level=info msg="Memory available for map entries (0.003% of 67421642752B): 168554106B" subsys=config level=info msg="option bpf-ct-global-tcp-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-ct-global-any-max set by dynamic sizing to 295708" subsys=config level=info msg="option bpf-nat-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-neigh-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-sock-rev-map-max set by dynamic sizing to 295708" subsys=config level=info msg=" --agent-health-port='9879'" subsys=daemon level=info msg=" --agent-labels=''" subsys=daemon level=info msg=" --agent-liveness-update-interval='1s'" subsys=daemon level=info msg=" --agent-not-ready-taint-key='node.cilium.io/agent-not-ready'" subsys=daemon level=info msg=" --allocator-list-timeout='3m0s'" subsys=daemon level=info msg=" --allow-icmp-frag-needed='true'" subsys=daemon level=info msg=" --allow-localhost='auto'" subsys=daemon level=info msg=" --annotate-k8s-node='false'" subsys=daemon level=info msg=" --api-rate-limit=''" subsys=daemon level=info msg=" --arping-refresh-period='30s'" subsys=daemon level=info msg=" --auto-create-cilium-node-resource='true'" subsys=daemon level=info msg=" --auto-direct-node-routes='false'" subsys=daemon level=info msg=" --bgp-announce-lb-ip='false'" subsys=daemon level=info msg=" --bgp-announce-pod-cidr='false'" subsys=daemon level=info msg=" --bgp-config-path='/var/lib/cilium/bgp/config.yaml'" subsys=daemon level=info msg=" --bpf-auth-map-max='524288'" subsys=daemon level=info msg=" --bpf-ct-global-any-max='262144'" subsys=daemon level=info msg=" --bpf-ct-global-tcp-max='524288'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-fin='10s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-syn='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp-grace='1m0s'" subsys=daemon level=info msg=" --bpf-filter-priority='1'" subsys=daemon level=info msg=" --bpf-fragments-map-max='8192'" subsys=daemon level=info msg=" --bpf-lb-acceleration='disabled'" subsys=daemon level=info msg=" --bpf-lb-affinity-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-algorithm='random'" subsys=daemon level=info msg=" --bpf-lb-dev-ip-addr-inherit=''" subsys=daemon level=info msg=" --bpf-lb-dsr-dispatch='opt'" subsys=daemon level=info msg=" --bpf-lb-dsr-l4-xlate='frontend'" subsys=daemon level=info msg=" --bpf-lb-external-clusterip='false'" subsys=daemon level=info msg=" --bpf-lb-maglev-hash-seed='JLfvgnHc2kaSUFaI'" subsys=daemon level=info msg=" --bpf-lb-maglev-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-maglev-table-size='16381'" subsys=daemon level=info msg=" --bpf-lb-map-max='65536'" subsys=daemon level=info msg=" --bpf-lb-mode='snat'" subsys=daemon level=info msg=" --bpf-lb-rev-nat-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-rss-ipv4-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-rss-ipv6-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-service-backend-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-service-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-sock='false'" subsys=daemon level=info msg=" --bpf-lb-sock-hostns-only='false'" subsys=daemon level=info msg=" --bpf-lb-source-range-map-max='0'" subsys=daemon level=info msg=" --bpf-map-dynamic-size-ratio='0.0025'" subsys=daemon level=info msg=" --bpf-map-event-buffers=''" subsys=daemon level=info msg=" --bpf-nat-global-max='524288'" subsys=daemon level=info msg=" --bpf-neigh-global-max='524288'" subsys=daemon level=info msg=" --bpf-policy-map-full-reconciliation-interval='15m0s'" subsys=daemon level=info msg=" --bpf-policy-map-max='16384'" subsys=daemon level=info msg=" --bpf-root='/sys/fs/bpf'" subsys=daemon level=info msg=" --bpf-sock-rev-map-max='262144'" subsys=daemon level=info msg=" --bypass-ip-availability-upon-restore='false'" subsys=daemon level=info msg=" --certificates-directory='/var/run/cilium/certs'" subsys=daemon level=info msg=" --cflags=''" subsys=daemon level=info msg=" --cgroup-root='/run/cilium/cgroupv2'" subsys=daemon level=info msg=" --cilium-endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --cluster-health-port='4240'" subsys=daemon level=info msg=" --cluster-id='0'" subsys=daemon level=info msg=" --cluster-name='default'" subsys=daemon level=info msg=" --cluster-pool-ipv4-cidr='10.0.0.0/8'" subsys=daemon level=info msg=" --cluster-pool-ipv4-mask-size='24'" subsys=daemon level=info msg=" --clustermesh-config='/var/lib/cilium/clustermesh/'" subsys=daemon level=info msg=" --clustermesh-ip-identities-sync-timeout='1m0s'" subsys=daemon level=info msg=" --cmdref=''" subsys=daemon level=info msg=" --cni-chaining-mode='none'" subsys=daemon level=info msg=" --cni-chaining-target=''" subsys=daemon level=info msg=" --cni-exclusive='true'" subsys=daemon level=info msg=" --cni-external-routing='false'" subsys=daemon level=info msg=" --cni-log-file='/var/run/cilium/cilium-cni.log'" subsys=daemon level=info msg=" --cnp-node-status-gc-interval='0s'" subsys=daemon level=info msg=" --config=''" subsys=daemon level=info msg=" --config-dir='/tmp/cilium/config-map'" subsys=daemon level=info msg=" --config-sources='config-map:kube-system/cilium-config'" subsys=daemon level=info msg=" --conntrack-gc-interval='0s'" subsys=daemon level=info msg=" --conntrack-gc-max-interval='0s'" subsys=daemon level=info msg=" --crd-wait-timeout='5m0s'" subsys=daemon level=info msg=" --custom-cni-conf='false'" subsys=daemon level=info msg=" --datapath-mode='veth'" subsys=daemon level=info msg=" --debug='false'" subsys=daemon level=info msg=" --debug-verbose=''" subsys=daemon level=info msg=" --derive-masquerade-ip-addr-from-device=''" subsys=daemon level=info msg=" --devices=''" subsys=daemon level=info msg=" --direct-routing-device=''" subsys=daemon level=info msg=" --disable-cnp-status-updates='true'" subsys=daemon level=info msg=" --disable-endpoint-crd='false'" subsys=daemon level=info msg=" --disable-envoy-version-check='false'" subsys=daemon level=info msg=" --disable-iptables-feeder-rules=''" subsys=daemon level=info msg=" --dns-max-ips-per-restored-rule='1000'" subsys=daemon level=info msg=" --dns-policy-unload-on-shutdown='false'" subsys=daemon level=info msg=" --dnsproxy-concurrency-limit='0'" subsys=daemon level=info msg=" --dnsproxy-concurrency-processing-grace-period='0s'" subsys=daemon level=info msg=" --dnsproxy-enable-transparent-mode='true'" subsys=daemon level=info msg=" --dnsproxy-lock-count='128'" subsys=daemon level=info msg=" --dnsproxy-lock-timeout='500ms'" subsys=daemon level=info msg=" --egress-gateway-policy-map-max='16384'" subsys=daemon level=info msg=" --egress-gateway-reconciliation-trigger-interval='1s'" subsys=daemon level=info msg=" --egress-masquerade-interfaces=''" subsys=daemon level=info msg=" --egress-multi-home-ip-rule-compat='false'" subsys=daemon level=info msg=" --enable-auto-protect-node-port-range='true'" subsys=daemon level=info msg=" --enable-bandwidth-manager='false'" subsys=daemon level=info msg=" --enable-bbr='false'" subsys=daemon level=info msg=" --enable-bgp-control-plane='false'" subsys=daemon level=info msg=" --enable-bpf-clock-probe='false'" subsys=daemon level=info msg=" --enable-bpf-masquerade='false'" subsys=daemon level=info msg=" --enable-bpf-tproxy='false'" subsys=daemon level=info msg=" --enable-cilium-api-server-access='*'" subsys=daemon level=info msg=" --enable-cilium-endpoint-slice='false'" subsys=daemon level=info msg=" --enable-cilium-health-api-server-access='*'" subsys=daemon level=info msg=" --enable-custom-calls='false'" subsys=daemon level=info msg=" --enable-endpoint-health-checking='true'" subsys=daemon level=info msg=" --enable-endpoint-routes='false'" subsys=daemon level=info msg=" --enable-envoy-config='false'" subsys=daemon level=info msg=" --enable-external-ips='false'" subsys=daemon level=info msg=" --enable-health-check-nodeport='true'" subsys=daemon level=info msg=" --enable-health-checking='true'" subsys=daemon level=info msg=" --enable-high-scale-ipcache='false'" subsys=daemon level=info msg=" --enable-host-firewall='false'" subsys=daemon level=info msg=" --enable-host-legacy-routing='false'" subsys=daemon level=info msg=" --enable-host-port='false'" subsys=daemon level=info msg=" --enable-hubble='false'" subsys=daemon level=info msg=" --enable-hubble-recorder-api='true'" subsys=daemon level=info msg=" --enable-icmp-rules='true'" subsys=daemon level=info msg=" --enable-identity-mark='true'" subsys=daemon level=info msg=" --enable-ip-masq-agent='false'" subsys=daemon level=info msg=" --enable-ipsec='false'" subsys=daemon level=info msg=" --enable-ipsec-key-watcher='true'" subsys=daemon level=info msg=" --enable-ipv4='true'" subsys=daemon level=info msg=" --enable-ipv4-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv4-egress-gateway='false'" subsys=daemon level=info msg=" --enable-ipv4-fragment-tracking='true'" subsys=daemon level=info msg=" --enable-ipv4-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6='false'" subsys=daemon level=info msg=" --enable-ipv6-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv6-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6-ndp='false'" subsys=daemon level=info msg=" --enable-k8s='true'" subsys=daemon level=info msg=" --enable-k8s-api-discovery='false'" subsys=daemon level=info msg=" --enable-k8s-endpoint-slice='true'" subsys=daemon level=info msg=" --enable-k8s-event-handover='false'" subsys=daemon level=info msg=" --enable-k8s-networkpolicy='true'" subsys=daemon level=info msg=" --enable-k8s-terminating-endpoint='true'" subsys=daemon level=info msg=" --enable-l2-announcements='false'" subsys=daemon level=info msg=" --enable-l2-neigh-discovery='true'" subsys=daemon level=info msg=" --enable-l2-pod-announcements='false'" subsys=daemon level=info msg=" --enable-l7-proxy='true'" subsys=daemon level=info msg=" --enable-local-node-route='true'" subsys=daemon level=info msg=" --enable-local-redirect-policy='false'" subsys=daemon level=info msg=" --enable-mke='false'" subsys=daemon level=info msg=" --enable-monitor='true'" subsys=daemon level=info msg=" --enable-nat46x64-gateway='false'" subsys=daemon level=info msg=" --enable-node-port='false'" subsys=daemon level=info msg=" --enable-pmtu-discovery='false'" subsys=daemon level=info msg=" --enable-policy='default'" subsys=daemon level=info msg=" --enable-recorder='false'" subsys=daemon level=info msg=" --enable-remote-node-identity='true'" subsys=daemon level=info msg=" --enable-runtime-device-detection='false'" subsys=daemon level=info msg=" --enable-sctp='false'" subsys=daemon level=info msg=" --enable-service-topology='false'" subsys=daemon level=info msg=" --enable-session-affinity='false'" subsys=daemon level=info msg=" --enable-srv6='false'" subsys=daemon level=info msg=" --enable-stale-cilium-endpoint-cleanup='true'" subsys=daemon level=info msg=" --enable-svc-source-range-check='true'" subsys=daemon level=info msg=" --enable-tracing='false'" subsys=daemon level=info msg=" --enable-unreachable-routes='false'" subsys=daemon level=info msg=" --enable-vtep='false'" subsys=daemon level=info msg=" --enable-well-known-identities='false'" subsys=daemon level=info msg=" --enable-wireguard='false'" subsys=daemon level=info msg=" --enable-wireguard-userspace-fallback='false'" subsys=daemon level=info msg=" --enable-xdp-prefilter='false'" subsys=daemon level=info msg=" --enable-xt-socket-fallback='true'" subsys=daemon level=info msg=" --encrypt-interface=''" subsys=daemon level=info msg=" --encrypt-node='false'" subsys=daemon level=info msg=" --endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --endpoint-queue-size='25'" subsys=daemon level=info msg=" --endpoint-status=''" subsys=daemon level=info msg=" --envoy-config-timeout='2m0s'" subsys=daemon level=info msg=" --envoy-log=''" subsys=daemon level=info msg=" --exclude-local-address=''" subsys=daemon level=info msg=" --external-envoy-proxy='false'" subsys=daemon level=info msg=" --fixed-identity-mapping=''" subsys=daemon level=info msg=" --fqdn-regex-compile-lru-size='1024'" subsys=daemon level=info msg=" --gops-port='9890'" subsys=daemon level=info msg=" --http-403-msg=''" subsys=daemon level=info msg=" --http-idle-timeout='0'" subsys=daemon level=info msg=" --http-max-grpc-timeout='0'" subsys=daemon level=info msg=" --http-normalize-path='true'" subsys=daemon level=info msg=" --http-request-timeout='3600'" subsys=daemon level=info msg=" --http-retry-count='3'" subsys=daemon level=info msg=" --http-retry-timeout='0'" subsys=daemon level=info msg=" --hubble-disable-tls='false'" subsys=daemon level=info msg=" --hubble-event-buffer-capacity='4095'" subsys=daemon level=info msg=" --hubble-event-queue-size='0'" subsys=daemon level=info msg=" --hubble-export-file-compress='false'" subsys=daemon level=info msg=" --hubble-export-file-max-backups='5'" subsys=daemon level=info msg=" --hubble-export-file-max-size-mb='10'" subsys=daemon level=info msg=" --hubble-export-file-path=''" subsys=daemon level=info msg=" --hubble-listen-address=''" subsys=daemon level=info msg=" --hubble-metrics=''" subsys=daemon level=info msg=" --hubble-metrics-server=''" subsys=daemon level=info msg=" --hubble-monitor-events=''" subsys=daemon level=info msg=" --hubble-prefer-ipv6='false'" subsys=daemon level=info msg=" --hubble-recorder-sink-queue-size='1024'" subsys=daemon level=info msg=" --hubble-recorder-storage-path='/var/run/cilium/pcaps'" subsys=daemon level=info msg=" --hubble-skip-unknown-cgroup-ids='true'" subsys=daemon level=info msg=" --hubble-socket-path='/var/run/cilium/hubble.sock'" subsys=daemon level=info msg=" --hubble-tls-cert-file=''" subsys=daemon level=info msg=" --hubble-tls-client-ca-files=''" subsys=daemon level=info msg=" --hubble-tls-key-file=''" subsys=daemon level=info msg=" --identity-allocation-mode='crd'" subsys=daemon level=info msg=" --identity-change-grace-period='5s'" subsys=daemon level=info msg=" --identity-gc-interval='15m0s'" subsys=daemon level=info msg=" --identity-heartbeat-timeout='30m0s'" subsys=daemon level=info msg=" --identity-restore-grace-period='10m0s'" subsys=daemon level=info msg=" --install-egress-gateway-routes='false'" subsys=daemon level=info msg=" --install-iptables-rules='true'" subsys=daemon level=info msg=" --install-no-conntrack-iptables-rules='false'" subsys=daemon level=info msg=" --ip-allocation-timeout='2m0s'" subsys=daemon level=info msg=" --ip-masq-agent-config-path='/etc/config/ip-masq-agent'" subsys=daemon level=info msg=" --ipam='cluster-pool'" subsys=daemon level=info msg=" --ipam-cilium-node-update-rate='15s'" subsys=daemon level=info msg=" --ipam-multi-pool-pre-allocation='default=8'" subsys=daemon level=info msg=" --ipsec-key-file=''" subsys=daemon level=info msg=" --ipsec-key-rotation-duration='5m0s'" subsys=daemon level=info msg=" --iptables-lock-timeout='5s'" subsys=daemon level=info msg=" --iptables-random-fully='false'" subsys=daemon level=info msg=" --ipv4-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv4-node='auto'" subsys=daemon level=info msg=" --ipv4-pod-subnets=''" subsys=daemon level=info msg=" --ipv4-range='auto'" subsys=daemon level=info msg=" --ipv4-service-loopback-address='169.254.42.1'" subsys=daemon level=info msg=" --ipv4-service-range='auto'" subsys=daemon level=info msg=" --ipv6-cluster-alloc-cidr='f00d::/64'" subsys=daemon level=info msg=" --ipv6-mcast-device=''" subsys=daemon level=info msg=" --ipv6-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv6-node='auto'" subsys=daemon level=info msg=" --ipv6-pod-subnets=''" subsys=daemon level=info msg=" --ipv6-range='auto'" subsys=daemon level=info msg=" --ipv6-service-range='auto'" subsys=daemon level=info msg=" --join-cluster='false'" subsys=daemon level=info msg=" --k8s-api-server=''" subsys=daemon level=info msg=" --k8s-client-burst='10'" subsys=daemon level=info msg=" --k8s-client-qps='5'" subsys=daemon level=info msg=" --k8s-heartbeat-timeout='30s'" subsys=daemon level=info msg=" --k8s-kubeconfig-path=''" subsys=daemon level=info msg=" --k8s-namespace='kube-system'" subsys=daemon level=info msg=" --k8s-require-ipv4-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-require-ipv6-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-service-cache-size='128'" subsys=daemon level=info msg=" --k8s-service-proxy-name=''" subsys=daemon level=info msg=" --k8s-sync-timeout='3m0s'" subsys=daemon level=info msg=" --k8s-watcher-endpoint-selector='metadata.name!=kube-scheduler,metadata.name!=kube-controller-manager,metadata.name!=etcd-operator,metadata.name!