quorum-errors='2'" subsys=daemon level=info msg=" --kvstore-opt=''" subsys=daemon level=info msg=" --kvstore-periodic-sync='5m0s'" subsys=daemon level=info msg=" --l2-announcements-lease-duration='15s'" subsys=daemon level=info msg=" --l2-announcements-renew-deadline='5s'" subsys=daemon level=info msg=" --l2-announcements-retry-period='2s'" subsys=daemon level=info msg=" --l2-pod-announcements-interface=''" subsys=daemon level=info msg=" --label-prefix-file=''" subsys=daemon level=info msg=" --labels=''" subsys=daemon level=info msg=" --lib-dir='/var/lib/cilium'" subsys=daemon level=info msg=" --local-max-addr-scope='252'" subsys=daemon level=info msg=" --local-router-ipv4=''" subsys=daemon level=info msg=" --local-router-ipv6=''" subsys=daemon level=info msg=" --log-driver=''" subsys=daemon level=info msg=" --log-opt=''" subsys=daemon level=info msg=" --log-system-load='false'" subsys=daemon level=info msg=" --max-controller-interval='0'" subsys=daemon level=info msg=" --mesh-auth-enabled='true'" subsys=daemon level=info msg=" --mesh-auth-gc-interval='5m0s'" subsys=daemon level=info msg=" --mesh-auth-mutual-listener-port='0'" subsys=daemon level=info msg=" --mesh-auth-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-rotated-identities-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-signal-backoff-duration='1s'" subsys=daemon level=info msg=" --mesh-auth-spiffe-trust-domain='spiffe.cilium'" subsys=daemon level=info msg=" --mesh-auth-spire-admin-socket=''" subsys=daemon level=info msg=" --metrics=''" subsys=daemon level=info msg=" --mke-cgroup-mount=''" subsys=daemon level=info msg=" --monitor-aggregation='medium'" subsys=daemon level=info msg=" --monitor-aggregation-flags='all'" subsys=daemon level=info msg=" --monitor-aggregation-interval='5s'" subsys=daemon level=info msg=" --monitor-queue-size='0'" subsys=daemon level=info msg=" --mtu='0'" subsys=daemon level=info msg=" --node-encryption-opt-out-labels='node-role.kubernetes.io/control-plane'" subsys=daemon level=info msg=" --node-port-acceleration='disabled'" subsys=daemon level=info msg=" --node-port-algorithm='random'" subsys=daemon level=info msg=" --node-port-bind-protection='true'" subsys=daemon level=info msg=" --node-port-mode='snat'" subsys=daemon level=info msg=" --node-port-range='30000,32767'" subsys=daemon level=info msg=" --nodes-gc-interval='5m0s'" subsys=daemon level=info msg=" --operator-api-serve-addr='127.0.0.1:9234'" subsys=daemon level=info msg=" --policy-audit-mode='false'" subsys=daemon level=info msg=" --policy-queue-size='100'" subsys=daemon level=info msg=" --policy-trigger-interval='1s'" subsys=daemon level=info msg=" --pprof='false'" subsys=daemon level=info msg=" --pprof-address='localhost'" subsys=daemon level=info msg=" --pprof-port='6060'" subsys=daemon level=info msg=" --preallocate-bpf-maps='false'" subsys=daemon level=info msg=" --prepend-iptables-chains='true'" subsys=daemon level=info msg=" --procfs='/host/proc'" subsys=daemon level=info msg=" --prometheus-serve-addr=':9962'" subsys=daemon level=info msg=" --proxy-connect-timeout='2'" subsys=daemon level=info msg=" --proxy-gid='1337'" subsys=daemon level=info msg=" --proxy-idle-timeout-seconds='60'" subsys=daemon level=info msg=" --proxy-max-connection-duration-seconds='0'" subsys=daemon level=info msg=" --proxy-max-requests-per-connection='0'" subsys=daemon level=info msg=" --proxy-prometheus-port='9964'" subsys=daemon level=info msg=" --read-cni-conf=''" subsys=daemon level=info msg=" --remove-cilium-node-taints='true'" subsys=daemon level=info msg=" --restore='true'" subsys=daemon level=info msg=" --route-metric='0'" subsys=daemon level=info msg=" --routing-mode='tunnel'" subsys=daemon level=info msg=" --set-cilium-is-up-condition='true'" subsys=daemon level=info msg=" --set-cilium-node-taints='true'" subsys=daemon level=info msg=" --sidecar-istio-proxy-image='cilium/istio_proxy'" subsys=daemon level=info msg=" --single-cluster-route='false'" subsys=daemon level=info msg=" --skip-cnp-status-startup-clean='false'" subsys=daemon level=info msg=" --socket-path='/var/run/cilium/cilium.sock'" subsys=daemon level=info msg=" --srv6-encap-mode='reduced'" subsys=daemon level=info msg=" --state-dir='/var/run/cilium'" subsys=daemon level=info msg=" --synchronize-k8s-nodes='true'" subsys=daemon level=info msg=" --tofqdns-dns-reject-response-code='refused'" subsys=daemon level=info msg=" --tofqdns-enable-dns-compression='true'" subsys=daemon level=info msg=" --tofqdns-endpoint-max-ip-per-hostname='50'" subsys=daemon level=info msg=" --tofqdns-idle-connection-grace-period='0s'" subsys=daemon level=info msg=" --tofqdns-max-deferred-connection-deletes='10000'" subsys=daemon level=info msg=" --tofqdns-min-ttl='0'" subsys=daemon level=info msg=" --tofqdns-pre-cache=''" subsys=daemon level=info msg=" --tofqdns-proxy-port='0'" subsys=daemon level=info msg=" --tofqdns-proxy-response-max-delay='100ms'" subsys=daemon level=info msg=" --trace-payloadlen='128'" subsys=daemon level=info msg=" --trace-sock='true'" subsys=daemon level=info msg=" --tunnel=''" subsys=daemon level=info msg=" --tunnel-port='6082'" subsys=daemon level=info msg=" --tunnel-protocol='geneve'" subsys=daemon level=info msg=" --unmanaged-pod-watcher-interval='15'" subsys=daemon level=info msg=" --use-cilium-internal-ip-for-ipsec='false'" subsys=daemon level=info msg=" --version='false'" subsys=daemon level=info msg=" --vlan-bpf-bypass=''" subsys=daemon level=info msg=" --vtep-cidr=''" subsys=daemon level=info msg=" --vtep-endpoint=''" subsys=daemon level=info msg=" --vtep-mac=''" subsys=daemon level=info msg=" --vtep-mask=''" subsys=daemon level=info msg=" --wireguard-encapsulate='false'" subsys=daemon level=info msg=" --write-cni-conf-when-ready='/host/etc/cni/net.d/05-cilium.conflist'" subsys=daemon level=info msg=" _ _ _" subsys=daemon level=info msg=" ___|_| |_|_ _ _____" subsys=daemon level=info msg="| _| | | | | | |" subsys=daemon level=info msg="|___|_|_|_|___|_|_|_|" subsys=daemon level=info msg="Cilium 1.14.8 cf6e022e 2024-03-13T12:23:35-04:00 go version go1.21.8 linux/amd64" subsys=daemon level=info msg="clang (10.0.0) and kernel (5.15.0) versions: OK!" subsys=linux-datapath level=info msg="linking environment: OK!" subsys=linux-datapath level=info msg="Kernel config file not found: if the agent fails to start, check the system requirements at https://docs.cilium.io/en/stable/operations/system_requirements" subsys=probes level=info msg="Detected mounted BPF filesystem at /sys/fs/bpf" subsys=bpf level=info msg="Mounted cgroupv2 filesystem at /run/cilium/cgroupv2" subsys=cgroups level=info msg="Parsing base label prefixes from default label list" subsys=labels-filter level=info msg="Parsing additional label prefixes from user inputs: []" subsys=labels-filter level=info msg="Final label prefixes to be used for identity evaluation:" subsys=labels-filter level=info msg=" - reserved:.*" subsys=labels-filter level=info msg=" - :io\\.kubernetes\\.pod\\.namespace" subsys=labels-filter level=info msg=" - :io\\.cilium\\.k8s\\.namespace\\.labels" subsys=labels-filter level=info msg=" - :app\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:io\\.kubernetes" subsys=labels-filter level=info msg=" - !:kubernetes\\.io" subsys=labels-filter level=info msg=" - !:.*beta\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:k8s\\.io" subsys=labels-filter level=info msg=" - !:pod-template-generation" subsys=labels-filter level=info msg=" - !:pod-template-hash" subsys=labels-filter level=info msg=" - !:controller-revision-hash" subsys=labels-filter level=info msg=" - !:annotation.*" subsys=labels-filter level=info msg=" - !:etcd_node" subsys=labels-filter level=info msg=Invoked duration="988.941µs" function="pprof.glob..func1 (cell.go:50)" subsys=hive level=info msg=Invoked duration="57.161µs" function="gops.registerGopsHooks (cell.go:38)" subsys=hive level=info msg=Invoked duration=1.107954ms function="metrics.NewRegistry (registry.go:65)" subsys=hive level=info msg=Invoked duration="10.871µs" function="metrics.glob..func1 (cell.go:12)" subsys=hive level=info msg="Spire Delegate API Client is disabled as no socket path is configured" subsys=spire-delegate level=info msg="Mutual authentication handler is disabled as no port is configured" subsys=auth level=info msg=Invoked duration=103.17215ms function="cmd.glob..func4 (daemon_main.go:1607)" subsys=hive level=info msg=Invoked duration="12.55µs" function="gc.registerSignalHandler (cell.go:47)" subsys=hive level=info msg=Invoked duration="14.88µs" function="utime.initUtimeSync (cell.go:29)" subsys=hive level=info msg=Invoked duration="57.561µs" function="agentliveness.newAgentLivenessUpdater (agent_liveness.go:43)" subsys=hive level=info msg=Invoked duration="63.081µs" function="l2responder.NewL2ResponderReconciler (l2responder.go:63)" subsys=hive level=info msg=Invoked duration="90.172µs" function="garp.newGARPProcessor (processor.go:27)" subsys=hive level=info msg=Starting subsys=hive level=info msg="Started gops server" address="127.0.0.1:9890" subsys=gops level=info msg="Start hook executed" duration="482.081µs" function="gops.registerGopsHooks.func1 (cell.go:43)" subsys=hive level=info msg="Start hook executed" duration="2.75µs" function="metrics.NewRegistry.func1 (registry.go:86)" subsys=hive level=info msg="Establishing connection to apiserver" host="https://10.96.0.1:443" subsys=k8s-client level=info msg="Serving prometheus metrics on :9962" subsys=metrics level=info msg="Connected to apiserver" subsys=k8s-client level=info msg="Start hook executed" duration=11.156639ms function="client.(*compositeClientset).onStart" subsys=hive level=info msg="Start hook executed" duration=6.780245ms function="authmap.newAuthMap.func1 (cell.go:27)" subsys=hive level=info msg="Start hook executed" duration="91.122µs" function="configmap.newMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="69.861µs" function="signalmap.newMap.func1 (cell.go:44)" subsys=hive level=info msg="Start hook executed" duration="295.377µs" function="nodemap.newNodeMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="183.004µs" function="eventsmap.newEventsMap.func1 (cell.go:35)" subsys=hive level=info msg="Start hook executed" duration="93.192µs" function="*cni.cniConfigManager.Start" subsys=hive level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Wrote CNI configuration file to /host/etc/cni/net.d/05-cilium.conflist" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Start hook executed" duration=52.305741ms function="datapath.newDatapath.func1 (cells.go:113)" subsys=hive level=info msg="Restored 0 node IDs from the BPF map" subsys=linux-datapath level=info msg="Start hook executed" duration="150.473µs" function="datapath.newDatapath.func2 (cells.go:126)" subsys=hive level=info msg="Start hook executed" duration="50.981µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Node].Start" subsys=hive level=info msg="Start hook executed" duration="4.9µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNode].Start" subsys=hive level=info msg="Using autogenerated IPv4 allocation range" subsys=node v4Prefix=10.132.0.0/16 level=info msg="no local ciliumnode found, will not restore cilium internal ips from k8s" subsys=daemon level=info msg="Start hook executed" duration=103.932236ms function="node.NewLocalNodeStore.func1 (local_node_store.go:76)" subsys=hive level=info msg="Start hook executed" duration="4.31µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration=200.481784ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration="3.3µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Using discoveryv1.EndpointSlice" subsys=k8s level=info msg="Start hook executed" duration=100.733618ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Start hook executed" duration="4.76µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Pod].Start" subsys=hive level=info msg="Start hook executed" duration="1.78µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Namespace].Start" subsys=hive level=info msg="Start hook executed" duration="2.141µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="2.27µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumClusterwideNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="1.95µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumCIDRGroup].Start" subsys=hive level=info msg="Start hook executed" duration="30.281µs" function="endpointmanager.newDefaultEndpointManager.func1 (cell.go:203)" subsys=hive level=info msg="Start hook executed" duration="49.791µs" function="cmd.newPolicyTrifecta.func1 (policy.go:135)" subsys=hive level=info msg="Start hook executed" duration="63.572µs" function="*manager.manager.Start" subsys=hive level=info msg="Serving cilium node monitor v1.2 API at unix:///var/run/cilium/monitor1_2.sock" subsys=monitor-agent level=info msg="Start hook executed" duration="312.177µs" function="agent.newMonitorAgent.func1 (cell.go:61)" subsys=hive level=info msg="Start hook executed" duration="3.251µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumL2AnnouncementPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="9.39µs" function="*job.group.Start" subsys=hive level=info msg="Start hook executed" duration="244.995µs" function="proxy.newProxy.func1 (cell.go:55)" subsys=hive level=info msg="Envoy: Starting xDS gRPC server listening on /var/run/cilium/envoy/sockets/xds.sock" subsys=envoy-manager level=info msg="Start hook executed" duration=1.016792ms function="signal.provideSignalManager.func1 (cell.go:25)" subsys=hive level=info msg="Datapath signal listener running" subsys=signal level=info msg="Start hook executed" duration=1.208025ms function="auth.registerAuthManager.func1 (cell.go:109)" subsys=hive level=info msg="Start hook executed" duration="4.69µs" function="auth.registerGCJobs.func1 (cell.go:158)" subsys=hive level=info msg="Start hook executed" duration="20.781µs" function="*job.group.Start" subsys=hive level=warning msg="Deprecated value for --kube-proxy-replacement: disabled (use either \"true\", or \"false\")" subsys=daemon level=info msg="Auto-disabling \"enable-node-port\", \"enable-external-ips\", \"bpf-lb-sock\", \"enable-host-port\" features and falling back to \"enable-host-legacy-routing\"" subsys=daemon level=info msg="Inheriting MTU from external network interface" device=ens3 ipAddr=199.204.45.132 mtu=1500 subsys=mtu level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_ipcache, recreating and re-pinning map cilium_ipcache" file-path=/sys/fs/bpf/tc/globals/cilium_ipcache name=cilium_ipcache subsys=bpf level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_tunnel_map, recreating and re-pinning map cilium_tunnel_map" file-path=/sys/fs/bpf/tc/globals/cilium_tunnel_map name=cilium_tunnel_map subsys=bpf level=info msg="Restored services from maps" failedServices=0 restoredServices=0 subsys=service level=info msg="Restored backends from maps" failedBackends=0 restoredBackends=0 skippedBackends=0 subsys=service level=info msg="Reading old endpoints..." subsys=daemon level=info msg="No old endpoints found." subsys=daemon level=info msg="Waiting until all Cilium CRDs are available" subsys=k8s level=info msg="All Cilium CRDs have been found and are available" subsys=k8s level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=info msg="Successfully created CiliumNode resource" subsys=nodediscovery level=warning msg="Unable to create CiliumNode resource, will retry" error="ciliumnodes.cilium.io \"instance\" already exists" subsys=nodediscovery level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=info msg="Received own node information from API server" ipAddr.ipv4=199.204.45.132 ipAddr.ipv6="" k8sNodeIP=199.204.45.132 labels="map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers: openstack-compute-node:enabled openstack-control-plane:enabled openvswitch:enabled]" nodeName=instance subsys=k8s v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="k8s mode: Allowing localhost to reach local endpoints" subsys=daemon level=info msg="Detected devices" devices="[]" subsys=linux-datapath level=info msg="Enabling k8s event listener" subsys=k8s-watcher level=info msg="Removing stale endpoint interfaces" subsys=daemon level=info msg="Skipping kvstore configuration" subsys=daemon level=info msg="Waiting until local node addressing before starting watchers depending on it" subsys=k8s-watcher level=info msg="Initializing node addressing" subsys=daemon level=info msg="Initializing cluster-pool IPAM" subsys=ipam v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="Restoring endpoints..." subsys=daemon level=info msg="Endpoints restored" failed=0 restored=0 subsys=daemon level=info msg="Addressing information:" subsys=daemon level=info msg=" Cluster-Name: default" subsys=daemon level=info msg=" Cluster-ID: 0" subsys=daemon level=info msg=" Local node-name: instance" subsys=daemon level=info msg=" Node-IPv6: " subsys=daemon level=info msg=" External-Node IPv4: 199.204.45.132" subsys=daemon level=info msg=" Internal-Node IPv4: 10.0.0.217" subsys=daemon level=info msg=" IPv4 allocation prefix: 10.0.0.0/24" subsys=daemon level=info msg=" Loopback IPv4: 169.254.42.1" subsys=daemon level=info msg=" Local IPv4 addresses:" subsys=daemon level=info msg=" - 199.204.45.132" subsys=daemon level=info msg=" - 172.17.0.100" subsys=daemon level=info msg=" - 10.96.240.200" subsys=daemon level=info msg="Node updated" clusterName=default nodeName=instance subsys=nodemanager level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Adding local node to cluster" node="{instance default [{InternalIP 199.204.45.132} {CiliumInternalIP 10.0.0.217}] 10.0.0.0/24 [] [] 10.0.0.110 0 local 0 map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers: openstack-compute-node:enabled openstack-control-plane:enabled openvswitch:enabled] map[] 1 }" subsys=nodediscovery level=info msg="Waiting until all pre-existing resources have been received" subsys=k8s-watcher level=info msg="Initializing identity allocator" subsys=identity-cache level=info msg="Allocating identities between range" cluster-id=0 max=65535 min=256 subsys=identity-cache level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.core.bpf_jit_enable sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.all.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.fib_multipath_use_neigh sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.unprivileged_bpf_disabled sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.timer_migration sysParamValue=0 level=info msg="Setting up BPF datapath" bpfClockSource=ktime bpfInsnSet="" subsys=datapath-loader level=info msg="Iptables rules installed" subsys=iptables level=info msg="Adding new proxy port rules for cilium-dns-egress:35713" id=cilium-dns-egress subsys=proxy level=info msg="Iptables proxy rules installed" subsys=iptables level=info msg="Start hook executed" duration=2.648140625s function="cmd.newDaemonPromise.func1 (daemon_main.go:1663)" subsys=hive level=info msg="Starting IP identity watcher" subsys=ipcache level=info msg="Start hook executed" duration="24.95µs" function="utime.initUtimeSync.func1 (cell.go:33)" subsys=hive level=info msg="Start hook executed" duration="12.14µs" function="*job.group.Start" subsys=hive level=info msg="Initializing daemon" subsys=daemon level=info msg="Validating configured node address ranges" subsys=daemon level=info msg="Start hook executed" duration="98.622µs" function="l2respondermap.newMap.func1 (l2_responder_map4.go:44)" subsys=hive level=info msg="Start hook executed" duration="48.181µs" function="*job.group.Start" subsys=hive level=info msg="Starting connection tracking garbage collector" subsys=daemon level=info msg="Initial scan of connection tracking completed" subsys=ct-gc level=info msg="Regenerating restored endpoints" numRestored=0 subsys=daemon level=info msg="Creating host endpoint" subsys=daemon level=info msg="Finished regenerating restored endpoints" regenerated=0 subsys=daemon total=0 level=info msg="Deleted orphan backends" orphanBackends=0 subsys=service level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2640 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2640 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2640 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Launching Cilium health daemon" subsys=daemon level=info msg="Launching Cilium health endpoint" subsys=daemon level=info msg="Started healthz status API server" address="127.0.0.1:9879" subsys=daemon level=info msg="Processing queued endpoint deletion requests from /var/run/cilium/deleteQueue" subsys=daemon level=info msg="processing 0 queued deletion requests" subsys=daemon level=info msg="Initializing Cilium API" subsys=daemon level=info msg="Daemon initialization completed" bootstrapTime=3.740844837s subsys=daemon level=info msg="Hubble server is disabled" subsys=hubble level=info msg="Serving cilium API at unix:///var/run/cilium/cilium.sock" subsys=daemon level=info msg="Compiled new BPF template" BPFCompilationTime=310.911349ms file-path=/var/run/cilium/state/templates/c22284bdc6131e75149d3a3bbe417b51bc1a99dc7c09603285fcc8d29cd5eb5c/bpf_host.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2640 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1298 ipv4=10.0.0.110 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1298 identityLabels="reserved:health" ipv4=10.0.0.110 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1298 identity=4 identityLabels="reserved:health" ipv4=10.0.0.110 ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.154 7d81f184-c043-4e83-91e9-23ef5f8b4cf5 default }" containerID=c913076bad0dbc3a41411ed09349d924a97943747def0cc9caa0db69fe893377 datapathConfiguration="&{false false false false false }" interface=lxc26f7133fadcc k8sPodName=local-path-storage/local-path-provisioner-679c578f5-7lmtw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c913076bad datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=712 ipv4=10.0.0.154 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-7lmtw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c913076bad datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=712 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.154 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-7lmtw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=local-path-provisioner;k8s:app.kubernetes.io/name=local-path-provisioner;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=c913076bad datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=712 identity=4418 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.154 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-7lmtw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c913076bad datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=712 identity=4418 ipv4=10.0.0.154 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-7lmtw subsys=endpoint level=info msg="Serving cilium health API at unix:///var/run/cilium/health.sock" subsys=health-server level=info msg="Compiled new BPF template" BPFCompilationTime=1.136032721s file-path=/var/run/cilium/state/templates/cd6d0437f430e14c19e2f800ec191e9fe819ab527f104dc06d9cd750e59fd4aa/bpf_lxc.o subsys=datapath-loader level=info msg="Create endpoint request" addressing="&{10.0.0.70 ba237ac4-dd13-4d0f-a3ee-67990559b214 default }" containerID=5d23e8025176dcf64df50d6ca32a0a1d1a5393aa69bfee182017ba46da0c66f3 datapathConfiguration="&{false false false false false }" interface=lxca04dd34789b2 k8sPodName=cert-manager/cert-manager-75c4c745bc-g8bsn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5d23e80251 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3693 ipv4=10.0.0.70 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-g8bsn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5d23e80251 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3693 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.70 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-g8bsn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=cert-manager;k8s:app.kubernetes.io/component=controller;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cert-manager;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5d23e80251 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3693 identity=39710 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.70 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-g8bsn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5d23e80251 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3693 identity=39710 ipv4=10.0.0.70 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-g8bsn subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.226 eadb27fc-93b2-420a-9308-d279547f59ae default }" containerID=5d8c9c1a45e02194cac233b5d7265216e9ab10bdc7d90295ce3bafb7f9ff133c datapathConfiguration="&{false false false false false }" interface=lxc672a23199f17 k8sPodName=cert-manager/cert-manager-webhook-548949fc64-pz5pt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5d8c9c1a45 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=481 ipv4=10.0.0.226 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-pz5pt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5d8c9c1a45 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=481 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.226 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-pz5pt subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=webhook;k8s:app.kubernetes.io/component=webhook;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=webhook;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5d8c9c1a45 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=481 identity=6659 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.226 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-pz5pt oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5d8c9c1a45 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=481 identity=6659 ipv4=10.0.0.226 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-pz5pt subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.126 112c6842-2be2-42a4-a422-caf6c6d96a42 default }" containerID=ccbec4c027e0d082971f704e90c6db1a96064cb29d41b5070d3b8052e520aab1 datapathConfiguration="&{false false false false false }" interface=lxcdc9f3b9e98f0 k8sPodName=cert-manager/cert-manager-startupapicheck-h5zgt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ccbec4c027 