=gcp-controller-manager'" subsys=daemon level=info msg=" --keep-config='false'" subsys=daemon level=info msg=" --kube-proxy-replacement='disabled'" subsys=daemon level=info msg=" --kube-proxy-replacement-healthz-bind-address=''" subsys=daemon level=info msg=" --kvstore=''" subsys=daemon level=info msg=" --kvstore-connectivity-timeout='2m0s'" subsys=daemon level=info msg=" --kvstore-lease-ttl='15m0s'" subsys=daemon level=info msg=" --kvstore-max-consecutive-quorum-errors='2'" subsys=daemon level=info msg=" --kvstore-opt=''" subsys=daemon level=info msg=" --kvstore-periodic-sync='5m0s'" subsys=daemon level=info msg=" --l2-announcements-lease-duration='15s'" subsys=daemon level=info msg=" --l2-announcements-renew-deadline='5s'" subsys=daemon level=info msg=" --l2-announcements-retry-period='2s'" subsys=daemon level=info msg=" --l2-pod-announcements-interface=''" subsys=daemon level=info msg=" --label-prefix-file=''" subsys=daemon level=info msg=" --labels=''" subsys=daemon level=info msg=" --lib-dir='/var/lib/cilium'" subsys=daemon level=info msg=" --local-max-addr-scope='252'" subsys=daemon level=info msg=" --local-router-ipv4=''" subsys=daemon level=info msg=" --local-router-ipv6=''" subsys=daemon level=info msg=" --log-driver=''" subsys=daemon level=info msg=" --log-opt=''" subsys=daemon level=info msg=" --log-system-load='false'" subsys=daemon level=info msg=" --max-controller-interval='0'" subsys=daemon level=info msg=" --mesh-auth-enabled='true'" subsys=daemon level=info msg=" --mesh-auth-gc-interval='5m0s'" subsys=daemon level=info msg=" --mesh-auth-mutual-listener-port='0'" subsys=daemon level=info msg=" --mesh-auth-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-rotated-identities-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-signal-backoff-duration='1s'" subsys=daemon level=info msg=" --mesh-auth-spiffe-trust-domain='spiffe.cilium'" subsys=daemon level=info msg=" --mesh-auth-spire-admin-socket=''" subsys=daemon level=info msg=" --metrics=''" subsys=daemon level=info msg=" --mke-cgroup-mount=''" subsys=daemon level=info msg=" --monitor-aggregation='medium'" subsys=daemon level=info msg=" --monitor-aggregation-flags='all'" subsys=daemon level=info msg=" --monitor-aggregation-interval='5s'" subsys=daemon level=info msg=" --monitor-queue-size='0'" subsys=daemon level=info msg=" --mtu='0'" subsys=daemon level=info msg=" --node-encryption-opt-out-labels='node-role.kubernetes.io/control-plane'" subsys=daemon level=info msg=" --node-port-acceleration='disabled'" subsys=daemon level=info msg=" --node-port-algorithm='random'" subsys=daemon level=info msg=" --node-port-bind-protection='true'" subsys=daemon level=info msg=" --node-port-mode='snat'" subsys=daemon level=info msg=" --node-port-range='30000,32767'" subsys=daemon level=info msg=" --nodes-gc-interval='5m0s'" subsys=daemon level=info msg=" --operator-api-serve-addr='127.0.0.1:9234'" subsys=daemon level=info msg=" --policy-audit-mode='false'" subsys=daemon level=info msg=" --policy-queue-size='100'" subsys=daemon level=info msg=" --policy-trigger-interval='1s'" subsys=daemon level=info msg=" --pprof='false'" subsys=daemon level=info msg=" --pprof-address='localhost'" subsys=daemon level=info msg=" --pprof-port='6060'" subsys=daemon level=info msg=" --preallocate-bpf-maps='false'" subsys=daemon level=info msg=" --prepend-iptables-chains='true'" subsys=daemon level=info msg=" --procfs='/host/proc'" subsys=daemon level=info msg=" --prometheus-serve-addr=':9962'" subsys=daemon level=info msg=" --proxy-connect-timeout='2'" subsys=daemon level=info msg=" --proxy-gid='1337'" subsys=daemon level=info msg=" --proxy-idle-timeout-seconds='60'" subsys=daemon level=info msg=" --proxy-max-connection-duration-seconds='0'" subsys=daemon level=info msg=" --proxy-max-requests-per-connection='0'" subsys=daemon level=info msg=" --proxy-prometheus-port='9964'" subsys=daemon level=info msg=" --read-cni-conf=''" subsys=daemon level=info msg=" --remove-cilium-node-taints='true'" subsys=daemon level=info msg=" --restore='true'" subsys=daemon level=info msg=" --route-metric='0'" subsys=daemon level=info msg=" --routing-mode='tunnel'" subsys=daemon level=info msg=" --set-cilium-is-up-condition='true'" subsys=daemon level=info msg=" --set-cilium-node-taints='true'" subsys=daemon level=info msg=" --sidecar-istio-proxy-image='cilium/istio_proxy'" subsys=daemon level=info msg=" --single-cluster-route='false'" subsys=daemon level=info msg=" --skip-cnp-status-startup-clean='false'" subsys=daemon level=info msg=" --socket-path='/var/run/cilium/cilium.sock'" subsys=daemon level=info msg=" --srv6-encap-mode='reduced'" subsys=daemon level=info msg=" --state-dir='/var/run/cilium'" subsys=daemon level=info msg=" --synchronize-k8s-nodes='true'" subsys=daemon level=info msg=" --tofqdns-dns-reject-response-code='refused'" subsys=daemon level=info msg=" --tofqdns-enable-dns-compression='true'" subsys=daemon level=info msg=" --tofqdns-endpoint-max-ip-per-hostname='50'" subsys=daemon level=info msg=" --tofqdns-idle-connection-grace-period='0s'" subsys=daemon level=info msg=" --tofqdns-max-deferred-connection-deletes='10000'" subsys=daemon level=info msg=" --tofqdns-min-ttl='0'" subsys=daemon level=info msg=" --tofqdns-pre-cache=''" subsys=daemon level=info msg=" --tofqdns-proxy-port='0'" subsys=daemon level=info msg=" --tofqdns-proxy-response-max-delay='100ms'" subsys=daemon level=info msg=" --trace-payloadlen='128'" subsys=daemon level=info msg=" --trace-sock='true'" subsys=daemon level=info msg=" --tunnel=''" subsys=daemon level=info msg=" --tunnel-port='6082'" subsys=daemon level=info msg=" --tunnel-protocol='geneve'" subsys=daemon level=info msg=" --unmanaged-pod-watcher-interval='15'" subsys=daemon level=info msg=" --use-cilium-internal-ip-for-ipsec='false'" subsys=daemon level=info msg=" --version='false'" subsys=daemon level=info msg=" --vlan-bpf-bypass=''" subsys=daemon level=info msg=" --vtep-cidr=''" subsys=daemon level=info msg=" --vtep-endpoint=''" subsys=daemon level=info msg=" --vtep-mac=''" subsys=daemon level=info msg=" --vtep-mask=''" subsys=daemon level=info msg=" --wireguard-encapsulate='false'" subsys=daemon level=info msg=" --write-cni-conf-when-ready='/host/etc/cni/net.d/05-cilium.conflist'" subsys=daemon level=info msg=" _ _ _" subsys=daemon level=info msg=" ___|_| |_|_ _ _____" subsys=daemon level=info msg="| _| | | | | | |" subsys=daemon level=info msg="|___|_|_|_|___|_|_|_|" subsys=daemon level=info msg="Cilium 1.14.8 cf6e022e 2024-03-13T12:23:35-04:00 go version go1.21.8 linux/amd64" subsys=daemon level=info msg="clang (10.0.0) and kernel (5.15.0) versions: OK!" subsys=linux-datapath level=info msg="linking environment: OK!" subsys=linux-datapath level=info msg="Kernel config file not found: if the agent fails to start, check the system requirements at https://docs.cilium.io/en/stable/operations/system_requirements" subsys=probes level=info msg="Detected mounted BPF filesystem at /sys/fs/bpf" subsys=bpf level=info msg="Mounted cgroupv2 filesystem at /run/cilium/cgroupv2" subsys=cgroups level=info msg="Parsing base label prefixes from default label list" subsys=labels-filter level=info msg="Parsing additional label prefixes from user inputs: []" subsys=labels-filter level=info msg="Final label prefixes to be used for identity evaluation:" subsys=labels-filter level=info msg=" - reserved:.*" subsys=labels-filter level=info msg=" - :io\\.kubernetes\\.pod\\.namespace" subsys=labels-filter level=info msg=" - :io\\.cilium\\.k8s\\.namespace\\.labels" subsys=labels-filter level=info msg=" - :app\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:io\\.kubernetes" subsys=labels-filter level=info msg=" - !:kubernetes\\.io" subsys=labels-filter level=info msg=" - !:.*beta\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:k8s\\.io" subsys=labels-filter level=info msg=" - !:pod-template-generation" subsys=labels-filter level=info msg=" - !:pod-template-hash" subsys=labels-filter level=info msg=" - !:controller-revision-hash" subsys=labels-filter level=info msg=" - !:annotation.*" subsys=labels-filter level=info msg=" - !:etcd_node" subsys=labels-filter level=info msg=Invoked duration=1.028765ms function="pprof.glob..func1 (cell.go:50)" subsys=hive level=info msg=Invoked duration="59.382µs" function="gops.registerGopsHooks (cell.go:38)" subsys=hive level=info msg=Invoked duration=1.013803ms function="metrics.NewRegistry (registry.go:65)" subsys=hive level=info msg=Invoked duration="4.92µs" function="metrics.glob..func1 (cell.go:12)" subsys=hive level=info msg="Spire Delegate API Client is disabled as no socket path is configured" subsys=spire-delegate level=info msg="Mutual authentication handler is disabled as no port is configured" subsys=auth level=info msg=Invoked duration=101.081963ms function="cmd.glob..func4 (daemon_main.go:1607)" subsys=hive level=info msg=Invoked duration="14.7µs" function="gc.registerSignalHandler (cell.go:47)" subsys=hive level=info msg=Invoked duration="14.59µs" function="utime.initUtimeSync (cell.go:29)" subsys=hive level=info msg=Invoked duration="57.302µs" function="agentliveness.newAgentLivenessUpdater (agent_liveness.go:43)" subsys=hive level=info msg=Invoked duration="61.281µs" function="l2responder.NewL2ResponderReconciler (l2responder.go:63)" subsys=hive level=info msg=Invoked duration="75.652µs" function="garp.newGARPProcessor (processor.go:27)" subsys=hive level=info msg=Starting subsys=hive level=info msg="Started gops server" address="127.0.0.1:9890" subsys=gops level=info msg="Start hook executed" duration="436.01µs" function="gops.registerGopsHooks.func1 (cell.go:43)" subsys=hive level=info msg="Start hook executed" duration="1.64µs" function="metrics.NewRegistry.func1 (registry.go:86)" subsys=hive level=info msg="Establishing connection to apiserver" host="https://10.96.0.1:443" subsys=k8s-client level=info msg="Serving prometheus metrics on :9962" subsys=metrics level=info msg="Connected to apiserver" subsys=k8s-client level=info msg="Start hook executed" duration=10.747648ms function="client.(*compositeClientset).onStart" subsys=hive level=info msg="Start hook executed" duration=7.162535ms function="authmap.newAuthMap.func1 (cell.go:27)" subsys=hive level=info msg="Start hook executed" duration="46.331µs" function="configmap.newMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="39.601µs" function="signalmap.newMap.func1 (cell.go:44)" subsys=hive level=info msg="Start hook executed" duration="163.364µs" function="nodemap.newNodeMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="118.623µs" function="eventsmap.newEventsMap.func1 (cell.go:35)" subsys=hive level=info msg="Start hook executed" duration="73.562µs" function="*cni.cniConfigManager.Start" subsys=hive level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Wrote CNI configuration file to /host/etc/cni/net.d/05-cilium.conflist" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Start hook executed" duration=59.071893ms function="datapath.newDatapath.func1 (cells.go:113)" subsys=hive level=info msg="Restored 0 node IDs from the BPF map" subsys=linux-datapath level=info msg="Start hook executed" duration="298.707µs" function="datapath.newDatapath.func2 (cells.go:126)" subsys=hive level=info msg="Start hook executed" duration="13.9µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Node].Start" subsys=hive level=info msg="Start hook executed" duration="4.01µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNode].Start" subsys=hive level=info msg="Using autogenerated IPv4 allocation range" subsys=node v4Prefix=10.70.0.0/16 level=info msg="no local ciliumnode found, will not restore cilium internal ips from k8s" subsys=daemon level=info msg="Start hook executed" duration=104.81085ms function="node.NewLocalNodeStore.func1 (local_node_store.go:76)" subsys=hive level=info msg="Start hook executed" duration="17.17µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration=101.085602ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration="3.07µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Using discoveryv1.EndpointSlice" subsys=k8s level=info msg="Start hook executed" duration=100.596812ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Start hook executed" duration="7.25µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Pod].Start" subsys=hive level=info msg="Start hook executed" duration="1.27µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Namespace].Start" subsys=hive level=info msg="Start hook executed" duration="1.8µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="1.34µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumClusterwideNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="2.46µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumCIDRGroup].Start" subsys=hive level=info msg="Start hook executed" duration="24.981µs" function="endpointmanager.newDefaultEndpointManager.func1 (cell.go:203)" subsys=hive level=info msg="Start hook executed" duration="16.441µs" function="cmd.newPolicyTrifecta.func1 (policy.go:135)" subsys=hive level=info msg="Start hook executed" duration="61.302µs" function="*manager.manager.Start" subsys=hive level=info msg="Serving cilium node monitor v1.2 API at unix:///var/run/cilium/monitor1_2.sock" subsys=monitor-agent level=info msg="Start hook executed" duration="308.817µs" function="agent.newMonitorAgent.func1 (cell.go:61)" subsys=hive level=info msg="Start hook executed" duration="2.26µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumL2AnnouncementPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="8.6µs" function="*job.group.Start" subsys=hive level=info msg="Start hook executed" duration="207.304µs" function="proxy.newProxy.func1 (cell.go:55)" subsys=hive level=info msg="Envoy: Starting xDS gRPC server listening on /var/run/cilium/envoy/sockets/xds.sock" subsys=envoy-manager level=info msg="Start hook executed" duration="895.321µs" function="signal.provideSignalManager.func1 (cell.go:25)" subsys=hive level=info msg="Datapath signal listener running" subsys=signal level=info msg="Start hook executed" duration=1.200888ms function="auth.registerAuthManager.func1 (cell.go:109)" subsys=hive level=info msg="Start hook executed" duration="4.45µs" function="auth.registerGCJobs.func1 (cell.go:158)" subsys=hive level=info msg="Start hook executed" duration="22.101µs" function="*job.group.Start" subsys=hive level=warning msg="Deprecated value for --kube-proxy-replacement: disabled (use either \"true\", or \"false\")" subsys=daemon level=info msg="Auto-disabling \"enable-node-port\", \"enable-external-ips\", \"bpf-lb-sock\", \"enable-host-port\" features and falling back to \"enable-host-legacy-routing\"" subsys=daemon level=info msg="Inheriting MTU from external network interface" device=ens3 ipAddr=199.204.45.70 mtu=1500 subsys=mtu level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_ipcache, recreating and re-pinning map cilium_ipcache" file-path=/sys/fs/bpf/tc/globals/cilium_ipcache name=cilium_ipcache subsys=bpf level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_tunnel_map, recreating and re-pinning map cilium_tunnel_map" file-path=/sys/fs/bpf/tc/globals/cilium_tunnel_map name=cilium_tunnel_map subsys=bpf level=info msg="Restored services from maps" failedServices=0 restoredServices=0 subsys=service level=info msg="Restored backends from maps" failedBackends=0 restoredBackends=0 skippedBackends=0 subsys=service level=info msg="Reading old endpoints..." subsys=daemon level=info msg="No old endpoints found." subsys=daemon level=info msg="Waiting until all Cilium CRDs are available" subsys=k8s level=info msg="All Cilium CRDs have been found and are available" subsys=k8s level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=info msg="Successfully created CiliumNode resource" subsys=nodediscovery level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=warning msg="Waiting for k8s node information" error="required IPv4 PodCIDR not available" subsys=k8s level=warning msg="Unable to create CiliumNode resource, will retry" error="ciliumnodes.cilium.io \"instance\" already exists" subsys=nodediscovery level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=info msg="Received own node information from API server" ipAddr.ipv4=199.204.45.70 ipAddr.ipv6="" k8sNodeIP=199.204.45.70 labels="map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:]" nodeName=instance subsys=k8s v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="k8s mode: Allowing localhost to reach local endpoints" subsys=daemon level=info msg="Detected devices" devices="[]" subsys=linux-datapath level=info msg="Enabling k8s event listener" subsys=k8s-watcher level=info msg="Removing stale endpoint interfaces" subsys=daemon level=info msg="Waiting until local node addressing before starting watchers depending on it" subsys=k8s-watcher level=info msg="Skipping kvstore configuration" subsys=daemon level=info msg="Initializing node addressing" subsys=daemon level=info msg="Initializing cluster-pool IPAM" subsys=ipam v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="Restoring endpoints..." subsys=daemon level=info msg="Endpoints restored" failed=0 restored=0 subsys=daemon level=info msg="Addressing information:" subsys=daemon level=info msg=" Cluster-Name: default" subsys=daemon level=info msg=" Cluster-ID: 0" subsys=daemon level=info msg=" Local node-name: instance" subsys=daemon level=info msg=" Node-IPv6: " subsys=daemon level=info msg=" External-Node IPv4: 199.204.45.70" subsys=daemon level=info msg=" Internal-Node IPv4: 10.0.0.235" subsys=daemon level=info msg=" IPv4 allocation prefix: 10.0.0.0/24" subsys=daemon level=info msg=" Loopback IPv4: 169.254.42.1" subsys=daemon level=info msg=" Local IPv4 addresses:" subsys=daemon level=info msg=" - 199.204.45.70" subsys=daemon level=info msg=" - 172.17.0.100" subsys=daemon level=info msg=" - 10.96.240.200" subsys=daemon level=info msg="Node updated" clusterName=default nodeName=instance subsys=nodemanager level=info msg="Adding local node to cluster" node="{instance default [{InternalIP 199.204.45.70} {CiliumInternalIP 10.0.0.235}] 10.0.0.0/24 [] [] 10.0.0.41 0 local 0 map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:] map[] 1 }" subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Waiting until all pre-existing resources have been received" subsys=k8s-watcher level=info msg="Initializing identity allocator" subsys=identity-cache level=info msg="Allocating identities between range" cluster-id=0 max=65535 min=256 subsys=identity-cache level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.core.bpf_jit_enable sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.all.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.fib_multipath_use_neigh sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.unprivileged_bpf_disabled sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.timer_migration sysParamValue=0 level=info msg="Setting up BPF datapath" bpfClockSource=ktime bpfInsnSet="" subsys=datapath-loader level=info msg="Iptables rules installed" subsys=iptables level=info msg="Adding new proxy port rules for cilium-dns-egress:33055" id=cilium-dns-egress subsys=proxy level=info msg="Iptables proxy rules installed" subsys=iptables level=info msg="Start hook executed" duration=2.579015269s function="cmd.newDaemonPromise.func1 (daemon_main.go:1663)" subsys=hive level=info msg="Starting IP identity watcher" subsys=ipcache level=info msg="Start hook executed" duration="14.761µs" function="utime.initUtimeSync.func1 (cell.go:33)" subsys=hive level=info msg="Start hook executed" duration="6.42µs" function="*job.group.Start" subsys=hive level=info msg="Start hook executed" duration="36.891µs" function="l2respondermap.newMap.func1 (l2_responder_map4.go:44)" subsys=hive level=info msg="Start hook executed" duration="3.19µs" function="*job.group.Start" subsys=hive level=info msg="Initializing daemon" subsys=daemon level=info msg="Validating configured node address ranges" subsys=daemon level=info msg="Starting connection tracking garbage collector" subsys=daemon level=info msg="Initial scan of connection tracking completed" subsys=ct-gc level=info msg="Regenerating restored endpoints" numRestored=0 subsys=daemon level=info msg="Creating host endpoint" subsys=daemon level=info msg="Finished regenerating restored endpoints" regenerated=0 subsys=daemon total=0 level=info msg="Deleted orphan backends" orphanBackends=0 subsys=service level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2264 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2264 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2264 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Launching Cilium health daemon" subsys=daemon level=info msg="Launching Cilium health endpoint" subsys=daemon level=info msg="Started healthz status API server" address="127.0.0.1:9879" subsys=daemon level=info msg="Processing queued endpoint deletion requests from /var/run/cilium/deleteQueue" subsys=daemon level=info msg="processing 0 queued deletion requests" subsys=daemon level=info msg="Initializing Cilium API" subsys=daemon level=info msg="Daemon initialization completed" bootstrapTime=3.638371607s subsys=daemon level=info msg="Hubble server is disabled" subsys=hubble level=info msg="Serving cilium API at unix:///var/run/cilium/cilium.sock" subsys=daemon level=info msg="Compiled new BPF template" BPFCompilationTime=316.413233ms file-path=/var/run/cilium/state/templates/482bf57c534c871b4817378b71cd8d24319fb52b83fd55b2f572338894c83104/bpf_host.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2264 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2449 ipv4=10.0.0.41 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2449 identityLabels="reserved:health" ipv4=10.0.0.41 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2449 identity=4 identityLabels="reserved:health" ipv4=10.0.0.41 ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.58 1dcb8d19-31fd-4904-9fb2-9988f2cf698e default }" containerID=af63afdb08579961fbb2554bc04dec9d9a631e5b265953bb6514a0fc9ef2e117 datapathConfiguration="&{false false false false false }" interface=lxc033c7021a90d k8sPodName=kube-system/coredns-7c96b6546b-8wk9w labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=af63afdb08 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=661 ipv4=10.0.0.58 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-8wk9w subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=af63afdb08 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=661 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.58 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-8wk9w subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:kube-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=coredns;k8s:io.kubernetes.pod.namespace=kube-system;k8s:k8s-app=kube-dns;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=af63afdb08 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=661 identity=17876 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.58 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-8wk9w oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=af63afdb08 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=661 identity=17876 ipv4=10.0.0.58 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-8wk9w subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.110 e109de80-a30f-486c-8279-dab0a2d62baf default }" containerID=2330167bd119f60ee5d2fae3f6eb3ebcb057be8e26585f155dd67d0c15272860 datapathConfiguration="&{false false false false false }" interface=lxcdd14f59595ed k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-pkcrd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2330167bd1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1124 ipv4=10.0.0.110 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-pkcrd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2330167bd1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1124 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=42db4ad9-55f5-46d6-870a-2e0f8ce40af4,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=42db4ad9-55f5-46d6-870a-2e0f8ce40af4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.110 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-pkcrd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=certgen;k8s:batch.kubernetes.io/controller-uid=42db4ad9-55f5-46d6-870a-2e0f8ce40af4;k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen;k8s:controller-uid=42db4ad9-55f5-46d6-870a-2e0f8ce40af4;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;k8s:job-name=envoy-gateway-gateway-helm-certgen;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2330167bd1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1124 identity=63061 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=42db4ad9-55f5-46d6-870a-2e0f8ce40af4,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=42db4ad9-55f5-46d6-870a-2e0f8ce40af4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.110 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-pkcrd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2330167bd1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1124 identity=63061 ipv4=10.0.0.110 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-pkcrd subsys=endpoint level=info msg="Serving cilium health API at unix:///var/run/cilium/health.sock" subsys=health-server level=info msg="Compiled new BPF template" BPFCompilationTime=1.104058139s file-path=/var/run/cilium/state/templates/395ebb7612dc2c92eb68fd9ca6b0db462a9cbc1063bd368e81651d3cec4005d2/bpf_lxc.o subsys=datapath-loader level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=2330167bd1 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1124 identity=63061 ipv4=10.0.0.110 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-pkcrd subsys=endpoint level=info msg="Successful endpoint creation" containerID=2330167bd1 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1124 identity=63061 ipv4=10.0.0.110 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-pkcrd subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2449 identity=4 ipv4=10.0.0.41 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=af63afdb08 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=661 identity=17876 ipv4=10.0.0.58 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-8wk9w subsys=endpoint level=info msg="Successful endpoint creation" containerID=af63afdb08 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=661 identity=17876 ipv4=10.0.0.58 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-8wk9w subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=2330167bd1 endpointID=1124 k8sNamespace=envoy-gateway-system k8sPodName=envoy-gateway-gateway-helm-certgen-pkcrd subsys=daemon level=info msg="Releasing key" key="[k8s:app=certgen k8s:batch.kubernetes.io/controller-uid=42db4ad9-55f5-46d6-870a-2e0f8ce40af4 k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen k8s:controller-uid=42db4ad9-55f5-46d6-870a-2e0f8ce40af4 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen k8s:io.kubernetes.pod.namespace=envoy-gateway-system k8s:job-name=envoy-gateway-gateway-helm-certgen]" subsys=allocator level=info msg="Removed endpoint" containerID=2330167bd1 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1124 identity=63061 ipv4=10.0.0.110 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-pkcrd subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.126 52f6b8e8-b273-492b-8c6f-4b4557b966ef default }" containerID=427076442c5d2fecf419ca114dd6fb5e58fd72187ed134121d9ffc350d8c4b76 datapathConfiguration="&{false false false false false }" interface=lxc22a666635319 k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-xlmjm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=427076442c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=783 ipv4=10.0.0.126 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-xlmjm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=427076442c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=783 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.126 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-xlmjm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=envoy-gateway;k8s:app.kubernetes.io/name=gateway-helm;k8s:control-plane=envoy-gateway;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=427076442c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=783 identity=49631 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.126 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-xlmjm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=427076442c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=783 identity=49631 ipv4=10.0.0.126 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-xlmjm subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=427076442c datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=783 identity=49631 ipv4=10.0.0.126 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-xlmjm subsys=endpoint level=info msg="Successful endpoint creation" containerID=427076442c datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=783 identity=49631 ipv4=10.0.0.126 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-xlmjm subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2264 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_02264 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_02264 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_02264 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_02264:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2264 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.76 b150bca6-a830-4f7e-bcbd-d0f56115404c default }" containerID=ffc0c4c4ba6304a5f4ee34d6ac9485c576ecb388cdd497c8ec15e16a07b28ef9 datapathConfiguration="&{false false false false false }" interface=lxc3aa20e7a6c66 k8sPodName=kube-system/coredns-67659f764b-pz94r labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ffc0c4c4ba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=641 ipv4=10.0.0.76 ipv6= k8sPodName=kube-system/coredns-67659f764b-pz94r subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ffc0c4c4ba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=641 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.76 ipv6= k8sPodName=kube-system/coredns-67659f764b-pz94r subsys=endpoint level=info msg="Identity of endpoint changed" containerID=ffc0c4c4ba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=641 identity=17876 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.76 ipv6= k8sPodName=kube-system/coredns-67659f764b-pz94r oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ffc0c4c4ba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=641 identity=17876 ipv4=10.0.0.76 ipv6= k8sPodName=kube-system/coredns-67659f764b-pz94r subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.169 5a21194f-43b5-4dc6-ac10-39717b55cace default }" containerID=c4842dc721cad1aafca631fd4659c25e5df356c0e062ab2164de6fccde30175c datapathConfiguration="&{false false false false false }" interface=lxc2f75d70588a4 k8sPodName=kube-system/coredns-67659f764b-5z86q labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c4842dc721 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2658 ipv4=10.0.0.169 ipv6= k8sPodName=kube-system/coredns-67659f764b-5z86q subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c4842dc721 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2658 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.169 ipv6= k8sPodName=kube-system/coredns-67659f764b-5z86q subsys=endpoint level=info msg="Identity of endpoint changed" containerID=c4842dc721 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2658 identity=17876 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.169 ipv6= k8sPodName=kube-system/coredns-67659f764b-5z86q oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c4842dc721 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2658 identity=17876 ipv4=10.0.0.169 ipv6= k8sPodName=kube-system/coredns-67659f764b-5z86q subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ffc0c4c4ba datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=641 identity=17876 ipv4=10.0.0.76 ipv6= k8sPodName=kube-system/coredns-67659f764b-pz94r subsys=endpoint level=info msg="Successful endpoint creation" containerID=ffc0c4c4ba datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=641 identity=17876 ipv4=10.0.0.76 ipv6= k8sPodName=kube-system/coredns-67659f764b-pz94r subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=c4842dc721 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2658 identity=17876 ipv4=10.0.0.169 ipv6= k8sPodName=kube-system/coredns-67659f764b-5z86q subsys=endpoint level=info msg="Successful endpoint creation" containerID=c4842dc721 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2658 identity=17876 ipv4=10.0.0.169 ipv6= k8sPodName=kube-system/coredns-67659f764b-5z86q subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.27 92a233c5-4073-4865-bc47-9ecfdee74dc7 default }" containerID=7dcd117332b11967ba9c74c382ede8b7c31a6522e7ef467a1615470cc5a74b6d datapathConfiguration="&{false false false false false }" interface=lxc03350d3556b1 k8sPodName=local-path-storage/local-path-provisioner-679c578f5-qrc9d labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7dcd117332 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1202 ipv4=10.0.0.27 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-qrc9d subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7dcd117332 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1202 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.27 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-qrc9d subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=local-path-provisioner;k8s:app.kubernetes.io/name=local-path-provisioner;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7dcd117332 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1202 identity=3785 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.27 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-qrc9d oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=7dcd117332 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1202 identity=3785 ipv4=10.0.0.27 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-qrc9d subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7dcd117332 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1202 identity=3785 ipv4=10.0.0.27 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-qrc9d subsys=endpoint level=info msg="Successful endpoint creation" containerID=7dcd117332 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1202 identity=3785 ipv4=10.0.0.27 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-qrc9d subsys=daemon level=info msg="Delete endpoint request" containerID=af63afdb08 endpointID=661 k8sNamespace=kube-system k8sPodName=coredns-7c96b6546b-8wk9w subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=coredns k8s:io.kubernetes.pod.namespace=kube-system k8s:k8s-app=kube-dns]" subsys=allocator level=info msg="Removed endpoint" containerID=af63afdb08 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=661 identity=17876 ipv4=10.0.0.58 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-8wk9w subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.44 459a10fd-5ff2-43db-a895-e9dcf4aafda7 default }" containerID=f1acb29301e0cc3afbdc6d2a7e5a15e3200fd66e60fd8c18c2756fbaac1d4526 datapathConfiguration="&{false false false false false }" interface=lxceed308863ecb k8sPodName=cert-manager/cert-manager-webhook-548949fc64-46ks6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f1acb29301 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2000 ipv4=10.0.0.44 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-46ks6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.174 f2e8505c-f1d2-44e7-8a7b-64e74f5fed09 default }" containerID=c88e9a6552b010fa8eaabf22281473f538f61ed86a46ae0f9dd026d43e2306f3 datapathConfiguration="&{false false false false false }" interface=lxc9c077329e91f k8sPodName=cert-manager/cert-manager-75c4c745bc-brhbp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c88e9a6552 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=367 ipv4=10.0.0.174 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-brhbp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f1acb29301 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2000 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.44 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-46ks6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.125 ff95009d-f5be-4e9b-9345-0a5782715df9 default }" containerID=efdc8aad0884b7cc7434b0d1fec1023c765eada6d1c9512c1141f4266992bdae datapathConfiguration="&{false false false false false }" interface=lxc55c4a1b40682 k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-kzpwf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=efdc8aad08 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1675 ipv4=10.0.0.125 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-kzpwf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c88e9a6552 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=367 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.174 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-brhbp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=efdc8aad08 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1675 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.125 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-kzpwf subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app=webhook;k8s:app.kubernetes.io/component=webhook;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=webhook;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f1acb29301 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2000 identity=62367 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.44 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-46ks6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f1acb29301 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2000 identity=62367 ipv4=10.0.0.44 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-46ks6 subsys=endpoint level=info msg="Invalid state transition skipped" containerID=c88e9a6552 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=367 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.174 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-brhbp line=611 subsys=endpoint level=info msg="Invalid state transition skipped" containerID=efdc8aad08 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1675 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.125 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-kzpwf line=611 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=cert-manager;k8s:app.kubernetes.io/component=controller;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cert-manager;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c88e9a6552 