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=947 ipv4=10.0.0.126 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-h5zgt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ccbec4c027 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=947 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=c16c584a-1f5b-48ca-bfdc-7ac83803cbf3,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=c16c584a-1f5b-48ca-bfdc-7ac83803cbf3,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.126 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-h5zgt subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=startupapicheck;k8s:app.kubernetes.io/component=startupapicheck;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=startupapicheck;k8s:app.kubernetes.io/version=v1.11.5;k8s:batch.kubernetes.io/controller-uid=c16c584a-1f5b-48ca-bfdc-7ac83803cbf3;k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck;k8s:controller-uid=c16c584a-1f5b-48ca-bfdc-7ac83803cbf3;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck;k8s:io.kubernetes.pod.namespace=cert-manager;k8s:job-name=cert-manager-startupapicheck;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ccbec4c027 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=947 identity=35750 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=c16c584a-1f5b-48ca-bfdc-7ac83803cbf3,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=c16c584a-1f5b-48ca-bfdc-7ac83803cbf3,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.126 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-h5zgt oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ccbec4c027 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=947 identity=35750 ipv4=10.0.0.126 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-h5zgt subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.71 2333cb42-6ca6-4e8c-a964-ea9ae8642719 default }" containerID=a8ad9e6ddf909f3826ed527e35c46017a8b75f9fa71f2a2e8ceda1635edf22da datapathConfiguration="&{false false false false false }" interface=lxcd32cf5f75839 k8sPodName=kube-system/coredns-67659f764b-8kf8m labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a8ad9e6ddf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2398 ipv4=10.0.0.71 ipv6= k8sPodName=kube-system/coredns-67659f764b-8kf8m subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a8ad9e6ddf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2398 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.71 ipv6= k8sPodName=kube-system/coredns-67659f764b-8kf8m subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:kube-system]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.112 fdec9b8c-d48a-44dc-8aab-383ecf3debf2 default }" containerID=f4b1ab8a776a0c45da3d28492f1c41501287aa2d43bdbb2ecff7aaae0c14b9af datapathConfiguration="&{false false false false false }" interface=lxc10488a6861a6 k8sPodName=kube-system/coredns-67659f764b-hwl4n labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f4b1ab8a77 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=637 ipv4=10.0.0.112 ipv6= k8sPodName=kube-system/coredns-67659f764b-hwl4n subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.113 9844a5dc-704b-402c-a82e-206db3c21aef default }" containerID=57d9d7d5e4fcd3cbc5a728ae9e26204cd9c334360fda1edd2da58d4fc0125403 datapathConfiguration="&{false false false false false }" interface=lxc5c6095b9742a k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-6ftch labels="[]" subsys=daemon sync-build=true level=info msg="Resolving identity labels (blocking)" containerID=f4b1ab8a77 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=637 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.112 ipv6= k8sPodName=kube-system/coredns-67659f764b-hwl4n subsys=endpoint level=info msg="New endpoint" containerID=57d9d7d5e4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=505 ipv4=10.0.0.113 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-6ftch subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=57d9d7d5e4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=505 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.113 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-6ftch subsys=endpoint level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=coredns;k8s:io.kubernetes.pod.namespace=kube-system;k8s:k8s-app=kube-dns;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a8ad9e6ddf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2398 identity=53186 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.71 ipv6= k8sPodName=kube-system/coredns-67659f764b-8kf8m oldIdentity="no identity" subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=coredns;k8s:io.kubernetes.pod.namespace=kube-system;k8s:k8s-app=kube-dns;" subsys=allocator level=info msg="Waiting for endpoint to be generated" containerID=a8ad9e6ddf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2398 identity=53186 ipv4=10.0.0.71 ipv6= k8sPodName=kube-system/coredns-67659f764b-8kf8m subsys=endpoint level=info msg="Identity of endpoint changed" containerID=f4b1ab8a77 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=637 identity=53186 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.112 ipv6= k8sPodName=kube-system/coredns-67659f764b-hwl4n oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f4b1ab8a77 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=637 identity=53186 ipv4=10.0.0.112 ipv6= k8sPodName=kube-system/coredns-67659f764b-hwl4n subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Rewrote endpoint BPF program" containerID=5d23e80251 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3693 identity=39710 ipv4=10.0.0.70 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-g8bsn subsys=endpoint level=info msg="Successful endpoint creation" containerID=5d23e80251 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3693 identity=39710 ipv4=10.0.0.70 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-g8bsn subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=5d8c9c1a45 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=481 identity=6659 ipv4=10.0.0.226 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-pz5pt subsys=endpoint level=info msg="Successful endpoint creation" containerID=5d8c9c1a45 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=481 identity=6659 ipv4=10.0.0.226 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-pz5pt subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=c913076bad datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=712 identity=4418 ipv4=10.0.0.154 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-7lmtw subsys=endpoint level=info msg="Successful endpoint creation" containerID=c913076bad datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=712 identity=4418 ipv4=10.0.0.154 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-7lmtw subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1298 identity=4 ipv4=10.0.0.110 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ccbec4c027 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=947 identity=35750 ipv4=10.0.0.126 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-h5zgt subsys=endpoint level=info msg="Successful endpoint creation" containerID=ccbec4c027 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=947 identity=35750 ipv4=10.0.0.126 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-h5zgt subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.185 a279779a-ea94-4467-bfb3-3feb960a3d74 default }" containerID=2a84f08898fdce40137aa97a3227525cbe60cdab9a131aafb8cf0c16934656ec datapathConfiguration="&{false false false false false }" interface=lxceccf92661b71 k8sPodName=kube-system/coredns-7c96b6546b-cg58k labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2a84f08898 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2056 ipv4=10.0.0.185 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-cg58k subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2a84f08898 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2056 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.185 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-cg58k subsys=endpoint level=info msg="Identity of endpoint changed" containerID=2a84f08898 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2056 identity=53186 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.185 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-cg58k oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2a84f08898 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2056 identity=53186 ipv4=10.0.0.185 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-cg58k subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f4b1ab8a77 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=637 identity=53186 ipv4=10.0.0.112 ipv6= k8sPodName=kube-system/coredns-67659f764b-hwl4n subsys=endpoint level=info msg="Successful endpoint creation" containerID=f4b1ab8a77 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=637 identity=53186 ipv4=10.0.0.112 ipv6= k8sPodName=kube-system/coredns-67659f764b-hwl4n subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=a8ad9e6ddf datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2398 identity=53186 ipv4=10.0.0.71 ipv6= k8sPodName=kube-system/coredns-67659f764b-8kf8m subsys=endpoint level=info msg="Successful endpoint creation" containerID=a8ad9e6ddf datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2398 identity=53186 ipv4=10.0.0.71 ipv6= k8sPodName=kube-system/coredns-67659f764b-8kf8m subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=2a84f08898 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2056 identity=53186 ipv4=10.0.0.185 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-cg58k subsys=endpoint level=info msg="Successful endpoint creation" containerID=2a84f08898 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2056 identity=53186 ipv4=10.0.0.185 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-cg58k subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=57d9d7d5e4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=505 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.113 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-6ftch line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=cainjector;k8s:app.kubernetes.io/component=cainjector;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cainjector;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=57d9d7d5e4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=505 identity=22224 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.113 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-6ftch oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=57d9d7d5e4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=505 identity=22224 ipv4=10.0.0.113 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-6ftch subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=57d9d7d5e4 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=505 identity=22224 ipv4=10.0.0.113 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-6ftch subsys=endpoint level=info msg="Successful endpoint creation" containerID=57d9d7d5e4 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=505 identity=22224 ipv4=10.0.0.113 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-6ftch subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=2a84f08898 endpointID=2056 k8sNamespace=kube-system k8sPodName=coredns-7c96b6546b-cg58k subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=coredns k8s:io.kubernetes.pod.namespace=kube-system k8s:k8s-app=kube-dns]" subsys=allocator level=info msg="Removed endpoint" containerID=2a84f08898 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2056 identity=53186 ipv4=10.0.0.185 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-cg58k subsys=endpoint level=info msg="Delete endpoint request" containerID=ccbec4c027 endpointID=947 k8sNamespace=cert-manager k8sPodName=cert-manager-startupapicheck-h5zgt subsys=daemon level=info msg="Releasing key" key="[k8s:app=startupapicheck k8s:app.kubernetes.io/component=startupapicheck k8s:app.kubernetes.io/instance=cert-manager k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=startupapicheck k8s:app.kubernetes.io/version=v1.11.5 k8s:batch.kubernetes.io/controller-uid=c16c584a-1f5b-48ca-bfdc-7ac83803cbf3 k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck k8s:controller-uid=c16c584a-1f5b-48ca-bfdc-7ac83803cbf3 k8s:helm.sh/chart=cert-manager-v1.11.5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager k8s:io.cilium.k8s.namespace.labels.name=cert-manager k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck k8s:io.kubernetes.pod.namespace=cert-manager k8s:job-name=cert-manager-startupapicheck]" subsys=allocator level=info msg="Removed endpoint" containerID=ccbec4c027 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=947 identity=35750 ipv4=10.0.0.126 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-h5zgt subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.89 c7636e47-b622-41ee-a7ba-766d271ef51c default }" containerID=9fcd438914b7aea8646bc894f277abfc05f7e9d01ed105bbdb34b3730a86b3b0 datapathConfiguration="&{false false false false false }" interface=lxc852cc02296a4 k8sPodName=ingress-nginx/ingress-nginx-admission-create-rsbs7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9fcd438914 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2607 ipv4=10.0.0.89 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-rsbs7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9fcd438914 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2607 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=c151f457-c3c5-4d78-b2cb-156b592f874a,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=c151f457-c3c5-4d78-b2cb-156b592f874a,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.89 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-rsbs7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=c151f457-c3c5-4d78-b2cb-156b592f874a;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create;k8s:controller-uid=c151f457-c3c5-4d78-b2cb-156b592f874a;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-create;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9fcd438914 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2607 identity=4000 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=c151f457-c3c5-4d78-b2cb-156b592f874a,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=c151f457-c3c5-4d78-b2cb-156b592f874a,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.89 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-rsbs7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9fcd438914 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2607 identity=4000 ipv4=10.0.0.89 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-rsbs7 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=9fcd438914 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2607 identity=4000 ipv4=10.0.0.89 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-rsbs7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=9fcd438914 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2607 identity=4000 ipv4=10.0.0.89 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-rsbs7 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=9fcd438914 endpointID=2607 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-create-rsbs7 subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=c151f457-c3c5-4d78-b2cb-156b592f874a k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create k8s:controller-uid=c151f457-c3c5-4d78-b2cb-156b592f874a k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-create]" subsys=allocator level=info msg="Removed endpoint" containerID=9fcd438914 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2607 identity=4000 ipv4=10.0.0.89 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-rsbs7 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.141 24a83f64-60df-44fb-a58e-eeebfea63c21 default }" containerID=0477f311106b885ecada23b83d6608b45598846edf4e73ef8cb06a5beecb17d4 datapathConfiguration="&{false false false false false }" interface=lxcb67486685c9c k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-zppxl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0477f31110 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3668 ipv4=10.0.0.141 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-zppxl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0477f31110 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3668 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.141 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-zppxl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=default-backend;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend;k8s:io.kubernetes.pod.namespace=ingress-nginx;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0477f31110 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3668 identity=1182 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.141 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-zppxl oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=0477f31110 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3668 identity=1182 ipv4=10.0.0.141 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-zppxl subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0477f31110 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3668 identity=1182 ipv4=10.0.0.141 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-zppxl subsys=endpoint level=info msg="Successful endpoint creation" containerID=0477f31110 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3668 identity=1182 ipv4=10.0.0.141 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-zppxl subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.192 bf2102ff-811d-412f-bbdf-2a66dfdfe528 default }" containerID=632201e84e212e50577285d721242ffcc8b0b68a754d41b6dcf8f8ad57c6cf40 datapathConfiguration="&{false false false false false }" interface=lxc0b1887e56f87 k8sPodName=ingress-nginx/ingress-nginx-admission-patch-c6gtr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=632201e84e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2280 ipv4=10.0.0.192 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-c6gtr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=632201e84e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2280 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=0967f394-4546-4feb-8dca-5b1f8408c7eb,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=0967f394-4546-4feb-8dca-5b1f8408c7eb,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.192 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-c6gtr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=0967f394-4546-4feb-8dca-5b1f8408c7eb;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch;k8s:controller-uid=0967f394-4546-4feb-8dca-5b1f8408c7eb;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-patch;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=632201e84e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2280 identity=18453 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=0967f394-4546-4feb-8dca-5b1f8408c7eb,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=0967f394-4546-4feb-8dca-5b1f8408c7eb,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.192 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-c6gtr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=632201e84e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2280 identity=18453 ipv4=10.0.0.192 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-c6gtr subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=632201e84e datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2280 identity=18453 ipv4=10.0.0.192 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-c6gtr subsys=endpoint level=info msg="Successful endpoint creation" containerID=632201e84e datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2280 identity=18453 ipv4=10.0.0.192 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-c6gtr subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=632201e84e endpointID=2280 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-patch-c6gtr subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=0967f394-4546-4feb-8dca-5b1f8408c7eb k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch k8s:controller-uid=0967f394-4546-4feb-8dca-5b1f8408c7eb k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-patch]" subsys=allocator level=info msg="Removed endpoint" containerID=632201e84e datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2280 identity=18453 ipv4=10.0.0.192 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-c6gtr subsys=endpoint level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"messaging-topology-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9443 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-messaging-topology-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=97176a27-88ac-4b9b-8ecd-3fb1fb6bc12a] Description:}]" policyAddRequest=658ec721-5cda-43ac-afbe-8b5dcc922a3e subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=658ec721-5cda-43ac-afbe-8b5dcc922a3e policyRevision=2 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-messaging-topology-operator subsys=k8s-watcher level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"rabbitmq-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-cluster-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=144d72bc-bbc9-44cd-98a6-59312069d1ac] Description:}]" policyAddRequest=7bb5a737-e533-4dfb-a311-aa095936de9a subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=7bb5a737-e533-4dfb-a311-aa095936de9a policyRevision=3 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-cluster-operator subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.126 7260169a-819c-4287-be02-d1441997f618 default }" containerID=35ee6ce7d1b34cc14f90e591108e07d7dd9edddc0ca6c16dc395a7794533ae2f datapathConfiguration="&{false false false false false }" interface=lxc52dae5867446 k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-kxsvv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=35ee6ce7d1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=874 ipv4=10.0.0.126 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-kxsvv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=35ee6ce7d1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=874 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.16.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.126 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-kxsvv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=2.16.1;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=35ee6ce7d1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=874 identity=61718 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.16.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.126 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-kxsvv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=35ee6ce7d1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=874 identity=61718 ipv4=10.0.0.126 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-kxsvv subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=35ee6ce7d1 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=874 identity=61718 ipv4=10.0.0.126 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-kxsvv subsys=endpoint level=info msg="Successful endpoint creation" containerID=35ee6ce7d1 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=874 identity=61718 ipv4=10.0.0.126 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-kxsvv subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.83 9c452749-299a-47f1-9737-e764cd461e12 default }" containerID=f8585d6a5e911533fe01670aac122658f63d86971b492ab16ec39d080295c274 datapathConfiguration="&{false false false false false }" interface=lxc6410c93c5674 k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-rmjcl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f8585d6a5e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=703 ipv4=10.0.0.83 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-rmjcl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f8585d6a5e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=703 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.17.4,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.83 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-rmjcl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=messaging-topology-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=1.17.4;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f8585d6a5e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=703 identity=26058 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.17.4,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.83 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-rmjcl oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f8585d6a5e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=703 identity=26058 ipv4=10.0.0.83 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-rmjcl subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f8585d6a5e datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=703 identity=26058 ipv4=10.0.0.83 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-rmjcl subsys=endpoint level=info msg="Successful endpoint creation" containerID=f8585d6a5e datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=703 identity=26058 ipv4=10.0.0.83 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-rmjcl subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.109 6ddf49b9-d027-43cc-b245-668a862728d1 default }" containerID=f2347176509452e98ff12faa598b8ad488b0226a35ab62adef302da36c431105 datapathConfiguration="&{false false false false false }" interface=lxcd9ce669c68c9 k8sPodName=openstack/pxc-operator-69cb5bbdb9-62rhp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f234717650 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3211 ipv4=10.0.0.109 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-62rhp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f234717650 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3211 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.109 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-62rhp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=f234717650 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3211 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.109 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-62rhp line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=operator;k8s:app.kubernetes.io/instance=pxc-operator;k8s:app.kubernetes.io/name=pxc-operator;k8s:app.kubernetes.io/part-of=pxc-operator;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f234717650 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3211 identity=45639 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.109 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-62rhp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f234717650 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3211 identity=45639 ipv4=10.0.0.109 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-62rhp subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f234717650 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=3211 identity=45639 ipv4=10.0.0.109 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-62rhp subsys=endpoint level=info msg="Successful endpoint creation" containerID=f234717650 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=3211 identity=45639 ipv4=10.0.0.109 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-62rhp subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.2 17215a60-7293-421a-b222-9251131aa4cc default }" containerID=6fb81fee9f9decdc4c13e68065bd42a2d5ace96948d328ba295b2b9fbbcb8845 datapathConfiguration="&{false false false false false }" interface=lxcf77a6f9db836 k8sPodName=openstack/percona-xtradb-haproxy-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6fb81fee9f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1373 ipv4=10.0.0.2 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6fb81fee9f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1373 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.2 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=haproxy;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6fb81fee9f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1373 identity=4375 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.2 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6fb81fee9f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1373 identity=4375 ipv4=10.0.0.2 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6fb81fee9f datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1373 identity=4375 ipv4=10.0.0.2 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=6fb81fee9f datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1373 identity=4375 ipv4=10.0.0.2 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.123 c737e50c-1af7-472d-8d9a-b083a28a0af1 default }" containerID=f8852e5ea639962384ee507c73ad842498a2905fadb6d35090f5ca84d1fdbbd8 datapathConfiguration="&{false false false false false }" interface=lxcd68e493c9da4 k8sPodName=local-path-storage/helper-pod-create-pvc-c2840f87-c558-4ac1-864a-6d5f3311c5dc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f8852e5ea6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=682 ipv4=10.0.0.123 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c2840f87-c558-4ac1-864a-6d5f3311c5dc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f8852e5ea6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=682 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.123 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c2840f87-c558-4ac1-864a-6d5f3311c5dc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f8852e5ea6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=682 identity=14089 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.123 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c2840f87-c558-4ac1-864a-6d5f3311c5dc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f8852e5ea6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=682 identity=14089 ipv4=10.0.0.123 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c2840f87-c558-4ac1-864a-6d5f3311c5dc subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f8852e5ea6 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=682 identity=14089 ipv4=10.0.0.123 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c2840f87-c558-4ac1-864a-6d5f3311c5dc subsys=endpoint level=info msg="Successful endpoint creation" containerID=f8852e5ea6 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=682 identity=14089 ipv4=10.0.0.123 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c2840f87-c558-4ac1-864a-6d5f3311c5dc subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=f8852e5ea6 endpointID=682 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-c2840f87-c558-4ac1-864a-6d5f3311c5dc subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=f8852e5ea6 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=682 identity=14089 ipv4=10.0.0.123 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c2840f87-c558-4ac1-864a-6d5f3311c5dc subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.38 b34552cd-9135-4fb8-b471-68d19aa72f1c default }" containerID=2bfac7ba247b022eae834dc2cd750f8872258a4f6430798e8be9c7d6fe634744 datapathConfiguration="&{false false false false false }" interface=lxc16cdf823f2ce k8sPodName=openstack/percona-xtradb-pxc-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2bfac7ba24 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=592 ipv4=10.0.0.38 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2bfac7ba24 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=592 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.38 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=pxc;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2bfac7ba24 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=592 identity=55482 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.38 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2bfac7ba24 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=592 identity=55482 ipv4=10.0.0.38 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=2bfac7ba24 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=592 identity=55482 ipv4=10.0.0.38 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=2bfac7ba24 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=592 identity=55482 ipv4=10.0.0.38 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/instance\":\"valkey\",\"k8s:app.kubernetes.io/name\":\"valkey\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:6379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:26379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:} {IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9121 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=valkey k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=59d8208c-063e-43f8-b620-a98d0d27b672] Description:}]" policyAddRequest=bcf4a184-111d-4f86-bb01-f7e722714200 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=bcf4a184-111d-4f86-bb01-f7e722714200 policyRevision=4 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=valkey subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.182 a4683401-ac27-4a10-b53a-2f2393942787 default }" containerID=456a14d8e1d0fa135669e0144f48ef8440be9544b6589abd67cede42bdae4cb1 datapathConfiguration="&{false false false false false }" interface=lxc374524a8c8e3 k8sPodName=local-path-storage/helper-pod-create-pvc-e3d1fbd5-8948-44aa-ba2f-aa6f50baf996 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=456a14d8e1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2920 ipv4=10.0.0.182 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e3d1fbd5-8948-44aa-ba2f-aa6f50baf996 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=456a14d8e1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2920 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.182 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e3d1fbd5-8948-44aa-ba2f-aa6f50baf996 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=456a14d8e1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2920 identity=14089 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.182 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e3d1fbd5-8948-44aa-ba2f-aa6f50baf996 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=456a14d8e1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2920 identity=14089 ipv4=10.0.0.182 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e3d1fbd5-8948-44aa-ba2f-aa6f50baf996 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=456a14d8e1 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2920 identity=14089 ipv4=10.0.0.182 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e3d1fbd5-8948-44aa-ba2f-aa6f50baf996 subsys=endpoint level=info msg="Successful endpoint creation" containerID=456a14d8e1 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2920 identity=14089 ipv4=10.0.0.182 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e3d1fbd5-8948-44aa-ba2f-aa6f50baf996 subsys=daemon level=info msg="Delete endpoint request" containerID=456a14d8e1 endpointID=2920 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-e3d1fbd5-8948-44aa-ba2f-aa6f50baf996 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=456a14d8e1 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2920 identity=14089 ipv4=10.0.0.182 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e3d1fbd5-8948-44aa-ba2f-aa6f50baf996 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.55 813d2601-08c2-4b25-b6a1-db853f9e987d default }" containerID=22644623765c2634ee2e018b76122a480932ef2916260e4b8215e9f9ad4027fc datapathConfiguration="&{false false false false false }" interface=lxc5347947a07d7 k8sPodName=openstack/valkey-node-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2264462376 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=843 ipv4=10.0.0.55 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2264462376 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=843 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.55 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=node;k8s:app.kubernetes.io/instance=valkey;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=valkey;k8s:app.kubernetes.io/version=8.0.2;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=valkey-2.4.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=valkey;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=valkey-node-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2264462376 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=843 identity=22187 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.55 ipv6= k8sPodName=openstack/valkey-node-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2264462376 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=843 identity=22187 ipv4=10.0.0.55 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=2264462376 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=843 identity=22187 ipv4=10.0.0.55 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=2264462376 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=843 identity=22187 ipv4=10.0.0.55 ipv6= k8sPodName=openstack/valkey-node-0 subsys=daemon level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"keycloak\",\"k8s:app.kubernetes.io/instance\":\"keycloak\",\"k8s:app.kubernetes.io/name\":\"keycloak\",\"k8s:io.kubernetes.pod.namespace\":\"auth-system\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:7800 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:8080 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=keycloak k8s:io.cilium.k8s.policy.namespace=auth-system k8s:io.cilium.k8s.policy.uid=bcb5f19d-d1c7-412b-abe6-dc642a13fea0] Description:}]" policyAddRequest=aee87975-41e7-464b-8dfd-fae5d30c5fbe subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=aee87975-41e7-464b-8dfd-fae5d30c5fbe policyRevision=5 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=keycloak subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.69 5568f95e-9c8f-4121-a65d-7a235955ecdb default }" containerID=b645871310f7e5de9db028cd90ba4992b08f669de297af32a5c475dcfdec5efa datapathConfiguration="&{false false false false false }" interface=lxc5b14bb6e16bb k8sPodName=auth-system/keycloak-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b645871310 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2393 ipv4=10.0.0.69 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b645871310 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2393 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.69 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:auth-system k8s:io.cilium.k8s.namespace.labels.name:auth-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=keycloak;k8s:app.kubernetes.io/instance=keycloak;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=keycloak;k8s:app.kubernetes.io/version=24.0.5;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=keycloak-21.4.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system;k8s:io.cilium.k8s.namespace.labels.name=auth-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keycloak;k8s:io.kubernetes.pod.namespace=auth-system;k8s:statefulset.kubernetes.io/pod-name=keycloak-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b645871310 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2393 identity=44176 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.69 ipv6= k8sPodName=auth-system/keycloak-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b645871310 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2393 identity=44176 ipv4=10.0.0.69 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=b645871310 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2393 identity=44176 ipv4=10.0.0.69 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=b645871310 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2393 identity=44176 ipv4=10.0.0.69 ipv6= k8sPodName=auth-system/keycloak-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.009915186603000257 newInterval=7m30s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.206 970a37e2-4557-40fa-887a-71a9ef8f04bc default }" containerID=228faeb27955437c7fab7f7a9d6fabd7a4846e801a3d02b33479181876fd4521 datapathConfiguration="&{false false false false false }" interface=lxcceb78885bcf4 k8sPodName=monitoring/node-feature-discovery-worker-fdvs9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=228faeb279 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1821 ipv4=10.0.0.206 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-fdvs9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=228faeb279 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1821 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.206 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-fdvs9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.108 94948f92-919e-4309-98a2-4e513a98287a default }" containerID=2adac6047490c18b7179d07e0092ba07f9de6c1c51d61320d56f715a5ec7b5ae datapathConfiguration="&{false false false false false }" interface=lxc8f1bcc2fa32b k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-6lwcv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2adac60474 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1259 ipv4=10.0.0.108 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-6lwcv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2adac60474 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1259 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.108 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-6lwcv subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=worker;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=228faeb279 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1821 identity=2361 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.206 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-fdvs9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=228faeb279 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1821 identity=2361 ipv4=10.0.0.206 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-fdvs9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=2adac60474 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1259 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.108 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-6lwcv line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=gc;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2adac60474 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1259 identity=18057 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.108 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-6lwcv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2adac60474 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1259 identity=18057 ipv4=10.0.0.108 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-6lwcv subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=228faeb279 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1821 identity=2361 ipv4=10.0.0.206 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-fdvs9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=228faeb279 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1821 identity=2361 ipv4=10.0.0.206 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-fdvs9 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=2adac60474 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1259 identity=18057 ipv4=10.0.0.108 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-6lwcv subsys=endpoint level=info msg="Successful endpoint creation" containerID=2adac60474 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1259 identity=18057 ipv4=10.0.0.108 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-6lwcv subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.93 c2e83e8b-9cc7-4783-932c-e55c5e3ddba3 default }" containerID=fc34f76bf8ba9d17d7ad6a89e52149e4bb14e4c4653162b99da11cd548b619a3 datapathConfiguration="&{false false false false false }" interface=lxcedce01341785 k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-qmgdn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fc34f76bf8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3449 ipv4=10.0.0.93 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-qmgdn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fc34f76bf8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3449 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.93 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-qmgdn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=master;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fc34f76bf8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3449 identity=37852 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.93 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-qmgdn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fc34f76bf8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3449 identity=37852 ipv4=10.0.0.93 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-qmgdn subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=fc34f76bf8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3449 identity=37852 ipv4=10.0.0.93 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-qmgdn subsys=endpoint level=info msg="Successful endpoint creation" containerID=fc34f76bf8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3449 identity=37852 ipv4=10.0.0.93 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-qmgdn subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.186 bc9160b2-0471-4a31-8e14-582e6ae99ab4 default }" containerID=9a7e78ab9c57c132578939e65b03af28232333e5ed9f7fbf64f310bac335c66f datapathConfiguration="&{false false false false false }" interface=lxc2087c1283ac1 k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-g6wbk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9a7e78ab9c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3466 ipv4=10.0.0.186 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-g6wbk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9a7e78ab9c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3466 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.186 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-g6wbk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:secretgen-controller]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=secretgen-controller;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa;k8s:io.kubernetes.pod.namespace=secretgen-controller;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9a7e78ab9c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3466 identity=30470 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.186 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-g6wbk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9a7e78ab9c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3466 identity=30470 ipv4=10.0.0.186 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-g6wbk subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=9a7e78ab9c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3466 identity=30470 ipv4=10.0.0.186 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-g6wbk subsys=endpoint level=info msg="Successful endpoint creation" containerID=9a7e78ab9c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3466 identity=30470 ipv4=10.0.0.186 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-g6wbk subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2640 identity=1 identityLabels="k8s:feature.node.kubernetes.io/cpu-cpuid.ADX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AESNI=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX2=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CLZERO=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CMPXCHG8=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FMA3=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSROPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.HYPERVISOR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IA32_ARCH_CAP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBPB=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBRS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.LAHF=true,k8s:feature.node.kubernetes.io/cpu-cpuid.MOVBE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.NRIPS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.OSXSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SHA=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SPEC_CTRL_SSBD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SSE4A=true,k8s:feature.node.kubernetes.io/cpu-cpuid.STIBP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVM=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVMNP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSCALL=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSEE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.TOPEXT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.WBNOINVD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.X87=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XGETBV1=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEC=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEOPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVES=true,k8s:feature.node.kubernetes.io/cpu-hardware_multithreading=false,k8s:feature.node.kubernetes.io/cpu-model.family=23,k8s:feature.node.kubernetes.io/cpu-model.id=49,k8s:feature.node.kubernetes.io/cpu-model.vendor_id=AMD,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ=true,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ_IDLE=true,k8s:feature.node.kubernetes.io/kernel-version.full=5.15.0-173-generic,k8s:feature.node.kubernetes.io/kernel-version.major=5,k8s:feature.node.kubernetes.io/kernel-version.minor=15,k8s:feature.node.kubernetes.io/kernel-version.revision=0,k8s:feature.node.kubernetes.io/pci-0300_1af4.present=true,k8s:feature.node.kubernetes.io/system-os_release.ID=ubuntu,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.major=22,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.minor=04,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID=22.04,k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_02640 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_02640 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_02640 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_02640:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2640 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.31 ab21e3fe-ccb6-4efb-8039-bad9f12e36b3 default }" containerID=d48238128b0519dccb2ff2684c2c75eea31642481906ea92181506c9d04dec72 datapathConfiguration="&{false false false false false }" interface=lxce01b3d9a176b k8sPodName=monitoring/kube-prometheus-stack-admission-create-cnfh2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d48238128b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=366 ipv4=10.0.0.31 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-cnfh2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d48238128b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=366 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=c32a5749-f7cc-4dae-a16a-11b31c4f675d,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=c32a5749-f7cc-4dae-a16a-11b31c4f675d,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.31 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-cnfh2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=d48238128b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=366 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.31 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-cnfh2 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-create;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=c32a5749-f7cc-4dae-a16a-11b31c4f675d;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=c32a5749-f7cc-4dae-a16a-11b31c4f675d;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-create;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d48238128b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=366 identity=32577 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=c32a5749-f7cc-4dae-a16a-11b31c4f675d,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=c32a5749-f7cc-4dae-a16a-11b31c4f675d,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.31 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-cnfh2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d48238128b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=366 identity=32577 ipv4=10.0.0.31 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-cnfh2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d48238128b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=366 identity=32577 ipv4=10.0.0.31 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-cnfh2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=d48238128b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=366 identity=32577 ipv4=10.0.0.31 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-cnfh2 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=d48238128b endpointID=366 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-create-cnfh2 subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-create k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=c32a5749-f7cc-4dae-a16a-11b31c4f675d k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=c32a5749-f7cc-4dae-a16a-11b31c4f675d k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-create k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=d48238128b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=366 identity=32577 ipv4=10.0.0.31 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-cnfh2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.178 8b3bc498-f68c-465a-80e7-dafa5554ce64 default }" containerID=b3fe186227d66d8ea7ee5dd4b50883482a783e5bc0dbea153ff547ac724642d1 datapathConfiguration="&{false false false false false }" interface=lxc3bbc16cc428b k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-92v7c labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b3fe186227 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3134 ipv4=10.0.0.178 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-92v7c subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b3fe186227 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3134 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.178 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-92v7c subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=metrics;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-state-metrics;k8s:app.kubernetes.io/part-of=kube-state-metrics;k8s:app.kubernetes.io/version=2.12.0;k8s:helm.sh/chart=kube-state-metrics-5.20.