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=367 identity=1418 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.174 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-brhbp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c88e9a6552 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=367 identity=1418 ipv4=10.0.0.174 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-brhbp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=cainjector;k8s:app.kubernetes.io/component=cainjector;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cainjector;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=efdc8aad08 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1675 identity=26060 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.125 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-kzpwf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=efdc8aad08 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1675 identity=26060 ipv4=10.0.0.125 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-kzpwf subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c88e9a6552 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=367 identity=1418 ipv4=10.0.0.174 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-brhbp subsys=endpoint level=info msg="Successful endpoint creation" containerID=c88e9a6552 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=367 identity=1418 ipv4=10.0.0.174 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-brhbp subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=f1acb29301 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2000 identity=62367 ipv4=10.0.0.44 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-46ks6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f1acb29301 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2000 identity=62367 ipv4=10.0.0.44 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-46ks6 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=efdc8aad08 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1675 identity=26060 ipv4=10.0.0.125 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-kzpwf subsys=endpoint level=info msg="Successful endpoint creation" containerID=efdc8aad08 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1675 identity=26060 ipv4=10.0.0.125 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-kzpwf subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.63 096b315d-5469-48f6-a013-8af3bddb4b04 default }" containerID=036317323872407a2e979155a248a50ee48727db48d6b89ce6c331f7150c7ee6 datapathConfiguration="&{false false false false false }" interface=lxc9d38bd7f39dd k8sPodName=cert-manager/cert-manager-startupapicheck-gmm2s labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0363173238 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=612 ipv4=10.0.0.63 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-gmm2s subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0363173238 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=612 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=4bce681a-24e3-4832-8459-9d1d1ea33501,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=4bce681a-24e3-4832-8459-9d1d1ea33501,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.63 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-gmm2s subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=startupapicheck;k8s:app.kubernetes.io/component=startupapicheck;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=startupapicheck;k8s:app.kubernetes.io/version=v1.11.5;k8s:batch.kubernetes.io/controller-uid=4bce681a-24e3-4832-8459-9d1d1ea33501;k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck;k8s:controller-uid=4bce681a-24e3-4832-8459-9d1d1ea33501;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck;k8s:io.kubernetes.pod.namespace=cert-manager;k8s:job-name=cert-manager-startupapicheck;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0363173238 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=612 identity=56010 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=4bce681a-24e3-4832-8459-9d1d1ea33501,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=4bce681a-24e3-4832-8459-9d1d1ea33501,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.63 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-gmm2s oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0363173238 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=612 identity=56010 ipv4=10.0.0.63 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-gmm2s subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0363173238 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=612 identity=56010 ipv4=10.0.0.63 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-gmm2s subsys=endpoint level=info msg="Successful endpoint creation" containerID=0363173238 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=612 identity=56010 ipv4=10.0.0.63 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-gmm2s subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=0363173238 endpointID=612 k8sNamespace=cert-manager k8sPodName=cert-manager-startupapicheck-gmm2s subsys=daemon level=info msg="Releasing key" key="[k8s:app=startupapicheck k8s:app.kubernetes.io/component=startupapicheck k8s:app.kubernetes.io/instance=cert-manager k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=startupapicheck k8s:app.kubernetes.io/version=v1.11.5 k8s:batch.kubernetes.io/controller-uid=4bce681a-24e3-4832-8459-9d1d1ea33501 k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck k8s:controller-uid=4bce681a-24e3-4832-8459-9d1d1ea33501 k8s:helm.sh/chart=cert-manager-v1.11.5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager k8s:io.cilium.k8s.namespace.labels.name=cert-manager k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck k8s:io.kubernetes.pod.namespace=cert-manager k8s:job-name=cert-manager-startupapicheck]" subsys=allocator level=info msg="Removed endpoint" containerID=0363173238 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=612 identity=56010 ipv4=10.0.0.63 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-gmm2s subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.107 3cdeb442-9c34-4609-94bf-c09548091f64 default }" containerID=2f2b2ae1b0e20acf249b17f9c824e18d21c1f8bf7720df224ab42727d6855a53 datapathConfiguration="&{false false false false false }" interface=lxc3a7f2b86149d k8sPodName=ingress-nginx/ingress-nginx-admission-create-d95h7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2f2b2ae1b0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=472 ipv4=10.0.0.107 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-d95h7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2f2b2ae1b0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=472 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=c65aef73-6337-4232-9817-5be522c2bee3,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=c65aef73-6337-4232-9817-5be522c2bee3,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.107 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-d95h7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=c65aef73-6337-4232-9817-5be522c2bee3;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create;k8s:controller-uid=c65aef73-6337-4232-9817-5be522c2bee3;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-create;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2f2b2ae1b0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=472 identity=25249 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=c65aef73-6337-4232-9817-5be522c2bee3,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=c65aef73-6337-4232-9817-5be522c2bee3,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.107 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-d95h7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2f2b2ae1b0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=472 identity=25249 ipv4=10.0.0.107 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-d95h7 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=2f2b2ae1b0 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=472 identity=25249 ipv4=10.0.0.107 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-d95h7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=2f2b2ae1b0 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=472 identity=25249 ipv4=10.0.0.107 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-d95h7 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=2f2b2ae1b0 endpointID=472 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-create-d95h7 subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=c65aef73-6337-4232-9817-5be522c2bee3 k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create k8s:controller-uid=c65aef73-6337-4232-9817-5be522c2bee3 k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-create]" subsys=allocator level=info msg="Removed endpoint" containerID=2f2b2ae1b0 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=472 identity=25249 ipv4=10.0.0.107 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-d95h7 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.153 aa93927c-247b-42aa-a004-1ca9fa1d00c7 default }" containerID=997b598ba984fa7dede9d34d445eadebcdecb8cc2543b7e9ed4b8348884bc283 datapathConfiguration="&{false false false false false }" interface=lxc79912cc1fd95 k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-bjk2m labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=997b598ba9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=583 ipv4=10.0.0.153 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-bjk2m subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=997b598ba9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=583 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.153 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-bjk2m subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=default-backend;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend;k8s:io.kubernetes.pod.namespace=ingress-nginx;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=997b598ba9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=583 identity=21786 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.153 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-bjk2m oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=997b598ba9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=583 identity=21786 ipv4=10.0.0.153 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-bjk2m subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=997b598ba9 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=583 identity=21786 ipv4=10.0.0.153 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-bjk2m subsys=endpoint level=info msg="Successful endpoint creation" containerID=997b598ba9 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=583 identity=21786 ipv4=10.0.0.153 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-bjk2m subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.84 cc7b9d12-9c78-4a7c-a235-06710cbe26c6 default }" containerID=f3c2b3f9e1faf526726bafadba1251a4a9aa480752e247892e01d775cacf6add datapathConfiguration="&{false false false false false }" interface=lxc5e984b169965 k8sPodName=ingress-nginx/ingress-nginx-admission-patch-vtgwk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f3c2b3f9e1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=462 ipv4=10.0.0.84 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-vtgwk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f3c2b3f9e1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=462 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=67d51974-3a91-4eb8-b0ff-de72906255d1,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=67d51974-3a91-4eb8-b0ff-de72906255d1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.84 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-vtgwk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=67d51974-3a91-4eb8-b0ff-de72906255d1;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch;k8s:controller-uid=67d51974-3a91-4eb8-b0ff-de72906255d1;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-patch;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f3c2b3f9e1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=462 identity=26709 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=67d51974-3a91-4eb8-b0ff-de72906255d1,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=67d51974-3a91-4eb8-b0ff-de72906255d1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.84 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-vtgwk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f3c2b3f9e1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=462 identity=26709 ipv4=10.0.0.84 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-vtgwk subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f3c2b3f9e1 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=462 identity=26709 ipv4=10.0.0.84 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-vtgwk subsys=endpoint level=info msg="Successful endpoint creation" containerID=f3c2b3f9e1 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=462 identity=26709 ipv4=10.0.0.84 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-vtgwk subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=f3c2b3f9e1 endpointID=462 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-patch-vtgwk subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=67d51974-3a91-4eb8-b0ff-de72906255d1 k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch k8s:controller-uid=67d51974-3a91-4eb8-b0ff-de72906255d1 k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-patch]" subsys=allocator level=info msg="Removed endpoint" containerID=f3c2b3f9e1 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=462 identity=26709 ipv4=10.0.0.84 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-vtgwk subsys=endpoint level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"rabbitmq-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-cluster-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=0503f5ac-45bd-4df7-80b9-52850f117900] Description:}]" policyAddRequest=7ce618d7-fb3a-4575-afeb-ece1116636de subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=7ce618d7-fb3a-4575-afeb-ece1116636de policyRevision=2 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-cluster-operator subsys=k8s-watcher level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"messaging-topology-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9443 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-messaging-topology-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=390910a9-5ab1-4925-9c0d-31e5aec51131] Description:}]" policyAddRequest=4e02f579-6d8a-4db7-aabe-d8416fb814f5 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=4e02f579-6d8a-4db7-aabe-d8416fb814f5 policyRevision=3 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-messaging-topology-operator subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.9 74cc7445-0e78-41e5-9926-eb7eecc3376a default }" containerID=bcbac5148be1b312f00a07b65fd87cf33466b4a1557e937c2979d45da1dc3f71 datapathConfiguration="&{false false false false false }" interface=lxcb25c0f5efc05 k8sPodName=openstack/rabbitmq-cluster-operator-5448d56d95-qhsr6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bcbac5148b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3494 ipv4=10.0.0.9 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-5448d56d95-qhsr6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bcbac5148b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3494 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.9.0,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.9 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-5448d56d95-qhsr6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=2.9.0;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=bcbac5148b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3494 identity=35321 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.9.0,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.9 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-5448d56d95-qhsr6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=bcbac5148b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3494 identity=35321 ipv4=10.0.0.9 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-5448d56d95-qhsr6 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=bcbac5148b datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=3494 identity=35321 ipv4=10.0.0.9 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-5448d56d95-qhsr6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=bcbac5148b datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=3494 identity=35321 ipv4=10.0.0.9 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-5448d56d95-qhsr6 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.243 7eb2c989-ae96-457b-8cc1-ba7614bf57d2 default }" containerID=527658bdad7cfdf9214447f46ce648bfeb755eef5d80aea8c520bd411f6d63df datapathConfiguration="&{false false false false false }" interface=lxcc0d06e910759 k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-4g2nt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=527658bdad datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2885 ipv4=10.0.0.243 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-4g2nt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=527658bdad datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2885 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.14.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.243 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-4g2nt subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=messaging-topology-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=1.14.1;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=527658bdad datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2885 identity=23786 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.14.