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b3fe186227 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3134 identity=5042 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.178 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-92v7c oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b3fe186227 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3134 identity=5042 ipv4=10.0.0.178 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-92v7c subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.79 ab8df67d-bcbf-4dc7-b9eb-db5476ce7644 default }" containerID=3da75676ba1ba0fef048abd9248ac9497defaba3cd3bea0a031ff04484d288e1 datapathConfiguration="&{false false false false false }" interface=lxc800b21990a56 k8sPodName=monitoring/kube-prometheus-stack-grafana-596fd566bc-n7k9p labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3da75676ba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=742 ipv4=10.0.0.79 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-596fd566bc-n7k9p subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3da75676ba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=742 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.79 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-596fd566bc-n7k9p subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.148 808aff94-96a0-496a-b884-6060fbcf87cc default }" containerID=756ea50f49f55cf6198b6cb9b16c30bec14103bb868ef15117dae6ecff714e6e datapathConfiguration="&{false false false false false }" interface=lxcfdb36b490d90 k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-2k57j labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=756ea50f49 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=163 ipv4=10.0.0.148 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-2k57j subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=756ea50f49 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=163 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.148 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-2k57j subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/name=grafana;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3da75676ba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=742 identity=11914 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.79 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-596fd566bc-n7k9p oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3da75676ba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=742 identity=11914 ipv4=10.0.0.79 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-596fd566bc-n7k9p subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-operator;k8s:app.kubernetes.io/component=prometheus-operator;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:chart=kube-prometheus-stack-60.2.0;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=756ea50f49 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=163 identity=13987 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.148 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-2k57j oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=756ea50f49 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=163 identity=13987 ipv4=10.0.0.148 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-2k57j subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b3fe186227 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3134 identity=5042 ipv4=10.0.0.178 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-92v7c subsys=endpoint level=info msg="Successful endpoint creation" containerID=b3fe186227 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3134 identity=5042 ipv4=10.0.0.178 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-92v7c subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=3da75676ba datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=742 identity=11914 ipv4=10.0.0.79 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-596fd566bc-n7k9p subsys=endpoint level=info msg="Successful endpoint creation" containerID=3da75676ba datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=742 identity=11914 ipv4=10.0.0.79 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-596fd566bc-n7k9p subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=756ea50f49 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=163 identity=13987 ipv4=10.0.0.148 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-2k57j subsys=endpoint level=info msg="Successful endpoint creation" containerID=756ea50f49 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=163 identity=13987 ipv4=10.0.0.148 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-2k57j subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.240 017d17aa-6cd9-41d1-ab57-21cc74a77c44 default }" containerID=be1d16fa4ba3a91ba5e211bd4f740573647bf983879cc26ef44e081b94a315f4 datapathConfiguration="&{false false false false false }" interface=lxcda81f0c177e7 k8sPodName=monitoring/kube-prometheus-stack-admission-patch-5sdsj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=be1d16fa4b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3995 ipv4=10.0.0.240 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-5sdsj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=be1d16fa4b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3995 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=05efaf0b-c938-4a5b-8e33-48c7707fc0b7,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=05efaf0b-c938-4a5b-8e33-48c7707fc0b7,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.240 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-5sdsj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-patch;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=05efaf0b-c938-4a5b-8e33-48c7707fc0b7;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=05efaf0b-c938-4a5b-8e33-48c7707fc0b7;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-patch;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=be1d16fa4b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3995 identity=20504 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=05efaf0b-c938-4a5b-8e33-48c7707fc0b7,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=05efaf0b-c938-4a5b-8e33-48c7707fc0b7,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.240 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-5sdsj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=be1d16fa4b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3995 identity=20504 ipv4=10.0.0.240 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-5sdsj subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=be1d16fa4b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3995 identity=20504 ipv4=10.0.0.240 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-5sdsj subsys=endpoint level=info msg="Successful endpoint creation" containerID=be1d16fa4b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3995 identity=20504 ipv4=10.0.0.240 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-5sdsj subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=be1d16fa4b endpointID=3995 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-patch-5sdsj subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-patch k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=05efaf0b-c938-4a5b-8e33-48c7707fc0b7 k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=05efaf0b-c938-4a5b-8e33-48c7707fc0b7 k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-patch k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=be1d16fa4b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3995 identity=20504 ipv4=10.0.0.240 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-5sdsj subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.17 b3fc723d-f583-44d5-8c5f-bb74b69f9ba6 default }" containerID=433a0fbec804969ebd45f288682efdca8bffdbdd45484490ca590d7d9736ad5a datapathConfiguration="&{false false false false false }" interface=lxc7430bc761d7e k8sPodName=local-path-storage/helper-pod-create-pvc-6e8a64c6-fbba-4283-8db8-59adace07aed labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=433a0fbec8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1669 ipv4=10.0.0.17 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6e8a64c6-fbba-4283-8db8-59adace07aed subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=433a0fbec8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1669 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.17 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6e8a64c6-fbba-4283-8db8-59adace07aed subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=433a0fbec8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1669 identity=14089 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.17 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6e8a64c6-fbba-4283-8db8-59adace07aed oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=433a0fbec8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1669 identity=14089 ipv4=10.0.0.17 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6e8a64c6-fbba-4283-8db8-59adace07aed subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=433a0fbec8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1669 identity=14089 ipv4=10.0.0.17 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6e8a64c6-fbba-4283-8db8-59adace07aed subsys=endpoint level=info msg="Successful endpoint creation" containerID=433a0fbec8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1669 identity=14089 ipv4=10.0.0.17 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6e8a64c6-fbba-4283-8db8-59adace07aed subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.167 2564babe-c87d-4d11-baca-ef9c0208df98 default }" containerID=ff8b1fcb31d2d0542a56a59084702cd9294e952444f34d18f6db171c07871811 datapathConfiguration="&{false false false false false }" interface=lxc2abbc8aed6da k8sPodName=local-path-storage/helper-pod-create-pvc-6cdfb9c7-efb6-41f1-ac0e-87167ec84d5a labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ff8b1fcb31 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=723 ipv4=10.0.0.167 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6cdfb9c7-efb6-41f1-ac0e-87167ec84d5a subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ff8b1fcb31 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=723 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.167 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6cdfb9c7-efb6-41f1-ac0e-87167ec84d5a subsys=endpoint level=info msg="Identity of endpoint changed" containerID=ff8b1fcb31 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=723 identity=14089 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.167 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6cdfb9c7-efb6-41f1-ac0e-87167ec84d5a oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ff8b1fcb31 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=723 identity=14089 ipv4=10.0.0.167 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6cdfb9c7-efb6-41f1-ac0e-87167ec84d5a subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ff8b1fcb31 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=723 identity=14089 ipv4=10.0.0.167 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6cdfb9c7-efb6-41f1-ac0e-87167ec84d5a subsys=endpoint level=info msg="Successful endpoint creation" containerID=ff8b1fcb31 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=723 identity=14089 ipv4=10.0.0.167 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6cdfb9c7-efb6-41f1-ac0e-87167ec84d5a subsys=daemon level=info msg="Delete endpoint request" containerID=433a0fbec8 endpointID=1669 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-6e8a64c6-fbba-4283-8db8-59adace07aed subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=433a0fbec8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1669 identity=14089 ipv4=10.0.0.17 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6e8a64c6-fbba-4283-8db8-59adace07aed subsys=endpoint level=info msg="Delete endpoint request" containerID=ff8b1fcb31 endpointID=723 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-6cdfb9c7-efb6-41f1-ac0e-87167ec84d5a subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=ff8b1fcb31 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=723 identity=14089 ipv4=10.0.0.167 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6cdfb9c7-efb6-41f1-ac0e-87167ec84d5a subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.95 8c0c1750-8945-4df9-b734-2369bd8e8bc9 default }" containerID=4cd76e92bf7e7aef17c7a4660b83c1ddceb3563824122737aa20967ebdc9328e datapathConfiguration="&{false false false false false }" interface=lxcc1a2b0e79118 k8sPodName=monitoring/loki-gateway-cf54cb88c-g8bwd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4cd76e92bf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1263 ipv4=10.0.0.95 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-g8bwd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4cd76e92bf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1263 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.95 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-g8bwd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=gateway;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=4cd76e92bf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1263 identity=57296 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.95 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-g8bwd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4cd76e92bf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1263 identity=57296 ipv4=10.0.0.95 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-g8bwd subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.73 f803d008-dd54-4202-a1fc-9981c0a0de4c default }" containerID=2dec4318cf5fb778b83b7e85f0791e17d37a03f8b16ca5b9548f2d5ddb6297e3 datapathConfiguration="&{false false false false false }" interface=lxce349b6745152 k8sPodName=monitoring/loki-results-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2dec4318cf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=5 ipv4=10.0.0.73 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2dec4318cf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=5 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.73 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.250 0b2c991f-aeb5-48c6-88a9-4d35d4016332 default }" containerID=5446e3d10f5e546982d582cd53090ddcf9080877fb0e28667d179ed3b233db93 datapathConfiguration="&{false false false false false }" interface=lxcfc18ad1146ff k8sPodName=monitoring/loki-chunks-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5446e3d10f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=731 ipv4=10.0.0.250 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5446e3d10f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=731 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.250 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-results-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-results-cache;k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2dec4318cf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=5 identity=44975 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.73 ipv6= k8sPodName=monitoring/loki-results-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2dec4318cf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=5 identity=44975 ipv4=10.0.0.73 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-chunks-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-chunks-cache;k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5446e3d10f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=731 identity=33680 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.250 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5446e3d10f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=731 identity=33680 ipv4=10.0.0.250 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4cd76e92bf datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1263 identity=57296 ipv4=10.0.0.95 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-g8bwd subsys=endpoint level=info msg="Successful endpoint creation" containerID=4cd76e92bf datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1263 identity=57296 ipv4=10.0.0.95 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-g8bwd subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=2dec4318cf datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=5 identity=44975 ipv4=10.0.0.73 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=2dec4318cf datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=5 identity=44975 ipv4=10.0.0.73 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=5446e3d10f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=731 identity=33680 ipv4=10.0.0.250 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=5446e3d10f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=731 identity=33680 ipv4=10.0.0.250 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.215 29dc38dd-f4b2-403f-a246-f787a6e65fea default }" containerID=1f32f7f98cd238d354d6c5edcc55668ad4521203bd46ce65633e543c753fd31f datapathConfiguration="&{false false false false false }" interface=lxc610f33598b85 k8sPodName=local-path-storage/helper-pod-create-pvc-65ff754f-2360-4b71-b2b7-fbfee99be365 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1f32f7f98c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=527 ipv4=10.0.0.215 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-65ff754f-2360-4b71-b2b7-fbfee99be365 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1f32f7f98c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=527 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.215 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-65ff754f-2360-4b71-b2b7-fbfee99be365 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1f32f7f98c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=527 identity=14089 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.215 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-65ff754f-2360-4b71-b2b7-fbfee99be365 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1f32f7f98c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=527 identity=14089 ipv4=10.0.0.215 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-65ff754f-2360-4b71-b2b7-fbfee99be365 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.244 7b9b69b5-e011-4407-ab3e-fae79f6681bd default }" containerID=ad817709604b74722815620c608812d454936893e0aa8d422e4f768a9ddaebac datapathConfiguration="&{false false false false false }" interface=lxcb1d896f41824 k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ad81770960 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1798 ipv4=10.0.0.244 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ad81770960 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1798 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.244 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:alertmanager=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=alertmanager;k8s:app.kubernetes.io/version=0.27.0;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ad81770960 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1798 identity=52670 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.244 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ad81770960 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1798 identity=52670 ipv4=10.0.0.244 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1f32f7f98c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=527 identity=14089 ipv4=10.0.0.215 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-65ff754f-2360-4b71-b2b7-fbfee99be365 subsys=endpoint level=info msg="Successful endpoint creation" containerID=1f32f7f98c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=527 identity=14089 ipv4=10.0.0.215 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-65ff754f-2360-4b71-b2b7-fbfee99be365 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=ad81770960 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1798 identity=52670 ipv4=10.0.0.244 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=ad81770960 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1798 identity=52670 ipv4=10.0.0.244 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.183 8b2f54bc-d08e-48ee-a4ec-70aa58e28940 default }" containerID=214beb085d1a13725f18b9de1dda5f0c2e25cf58ace4ae453d6e2a35a9f98693 datapathConfiguration="&{false false false false false }" interface=lxc7eae257ed2e6 k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=214beb085d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=286 ipv4=10.0.0.183 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=214beb085d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=286 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.183 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=214beb085d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=286 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.183 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=prometheus;k8s:app.kubernetes.io/version=2.51.2;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus;k8s:io.kubernetes.pod.namespace=monitoring;k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus;k8s:operator.prometheus.io/shard=0;k8s:prometheus=kube-prometheus-stack-prometheus;k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=214beb085d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=286 identity=20378 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.183 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=214beb085d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=286 identity=20378 ipv4=10.0.0.183 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=214beb085d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=286 identity=20378 ipv4=10.0.0.183 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=214beb085d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=286 identity=20378 ipv4=10.0.0.183 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.121 04cbb890-0104-4b33-8eae-0b87b477f5ba default }" containerID=5d4bcc79ed4bf7323cdb021826fb7e3d54791527802fe82bbdd0bfc4e33a1246 datapathConfiguration="&{false false false false false }" interface=lxc8aba9d76b2ef k8sPodName=monitoring/vector-gsj2d labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5d4bcc79ed datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=416 ipv4=10.0.0.121 ipv6= k8sPodName=monitoring/vector-gsj2d subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5d4bcc79ed datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=416 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.121 ipv6= k8sPodName=monitoring/vector-gsj2d subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=Agent;k8s:app.kubernetes.io/instance=vector;k8s:app.kubernetes.io/name=vector;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=vector;k8s:io.kubernetes.pod.namespace=monitoring;k8s:vector.dev/exclude=true;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5d4bcc79ed datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=416 identity=10540 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.121 ipv6= k8sPodName=monitoring/vector-gsj2d oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5d4bcc79ed datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=416 identity=10540 ipv4=10.0.0.121 ipv6= k8sPodName=monitoring/vector-gsj2d subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5d4bcc79ed datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=416 identity=10540 ipv4=10.0.0.121 ipv6= k8sPodName=monitoring/vector-gsj2d subsys=endpoint level=info msg="Successful endpoint creation" containerID=5d4bcc79ed datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=416 identity=10540 ipv4=10.0.0.121 ipv6= k8sPodName=monitoring/vector-gsj2d subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=1f32f7f98c endpointID=527 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-65ff754f-2360-4b71-b2b7-fbfee99be365 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=1f32f7f98c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=527 identity=14089 ipv4=10.0.0.215 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-65ff754f-2360-4b71-b2b7-fbfee99be365 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.171 63f9bb54-d933-4987-9d3c-7ffed8b569de default }" containerID=a4b74d144fa77cebdde185c3cddaf28f45399c3c18a3d8670066a28920624b81 datapathConfiguration="&{false false false false false }" interface=lxc81c952aefe99 k8sPodName=monitoring/loki-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a4b74d144f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3298 ipv4=10.0.0.171 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a4b74d144f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3298 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.171 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=single-binary;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:app.kubernetes.io/part-of=memberlist;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=loki-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a4b74d144f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3298 identity=13956 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.171 ipv6= k8sPodName=monitoring/loki-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a4b74d144f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3298 identity=13956 ipv4=10.0.0.171 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=a4b74d144f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3298 identity=13956 ipv4=10.0.0.171 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=a4b74d144f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3298 identity=13956 ipv4=10.0.0.171 ipv6= k8sPodName=monitoring/loki-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.170 db010bb8-2409-453f-b70e-018330790b73 default }" containerID=496d113076bf8c74f63c0543cd2369ec42d80350442373d95675aa90f042dfb1 datapathConfiguration="&{false false false false false }" interface=lxc99ebedcc9647 k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-5vdms labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=496d113076 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1986 ipv4=10.0.0.170 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-5vdms subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=496d113076 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1986 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.170 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-5vdms subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=496d113076 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1986 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.170 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-5vdms line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=prometheus-pushgateway;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=prometheus-pushgateway;k8s:app.kubernetes.io/version=v1.8.0;k8s:helm.sh/chart=prometheus-pushgateway-2.13.