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.243 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-4g2nt oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=527658bdad datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2885 identity=23786 ipv4=10.0.0.243 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-4g2nt subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=527658bdad datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=2885 identity=23786 ipv4=10.0.0.243 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-4g2nt subsys=endpoint level=info msg="Successful endpoint creation" containerID=527658bdad datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=2885 identity=23786 ipv4=10.0.0.243 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-4g2nt subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.193 61ce01e2-e2f2-4233-9615-baafe3f5a590 default }" containerID=2f04324259c616c0a3e45318cc9e6a22448e1e5bc46dc22762e557e754b11988 datapathConfiguration="&{false false false false false }" interface=lxc582c7fea2f7f k8sPodName=openstack/pxc-operator-7cff949c8b-8mcpw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2f04324259 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3392 ipv4=10.0.0.193 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-8mcpw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2f04324259 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3392 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.193 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-8mcpw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=operator;k8s:app.kubernetes.io/instance=pxc-operator;k8s:app.kubernetes.io/name=pxc-operator;k8s:app.kubernetes.io/part-of=pxc-operator;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2f04324259 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3392 identity=14572 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.193 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-8mcpw oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=2f04324259 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3392 identity=14572 ipv4=10.0.0.193 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-8mcpw subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2f04324259 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=3392 identity=14572 ipv4=10.0.0.193 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-8mcpw subsys=endpoint level=info msg="Successful endpoint creation" containerID=2f04324259 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=3392 identity=14572 ipv4=10.0.0.193 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-8mcpw subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.175 92e225b8-5497-4551-a140-e9364990081a default }" containerID=f38b0f0d7699af15903fd3c060aa7e65ff6a54fc251e5209c04dd3b5c5ae0bac datapathConfiguration="&{false false false false false }" interface=lxcabc961ff62eb k8sPodName=local-path-storage/helper-pod-create-pvc-759b3d8c-0a6e-4d99-9bcc-1f704dc7c9d3 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f38b0f0d76 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1008 ipv4=10.0.0.175 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-759b3d8c-0a6e-4d99-9bcc-1f704dc7c9d3 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f38b0f0d76 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1008 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.175 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-759b3d8c-0a6e-4d99-9bcc-1f704dc7c9d3 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f38b0f0d76 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1008 identity=1234 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.175 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-759b3d8c-0a6e-4d99-9bcc-1f704dc7c9d3 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f38b0f0d76 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1008 identity=1234 ipv4=10.0.0.175 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-759b3d8c-0a6e-4d99-9bcc-1f704dc7c9d3 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f38b0f0d76 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1008 identity=1234 ipv4=10.0.0.175 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-759b3d8c-0a6e-4d99-9bcc-1f704dc7c9d3 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f38b0f0d76 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1008 identity=1234 ipv4=10.0.0.175 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-759b3d8c-0a6e-4d99-9bcc-1f704dc7c9d3 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.86 153ef745-364e-4137-bcc0-258c6ca3f4c7 default }" containerID=5947ddc6e7bcd7a28d328f4f7c1705a6f49b3dd55c36d891cec6bd52748ec51a datapathConfiguration="&{false false false false false }" interface=lxca99a4d546813 k8sPodName=openstack/percona-xtradb-haproxy-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5947ddc6e7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3018 ipv4=10.0.0.86 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5947ddc6e7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3018 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.86 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=haproxy;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5947ddc6e7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3018 identity=50328 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.86 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5947ddc6e7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3018 identity=50328 ipv4=10.0.0.86 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5947ddc6e7 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=3018 identity=50328 ipv4=10.0.0.86 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=5947ddc6e7 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=3018 identity=50328 ipv4=10.0.0.86 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=f38b0f0d76 endpointID=1008 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-759b3d8c-0a6e-4d99-9bcc-1f704dc7c9d3 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=f38b0f0d76 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1008 identity=1234 ipv4=10.0.0.175 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-759b3d8c-0a6e-4d99-9bcc-1f704dc7c9d3 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.156 a1e95d6d-c217-4d01-ae2e-b11c6a4adfe3 default }" containerID=d5a31115348da8d12ccbafff6279a7876a447a6eaf5c3795ddb66644db151d0b datapathConfiguration="&{false false false false false }" interface=lxc9a0ddb1f911b k8sPodName=openstack/percona-xtradb-pxc-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d5a3111534 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1802 ipv4=10.0.0.156 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d5a3111534 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1802 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.156 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=pxc;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d5a3111534 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1802 identity=1493 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.156 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d5a3111534 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1802 identity=1493 ipv4=10.0.0.156 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=d5a3111534 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1802 identity=1493 ipv4=10.0.0.156 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=d5a3111534 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1802 identity=1493 ipv4=10.0.0.156 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.007172616229523719 newInterval=7m30s subsys=map-ct level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.021805294412055136 newInterval=11m15s subsys=map-ct level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/instance\":\"valkey\",\"k8s:app.kubernetes.io/name\":\"valkey\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:6379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:26379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:} {IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9121 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=valkey k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=34f71c9d-6590-479f-aae6-e64859f22f05] Description:}]" policyAddRequest=7a15106d-6fef-4bf6-9db9-424b43a0156c subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=7a15106d-6fef-4bf6-9db9-424b43a0156c policyRevision=4 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=valkey subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.175 c1ec9227-03ea-48ba-8413-6a0d734bedab default }" containerID=35bab8efacc97b92b9b793ffff828f726c7c822660320ff65bb97090613d0133 datapathConfiguration="&{false false false false false }" interface=lxcfc91568b6cf3 k8sPodName=local-path-storage/helper-pod-create-pvc-4b8fb05f-ba8e-4866-bb41-579392568750 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=35bab8efac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1301 ipv4=10.0.0.175 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4b8fb05f-ba8e-4866-bb41-579392568750 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=35bab8efac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1301 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.175 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4b8fb05f-ba8e-4866-bb41-579392568750 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=35bab8efac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1301 identity=1234 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.175 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4b8fb05f-ba8e-4866-bb41-579392568750 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=35bab8efac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1301 identity=1234 ipv4=10.0.0.175 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4b8fb05f-ba8e-4866-bb41-579392568750 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=35bab8efac datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1301 identity=1234 ipv4=10.0.0.175 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4b8fb05f-ba8e-4866-bb41-579392568750 subsys=endpoint level=info msg="Successful endpoint creation" containerID=35bab8efac datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1301 identity=1234 ipv4=10.0.0.175 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4b8fb05f-ba8e-4866-bb41-579392568750 subsys=daemon level=info msg="Delete endpoint request" containerID=35bab8efac endpointID=1301 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-4b8fb05f-ba8e-4866-bb41-579392568750 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=35bab8efac datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1301 identity=1234 ipv4=10.0.0.175 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4b8fb05f-ba8e-4866-bb41-579392568750 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.48 d4f76ce8-efbc-4d24-a44e-d63d1ad5103d default }" containerID=5a5d9cb23afdf9ef188423fd9d6c98adfb55a54527a2dadd0aa628b2f3b7a31f datapathConfiguration="&{false false false false false }" interface=lxce157da45c873 k8sPodName=openstack/valkey-node-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5a5d9cb23a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4051 ipv4=10.0.0.48 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5a5d9cb23a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4051 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.48 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=node;k8s:app.kubernetes.io/instance=valkey;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=valkey;k8s:app.kubernetes.io/version=8.0.2;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=valkey-2.4.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=valkey;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=valkey-node-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5a5d9cb23a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4051 identity=46016 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.48 ipv6= k8sPodName=openstack/valkey-node-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=5a5d9cb23a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4051 identity=46016 ipv4=10.0.0.48 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5a5d9cb23a datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=4051 identity=46016 ipv4=10.0.0.48 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=5a5d9cb23a datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=4051 identity=46016 ipv4=10.0.0.48 ipv6= k8sPodName=openstack/valkey-node-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"keycloak\",\"k8s:app.kubernetes.io/instance\":\"keycloak\",\"k8s:app.kubernetes.io/name\":\"keycloak\",\"k8s:io.kubernetes.pod.namespace\":\"auth-system\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:7800 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:8080 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=keycloak k8s:io.cilium.k8s.policy.namespace=auth-system k8s:io.cilium.k8s.policy.uid=f3b395ce-8141-4c33-b318-06c9dc1455d9] Description:}]" policyAddRequest=a586e5c5-4253-4a45-8a3f-88d2cc8a6715 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=a586e5c5-4253-4a45-8a3f-88d2cc8a6715 policyRevision=5 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=keycloak subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.186 717fffc0-5935-4b2c-85ec-60c643999f43 default }" containerID=a92bd059d52af0653fccba4074adc3566733e82fc2baf8202ac439c7db1e9f5e datapathConfiguration="&{false false false false false }" interface=lxc09b874eaac3b k8sPodName=auth-system/keycloak-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a92bd059d5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1179 ipv4=10.0.0.186 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a92bd059d5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1179 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.186 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:auth-system k8s:io.cilium.k8s.namespace.labels.name:auth-system]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=a92bd059d5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1179 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.186 ipv6= k8sPodName=auth-system/keycloak-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=keycloak;k8s:app.kubernetes.io/instance=keycloak;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=keycloak;k8s:app.kubernetes.io/version=24.0.5;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=keycloak-21.4.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system;k8s:io.cilium.k8s.namespace.labels.name=auth-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keycloak;k8s:io.kubernetes.pod.namespace=auth-system;k8s:statefulset.kubernetes.io/pod-name=keycloak-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a92bd059d5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1179 identity=39467 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.186 ipv6= k8sPodName=auth-system/keycloak-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a92bd059d5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1179 identity=39467 ipv4=10.0.0.186 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a92bd059d5 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1179 identity=39467 ipv4=10.0.0.186 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=a92bd059d5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1179 identity=39467 ipv4=10.0.0.186 ipv6= k8sPodName=auth-system/keycloak-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.157 e8754f17-27e9-4731-952d-894ce7fb8bc5 default }" containerID=353a7698a6b677d5ede8321e0d63e2658f1335217284fa78536808294d251008 datapathConfiguration="&{false false false false false }" interface=lxc725d712e4aaa k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-vr822 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=353a7698a6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=60 ipv4=10.0.0.157 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-vr822 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=353a7698a6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=60 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.157 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-vr822 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=gc;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=353a7698a6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=60 identity=26734 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.157 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-vr822 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=353a7698a6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=60 identity=26734 ipv4=10.0.0.157 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-vr822 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.38 a5998212-a100-4aa6-8da4-e82201a8c2be default }" containerID=4899c793873b2cf4803b0aa0750607482d8e387052ed67a5f9e3a220c081d20d datapathConfiguration="&{false false false false false }" interface=lxc2477a9cab02d k8sPodName=monitoring/node-feature-discovery-worker-8p4nn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4899c79387 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2275 ipv4=10.0.0.38 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-8p4nn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4899c79387 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2275 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.38 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-8p4nn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=worker;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4899c79387 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2275 identity=43056 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.38 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-8p4nn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4899c79387 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2275 identity=43056 ipv4=10.0.0.38 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-8p4nn subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4899c79387 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2275 identity=43056 ipv4=10.0.0.38 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-8p4nn subsys=endpoint level=info msg="Successful endpoint creation" containerID=4899c79387 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2275 identity=43056 ipv4=10.0.0.38 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-8p4nn subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.148 82dcbc68-4568-41dc-95f4-a6dddf4939bc default }" containerID=76b9bb63923ac4e2ea8bfb1297824863a0ae5198004b49322c0789950c0d66e8 datapathConfiguration="&{false false false false false }" interface=lxc36d384b75960 k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-tbf67 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=76b9bb6392 