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=496d113076 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1986 identity=64518 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.170 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-5vdms oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=496d113076 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1986 identity=64518 ipv4=10.0.0.170 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-5vdms subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=496d113076 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1986 identity=64518 ipv4=10.0.0.170 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-5vdms subsys=endpoint level=info msg="Successful endpoint creation" containerID=496d113076 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1986 identity=64518 ipv4=10.0.0.170 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-5vdms subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.114 c1e1592a-9d3a-40dd-8bda-ec2536328ce2 default }" containerID=0fb661d49b153a1b0c95a46f6bad12a8b24fc75fd9791c3c782ded25889fbc2c datapathConfiguration="&{false false false false false }" interface=lxc6fcab632de44 k8sPodName=openstack/memcached-memcached-6479589586-4wqng labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0fb661d49b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=205 ipv4=10.0.0.114 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-4wqng subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0fb661d49b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=205 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.114 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-4wqng subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=memcached;k8s:component=server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=memcached;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0fb661d49b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=205 identity=45385 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.114 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-4wqng oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0fb661d49b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=205 identity=45385 ipv4=10.0.0.114 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-4wqng subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0fb661d49b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=205 identity=45385 ipv4=10.0.0.114 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-4wqng subsys=endpoint level=info msg="Successful endpoint creation" containerID=0fb661d49b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=205 identity=45385 ipv4=10.0.0.114 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-4wqng subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.228 41439ce3-3e0e-4fdb-8eca-085101477f33 default }" containerID=76f97f1118927b90ec57357e38c751d07439f7602c49d925523e83e0ef5c5234 datapathConfiguration="&{false false false false false }" interface=lxc787e89ba9fdf k8sPodName=local-path-storage/helper-pod-create-pvc-0fc9c593-6261-4044-9a3f-4461377db091 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=76f97f1118 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1682 ipv4=10.0.0.228 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0fc9c593-6261-4044-9a3f-4461377db091 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=76f97f1118 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1682 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.228 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0fc9c593-6261-4044-9a3f-4461377db091 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=76f97f1118 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1682 identity=14089 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.228 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0fc9c593-6261-4044-9a3f-4461377db091 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=76f97f1118 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1682 identity=14089 ipv4=10.0.0.228 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0fc9c593-6261-4044-9a3f-4461377db091 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=76f97f1118 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1682 identity=14089 ipv4=10.0.0.228 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0fc9c593-6261-4044-9a3f-4461377db091 subsys=endpoint level=info msg="Successful endpoint creation" containerID=76f97f1118 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1682 identity=14089 ipv4=10.0.0.228 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0fc9c593-6261-4044-9a3f-4461377db091 subsys=daemon level=info msg="Delete endpoint request" containerID=76f97f1118 endpointID=1682 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-0fc9c593-6261-4044-9a3f-4461377db091 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=76f97f1118 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1682 identity=14089 ipv4=10.0.0.228 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0fc9c593-6261-4044-9a3f-4461377db091 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.85 d575f094-3ae4-49fb-85e8-bb5f8e739620 default }" containerID=079acf32fdd8bd340c61604465b4fbd3c38a6ae9b12d34db52ba4b4a5d9aea1f datapathConfiguration="&{false false false false false }" interface=lxc4c5087124d12 k8sPodName=openstack/rabbitmq-keystone-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=079acf32fd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1574 ipv4=10.0.0.85 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=079acf32fd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1574 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.85 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-keystone;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=079acf32fd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1574 identity=47785 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.85 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=079acf32fd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1574 identity=47785 ipv4=10.0.0.85 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=079acf32fd datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1574 identity=47785 ipv4=10.0.0.85 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=079acf32fd datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1574 identity=47785 ipv4=10.0.0.85 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.225 66a60522-b1c2-429a-9518-99cf54dec339 default }" containerID=ac6b573f0cb5ab811003995fe6cb5681e6e2638d1ae5e72be9a53410ca950a3b datapathConfiguration="&{false false false false false }" interface=lxc87ad96743abd k8sPodName=openstack/keystone-api-545d5d6ff4-h4x8s labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ac6b573f0c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=336 ipv4=10.0.0.225 ipv6= k8sPodName=openstack/keystone-api-545d5d6ff4-h4x8s subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ac6b573f0c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=336 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.225 ipv6= k8sPodName=openstack/keystone-api-545d5d6ff4-h4x8s subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ac6b573f0c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=336 identity=37465 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.225 ipv6= k8sPodName=openstack/keystone-api-545d5d6ff4-h4x8s oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ac6b573f0c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=336 identity=37465 ipv4=10.0.0.225 ipv6= k8sPodName=openstack/keystone-api-545d5d6ff4-h4x8s subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.149 ef7558c4-cffa-4bad-95c6-eac07b677c55 default }" containerID=e79b720d2757bb8c2271393208238eaf2200dad922d6ef0f045e0ad7eeeed287 datapathConfiguration="&{false false false false false }" interface=lxc79d5b0307859 k8sPodName=openstack/keystone-credential-setup-89tsn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e79b720d27 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1516 ipv4=10.0.0.149 ipv6= k8sPodName=openstack/keystone-credential-setup-89tsn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e79b720d27 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1516 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=d0804d4b-8eae-455e-87b3-1ed89b922e7a,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=d0804d4b-8eae-455e-87b3-1ed89b922e7a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.149 ipv6= k8sPodName=openstack/keystone-credential-setup-89tsn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=d0804d4b-8eae-455e-87b3-1ed89b922e7a;k8s:batch.kubernetes.io/job-name=keystone-credential-setup;k8s:component=credential-setup;k8s:controller-uid=d0804d4b-8eae-455e-87b3-1ed89b922e7a;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-credential-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e79b720d27 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1516 identity=13331 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=d0804d4b-8eae-455e-87b3-1ed89b922e7a,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=d0804d4b-8eae-455e-87b3-1ed89b922e7a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.149 ipv6= k8sPodName=openstack/keystone-credential-setup-89tsn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e79b720d27 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1516 identity=13331 ipv4=10.0.0.149 ipv6= k8sPodName=openstack/keystone-credential-setup-89tsn subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ac6b573f0c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=336 identity=37465 ipv4=10.0.0.225 ipv6= k8sPodName=openstack/keystone-api-545d5d6ff4-h4x8s subsys=endpoint level=info msg="Successful endpoint creation" containerID=ac6b573f0c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=336 identity=37465 ipv4=10.0.0.225 ipv6= k8sPodName=openstack/keystone-api-545d5d6ff4-h4x8s subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=e79b720d27 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1516 identity=13331 ipv4=10.0.0.149 ipv6= k8sPodName=openstack/keystone-credential-setup-89tsn subsys=endpoint level=info msg="Successful endpoint creation" containerID=e79b720d27 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1516 identity=13331 ipv4=10.0.0.149 ipv6= k8sPodName=openstack/keystone-credential-setup-89tsn subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=e79b720d27 endpointID=1516 k8sNamespace=openstack k8sPodName=keystone-credential-setup-89tsn subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=d0804d4b-8eae-455e-87b3-1ed89b922e7a k8s:batch.kubernetes.io/job-name=keystone-credential-setup k8s:component=credential-setup k8s:controller-uid=d0804d4b-8eae-455e-87b3-1ed89b922e7a k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-credential-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=e79b720d27 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1516 identity=13331 ipv4=10.0.0.149 ipv6= k8sPodName=openstack/keystone-credential-setup-89tsn subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.63 0993a22f-af69-40a8-940f-c9e07e374ae7 default }" containerID=0db9d1dce6f04245260ab9e8bce82a2145bf6d4f76b236292ed36f65d0673858 datapathConfiguration="&{false false false false false }" interface=lxcc5adc55009b6 k8sPodName=openstack/keystone-db-init-64z2k labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0db9d1dce6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1066 ipv4=10.0.0.63 ipv6= k8sPodName=openstack/keystone-db-init-64z2k subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0db9d1dce6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1066 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=73d04416-d7a2-4c09-805b-887c4932fbf4,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=73d04416-d7a2-4c09-805b-887c4932fbf4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.63 ipv6= k8sPodName=openstack/keystone-db-init-64z2k subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=73d04416-d7a2-4c09-805b-887c4932fbf4;k8s:batch.kubernetes.io/job-name=keystone-db-init;k8s:component=db-init;k8s:controller-uid=73d04416-d7a2-4c09-805b-887c4932fbf4;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0db9d1dce6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1066 identity=9369 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=73d04416-d7a2-4c09-805b-887c4932fbf4,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=73d04416-d7a2-4c09-805b-887c4932fbf4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.63 ipv6= k8sPodName=openstack/keystone-db-init-64z2k oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=0db9d1dce6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1066 identity=9369 ipv4=10.0.0.63 ipv6= k8sPodName=openstack/keystone-db-init-64z2k subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0db9d1dce6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1066 identity=9369 ipv4=10.0.0.63 ipv6= k8sPodName=openstack/keystone-db-init-64z2k subsys=endpoint level=info msg="Successful endpoint creation" containerID=0db9d1dce6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1066 identity=9369 ipv4=10.0.0.63 ipv6= k8sPodName=openstack/keystone-db-init-64z2k subsys=daemon level=info msg="Delete endpoint request" containerID=0db9d1dce6 endpointID=1066 k8sNamespace=openstack k8sPodName=keystone-db-init-64z2k subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=73d04416-d7a2-4c09-805b-887c4932fbf4 k8s:batch.kubernetes.io/job-name=keystone-db-init k8s:component=db-init k8s:controller-uid=73d04416-d7a2-4c09-805b-887c4932fbf4 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=0db9d1dce6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1066 identity=9369 ipv4=10.0.0.63 ipv6= k8sPodName=openstack/keystone-db-init-64z2k subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.210 cbc7e454-cc62-4d73-948a-7e9a8d52cc0c default }" containerID=c19cb50d36ab7efd831f132b53b33dcd6016e1b3fd04c9ce774ce47de0678231 datapathConfiguration="&{false false false false false }" interface=lxc3e483f095579 k8sPodName=openstack/keystone-fernet-setup-8rzhf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c19cb50d36 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=610 ipv4=10.0.0.210 ipv6= k8sPodName=openstack/keystone-fernet-setup-8rzhf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c19cb50d36 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=610 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=67ad4b08-7121-49d5-8c4e-c75187c19481,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=67ad4b08-7121-49d5-8c4e-c75187c19481,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.210 ipv6= k8sPodName=openstack/keystone-fernet-setup-8rzhf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=67ad4b08-7121-49d5-8c4e-c75187c19481;k8s:batch.kubernetes.io/job-name=keystone-fernet-setup;k8s:component=fernet-setup;k8s:controller-uid=67ad4b08-7121-49d5-8c4e-c75187c19481;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-fernet-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c19cb50d36 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=610 identity=20740 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=67ad4b08-7121-49d5-8c4e-c75187c19481,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=67ad4b08-7121-49d5-8c4e-c75187c19481,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.210 ipv6= k8sPodName=openstack/keystone-fernet-setup-8rzhf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c19cb50d36 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=610 identity=20740 ipv4=10.0.0.210 ipv6= k8sPodName=openstack/keystone-fernet-setup-8rzhf subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c19cb50d36 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=610 identity=20740 ipv4=10.0.0.210 ipv6= k8sPodName=openstack/keystone-fernet-setup-8rzhf subsys=endpoint level=info msg="Successful endpoint creation" containerID=c19cb50d36 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=610 identity=20740 ipv4=10.0.0.210 ipv6= k8sPodName=openstack/keystone-fernet-setup-8rzhf subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=c19cb50d36 endpointID=610 k8sNamespace=openstack k8sPodName=keystone-fernet-setup-8rzhf subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=67ad4b08-7121-49d5-8c4e-c75187c19481 k8s:batch.kubernetes.io/job-name=keystone-fernet-setup k8s:component=fernet-setup k8s:controller-uid=67ad4b08-7121-49d5-8c4e-c75187c19481 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-fernet-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=c19cb50d36 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=610 identity=20740 ipv4=10.0.0.210 ipv6= k8sPodName=openstack/keystone-fernet-setup-8rzhf subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.8 1a070bb7-8ffb-4f38-b947-eeb859e486d3 default }" containerID=e406199b3a3d8c3b9435cba37afb62775c83b703aafd94bb8d0099c06b79f068 datapathConfiguration="&{false false false false false }" interface=lxc1b16503b5450 k8sPodName=openstack/keystone-db-sync-qwd5c labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e406199b3a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=331 ipv4=10.0.0.8 ipv6= k8sPodName=openstack/keystone-db-sync-qwd5c subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e406199b3a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=331 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=31cafb02-bb5a-45ec-8528-a59453ea7f2e,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=31cafb02-bb5a-45ec-8528-a59453ea7f2e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.8 ipv6= k8sPodName=openstack/keystone-db-sync-qwd5c subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=31cafb02-bb5a-45ec-8528-a59453ea7f2e;k8s:batch.kubernetes.io/job-name=keystone-db-sync;k8s:component=db-sync;k8s:controller-uid=31cafb02-bb5a-45ec-8528-a59453ea7f2e;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-sync;k8s:release_group=keystone;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=e406199b3a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=331 identity=18325 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=31cafb02-bb5a-45ec-8528-a59453ea7f2e,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=31cafb02-bb5a-45ec-8528-a59453ea7f2e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.8 ipv6= k8sPodName=openstack/keystone-db-sync-qwd5c oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e406199b3a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=331 identity=18325 ipv4=10.0.0.8 ipv6= k8sPodName=openstack/keystone-db-sync-qwd5c subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e406199b3a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=331 identity=18325 ipv4=10.0.0.8 ipv6= k8sPodName=openstack/keystone-db-sync-qwd5c subsys=endpoint level=info msg="Successful endpoint creation" containerID=e406199b3a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=331 identity=18325 ipv4=10.0.0.8 ipv6= k8sPodName=openstack/keystone-db-sync-qwd5c subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=e406199b3a endpointID=331 k8sNamespace=openstack k8sPodName=keystone-db-sync-qwd5c subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=31cafb02-bb5a-45ec-8528-a59453ea7f2e k8s:batch.kubernetes.io/job-name=keystone-db-sync k8s:component=db-sync k8s:controller-uid=31cafb02-bb5a-45ec-8528-a59453ea7f2e k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-sync k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=e406199b3a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=331 identity=18325 ipv4=10.0.0.8 ipv6= k8sPodName=openstack/keystone-db-sync-qwd5c subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.207 3c7ffe0e-7f6a-4824-aa21-68030ae58161 default }" containerID=b4296818fad9588c49e8d60faf7118235d3a567920b00807a1b1e8f66b995304 datapathConfiguration="&{false false false false false }" interface=lxcac16af7931bb k8sPodName=openstack/keystone-rabbit-init-t2lrd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b4296818fa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3245 ipv4=10.0.0.207 ipv6= k8sPodName=openstack/keystone-rabbit-init-t2lrd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b4296818fa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3245 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=8f454b07-794e-4de7-bf71-80ec6352fd71,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=8f454b07-794e-4de7-bf71-80ec6352fd71,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.207 ipv6= k8sPodName=openstack/keystone-rabbit-init-t2lrd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=8f454b07-794e-4de7-bf71-80ec6352fd71;k8s:batch.kubernetes.io/job-name=keystone-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=8f454b07-794e-4de7-bf71-80ec6352fd71;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-rabbit-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=b4296818fa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3245 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.207 ipv6= k8sPodName=openstack/keystone-rabbit-init-t2lrd line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=b4296818fa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3245 identity=7810 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=8f454b07-794e-4de7-bf71-80ec6352fd71,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=8f454b07-794e-4de7-bf71-80ec6352fd71,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.207 ipv6= k8sPodName=openstack/keystone-rabbit-init-t2lrd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b4296818fa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3245 identity=7810 ipv4=10.0.0.207 ipv6= k8sPodName=openstack/keystone-rabbit-init-t2lrd subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b4296818fa datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3245 identity=7810 ipv4=10.0.0.207 ipv6= k8sPodName=openstack/keystone-rabbit-init-t2lrd subsys=endpoint level=info msg="Successful endpoint creation" containerID=b4296818fa datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3245 identity=7810 ipv4=10.0.0.207 ipv6= k8sPodName=openstack/keystone-rabbit-init-t2lrd subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=b4296818fa endpointID=3245 k8sNamespace=openstack k8sPodName=keystone-rabbit-init-t2lrd subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=8f454b07-794e-4de7-bf71-80ec6352fd71 k8s:batch.kubernetes.io/job-name=keystone-rabbit-init k8s:component=rabbit-init k8s:controller-uid=8f454b07-794e-4de7-bf71-80ec6352fd71 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-rabbit-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=b4296818fa datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3245 identity=7810 ipv4=10.0.0.207 ipv6= k8sPodName=openstack/keystone-rabbit-init-t2lrd subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.176 e5918c37-4f68-4724-8ba1-153bd76f5a8e default }" containerID=5849f4b587c80c117bfd95998cc3559868fb3e0338a9a39c85f4f1d7f0461839 datapathConfiguration="&{false false false false false }" interface=lxccfe6443277a9 k8sPodName=openstack/keystone-domain-manage-gpgm6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5849f4b587 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1029 ipv4=10.0.0.176 ipv6= k8sPodName=openstack/keystone-domain-manage-gpgm6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5849f4b587 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1029 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=284b9698-47c0-4f93-8d4f-7cc71ff7d1d6,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=284b9698-47c0-4f93-8d4f-7cc71ff7d1d6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.176 ipv6= k8sPodName=openstack/keystone-domain-manage-gpgm6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=284b9698-47c0-4f93-8d4f-7cc71ff7d1d6;k8s:batch.kubernetes.io/job-name=keystone-domain-manage;k8s:component=domain-manage;k8s:controller-uid=284b9698-47c0-4f93-8d4f-7cc71ff7d1d6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-domain-manage;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5849f4b587 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1029 identity=13924 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=284b9698-47c0-4f93-8d4f-7cc71ff7d1d6,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=284b9698-47c0-4f93-8d4f-7cc71ff7d1d6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.176 ipv6= k8sPodName=openstack/keystone-domain-manage-gpgm6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5849f4b587 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1029 identity=13924 ipv4=10.0.0.176 ipv6= k8sPodName=openstack/keystone-domain-manage-gpgm6 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=5849f4b587 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1029 identity=13924 ipv4=10.0.0.176 ipv6= k8sPodName=openstack/keystone-domain-manage-gpgm6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=5849f4b587 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1029 identity=13924 ipv4=10.0.0.176 ipv6= k8sPodName=openstack/keystone-domain-manage-gpgm6 subsys=daemon level=info msg="Delete endpoint request" containerID=5849f4b587 endpointID=1029 k8sNamespace=openstack k8sPodName=keystone-domain-manage-gpgm6 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=284b9698-47c0-4f93-8d4f-7cc71ff7d1d6 k8s:batch.kubernetes.io/job-name=keystone-domain-manage k8s:component=domain-manage k8s:controller-uid=284b9698-47c0-4f93-8d4f-7cc71ff7d1d6 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-domain-manage k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=5849f4b587 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1029 identity=13924 ipv4=10.0.0.176 ipv6= k8sPodName=openstack/keystone-domain-manage-gpgm6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.208 eced2240-114e-415f-8afe-8da7a4372a00 default }" containerID=fd99f12ffa4f48a6260bf58769dc2ce1d65f059a8abe3a08ecb3d6b96bef32bf datapathConfiguration="&{false false false false false }" interface=lxc292746eec52a k8sPodName=openstack/keystone-bootstrap-lhf96 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fd99f12ffa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2090 ipv4=10.0.0.208 ipv6= k8sPodName=openstack/keystone-bootstrap-lhf96 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fd99f12ffa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2090 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=072078c9-8b76-4c78-8b99-f9541891f9e7,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=072078c9-8b76-4c78-8b99-f9541891f9e7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.208 ipv6= k8sPodName=openstack/keystone-bootstrap-lhf96 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=fd99f12ffa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2090 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.208 ipv6= k8sPodName=openstack/keystone-bootstrap-lhf96 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=072078c9-8b76-4c78-8b99-f9541891f9e7;k8s:batch.kubernetes.io/job-name=keystone-bootstrap;k8s:component=bootstrap;k8s:controller-uid=072078c9-8b76-4c78-8b99-f9541891f9e7;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-bootstrap;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fd99f12ffa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2090 identity=41228 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=072078c9-8b76-4c78-8b99-f9541891f9e7,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=072078c9-8b76-4c78-8b99-f9541891f9e7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.208 ipv6= k8sPodName=openstack/keystone-bootstrap-lhf96 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fd99f12ffa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2090 identity=41228 ipv4=10.0.0.208 ipv6= k8sPodName=openstack/keystone-bootstrap-lhf96 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=fd99f12ffa datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2090 identity=41228 ipv4=10.0.0.208 ipv6= k8sPodName=openstack/keystone-bootstrap-lhf96 subsys=endpoint level=info msg="Successful endpoint creation" containerID=fd99f12ffa datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2090 identity=41228 ipv4=10.0.0.208 ipv6= k8sPodName=openstack/keystone-bootstrap-lhf96 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=fd99f12ffa endpointID=2090 k8sNamespace=openstack k8sPodName=keystone-bootstrap-lhf96 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=072078c9-8b76-4c78-8b99-f9541891f9e7 k8s:batch.kubernetes.io/job-name=keystone-bootstrap k8s:component=bootstrap k8s:controller-uid=072078c9-8b76-4c78-8b99-f9541891f9e7 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-bootstrap k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=fd99f12ffa datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2090 identity=41228 ipv4=10.0.0.208 ipv6= k8sPodName=openstack/keystone-bootstrap-lhf96 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.194 05c67a87-2933-4ce9-a7b9-1ebae56c0903 default }" containerID=c65dbed345b6dcb3864bb81f454ef8c429e4b2bc41bb9adc15e9cd29be1dd85e datapathConfiguration="&{false false false false false }" interface=lxce097081c188b k8sPodName=local-path-storage/helper-pod-create-pvc-fd3d9f61-4bfe-49e0-bc6a-3a117ad7df5f labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c65dbed345 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=21 ipv4=10.0.0.194 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-fd3d9f61-4bfe-49e0-bc6a-3a117ad7df5f subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c65dbed345 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=21 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.194 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-fd3d9f61-4bfe-49e0-bc6a-3a117ad7df5f subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c65dbed345 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=21 identity=14089 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.194 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-fd3d9f61-4bfe-49e0-bc6a-3a117ad7df5f oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c65dbed345 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=21 identity=14089 ipv4=10.0.0.194 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-fd3d9f61-4bfe-49e0-bc6a-3a117ad7df5f subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c65dbed345 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=21 identity=14089 ipv4=10.0.0.194 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-fd3d9f61-4bfe-49e0-bc6a-3a117ad7df5f subsys=endpoint level=info msg="Successful endpoint creation" containerID=c65dbed345 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=21 identity=14089 ipv4=10.0.0.194 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-fd3d9f61-4bfe-49e0-bc6a-3a117ad7df5f subsys=daemon level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.034351454813532266 newInterval=11m15s subsys=map-ct level=info msg="Delete endpoint request" containerID=c65dbed345 endpointID=21 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-fd3d9f61-4bfe-49e0-bc6a-3a117ad7df5f subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=c65dbed345 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=21 identity=14089 ipv4=10.0.0.194 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-fd3d9f61-4bfe-49e0-bc6a-3a117ad7df5f subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.125 7f7cdf9d-d34c-439e-b4f0-fe0f7bdc22ef default }" containerID=4b5dde078ec40d36ed411680e98dca1723e70c3280f7b6c134cbd76b804325af datapathConfiguration="&{false false false false false }" interface=lxc9ab739603a10 k8sPodName=openstack/rabbitmq-barbican-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4b5dde078e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=329 ipv4=10.0.0.125 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4b5dde078e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=329 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.125 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-barbican;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4b5dde078e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=329 identity=43750 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.125 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4b5dde078e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=329 identity=43750 ipv4=10.0.0.125 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4b5dde078e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=329 identity=43750 ipv4=10.0.0.125 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=4b5dde078e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=329 identity=43750 ipv4=10.0.0.125 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.127 3cfb7b42-6562-4de7-8ee7-7cc5e8583876 default }" containerID=7c372c71506d6bf50a253dfa6f25dcce7f9e0ab9a31c3af7698f47bf80f3d3b8 datapathConfiguration="&{false false false false false }" interface=lxcd5db91b8d29d k8sPodName=openstack/barbican-api-7d47b84486-sfhht labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7c372c7150 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=378 ipv4=10.0.0.127 ipv6= k8sPodName=openstack/barbican-api-7d47b84486-sfhht subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7c372c7150 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=378 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.127 ipv6= k8sPodName=openstack/barbican-api-7d47b84486-sfhht subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7c372c7150 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=378 identity=33042 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.127 ipv6= k8sPodName=openstack/barbican-api-7d47b84486-sfhht oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7c372c7150 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=378 identity=33042 ipv4=10.0.0.127 ipv6= k8sPodName=openstack/barbican-api-7d47b84486-sfhht subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.167 19f7ee60-3657-4544-9316-59481731faea default }" containerID=3bb4ae24ea4826899923839ab9b7c87d15577a9e79a8de3939da848ad1a6878e datapathConfiguration="&{false false false false false }" interface=lxcff046526ec0b k8sPodName=openstack/barbican-db-init-ms58q labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3bb4ae24ea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=192 ipv4=10.0.0.167 ipv6= k8sPodName=openstack/barbican-db-init-ms58q subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3bb4ae24ea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=192 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=2832dd1b-ae4d-40c7-b55f-b6ed9b020884,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=2832dd1b-ae4d-40c7-b55f-b6ed9b020884,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.167 ipv6= k8sPodName=openstack/barbican-db-init-ms58q subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=2832dd1b-ae4d-40c7-b55f-b6ed9b020884;k8s:batch.kubernetes.io/job-name=barbican-db-init;k8s:component=db-init;k8s:controller-uid=2832dd1b-ae4d-40c7-b55f-b6ed9b020884;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3bb4ae24ea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=192 identity=12689 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=2832dd1b-ae4d-40c7-b55f-b6ed9b020884,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=2832dd1b-ae4d-40c7-b55f-b6ed9b020884,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.167 ipv6= k8sPodName=openstack/barbican-db-init-ms58q oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3bb4ae24ea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=192 identity=12689 ipv4=10.0.0.167 ipv6= k8sPodName=openstack/barbican-db-init-ms58q subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7c372c7150 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=378 identity=33042 ipv4=10.0.0.127 ipv6= k8sPodName=openstack/barbican-api-7d47b84486-sfhht subsys=endpoint level=info msg="Successful endpoint creation" containerID=7c372c7150 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=378 identity=33042 ipv4=10.0.0.127 ipv6= k8sPodName=openstack/barbican-api-7d47b84486-sfhht subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=3bb4ae24ea datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=192 identity=12689 ipv4=10.0.0.167 ipv6= k8sPodName=openstack/barbican-db-init-ms58q subsys=endpoint level=info msg="Successful endpoint creation" containerID=3bb4ae24ea datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=192 identity=12689 ipv4=10.0.0.167 ipv6= k8sPodName=openstack/barbican-db-init-ms58q subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=3bb4ae24ea endpointID=192 k8sNamespace=openstack k8sPodName=barbican-db-init-ms58q subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=2832dd1b-ae4d-40c7-b55f-b6ed9b020884 k8s:batch.kubernetes.io/job-name=barbican-db-init k8s:component=db-init k8s:controller-uid=2832dd1b-ae4d-40c7-b55f-b6ed9b020884 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=3bb4ae24ea datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=192 identity=12689 ipv4=10.0.0.167 ipv6= k8sPodName=openstack/barbican-db-init-ms58q subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.52 3d160bd7-e0bc-4c2a-8056-423ccceecd43 default }" containerID=a70ffcc4dbcfa558ab45e1007961c788739eb9a8495f361a35dfccb88522e9fc datapathConfiguration="&{false false false false false }" interface=lxc0e627e265988 k8sPodName=openstack/barbican-db-sync-lv9qg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a70ffcc4db datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=25 ipv4=10.0.0.52 ipv6= k8sPodName=openstack/barbican-db-sync-lv9qg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a70ffcc4db datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=25 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=bc6d93f9-4e00-46ef-b394-421f51396318,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=bc6d93f9-4e00-46ef-b394-421f51396318,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.52 ipv6= k8sPodName=openstack/barbican-db-sync-lv9qg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=bc6d93f9-4e00-46ef-b394-421f51396318;k8s:batch.kubernetes.io/job-name=barbican-db-sync;k8s:component=db-sync;k8s:controller-uid=bc6d93f9-4e00-46ef-b394-421f51396318;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-sync;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a70ffcc4db datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=25 identity=55798 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=bc6d93f9-4e00-46ef-b394-421f51396318,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=bc6d93f9-4e00-46ef-b394-421f51396318,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.52 ipv6= k8sPodName=openstack/barbican-db-sync-lv9qg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a70ffcc4db datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=25 identity=55798 ipv4=10.0.0.52 ipv6= k8sPodName=openstack/barbican-db-sync-lv9qg subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a70ffcc4db datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=25 identity=55798 ipv4=10.0.0.52 ipv6= k8sPodName=openstack/barbican-db-sync-lv9qg subsys=endpoint level=info msg="Successful endpoint creation" containerID=a70ffcc4db datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=25 identity=55798 ipv4=10.0.0.52 ipv6= k8sPodName=openstack/barbican-db-sync-lv9qg subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=a70ffcc4db endpointID=25 k8sNamespace=openstack k8sPodName=barbican-db-sync-lv9qg subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=bc6d93f9-4e00-46ef-b394-421f51396318 k8s:batch.kubernetes.io/job-name=barbican-db-sync k8s:component=db-sync k8s:controller-uid=bc6d93f9-4e00-46ef-b394-421f51396318 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-sync k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=a70ffcc4db datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=25 identity=55798 ipv4=10.0.0.52 ipv6= k8sPodName=openstack/barbican-db-sync-lv9qg subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.172 aba1b995-aa08-49a6-a14e-743a10cf7c73 default }" containerID=4a6c309403bd4ab69622dd4a3d3248c1c58cc4ff07886ea3ff4ff27efaa76d2e datapathConfiguration="&{false false false false false }" interface=lxc6dcdb563fab0 k8sPodName=openstack/barbican-rabbit-init-lfnjw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4a6c309403 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4 ipv4=10.0.0.172 ipv6= k8sPodName=openstack/barbican-rabbit-init-lfnjw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4a6c309403 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=f67197e5-4bc8-4335-9fd0-04ebd66b7483,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=f67197e5-4bc8-4335-9fd0-04ebd66b7483,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.172 ipv6= k8sPodName=openstack/barbican-rabbit-init-lfnjw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=f67197e5-4bc8-4335-9fd0-04ebd66b7483;k8s:batch.kubernetes.io/job-name=barbican-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=f67197e5-4bc8-4335-9fd0-04ebd66b7483;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-rabbit-init;k8s:release_group=barbican;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=4a6c309403 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4 identity=12890 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=f67197e5-4bc8-4335-9fd0-04ebd66b7483,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=f67197e5-4bc8-4335-9fd0-04ebd66b7483,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.172 ipv6= k8sPodName=openstack/barbican-rabbit-init-lfnjw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4a6c309403 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4 identity=12890 ipv4=10.0.0.172 ipv6= k8sPodName=openstack/barbican-rabbit-init-lfnjw subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4a6c309403 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=4 identity=12890 ipv4=10.0.0.172 ipv6= k8sPodName=openstack/barbican-rabbit-init-lfnjw subsys=endpoint level=info msg="Successful endpoint creation" containerID=4a6c309403 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=4 identity=12890 ipv4=10.0.0.172 ipv6= k8sPodName=openstack/barbican-rabbit-init-lfnjw subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=4a6c309403 endpointID=4 k8sNamespace=openstack k8sPodName=barbican-rabbit-init-lfnjw subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=f67197e5-4bc8-4335-9fd0-04ebd66b7483 k8s:batch.kubernetes.io/job-name=barbican-rabbit-init k8s:component=rabbit-init k8s:controller-uid=f67197e5-4bc8-4335-9fd0-04ebd66b7483 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-rabbit-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=4a6c309403 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=4 identity=12890 ipv4=10.0.0.172 ipv6= k8sPodName=openstack/barbican-rabbit-init-lfnjw subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.115 fd0ca18b-e362-4a8e-930e-3663f5238c87 default }" containerID=4173abf5d22860ca7a4c97d82488e2c0f2ded8a6001c8cc03452cf0ca130ecbc datapathConfiguration="&{false false false false false }" interface=lxc197c13e035ac k8sPodName=openstack/barbican-ks-service-xxkr2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4173abf5d2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=122 ipv4=10.0.0.115 ipv6= k8sPodName=openstack/barbican-ks-service-xxkr2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4173abf5d2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=122 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=61484b90-b286-45aa-84c7-f288924c54f6,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=61484b90-b286-45aa-84c7-f288924c54f6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.115 ipv6= k8sPodName=openstack/barbican-ks-service-xxkr2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=61484b90-b286-45aa-84c7-f288924c54f6;k8s:batch.kubernetes.io/job-name=barbican-ks-service;k8s:component=ks-service;k8s:controller-uid=61484b90-b286-45aa-84c7-f288924c54f6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-service;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4173abf5d2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=122 identity=43190 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=61484b90-b286-45aa-84c7-f288924c54f6,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=61484b90-b286-45aa-84c7-f288924c54f6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.115 ipv6= k8sPodName=openstack/barbican-ks-service-xxkr2 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=4173abf5d2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=122 identity=43190 ipv4=10.0.0.115 ipv6= k8sPodName=openstack/barbican-ks-service-xxkr2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4173abf5d2 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=122 identity=43190 ipv4=10.0.0.115 ipv6= k8sPodName=openstack/barbican-ks-service-xxkr2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=4173abf5d2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=122 identity=43190 ipv4=10.0.0.115 ipv6= k8sPodName=openstack/barbican-ks-service-xxkr2 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=4173abf5d2 endpointID=122 k8sNamespace=openstack k8sPodName=barbican-ks-service-xxkr2 subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=61484b90-b286-45aa-84c7-f288924c54f6 k8s:batch.kubernetes.io/job-name=barbican-ks-service k8s:component=ks-service k8s:controller-uid=61484b90-b286-45aa-84c7-f288924c54f6 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-service k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=4173abf5d2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=122 identity=43190 ipv4=10.0.0.115 ipv6= k8sPodName=openstack/barbican-ks-service-xxkr2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.104 2c56ed6e-b595-40ac-9e19-c00d054a0d4c default }" containerID=979018f93d4fa26f2018e592406f0bd4daef19a54ef8b75dee7ed7be59102aea datapathConfiguration="&{false false false false false }" interface=lxc34750526b0bc k8sPodName=openstack/barbican-ks-endpoints-vp7w2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=979018f93d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2616 ipv4=10.0.0.104 ipv6= k8sPodName=openstack/barbican-ks-endpoints-vp7w2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=979018f93d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2616 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=4954bdb6-5427-4b43-aec4-2ebd18d34671,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=4954bdb6-5427-4b43-aec4-2ebd18d34671,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.104 ipv6= k8sPodName=openstack/barbican-ks-endpoints-vp7w2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=4954bdb6-5427-4b43-aec4-2ebd18d34671;k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=4954bdb6-5427-4b43-aec4-2ebd18d34671;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-endpoints;k8s:release_group=barbican;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=979018f93d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2616 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.104 ipv6= k8sPodName=openstack/barbican-ks-endpoints-vp7w2 line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=979018f93d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2616 identity=21685 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=4954bdb6-5427-4b43-aec4-2ebd18d34671,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=4954bdb6-5427-4b43-aec4-2ebd18d34671,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.104 ipv6= k8sPodName=openstack/barbican-ks-endpoints-vp7w2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=979018f93d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2616 identity=21685 ipv4=10.0.0.104 ipv6= k8sPodName=openstack/barbican-ks-endpoints-vp7w2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=979018f93d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2616 identity=21685 ipv4=10.0.0.104 ipv6= k8sPodName=openstack/barbican-ks-endpoints-vp7w2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=979018f93d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2616 identity=21685 ipv4=10.0.0.104 ipv6= k8sPodName=openstack/barbican-ks-endpoints-vp7w2 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=979018f93d endpointID=2616 k8sNamespace=openstack k8sPodName=barbican-ks-endpoints-vp7w2 subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=4954bdb6-5427-4b43-aec4-2ebd18d34671 k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=4954bdb6-5427-4b43-aec4-2ebd18d34671 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-endpoints k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=979018f93d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2616 identity=21685 ipv4=10.0.0.104 ipv6= k8sPodName=openstack/barbican-ks-endpoints-vp7w2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.41 818cab97-bc67-425d-971f-6535c9218c4b default }" containerID=5a6665bfa8719361661deafe034def5d6b2e5c789da689b1c5e0691085404721 datapathConfiguration="&{false false false false false }" interface=lxcee40f2210446 k8sPodName=openstack/barbican-ks-user-2c5jx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5a6665bfa8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1224 ipv4=10.0.0.41 ipv6= k8sPodName=openstack/barbican-ks-user-2c5jx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5a6665bfa8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1224 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=9b8929c6-099a-4b4c-818d-65e1c3c49197,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=9b8929c6-099a-4b4c-818d-65e1c3c49197,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.41 ipv6= k8sPodName=openstack/barbican-ks-user-2c5jx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=9b8929c6-099a-4b4c-818d-65e1c3c49197;k8s:batch.kubernetes.io/job-name=barbican-ks-user;k8s:component=ks-user;k8s:controller-uid=9b8929c6-099a-4b4c-818d-65e1c3c49197;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-user;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5a6665bfa8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1224 identity=11517 