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2433 ipv4=10.0.0.148 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-tbf67 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=76b9bb6392 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2433 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.148 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-tbf67 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=master;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=76b9bb6392 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2433 identity=9785 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.148 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-tbf67 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=76b9bb6392 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2433 identity=9785 ipv4=10.0.0.148 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-tbf67 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=353a7698a6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=60 identity=26734 ipv4=10.0.0.157 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-vr822 subsys=endpoint level=info msg="Successful endpoint creation" containerID=353a7698a6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=60 identity=26734 ipv4=10.0.0.157 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-vr822 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=76b9bb6392 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2433 identity=9785 ipv4=10.0.0.148 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-tbf67 subsys=endpoint level=info msg="Successful endpoint creation" containerID=76b9bb6392 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2433 identity=9785 ipv4=10.0.0.148 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-tbf67 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.134 45b339f1-709a-44a2-accb-bb42dc2451d8 default }" containerID=6276af3625c7f0664466859cca0ec959b7fdd9c7e9e0362a1a956d767d84783f datapathConfiguration="&{false false false false false }" interface=lxc6a7b580c3575 k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-9928f labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6276af3625 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=968 ipv4=10.0.0.134 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-9928f subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6276af3625 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=968 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.134 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-9928f subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:secretgen-controller]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=secretgen-controller;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa;k8s:io.kubernetes.pod.namespace=secretgen-controller;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6276af3625 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=968 identity=7164 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.134 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-9928f oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6276af3625 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=968 identity=7164 ipv4=10.0.0.134 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-9928f subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=6276af3625 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=968 identity=7164 ipv4=10.0.0.134 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-9928f subsys=endpoint level=info msg="Successful endpoint creation" containerID=6276af3625 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=968 identity=7164 ipv4=10.0.0.134 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-9928f subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2264 identity=1 identityLabels="k8s:feature.node.kubernetes.io/cpu-cpuid.ADX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AESNI=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX2=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CLZERO=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CMPXCHG8=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FMA3=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSROPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.HYPERVISOR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IA32_ARCH_CAP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBPB=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBRS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.LAHF=true,k8s:feature.node.kubernetes.io/cpu-cpuid.MOVBE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.NRIPS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.OSXSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SHA=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SPEC_CTRL_SSBD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SSE4A=true,k8s:feature.node.kubernetes.io/cpu-cpuid.STIBP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVM=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVMNP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSCALL=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSEE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.TOPEXT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.WBNOINVD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.X87=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XGETBV1=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEC=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEOPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVES=true,k8s:feature.node.kubernetes.io/cpu-hardware_multithreading=false,k8s:feature.node.kubernetes.io/cpu-model.family=23,k8s:feature.node.kubernetes.io/cpu-model.id=49,k8s:feature.node.kubernetes.io/cpu-model.vendor_id=AMD,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ=true,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ_IDLE=true,k8s:feature.node.kubernetes.io/kernel-version.full=5.15.0-174-generic,k8s:feature.node.kubernetes.io/kernel-version.major=5,k8s:feature.node.kubernetes.io/kernel-version.minor=15,k8s:feature.node.kubernetes.io/kernel-version.revision=0,k8s:feature.node.kubernetes.io/pci-0300_1af4.present=true,k8s:feature.node.kubernetes.io/system-os_release.ID=ubuntu,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.major=22,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.minor=04,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID=22.04,k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_02264 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_02264 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_02264 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_02264:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2264 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.96 996cdc12-3455-4af4-8a4b-d108469252a4 default }" containerID=485cb6437c2469084e5ff14c4e08a273a72f19fd0c414db47c7cc3227ccb26f1 datapathConfiguration="&{false false false false false }" interface=lxcec534e4ca891 k8sPodName=monitoring/kube-prometheus-stack-admission-create-kfvvk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=485cb6437c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=476 ipv4=10.0.0.96 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-kfvvk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=485cb6437c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=476 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=97181c3c-8a6d-48dc-bfd2-88989c9ccf12,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=97181c3c-8a6d-48dc-bfd2-88989c9ccf12,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.96 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-kfvvk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-create;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=97181c3c-8a6d-48dc-bfd2-88989c9ccf12;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=97181c3c-8a6d-48dc-bfd2-88989c9ccf12;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-create;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=485cb6437c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=476 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.96 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-kfvvk line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=485cb6437c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=476 identity=28978 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=97181c3c-8a6d-48dc-bfd2-88989c9ccf12,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=97181c3c-8a6d-48dc-bfd2-88989c9ccf12,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.96 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-kfvvk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=485cb6437c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=476 identity=28978 ipv4=10.0.0.96 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-kfvvk subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=485cb6437c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=476 identity=28978 ipv4=10.0.0.96 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-kfvvk subsys=endpoint level=info msg="Successful endpoint creation" containerID=485cb6437c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=476 identity=28978 ipv4=10.0.0.96 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-kfvvk subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=485cb6437c endpointID=476 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-create-kfvvk subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-create k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=97181c3c-8a6d-48dc-bfd2-88989c9ccf12 k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=97181c3c-8a6d-48dc-bfd2-88989c9ccf12 k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-create k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=485cb6437c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=476 identity=28978 ipv4=10.0.0.96 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-kfvvk subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.143 78d03c3f-5d83-4521-9972-9eff2b3d4444 default }" containerID=eb2d6b85ffe52d4dce5d3d5aaea13302ff62ae10936e7b95b8652b4b0f215e06 datapathConfiguration="&{false false false false false }" interface=lxcf39523962603 k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-l6jt5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=eb2d6b85ff datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1820 ipv4=10.0.0.143 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-l6jt5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=eb2d6b85ff datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1820 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.143 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-l6jt5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-operator;k8s:app.kubernetes.io/component=prometheus-operator;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:chart=kube-prometheus-stack-60.2.0;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=eb2d6b85ff datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1820 identity=15151 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.143 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-l6jt5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=eb2d6b85ff datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1820 identity=15151 ipv4=10.0.0.143 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-l6jt5 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.218 ef807ff8-db64-43ec-a325-52321ba16f72 default }" containerID=107d1f349bf6ca58e6ab158ecbbc585e94cade155bca89e73653690a4929ba71 datapathConfiguration="&{false false false false false }" interface=lxcfe252e45f9fe k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-k5q9f labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=107d1f349b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2939 ipv4=10.0.0.218 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-k5q9f subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=107d1f349b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2939 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.218 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-k5q9f subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=metrics;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-state-metrics;k8s:app.kubernetes.io/part-of=kube-state-metrics;k8s:app.kubernetes.io/version=2.12.0;k8s:helm.sh/chart=kube-state-metrics-5.20.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=107d1f349b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2939 identity=13494 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.218 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-k5q9f oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=107d1f349b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2939 identity=13494 ipv4=10.0.0.218 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-k5q9f subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=eb2d6b85ff datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1820 identity=15151 ipv4=10.0.0.143 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-l6jt5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=eb2d6b85ff datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1820 identity=15151 ipv4=10.0.0.143 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-l6jt5 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.184 52eff3c7-fc87-438c-a883-a78f022b901a default }" containerID=6f713df0da1f642d9709110f60cf84df10ed483eb2e3cac12b085b365c721442 datapathConfiguration="&{false false false false false }" interface=lxc7ed7a492e81f k8sPodName=monitoring/kube-prometheus-stack-grafana-7ff7fcb798-dkq58 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6f713df0da datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2448 ipv4=10.0.0.184 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-7ff7fcb798-dkq58 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6f713df0da datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2448 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.184 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-7ff7fcb798-dkq58 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/name=grafana;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6f713df0da datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2448 identity=28620 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.184 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-7ff7fcb798-dkq58 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6f713df0da datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2448 identity=28620 ipv4=10.0.0.184 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-7ff7fcb798-dkq58 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=107d1f349b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2939 identity=13494 ipv4=10.0.0.218 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-k5q9f subsys=endpoint level=info msg="Successful endpoint creation" containerID=107d1f349b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2939 identity=13494 ipv4=10.0.0.218 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-k5q9f subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=6f713df0da datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2448 identity=28620 ipv4=10.0.0.184 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-7ff7fcb798-dkq58 subsys=endpoint level=info msg="Successful endpoint creation" containerID=6f713df0da datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2448 identity=28620 ipv4=10.0.0.184 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-7ff7fcb798-dkq58 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.131 be866ca2-2400-4b76-ab9f-ea4a8900fa84 default }" containerID=5091650a4e7b376296ac0ff8cfba655e8971767fec3ea0a55844532a989cd571 datapathConfiguration="&{false false false false false }" interface=lxc2eb729fa8586 k8sPodName=monitoring/kube-prometheus-stack-admission-patch-b7smv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5091650a4e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3962 ipv4=10.0.0.131 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-b7smv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5091650a4e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3962 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=97d3a882-1f72-4a4f-b188-605045dc70f1,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=97d3a882-1f72-4a4f-b188-605045dc70f1,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.131 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-b7smv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-patch;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=97d3a882-1f72-4a4f-b188-605045dc70f1;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=97d3a882-1f72-4a4f-b188-605045dc70f1;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-patch;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5091650a4e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3962 identity=1526 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=97d3a882-1f72-4a4f-b188-605045dc70f1,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=97d3a882-1f72-4a4f-b188-605045dc70f1,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.131 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-b7smv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5091650a4e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3962 identity=1526 ipv4=10.0.0.131 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-b7smv subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5091650a4e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3962 identity=1526 ipv4=10.0.0.131 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-b7smv subsys=endpoint level=info msg="Successful endpoint creation" containerID=5091650a4e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3962 identity=1526 ipv4=10.0.0.131 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-b7smv subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.240 207eca13-3671-42c4-a077-1d97ae76e09a default }" containerID=28b94bace740ee33811930eb0c376f52a476559a5ab86ebbe6a2337ae8dfaf6e datapathConfiguration="&{false false false false false }" interface=lxc21bcc1f0c910 k8sPodName=local-path-storage/helper-pod-create-pvc-382bcdaa-a63a-4b1d-91c9-2513fe2cd98b labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=28b94bace7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=132 