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=9b8929c6-099a-4b4c-818d-65e1c3c49197,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=9b8929c6-099a-4b4c-818d-65e1c3c49197,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.41 ipv6= k8sPodName=openstack/barbican-ks-user-2c5jx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5a6665bfa8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1224 identity=11517 ipv4=10.0.0.41 ipv6= k8sPodName=openstack/barbican-ks-user-2c5jx subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=5a6665bfa8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1224 identity=11517 ipv4=10.0.0.41 ipv6= k8sPodName=openstack/barbican-ks-user-2c5jx subsys=endpoint level=info msg="Successful endpoint creation" containerID=5a6665bfa8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1224 identity=11517 ipv4=10.0.0.41 ipv6= k8sPodName=openstack/barbican-ks-user-2c5jx subsys=daemon level=info msg="Delete endpoint request" containerID=5a6665bfa8 endpointID=1224 k8sNamespace=openstack k8sPodName=barbican-ks-user-2c5jx subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=9b8929c6-099a-4b4c-818d-65e1c3c49197 k8s:batch.kubernetes.io/job-name=barbican-ks-user k8s:component=ks-user k8s:controller-uid=9b8929c6-099a-4b4c-818d-65e1c3c49197 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-user k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=5a6665bfa8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1224 identity=11517 ipv4=10.0.0.41 ipv6= k8sPodName=openstack/barbican-ks-user-2c5jx subsys=endpoint level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Create endpoint request" addressing="&{10.0.0.36 16b29f3e-0568-4776-80b7-fb3fbfac2456 default }" containerID=c7e52c523e484fa7b8a624cbb54c0df194990faebda2ecf1758ce526b37f9dc9 datapathConfiguration="&{false false false false false }" interface=lxc3b8b5a8b9676 k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-cbdw7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c7e52c523e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=185 ipv4=10.0.0.36 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-cbdw7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c7e52c523e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=185 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.15.9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.36 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-cbdw7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:rook-ceph k8s:io.cilium.k8s.namespace.labels.name:rook-ceph]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=c7e52c523e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=185 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.36 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-cbdw7 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=rook-ceph-operator;k8s:helm.sh/chart=rook-ceph-v1.15.9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph;k8s:io.cilium.k8s.namespace.labels.name=rook-ceph;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system;k8s:io.kubernetes.pod.namespace=rook-ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c7e52c523e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=185 identity=64396 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.15.9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.36 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-cbdw7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c7e52c523e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=185 identity=64396 ipv4=10.0.0.36 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-cbdw7 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c7e52c523e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=185 identity=64396 ipv4=10.0.0.36 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-cbdw7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=c7e52c523e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=185 identity=64396 ipv4=10.0.0.36 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-cbdw7 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.159 cf015d34-7f18-44eb-be5c-0e72ba7a4c52 default }" containerID=3a3c0c30d0f07a26265562982ef3503232e2e23514d2528e09ece584ad10e2eb datapathConfiguration="&{false false false false false }" interface=lxcca96dab838e4 k8sPodName=openstack/rook-ceph-detect-version-gcxrz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3a3c0c30d0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3735 ipv4=10.0.0.159 ipv6= k8sPodName=openstack/rook-ceph-detect-version-gcxrz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3a3c0c30d0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3735 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=f4996fc9-eb22-4f8b-9840-31a94d0a4030,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=f4996fc9-eb22-4f8b-9840-31a94d0a4030,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.159 ipv6= k8sPodName=openstack/rook-ceph-detect-version-gcxrz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-detect-version;k8s:batch.kubernetes.io/controller-uid=f4996fc9-eb22-4f8b-9840-31a94d0a4030;k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version;k8s:controller-uid=f4996fc9-eb22-4f8b-9840-31a94d0a4030;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=rook-ceph-detect-version;k8s:rook-version=v1.15.9;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3a3c0c30d0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3735 identity=60833 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=f4996fc9-eb22-4f8b-9840-31a94d0a4030,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=f4996fc9-eb22-4f8b-9840-31a94d0a4030,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.159 ipv6= k8sPodName=openstack/rook-ceph-detect-version-gcxrz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3a3c0c30d0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3735 identity=60833 ipv4=10.0.0.159 ipv6= k8sPodName=openstack/rook-ceph-detect-version-gcxrz subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=3a3c0c30d0 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3735 identity=60833 ipv4=10.0.0.159 ipv6= k8sPodName=openstack/rook-ceph-detect-version-gcxrz subsys=endpoint level=info msg="Successful endpoint creation" containerID=3a3c0c30d0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3735 identity=60833 ipv4=10.0.0.159 ipv6= k8sPodName=openstack/rook-ceph-detect-version-gcxrz subsys=daemon level=info msg="Delete endpoint request" containerID=3a3c0c30d0 endpointID=3735 k8sNamespace=openstack k8sPodName=rook-ceph-detect-version-gcxrz subsys=daemon level=info msg="Releasing key" key="[k8s:app=rook-ceph-detect-version k8s:batch.kubernetes.io/controller-uid=f4996fc9-eb22-4f8b-9840-31a94d0a4030 k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version k8s:controller-uid=f4996fc9-eb22-4f8b-9840-31a94d0a4030 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=rook-ceph-detect-version k8s:rook-version=v1.15.9]" subsys=allocator level=info msg="Removed endpoint" containerID=3a3c0c30d0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3735 identity=60833 ipv4=10.0.0.159 ipv6= k8sPodName=openstack/rook-ceph-detect-version-gcxrz subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.223 d7bfc58b-0943-4d83-872d-591d53002ccc default }" containerID=b57a68735d2a0fbacd60ebb5c97607798819bfbadd360fd2093b482eac3f37bf datapathConfiguration="&{false false false false false }" interface=lxc84de85b5c4d3 k8sPodName=openstack/ceph-object-controller-detect-version-7crp5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b57a68735d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1767 ipv4=10.0.0.223 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-7crp5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b57a68735d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1767 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=8bb4abf6-f6eb-46be-a432-8c8e46026983,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=8bb4abf6-f6eb-46be-a432-8c8e46026983,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.223 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-7crp5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=ceph-object-controller-detect-version;k8s:batch.kubernetes.io/controller-uid=8bb4abf6-f6eb-46be-a432-8c8e46026983;k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version;k8s:controller-uid=8bb4abf6-f6eb-46be-a432-8c8e46026983;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=ceph-object-controller-detect-version;k8s:rook-version=v1.15.9;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b57a68735d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1767 identity=5629 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=8bb4abf6-f6eb-46be-a432-8c8e46026983,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=8bb4abf6-f6eb-46be-a432-8c8e46026983,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.223 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-7crp5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b57a68735d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1767 identity=5629 ipv4=10.0.0.223 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-7crp5 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=b57a68735d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1767 identity=5629 ipv4=10.0.0.223 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-7crp5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=b57a68735d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1767 identity=5629 ipv4=10.0.0.223 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-7crp5 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=b57a68735d endpointID=1767 k8sNamespace=openstack k8sPodName=ceph-object-controller-detect-version-7crp5 subsys=daemon level=info msg="Releasing key" key="[k8s:app=ceph-object-controller-detect-version k8s:batch.kubernetes.io/controller-uid=8bb4abf6-f6eb-46be-a432-8c8e46026983 k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version k8s:controller-uid=8bb4abf6-f6eb-46be-a432-8c8e46026983 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=ceph-object-controller-detect-version k8s:rook-version=v1.15.9]" subsys=allocator level=info msg="Removed endpoint" containerID=b57a68735d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1767 identity=5629 ipv4=10.0.0.223 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-7crp5 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.31 ae3803b7-9e88-4c1e-9d57-c6837ec4afef default }" containerID=85f1c454dee0e55104f74af55804660641bfed7c0a77679840e537d2e5be5f87 datapathConfiguration="&{false false false false false }" interface=lxcaeee61c597f8 k8sPodName=local-path-storage/helper-pod-create-pvc-b2009eb0-e7ce-4678-ac0d-9a51ecafdbff labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=85f1c454de datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1475 ipv4=10.0.0.31 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b2009eb0-e7ce-4678-ac0d-9a51ecafdbff subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=85f1c454de datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1475 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.31 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b2009eb0-e7ce-4678-ac0d-9a51ecafdbff subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=85f1c454de datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1475 identity=14089 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.31 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b2009eb0-e7ce-4678-ac0d-9a51ecafdbff oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=85f1c454de datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1475 identity=14089 ipv4=10.0.0.31 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b2009eb0-e7ce-4678-ac0d-9a51ecafdbff subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=85f1c454de datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1475 identity=14089 ipv4=10.0.0.31 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b2009eb0-e7ce-4678-ac0d-9a51ecafdbff subsys=endpoint level=info msg="Successful endpoint creation" containerID=85f1c454de datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1475 identity=14089 ipv4=10.0.0.31 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b2009eb0-e7ce-4678-ac0d-9a51ecafdbff subsys=daemon level=info msg="Delete endpoint request" containerID=85f1c454de endpointID=1475 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-b2009eb0-e7ce-4678-ac0d-9a51ecafdbff subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=85f1c454de datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1475 identity=14089 ipv4=10.0.0.31 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b2009eb0-e7ce-4678-ac0d-9a51ecafdbff subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.1 1c9a2fd7-b314-4db8-8c67-44ca7ee9868a default }" containerID=735018737b2630c5677a19baa147713775257455af0885716b70c5506c975784 datapathConfiguration="&{false false false false false }" interface=lxc68403898680d k8sPodName=openstack/rabbitmq-glance-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=735018737b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2097 ipv4=10.0.0.1 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=735018737b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2097 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.1 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-glance;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=735018737b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2097 identity=10742 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.1 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=735018737b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2097 identity=10742 ipv4=10.0.0.1 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=735018737b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2097 identity=10742 ipv4=10.0.0.1 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=735018737b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2097 identity=10742 ipv4=10.0.0.1 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.100 d8471b9d-d979-4c53-81aa-c426732fd164 default }" containerID=7640d1cbde4d053ef2a3f7ea6928c5974c4dfa03ee48589d6066e89e1edc6137 datapathConfiguration="&{false false false false false }" interface=lxc124920c3be52 k8sPodName=openstack/glance-db-init-dcqpf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7640d1cbde datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1143 ipv4=10.0.0.100 ipv6= k8sPodName=openstack/glance-db-init-dcqpf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7640d1cbde datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1143 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=2c447475-7e78-46cb-af4d-a50da7def2b8,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=2c447475-7e78-46cb-af4d-a50da7def2b8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.100 ipv6= k8sPodName=openstack/glance-db-init-dcqpf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=7640d1cbde datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1143 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.100 ipv6= k8sPodName=openstack/glance-db-init-dcqpf line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=2c447475-7e78-46cb-af4d-a50da7def2b8;k8s:batch.kubernetes.io/job-name=glance-db-init;k8s:component=db-init;k8s:controller-uid=2c447475-7e78-46cb-af4d-a50da7def2b8;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7640d1cbde datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1143 identity=14168 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=2c447475-7e78-46cb-af4d-a50da7def2b8,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=2c447475-7e78-46cb-af4d-a50da7def2b8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.100 ipv6= k8sPodName=openstack/glance-db-init-dcqpf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7640d1cbde datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1143 identity=14168 ipv4=10.0.0.100 ipv6= k8sPodName=openstack/glance-db-init-dcqpf subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7640d1cbde datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1143 identity=14168 ipv4=10.0.0.100 ipv6= k8sPodName=openstack/glance-db-init-dcqpf subsys=endpoint level=info msg="Successful endpoint creation" containerID=7640d1cbde datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1143 identity=14168 ipv4=10.0.0.100 ipv6= k8sPodName=openstack/glance-db-init-dcqpf subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.248 a459b6a4-d610-4071-951a-b38f09ea7657 default }" containerID=b4f68e76e12bd3d4a881a968cf041274c6f0be65e92d4c8501530dc7a72e797a datapathConfiguration="&{false false false false false }" interface=lxcee87d1995323 k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-bx22t labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b4f68e76e1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=144 ipv4=10.0.0.248 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-bx22t subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b4f68e76e1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=144 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.248 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-bx22t subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=b4f68e76e1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=144 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.248 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-bx22t line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=rook-ceph-rgw;k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io;k8s:app.kubernetes.io/created-by=rook-ceph-operator;k8s:app.kubernetes.io/instance=ceph;k8s:app.kubernetes.io/managed-by=rook-ceph-operator;k8s:app.kubernetes.io/name=ceph-rgw;k8s:app.kubernetes.io/part-of=ceph;k8s:ceph_daemon_id=ceph;k8s:ceph_daemon_type=rgw;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw;k8s:io.kubernetes.pod.namespace=openstack;k8s:rgw=ceph;k8s:rook.io/operator-namespace=rook-ceph;k8s:rook_cluster=openstack;k8s:rook_object_store=ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b4f68e76e1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=144 identity=23345 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.248 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-bx22t oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b4f68e76e1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=144 identity=23345 ipv4=10.0.0.248 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-bx22t subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.115 478b7907-af78-4eb6-94f8-fe58d2024e52 default }" containerID=c7d9fb412f91281043eee489164de68d5498cd8dd073225f7fbb0cce1b93a645 datapathConfiguration="&{false false false false false }" interface=lxca6fa606a994a k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-q7dms labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c7d9fb412f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4040 ipv4=10.0.0.115 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-q7dms subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c7d9fb412f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4040 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.115 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-q7dms subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-crashcollector;k8s:ceph-version=18.2.7-0;k8s:ceph_daemon_id=crash;k8s:crashcollector=crash;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default;k8s:io.kubernetes.pod.namespace=openstack;k8s:node_name=instance;k8s:rook_cluster=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c7d9fb412f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4040 identity=14394 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.115 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-q7dms oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c7d9fb412f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4040 identity=14394 ipv4=10.0.0.115 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-q7dms subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b4f68e76e1 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=144 identity=23345 ipv4=10.0.0.248 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-bx22t subsys=endpoint level=info msg="Successful endpoint creation" containerID=b4f68e76e1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=144 identity=23345 ipv4=10.0.0.248 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-bx22t subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=c7d9fb412f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=4040 identity=14394 ipv4=10.0.0.115 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-q7dms subsys=endpoint level=info msg="Successful endpoint creation" containerID=c7d9fb412f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=4040 identity=14394 ipv4=10.0.0.115 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-q7dms subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=7640d1cbde endpointID=1143 k8sNamespace=openstack k8sPodName=glance-db-init-dcqpf subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=2c447475-7e78-46cb-af4d-a50da7def2b8 k8s:batch.kubernetes.io/job-name=glance-db-init k8s:component=db-init k8s:controller-uid=2c447475-7e78-46cb-af4d-a50da7def2b8 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=7640d1cbde datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1143 identity=14168 ipv4=10.0.0.100 ipv6= k8sPodName=openstack/glance-db-init-dcqpf subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.213 4755770d-e83e-430c-a67e-3e62838d7ff2 default }" containerID=301a7e89f1bedc7b13c99c0fb49f1cfc85dfae29e633c7809d89695b57a1d66c datapathConfiguration="&{false false false false false }" interface=lxc6e9262e5f71d k8sPodName=openstack/glance-db-sync-rz85c labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=301a7e89f1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4053 ipv4=10.0.0.213 ipv6= k8sPodName=openstack/glance-db-sync-rz85c subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=301a7e89f1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4053 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=288fa370-80b2-4c3d-8de4-99ac5b8932ca,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=288fa370-80b2-4c3d-8de4-99ac5b8932ca,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.213 ipv6= k8sPodName=openstack/glance-db-sync-rz85c subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=288fa370-80b2-4c3d-8de4-99ac5b8932ca;k8s:batch.kubernetes.io/job-name=glance-db-sync;k8s:component=db-sync;k8s:controller-uid=288fa370-80b2-4c3d-8de4-99ac5b8932ca;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-sync;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=301a7e89f1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4053 identity=33557 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=288fa370-80b2-4c3d-8de4-99ac5b8932ca,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=288fa370-80b2-4c3d-8de4-99ac5b8932ca,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.213 ipv6= k8sPodName=openstack/glance-db-sync-rz85c oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=301a7e89f1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4053 identity=33557 ipv4=10.0.0.213 ipv6= k8sPodName=openstack/glance-db-sync-rz85c subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=301a7e89f1 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=4053 identity=33557 ipv4=10.0.0.213 ipv6= k8sPodName=openstack/glance-db-sync-rz85c subsys=endpoint level=info msg="Successful endpoint creation" containerID=301a7e89f1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=4053 identity=33557 ipv4=10.0.0.213 ipv6= k8sPodName=openstack/glance-db-sync-rz85c subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=301a7e89f1 endpointID=4053 k8sNamespace=openstack k8sPodName=glance-db-sync-rz85c subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=288fa370-80b2-4c3d-8de4-99ac5b8932ca k8s:batch.kubernetes.io/job-name=glance-db-sync k8s:component=db-sync k8s:controller-uid=288fa370-80b2-4c3d-8de4-99ac5b8932ca k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-sync k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=301a7e89f1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=4053 identity=33557 ipv4=10.0.0.213 ipv6= k8sPodName=openstack/glance-db-sync-rz85c subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.37 6b3324e4-29d3-449c-a3f9-15ea5d4c7113 default }" containerID=8ed125471e883e46dabe0e23eabc86128e859787ad661ee756371394c12146f5 datapathConfiguration="&{false false false false false }" interface=lxc0367a1708241 k8sPodName=openstack/glance-rabbit-init-clnjz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8ed125471e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1405 ipv4=10.0.0.37 ipv6= k8sPodName=openstack/glance-rabbit-init-clnjz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8ed125471e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1405 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=1b0c3eb4-1421-4943-a219-8815332e75fe,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=1b0c3eb4-1421-4943-a219-8815332e75fe,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.37 ipv6= k8sPodName=openstack/glance-rabbit-init-clnjz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=8ed125471e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1405 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.37 ipv6= k8sPodName=openstack/glance-rabbit-init-clnjz line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=1b0c3eb4-1421-4943-a219-8815332e75fe;k8s:batch.kubernetes.io/job-name=glance-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=1b0c3eb4-1421-4943-a219-8815332e75fe;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-rabbit-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8ed125471e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1405 identity=44642 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=1b0c3eb4-1421-4943-a219-8815332e75fe,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=1b0c3eb4-1421-4943-a219-8815332e75fe,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.37 ipv6= k8sPodName=openstack/glance-rabbit-init-clnjz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8ed125471e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1405 identity=44642 ipv4=10.0.0.37 ipv6= k8sPodName=openstack/glance-rabbit-init-clnjz subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8ed125471e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1405 identity=44642 ipv4=10.0.0.37 ipv6= k8sPodName=openstack/glance-rabbit-init-clnjz subsys=endpoint level=info msg="Successful endpoint creation" containerID=8ed125471e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1405 identity=44642 ipv4=10.0.0.37 ipv6= k8sPodName=openstack/glance-rabbit-init-clnjz subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=8ed125471e endpointID=1405 k8sNamespace=openstack k8sPodName=glance-rabbit-init-clnjz subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=1b0c3eb4-1421-4943-a219-8815332e75fe k8s:batch.kubernetes.io/job-name=glance-rabbit-init k8s:component=rabbit-init k8s:controller-uid=1b0c3eb4-1421-4943-a219-8815332e75fe k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-rabbit-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=8ed125471e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1405 identity=44642 ipv4=10.0.0.37 ipv6= k8sPodName=openstack/glance-rabbit-init-clnjz subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.116 90450adf-471b-48f4-b698-14a32727a22f default }" containerID=5f2475612aaa95388973e492e90dcca1422662fcc86cda6806f274956c129a8c datapathConfiguration="&{false false false false false }" interface=lxc5a2379036400 k8sPodName=openstack/glance-ks-service-vknmq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5f2475612a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1397 ipv4=10.0.0.116 ipv6= k8sPodName=openstack/glance-ks-service-vknmq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5f2475612a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1397 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=c3868241-d4d8-4a41-a1ae-b0b380e067b6,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=c3868241-d4d8-4a41-a1ae-b0b380e067b6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.116 ipv6= k8sPodName=openstack/glance-ks-service-vknmq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=c3868241-d4d8-4a41-a1ae-b0b380e067b6;k8s:batch.kubernetes.io/job-name=glance-ks-service;k8s:component=ks-service;k8s:controller-uid=c3868241-d4d8-4a41-a1ae-b0b380e067b6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-service;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5f2475612a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1397 identity=40659 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=c3868241-d4d8-4a41-a1ae-b0b380e067b6,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=c3868241-d4d8-4a41-a1ae-b0b380e067b6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.116 ipv6= k8sPodName=openstack/glance-ks-service-vknmq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5f2475612a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1397 identity=40659 ipv4=10.0.0.116 ipv6= k8sPodName=openstack/glance-ks-service-vknmq subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=5f2475612a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1397 identity=40659 ipv4=10.0.0.116 ipv6= k8sPodName=openstack/glance-ks-service-vknmq subsys=endpoint level=info msg="Successful endpoint creation" containerID=5f2475612a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1397 identity=40659 ipv4=10.0.0.116 ipv6= k8sPodName=openstack/glance-ks-service-vknmq subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=5f2475612a endpointID=1397 k8sNamespace=openstack k8sPodName=glance-ks-service-vknmq subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=c3868241-d4d8-4a41-a1ae-b0b380e067b6 k8s:batch.kubernetes.io/job-name=glance-ks-service k8s:component=ks-service k8s:controller-uid=c3868241-d4d8-4a41-a1ae-b0b380e067b6 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-service k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=5f2475612a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1397 identity=40659 ipv4=10.0.0.116 ipv6= k8sPodName=openstack/glance-ks-service-vknmq subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.131 195bf386-6359-46c5-ae5f-6ac4b3209ae4 default }" containerID=586f033b7cafe31dc961ac8d5f489b855622c96c8773d530a3d7d22289c37ac2 datapathConfiguration="&{false false false false false }" interface=lxc76852c4a7fb5 k8sPodName=openstack/glance-ks-endpoints-s9x24 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=586f033b7c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=208 ipv4=10.0.0.131 ipv6= k8sPodName=openstack/glance-ks-endpoints-s9x24 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=586f033b7c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=208 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=0012f602-4bca-41b9-b4fc-32e73139ba99,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=0012f602-4bca-41b9-b4fc-32e73139ba99,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.131 ipv6= k8sPodName=openstack/glance-ks-endpoints-s9x24 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=586f033b7c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=208 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.131 ipv6= k8sPodName=openstack/glance-ks-endpoints-s9x24 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=0012f602-4bca-41b9-b4fc-32e73139ba99;k8s:batch.kubernetes.io/job-name=glance-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=0012f602-4bca-41b9-b4fc-32e73139ba99;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-endpoints;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=586f033b7c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=208 identity=26997 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=0012f602-4bca-41b9-b4fc-32e73139ba99,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=0012f602-4bca-41b9-b4fc-32e73139ba99,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.131 ipv6= k8sPodName=openstack/glance-ks-endpoints-s9x24 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=586f033b7c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=208 identity=26997 ipv4=10.0.0.131 ipv6= k8sPodName=openstack/glance-ks-endpoints-s9x24 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=586f033b7c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=208 identity=26997 ipv4=10.0.0.131 ipv6= k8sPodName=openstack/glance-ks-endpoints-s9x24 subsys=endpoint level=info msg="Successful endpoint creation" containerID=586f033b7c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=208 identity=26997 ipv4=10.0.0.131 ipv6= k8sPodName=openstack/glance-ks-endpoints-s9x24 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=586f033b7c endpointID=208 k8sNamespace=openstack k8sPodName=glance-ks-endpoints-s9x24 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=0012f602-4bca-41b9-b4fc-32e73139ba99 k8s:batch.kubernetes.io/job-name=glance-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=0012f602-4bca-41b9-b4fc-32e73139ba99 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-endpoints k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=586f033b7c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=208 identity=26997 ipv4=10.0.0.131 ipv6= k8sPodName=openstack/glance-ks-endpoints-s9x24 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.60 396e2e10-3adb-46b7-b50c-9fdffed379ce default }" containerID=57b31d7eaed5ac5625ab371cd47d5cac8c6fa462d77b193ed2e67d8181770944 datapathConfiguration="&{false false false false false }" interface=lxcab15c10d7869 k8sPodName=openstack/glance-ks-user-gwrzl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=57b31d7eae datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=453 ipv4=10.0.0.60 ipv6= k8sPodName=openstack/glance-ks-user-gwrzl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=57b31d7eae datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=453 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=b25f89dc-5eee-40e4-b00b-8a83c4fe24fd,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=b25f89dc-5eee-40e4-b00b-8a83c4fe24fd,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.60 ipv6= k8sPodName=openstack/glance-ks-user-gwrzl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=b25f89dc-5eee-40e4-b00b-8a83c4fe24fd;k8s:batch.kubernetes.io/job-name=glance-ks-user;k8s:component=ks-user;k8s:controller-uid=b25f89dc-5eee-40e4-b00b-8a83c4fe24fd;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-user;k8s:release_group=glance;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=57b31d7eae datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=453 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.60 ipv6= k8sPodName=openstack/glance-ks-user-gwrzl line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=57b31d7eae datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=453 identity=26677 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=b25f89dc-5eee-40e4-b00b-8a83c4fe24fd,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=b25f89dc-5eee-40e4-b00b-8a83c4fe24fd,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.60 ipv6= k8sPodName=openstack/glance-ks-user-gwrzl oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=57b31d7eae datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=453 identity=26677 ipv4=10.0.0.60 ipv6= k8sPodName=openstack/glance-ks-user-gwrzl subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=57b31d7eae datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=453 identity=26677 ipv4=10.0.0.60 ipv6= k8sPodName=openstack/glance-ks-user-gwrzl subsys=endpoint level=info msg="Successful endpoint creation" containerID=57b31d7eae datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=453 identity=26677 ipv4=10.0.0.60 ipv6= k8sPodName=openstack/glance-ks-user-gwrzl subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=57b31d7eae endpointID=453 k8sNamespace=openstack k8sPodName=glance-ks-user-gwrzl subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=b25f89dc-5eee-40e4-b00b-8a83c4fe24fd k8s:batch.kubernetes.io/job-name=glance-ks-user k8s:component=ks-user k8s:controller-uid=b25f89dc-5eee-40e4-b00b-8a83c4fe24fd k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-user k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=57b31d7eae datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=453 identity=26677 ipv4=10.0.0.60 ipv6= k8sPodName=openstack/glance-ks-user-gwrzl subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.197 84bb2752-046f-479e-bb53-9ce64d2b8b11 default }" containerID=2d9f16a9eee8bb764f1ef09a75f38a2f0f916390b4eee5be417f1556edda4bfd datapathConfiguration="&{false false false false false }" interface=lxc1b0393d0d605 k8sPodName=openstack/glance-metadefs-load-w8dt4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2d9f16a9ee datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=913 ipv4=10.0.0.197 ipv6= k8sPodName=openstack/glance-metadefs-load-w8dt4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2d9f16a9ee datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=913 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=79b97d70-e94c-41cb-927b-28d6a53a01ac,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=79b97d70-e94c-41cb-927b-28d6a53a01ac,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.197 ipv6= k8sPodName=openstack/glance-metadefs-load-w8dt4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=79b97d70-e94c-41cb-927b-28d6a53a01ac;k8s:batch.kubernetes.io/job-name=glance-metadefs-load;k8s:component=metadefs_load;k8s:controller-uid=79b97d70-e94c-41cb-927b-28d6a53a01ac;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-metadefs-load;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2d9f16a9ee datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=913 identity=6220 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=79b97d70-e94c-41cb-927b-28d6a53a01ac,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=79b97d70-e94c-41cb-927b-28d6a53a01ac,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.197 ipv6= k8sPodName=openstack/glance-metadefs-load-w8dt4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2d9f16a9ee datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=913 identity=6220 ipv4=10.0.0.197 ipv6= k8sPodName=openstack/glance-metadefs-load-w8dt4 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=2d9f16a9ee datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=913 identity=6220 ipv4=10.0.0.197 ipv6= k8sPodName=openstack/glance-metadefs-load-w8dt4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=2d9f16a9ee datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=913 identity=6220 ipv4=10.0.0.197 ipv6= k8sPodName=openstack/glance-metadefs-load-w8dt4 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=2d9f16a9ee endpointID=913 k8sNamespace=openstack k8sPodName=glance-metadefs-load-w8dt4 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=79b97d70-e94c-41cb-927b-28d6a53a01ac k8s:batch.kubernetes.io/job-name=glance-metadefs-load k8s:component=metadefs_load k8s:controller-uid=79b97d70-e94c-41cb-927b-28d6a53a01ac k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-metadefs-load k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=2d9f16a9ee datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=913 identity=6220 ipv4=10.0.0.197 ipv6= k8sPodName=openstack/glance-metadefs-load-w8dt4 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.242 fdf9115b-4f10-492d-8f13-8a7ffd570b4c default }" containerID=1362986266144821a9a0643776e8f4c21044ba4442cea69bc3989bd039d20548 datapathConfiguration="&{false false false false false }" interface=lxc695ba06855ba k8sPodName=openstack/glance-storage-init-plhpq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1362986266 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2876 ipv4=10.0.0.242 ipv6= k8sPodName=openstack/glance-storage-init-plhpq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1362986266 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2876 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=6a1714f1-87c7-4a8e-a865-34fa1326cb6d,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=6a1714f1-87c7-4a8e-a865-34fa1326cb6d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.242 ipv6= k8sPodName=openstack/glance-storage-init-plhpq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=6a1714f1-87c7-4a8e-a865-34fa1326cb6d;k8s:batch.kubernetes.io/job-name=glance-storage-init;k8s:component=storage-init;k8s:controller-uid=6a1714f1-87c7-4a8e-a865-34fa1326cb6d;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-storage-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1362986266 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2876 identity=63448 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=6a1714f1-87c7-4a8e-a865-34fa1326cb6d,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=6a1714f1-87c7-4a8e-a865-34fa1326cb6d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.242 ipv6= k8sPodName=openstack/glance-storage-init-plhpq oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=1362986266 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2876 identity=63448 ipv4=10.0.0.242 ipv6= k8sPodName=openstack/glance-storage-init-plhpq subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1362986266 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2876 identity=63448 ipv4=10.0.0.242 ipv6= k8sPodName=openstack/glance-storage-init-plhpq subsys=endpoint level=info msg="Successful endpoint creation" containerID=1362986266 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2876 identity=63448 ipv4=10.0.0.242 ipv6= k8sPodName=openstack/glance-storage-init-plhpq subsys=daemon level=info msg="Delete endpoint request" containerID=1362986266 endpointID=2876 k8sNamespace=openstack k8sPodName=glance-storage-init-plhpq subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=6a1714f1-87c7-4a8e-a865-34fa1326cb6d k8s:batch.kubernetes.io/job-name=glance-storage-init k8s:component=storage-init k8s:controller-uid=6a1714f1-87c7-4a8e-a865-34fa1326cb6d k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-storage-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=1362986266 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2876 identity=63448 ipv4=10.0.0.242 ipv6= k8sPodName=openstack/glance-storage-init-plhpq subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.65 f3940ee5-0198-4213-9ddc-4026a4d87dcf default }" containerID=eee31067b1631d6017daba0cb4a1c09467cf4213f9bf9338bdc9458733f383d1 datapathConfiguration="&{false false false false false }" interface=lxc77c76e2033ca k8sPodName=openstack/glance-api-78d97b88c-q5nxr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=eee31067b1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2747 ipv4=10.0.0.65 ipv6= k8sPodName=openstack/glance-api-78d97b88c-q5nxr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=eee31067b1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2747 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.65 ipv6= k8sPodName=openstack/glance-api-78d97b88c-q5nxr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=eee31067b1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2747 identity=58570 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.65 ipv6= k8sPodName=openstack/glance-api-78d97b88c-q5nxr oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=eee31067b1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2747 identity=58570 ipv4=10.0.0.65 ipv6= k8sPodName=openstack/glance-api-78d97b88c-q5nxr subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=eee31067b1 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2747 identity=58570 ipv4=10.0.0.65 ipv6= k8sPodName=openstack/glance-api-78d97b88c-q5nxr subsys=endpoint level=info msg="Successful endpoint creation" containerID=eee31067b1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2747 identity=58570 ipv4=10.0.0.65 ipv6= k8sPodName=openstack/glance-api-78d97b88c-q5nxr subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.111 e57a5976-fbac-4b50-a4bd-dd6e1ecc37fa default }" containerID=1f7a21ae7b3b3db480f5eec48966a4df46299132261ce004bb98a73fb71b1ca3 datapathConfiguration="&{false false false false false }" interface=lxc42e35645a9f3 k8sPodName=openstack/staffeln-api-7f96b6bfbb-grwvr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1f7a21ae7b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2546 ipv4=10.0.0.111 ipv6= k8sPodName=openstack/staffeln-api-7f96b6bfbb-grwvr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1f7a21ae7b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2546 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.111 ipv6= k8sPodName=openstack/staffeln-api-7f96b6bfbb-grwvr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1f7a21ae7b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2546 identity=16223 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.111 ipv6= k8sPodName=openstack/staffeln-api-7f96b6bfbb-grwvr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1f7a21ae7b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2546 identity=16223 ipv4=10.0.0.111 ipv6= k8sPodName=openstack/staffeln-api-7f96b6bfbb-grwvr subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.175 d69ccc38-9e90-41a3-a78e-b348408fbed5 default }" containerID=524d68686cf34df0b3007a083eb688a0f8b2daf568f13a7ba59937ddaf153dc8 datapathConfiguration="&{false false false false false }" interface=lxc8a9a2235809b k8sPodName=openstack/staffeln-db-init-7r7n2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=524d68686c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3423 ipv4=10.0.0.175 ipv6= k8sPodName=openstack/staffeln-db-init-7r7n2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=524d68686c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3423 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=9bf8cd99-0c10-4f05-b7cd-6b171c7cafd7,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=9bf8cd99-0c10-4f05-b7cd-6b171c7cafd7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.175 ipv6= k8sPodName=openstack/staffeln-db-init-7r7n2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.57 5053af7c-d299-4134-9e09-4f5f4a744020 default }" containerID=5426179ffa35f125344dbdd0841531ea1cfc5178967c3eb032c37a5fd1b4d4f9 datapathConfiguration="&{false false false false false }" interface=lxc2ad997dbb030 k8sPodName=openstack/staffeln-conductor-7b99bb77d5-2sbf2 labels="[]" subsys=daemon sync-build=true level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="New endpoint" containerID=5426179ffa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=431 ipv4=10.0.0.57 ipv6= k8sPodName=openstack/staffeln-conductor-7b99bb77d5-2sbf2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5426179ffa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=431 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.57 ipv6= k8sPodName=openstack/staffeln-conductor-7b99bb77d5-2sbf2 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=9bf8cd99-0c10-4f05-b7cd-6b171c7cafd7;k8s:batch.kubernetes.io/job-name=staffeln-db-init;k8s:component=db-init;k8s:controller-uid=9bf8cd99-0c10-4f05-b7cd-6b171c7cafd7;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-init;k8s:release_group=staffeln;" subsys=allocator level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Identity of endpoint changed" containerID=524d68686c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3423 identity=26495 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=9bf8cd99-0c10-4f05-b7cd-6b171c7cafd7,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=9bf8cd99-0c10-4f05-b7cd-6b171c7cafd7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.175 ipv6= k8sPodName=openstack/staffeln-db-init-7r7n2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=524d68686c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3423 identity=26495 ipv4=10.0.0.175 ipv6= k8sPodName=openstack/staffeln-db-init-7r7n2 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=conductor;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5426179ffa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=431 identity=47024 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.57 ipv6= k8sPodName=openstack/staffeln-conductor-7b99bb77d5-2sbf2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5426179ffa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=431 identity=47024 ipv4=10.0.0.57 ipv6= k8sPodName=openstack/staffeln-conductor-7b99bb77d5-2sbf2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1f7a21ae7b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2546 identity=16223 ipv4=10.0.0.111 ipv6= k8sPodName=openstack/staffeln-api-7f96b6bfbb-grwvr subsys=endpoint level=info msg="Successful endpoint creation" containerID=1f7a21ae7b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2546 identity=16223 ipv4=10.0.0.111 ipv6= k8sPodName=openstack/staffeln-api-7f96b6bfbb-grwvr subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=524d68686c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3423 identity=26495 ipv4=10.0.0.175 ipv6= k8sPodName=openstack/staffeln-db-init-7r7n2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=524d68686c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3423 identity=26495 ipv4=10.0.0.175 ipv6= k8sPodName=openstack/staffeln-db-init-7r7n2 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=5426179ffa datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=431 identity=47024 ipv4=10.0.0.57 ipv6= k8sPodName=openstack/staffeln-conductor-7b99bb77d5-2sbf2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=5426179ffa datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=431 identity=47024 ipv4=10.0.0.57 ipv6= k8sPodName=openstack/staffeln-conductor-7b99bb77d5-2sbf2 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=524d68686c endpointID=3423 k8sNamespace=openstack k8sPodName=staffeln-db-init-7r7n2 subsys=daemon level=info msg="Releasing key" key="[k8s:application=staffeln k8s:batch.kubernetes.io/controller-uid=9bf8cd99-0c10-4f05-b7cd-6b171c7cafd7 k8s:batch.kubernetes.io/job-name=staffeln-db-init k8s:component=db-init k8s:controller-uid=9bf8cd99-0c10-4f05-b7cd-6b171c7cafd7 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=staffeln-db-init k8s:release_group=staffeln]" subsys=allocator level=info msg="Removed endpoint" containerID=524d68686c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3423 identity=26495 ipv4=10.0.0.175 ipv6= k8sPodName=openstack/staffeln-db-init-7r7n2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.15 e8781abe-1c10-4d30-8b64-2554ed0e3bf0 default }" containerID=c68d626a1e45f6c6d9856a69896f7fe35d526cbad57e3a118e7ef1fbe678e5b9 datapathConfiguration="&{false false false false false }" interface=lxc6cc4e112af56 k8sPodName=openstack/staffeln-db-sync-wjgjz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c68d626a1e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=670 ipv4=10.0.0.15 ipv6= k8sPodName=openstack/staffeln-db-sync-wjgjz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c68d626a1e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=670 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=4fe29aaf-3dc1-4cd8-bbbe-617c8d7a5a7b,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=4fe29aaf-3dc1-4cd8-bbbe-617c8d7a5a7b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.15 ipv6= k8sPodName=openstack/staffeln-db-sync-wjgjz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=4fe29aaf-3dc1-4cd8-bbbe-617c8d7a5a7b;k8s:batch.kubernetes.io/job-name=staffeln-db-sync;k8s:component=db-sync;k8s:controller-uid=4fe29aaf-3dc1-4cd8-bbbe-617c8d7a5a7b;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-sync;k8s:release_group=staffeln;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=c68d626a1e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=670 identity=29537 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=4fe29aaf-3dc1-4cd8-bbbe-617c8d7a5a7b,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=4fe29aaf-3dc1-4cd8-bbbe-617c8d7a5a7b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.15 ipv6= k8sPodName=openstack/staffeln-db-sync-wjgjz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c68d626a1e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=670 identity=29537 ipv4=10.0.0.15 ipv6= k8sPodName=openstack/staffeln-db-sync-wjgjz subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c68d626a1e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=670 identity=29537 ipv4=10.0.0.15 ipv6= k8sPodName=openstack/staffeln-db-sync-wjgjz subsys=endpoint level=info msg="Successful endpoint creation" containerID=c68d626a1e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=670 identity=29537 ipv4=10.0.0.15 ipv6= k8sPodName=openstack/staffeln-db-sync-wjgjz subsys=daemon