ipv4=10.0.0.240 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-382bcdaa-a63a-4b1d-91c9-2513fe2cd98b subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=28b94bace7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=132 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.240 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-382bcdaa-a63a-4b1d-91c9-2513fe2cd98b subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=28b94bace7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=132 identity=1234 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.240 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-382bcdaa-a63a-4b1d-91c9-2513fe2cd98b oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=28b94bace7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=132 identity=1234 ipv4=10.0.0.240 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-382bcdaa-a63a-4b1d-91c9-2513fe2cd98b subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=28b94bace7 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=132 identity=1234 ipv4=10.0.0.240 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-382bcdaa-a63a-4b1d-91c9-2513fe2cd98b subsys=endpoint level=info msg="Successful endpoint creation" containerID=28b94bace7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=132 identity=1234 ipv4=10.0.0.240 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-382bcdaa-a63a-4b1d-91c9-2513fe2cd98b subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.185 dd45ee5b-47aa-4905-8217-83d53cf6f8aa default }" containerID=ebd406f0e7d84dae769b85f80b83b6764f4fc3ab8db473365e6e1002fe38020c datapathConfiguration="&{false false false false false }" interface=lxccff22a1de07e k8sPodName=local-path-storage/helper-pod-create-pvc-d9c48086-7b57-4206-9e30-60695414cc2f labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ebd406f0e7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1312 ipv4=10.0.0.185 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d9c48086-7b57-4206-9e30-60695414cc2f subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ebd406f0e7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1312 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.185 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d9c48086-7b57-4206-9e30-60695414cc2f subsys=endpoint level=info msg="Identity of endpoint changed" containerID=ebd406f0e7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1312 identity=1234 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.185 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d9c48086-7b57-4206-9e30-60695414cc2f oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ebd406f0e7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1312 identity=1234 ipv4=10.0.0.185 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d9c48086-7b57-4206-9e30-60695414cc2f subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ebd406f0e7 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1312 identity=1234 ipv4=10.0.0.185 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d9c48086-7b57-4206-9e30-60695414cc2f subsys=endpoint level=info msg="Successful endpoint creation" containerID=ebd406f0e7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1312 identity=1234 ipv4=10.0.0.185 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d9c48086-7b57-4206-9e30-60695414cc2f subsys=daemon level=info msg="Delete endpoint request" containerID=5091650a4e endpointID=3962 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-patch-b7smv subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-patch k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=97d3a882-1f72-4a4f-b188-605045dc70f1 k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=97d3a882-1f72-4a4f-b188-605045dc70f1 k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-patch k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=5091650a4e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3962 identity=1526 ipv4=10.0.0.131 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-b7smv subsys=endpoint level=info msg="Delete endpoint request" containerID=28b94bace7 endpointID=132 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-382bcdaa-a63a-4b1d-91c9-2513fe2cd98b subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=28b94bace7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=132 identity=1234 ipv4=10.0.0.240 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-382bcdaa-a63a-4b1d-91c9-2513fe2cd98b subsys=endpoint level=info msg="Delete endpoint request" containerID=ebd406f0e7 endpointID=1312 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-d9c48086-7b57-4206-9e30-60695414cc2f subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=ebd406f0e7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1312 identity=1234 ipv4=10.0.0.185 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d9c48086-7b57-4206-9e30-60695414cc2f subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.138 a0454e22-aaa9-49c0-a863-4c2226d45eb8 default }" containerID=d98524abbc4638032fdfc83c2e2894cf2267c5da89b429bef4655eb8122d3023 datapathConfiguration="&{false false false false false }" interface=lxc834fdec57691 k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d98524abbc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=303 ipv4=10.0.0.138 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d98524abbc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=303 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.138 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:alertmanager=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=alertmanager;k8s:app.kubernetes.io/version=0.27.0;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d98524abbc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=303 identity=6138 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.138 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d98524abbc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=303 identity=6138 ipv4=10.0.0.138 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=d98524abbc datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=303 identity=6138 ipv4=10.0.0.138 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=d98524abbc datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=303 identity=6138 ipv4=10.0.0.138 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.159 edce2127-7352-4fa6-b03e-516db4a3746a default }" containerID=e7af88ba5d07b541ff9ff71f87bff7154c3a9d38952b6e303e7920983a852fe8 datapathConfiguration="&{false false false false false }" interface=lxcab805cc77a01 k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e7af88ba5d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=860 ipv4=10.0.0.159 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e7af88ba5d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=860 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.159 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=prometheus;k8s:app.kubernetes.io/version=2.51.2;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus;k8s:io.kubernetes.pod.namespace=monitoring;k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus;k8s:operator.prometheus.io/shard=0;k8s:prometheus=kube-prometheus-stack-prometheus;k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e7af88ba5d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=860 identity=14679 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.159 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e7af88ba5d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=860 identity=14679 ipv4=10.0.0.159 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e7af88ba5d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=860 identity=14679 ipv4=10.0.0.159 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=e7af88ba5d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=860 identity=14679 ipv4=10.0.0.159 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.82 69cc788b-80d1-4619-b9a1-ec89085907d0 default }" containerID=0bc5e3017844d885685b799ca997f71a398f9b175b079bc9574d98e0cbbd1fed datapathConfiguration="&{false false false false false }" interface=lxcab14c2c5f979 k8sPodName=monitoring/loki-gateway-cf54cb88c-rvcsh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0bc5e30178 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1585 ipv4=10.0.0.82 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-rvcsh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0bc5e30178 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1585 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.82 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-rvcsh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=gateway;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=0bc5e30178 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1585 identity=60121 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.82 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-rvcsh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0bc5e30178 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1585 identity=60121 ipv4=10.0.0.82 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-rvcsh subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0bc5e30178 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1585 identity=60121 ipv4=10.0.0.82 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-rvcsh subsys=endpoint level=info msg="Successful endpoint creation" containerID=0bc5e30178 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1585 identity=60121 ipv4=10.0.0.82 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-rvcsh subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.49 69b7d9da-c231-4c6c-b6bf-6f3c0b38a854 default }" containerID=853cebecf10fb51d85977b910531a06a3d4f4c087d8ff536652b5496c13b0bb1 datapathConfiguration="&{false false false false false }" interface=lxc9ed3b6730190 k8sPodName=local-path-storage/helper-pod-create-pvc-711a880e-0597-49b1-a85d-877f9144868d labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=853cebecf1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2810 ipv4=10.0.0.49 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-711a880e-0597-49b1-a85d-877f9144868d subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=853cebecf1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2810 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.49 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-711a880e-0597-49b1-a85d-877f9144868d subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=853cebecf1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2810 identity=1234 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.49 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-711a880e-0597-49b1-a85d-877f9144868d oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=853cebecf1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2810 identity=1234 ipv4=10.0.0.49 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-711a880e-0597-49b1-a85d-877f9144868d subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.149 47a0e15a-65bd-49a8-b5c8-c3cba4bc9a81 default }" containerID=814829042a8c3489d0c35b60390a45cfb2fc437a40dd3f81cc15ab7a28d2bcde datapathConfiguration="&{false false false false false }" interface=lxc0d9dca80fff3 k8sPodName=monitoring/loki-results-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=814829042a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3715 ipv4=10.0.0.149 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=814829042a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3715 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.149 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.185 62559bf4-dd45-4706-be38-608f59e20032 default }" containerID=42193356cd8984275cc305d7c0eb9af2c1f3c451175433108bc34432359d3f38 datapathConfiguration="&{false false false false false }" interface=lxcea7f48d20e1f k8sPodName=monitoring/loki-chunks-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=42193356cd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3858 ipv4=10.0.0.185 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=42193356cd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3858 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.185 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-results-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-results-cache;k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=814829042a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3715 identity=12476 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.149 ipv6= k8sPodName=monitoring/loki-results-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=814829042a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3715 identity=12476 ipv4=10.0.0.149 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-chunks-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-chunks-cache;k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=42193356cd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3858 identity=5904 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.185 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=42193356cd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3858 identity=5904 ipv4=10.0.0.185 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=853cebecf1 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2810 identity=1234 ipv4=10.0.0.49 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-711a880e-0597-49b1-a85d-877f9144868d subsys=endpoint level=info msg="Successful endpoint creation" containerID=853cebecf1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2810 identity=1234 ipv4=10.0.0.49 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-711a880e-0597-49b1-a85d-877f9144868d subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=42193356cd datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3858 identity=5904 ipv4=10.0.0.185 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=42193356cd datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3858 identity=5904 ipv4=10.0.0.185 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=814829042a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3715 identity=12476 ipv4=10.0.0.149 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=814829042a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3715 identity=12476 ipv4=10.0.0.149 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.54 e95d02f4-7efe-42f0-b55a-6e5858efb553 default }" containerID=4eed14969e4305be4dd94e9998f2e0d2f5b1a9e7ae53efde9d69575e99b77db0 datapathConfiguration="&{false false false false false }" interface=lxcac602716e451 k8sPodName=monitoring/vector-blxws labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4eed14969e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1823 ipv4=10.0.0.54 ipv6= k8sPodName=monitoring/vector-blxws subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4eed14969e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1823 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.54 ipv6= k8sPodName=monitoring/vector-blxws subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=Agent;k8s:app.kubernetes.io/instance=vector;k8s:app.kubernetes.io/name=vector;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=vector;k8s:io.kubernetes.pod.namespace=monitoring;k8s:vector.dev/exclude=true;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4eed14969e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1823 identity=1485 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.54 ipv6= k8sPodName=monitoring/vector-blxws oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4eed14969e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1823 identity=1485 ipv4=10.0.0.54 ipv6= k8sPodName=monitoring/vector-blxws subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4eed14969e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1823 identity=1485 ipv4=10.0.0.54 ipv6= k8sPodName=monitoring/vector-blxws subsys=endpoint level=info msg="Successful endpoint creation" containerID=4eed14969e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1823 identity=1485 ipv4=10.0.0.54 ipv6= k8sPodName=monitoring/vector-blxws subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=853cebecf1 endpointID=2810 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-711a880e-0597-49b1-a85d-877f9144868d subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=853cebecf1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2810 identity=1234 ipv4=10.0.0.49 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-711a880e-0597-49b1-a85d-877f9144868d subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.198 3aeff497-ca0b-4b06-b8e1-e0f747ae29dd default }" containerID=22e8011690e5e385c1895de74a66b29420e2f71206a898716b1323d0af4db8f1 datapathConfiguration="&{false false false false false }" interface=lxc2299f526c10a k8sPodName=monitoring/loki-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=22e8011690 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3691 ipv4=10.0.0.198 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=22e8011690 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3691 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.198 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=single-binary;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:app.kubernetes.io/part-of=memberlist;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=loki-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=22e8011690 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3691 identity=8896 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.198 ipv6= k8sPodName=monitoring/loki-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=22e8011690 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3691 identity=8896 ipv4=10.0.0.198 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=22e8011690 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3691 identity=8896 ipv4=10.0.0.198 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=22e8011690 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3691 identity=8896 ipv4=10.0.0.198 ipv6= k8sPodName=monitoring/loki-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.242 1d7649b9-8446-4036-96ba-2d7de536e6c0 default }" containerID=449b1468583fb56a6abc72af791bf5188ee04822150125fe7102a654a09c08d3 datapathConfiguration="&{false false false false false }" interface=lxc57c9dc65a2c8 k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-qxlgv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=449b146858 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=117 ipv4=10.0.0.242 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-qxlgv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=449b146858 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=117 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.242 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-qxlgv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=prometheus-pushgateway;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=prometheus-pushgateway;k8s:app.kubernetes.io/version=v1.8.0;k8s:helm.sh/chart=prometheus-pushgateway-2.13.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=449b146858 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=117 identity=2719 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.242 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-qxlgv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=449b146858 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=117 identity=2719 ipv4=10.0.0.242 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-qxlgv subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=449b146858 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=117 identity=2719 ipv4=10.0.0.242 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-qxlgv subsys=endpoint level=info msg="Successful endpoint creation" containerID=449b146858 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=117 identity=2719 ipv4=10.0.0.242 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-qxlgv subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.49 42a7c18f-8994-4adb-af0f-8e2205e47e48 default }" containerID=8ce3ccbc259f70b38d073f5f22bae15e106b8308b7f114b9b610d798ae5230be datapathConfiguration="&{false false false false false }" interface=lxcf027fb80e23f k8sPodName=openstack/memcached-memcached-6479589586-bxtdt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8ce3ccbc25 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=151 ipv4=10.0.0.49 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-bxtdt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8ce3ccbc25 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=151 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.49 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-bxtdt subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=8ce3ccbc25 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=151 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.49 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-bxtdt line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=memcached;k8s:component=server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=memcached;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8ce3ccbc25 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=151 identity=53689 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.49 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-bxtdt oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8ce3ccbc25 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=151 identity=53689 ipv4=10.0.0.49 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-bxtdt subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8ce3ccbc25 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=151 identity=53689 ipv4=10.0.0.49 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-bxtdt subsys=endpoint level=info msg="Successful endpoint creation" containerID=8ce3ccbc25 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=151 identity=53689 ipv4=10.0.0.49 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-bxtdt subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.77 9678e17e-73e9-40a7-8322-2c5c4c6ea0d0 default }" containerID=55bdebb27135ccf5a48a16df3ec6a384719f45cf55cdfebf6ea50958f77fb325 datapathConfiguration="&{false false false false false }" interface=lxc35a0cffaa7f2 k8sPodName=local-path-storage/helper-pod-create-pvc-9d27a74a-005c-498d-928f-f6ea6e451da1 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=55bdebb271 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=7 ipv4=10.0.0.77 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-9d27a74a-005c-498d-928f-f6ea6e451da1 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=55bdebb271 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=7 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.77 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-9d27a74a-005c-498d-928f-f6ea6e451da1 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=55bdebb271 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=7 identity=1234 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.77 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-9d27a74a-005c-498d-928f-f6ea6e451da1 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=55bdebb271 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=7 identity=1234 ipv4=10.0.0.77 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-9d27a74a-005c-498d-928f-f6ea6e451da1 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=55bdebb271 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=7 identity=1234 ipv4=10.0.0.77 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-9d27a74a-005c-498d-928f-f6ea6e451da1 subsys=endpoint level=info msg="Successful endpoint creation" containerID=55bdebb271 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=7 identity=1234 ipv4=10.0.0.77 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-9d27a74a-005c-498d-928f-f6ea6e451da1 subsys=daemon level=info msg="Delete endpoint request" containerID=55bdebb271 endpointID=7 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-9d27a74a-005c-498d-928f-f6ea6e451da1 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=55bdebb271 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=7 identity=1234 ipv4=10.0.0.77 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-9d27a74a-005c-498d-928f-f6ea6e451da1 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.139 cbcc20bb-9f33-4486-97ec-3ae4ae525ef7 default }" containerID=75addc9e8108b318e86b2286bd7b7caa1086c2cc4446f4faa361e8f22b81030d datapathConfiguration="&{false false false false false }" interface=lxc082423722574 k8sPodName=openstack/rabbitmq-keystone-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=75addc9e81 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=73 ipv4=10.0.0.139 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=75addc9e81 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=73 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.139 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-keystone;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=75addc9e81 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=73 identity=4942 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.139 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=75addc9e81 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=73 identity=4942 ipv4=10.0.0.139 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=75addc9e81 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=73 identity=4942 ipv4=10.0.0.139 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=75addc9e81 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=73 identity=4942 ipv4=10.0.0.139 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.161 93396b80-082e-4c2f-b3a7-2f3924891662 default }" containerID=6ca271ee89c8438bcf4b3d971e9521a478f3f442d6e69f387d5062d782821039 datapathConfiguration="&{false false false false false }" interface=lxc909ae651c397 k8sPodName=openstack/keystone-api-667f8f7f7f-zzdzw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6ca271ee89 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1662 ipv4=10.0.0.161 ipv6= k8sPodName=openstack/keystone-api-667f8f7f7f-zzdzw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6ca271ee89 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1662 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.161 ipv6= k8sPodName=openstack/keystone-api-667f8f7f7f-zzdzw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=6ca271ee89 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1662 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.161 ipv6= k8sPodName=openstack/keystone-api-667f8f7f7f-zzdzw line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6ca271ee89 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1662 identity=33029 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.161 ipv6= k8sPodName=openstack/keystone-api-667f8f7f7f-zzdzw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6ca271ee89 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1662 identity=33029 ipv4=10.0.0.161 ipv6= k8sPodName=openstack/keystone-api-667f8f7f7f-zzdzw subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.158 5799a3d3-3b61-488f-90b5-4336f9c76556 default }" containerID=49b78b6e7b0e69dfd540bbf6442066708feaea82798b0aced6315cef85b802d6 datapathConfiguration="&{false false false false false }" interface=lxc70d5745ea1a4 k8sPodName=openstack/keystone-credential-setup-542hh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=49b78b6e7b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1105 ipv4=10.0.0.158 ipv6= k8sPodName=openstack/keystone-credential-setup-542hh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=49b78b6e7b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1105 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=57030517-7216-4ca4-9697-3da5d5c1dee4,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=57030517-7216-4ca4-9697-3da5d5c1dee4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.158 ipv6= k8sPodName=openstack/keystone-credential-setup-542hh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=57030517-7216-4ca4-9697-3da5d5c1dee4;k8s:batch.kubernetes.io/job-name=keystone-credential-setup;k8s:component=credential-setup;k8s:controller-uid=57030517-7216-4ca4-9697-3da5d5c1dee4;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-credential-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=49b78b6e7b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1105 identity=49618 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=57030517-7216-4ca4-9697-3da5d5c1dee4,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=57030517-7216-4ca4-9697-3da5d5c1dee4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.158 ipv6= k8sPodName=openstack/keystone-credential-setup-542hh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=49b78b6e7b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1105 identity=49618 ipv4=10.0.0.158 ipv6= k8sPodName=openstack/keystone-credential-setup-542hh subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6ca271ee89 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1662 identity=33029 ipv4=10.0.0.161 ipv6= k8sPodName=openstack/keystone-api-667f8f7f7f-zzdzw subsys=endpoint level=info msg="Successful endpoint creation" containerID=6ca271ee89 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1662 identity=33029 ipv4=10.0.0.161 ipv6= k8sPodName=openstack/keystone-api-667f8f7f7f-zzdzw subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=49b78b6e7b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1105 identity=49618 ipv4=10.0.0.158 ipv6= k8sPodName=openstack/keystone-credential-setup-542hh subsys=endpoint level=info msg="Successful endpoint creation" containerID=49b78b6e7b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1105 identity=49618 ipv4=10.0.0.158 ipv6= k8sPodName=openstack/keystone-credential-setup-542hh subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=49b78b6e7b endpointID=1105 k8sNamespace=openstack k8sPodName=keystone-credential-setup-542hh subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=57030517-7216-4ca4-9697-3da5d5c1dee4 k8s:batch.kubernetes.io/job-name=keystone-credential-setup k8s:component=credential-setup k8s:controller-uid=57030517-7216-4ca4-9697-3da5d5c1dee4 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-credential-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=49b78b6e7b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1105 identity=49618 ipv4=10.0.0.158 ipv6= k8sPodName=openstack/keystone-credential-setup-542hh subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.25 ae0dbb23-dd7e-4704-b448-d9f735b938fa default }" containerID=dd5705eaa9bf400306ef8c6e9239b97cbbc9c6ab673effa84de558eb6c594bfb datapathConfiguration="&{false false false false false }" interface=lxc3f5c7efab87e k8sPodName=openstack/keystone-db-init-87s8b labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=dd5705eaa9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=533 ipv4=10.0.0.25 ipv6= k8sPodName=openstack/keystone-db-init-87s8b subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=dd5705eaa9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=533 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=5487fa64-4280-412e-bc1a-a597ee249803,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=5487fa64-4280-412e-bc1a-a597ee249803,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.25 ipv6= k8sPodName=openstack/keystone-db-init-87s8b subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=dd5705eaa9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=533 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.25 ipv6= k8sPodName=openstack/keystone-db-init-87s8b line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=5487fa64-4280-412e-bc1a-a597ee249803;k8s:batch.kubernetes.io/job-name=keystone-db-init;k8s:component=db-init;k8s:controller-uid=5487fa64-4280-412e-bc1a-a597ee249803;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=dd5705eaa9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=533 identity=29890 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=5487fa64-4280-412e-bc1a-a597ee249803,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=5487fa64-4280-412e-bc1a-a597ee249803,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.25 ipv6= k8sPodName=openstack/keystone-db-init-87s8b oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=dd5705eaa9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=533 identity=29890 ipv4=10.0.0.25 ipv6= k8sPodName=openstack/keystone-db-init-87s8b subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=dd5705eaa9 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=533 identity=29890 ipv4=10.0.0.25 ipv6= k8sPodName=openstack/keystone-db-init-87s8b subsys=endpoint level=info msg="Successful endpoint creation" containerID=dd5705eaa9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=533 identity=29890 ipv4=10.0.0.25 ipv6= k8sPodName=openstack/keystone-db-init-87s8b subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=dd5705eaa9 endpointID=533 k8sNamespace=openstack k8sPodName=keystone-db-init-87s8b subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=5487fa64-4280-412e-bc1a-a597ee249803 k8s:batch.kubernetes.io/job-name=keystone-db-init k8s:component=db-init k8s:controller-uid=5487fa64-4280-412e-bc1a-a597ee249803 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=dd5705eaa9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=533 identity=29890 ipv4=10.0.0.25 ipv6= k8sPodName=openstack/keystone-db-init-87s8b subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.106 f1c919d8-65a5-48d7-afa4-eb93d2138fc3 default }" containerID=544fefd23972eed98a1e4fb07d3f8bec93e6e2ebeaa28adf5f4ce58d60e82cea datapathConfiguration="&{false false false false false }" interface=lxc69ac914016ee k8sPodName=openstack/keystone-fernet-setup-zcj7c labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=544fefd239 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=249 ipv4=10.0.0.106 ipv6= k8sPodName=openstack/keystone-fernet-setup-zcj7c subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=544fefd239 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=249 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=db1678ea-dcb9-431a-97c4-f0f6961fb6f0,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=db1678ea-dcb9-431a-97c4-f0f6961fb6f0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.106 ipv6= k8sPodName=openstack/keystone-fernet-setup-zcj7c subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=db1678ea-dcb9-431a-97c4-f0f6961fb6f0;k8s:batch.kubernetes.io/job-name=keystone-fernet-setup;k8s:component=fernet-setup;k8s:controller-uid=db1678ea-dcb9-431a-97c4-f0f6961fb6f0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-fernet-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=544fefd239 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=249 identity=17265 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=db1678ea-dcb9-431a-97c4-f0f6961fb6f0,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=db1678ea-dcb9-431a-97c4-f0f6961fb6f0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.106 ipv6= k8sPodName=openstack/keystone-fernet-setup-zcj7c oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=544fefd239 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=249 identity=17265 ipv4=10.0.0.106 ipv6= k8sPodName=openstack/keystone-fernet-setup-zcj7c subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=544fefd239 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=249 identity=17265 ipv4=10.0.0.106 ipv6= k8sPodName=openstack/keystone-fernet-setup-zcj7c subsys=endpoint level=info msg="Successful endpoint creation" containerID=544fefd239 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=249 identity=17265 ipv4=10.0.0.106 ipv6= k8sPodName=openstack/keystone-fernet-setup-zcj7c subsys=daemon level=info msg="Delete endpoint request" containerID=544fefd239 endpointID=249 k8sNamespace=openstack k8sPodName=keystone-fernet-setup-zcj7c subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=db1678ea-dcb9-431a-97c4-f0f6961fb6f0 k8s:batch.kubernetes.io/job-name=keystone-fernet-setup k8s:component=fernet-setup k8s:controller-uid=db1678ea-dcb9-431a-97c4-f0f6961fb6f0 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-fernet-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=544fefd239 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=249 identity=17265 ipv4=10.0.0.106 ipv6= k8sPodName=openstack/keystone-fernet-setup-zcj7c subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.45 6ead2b6e-5e45-4c1e-b499-b3fe35675087 default }" containerID=86e6b7b2e3997a38fd5b8cb9f1cd176a4d84e71b80f2b971bea3429329f9122a datapathConfiguration="&{false false false false false }" interface=lxcebcdbda4bdfd k8sPodName=openstack/keystone-db-sync-4k7ms labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=86e6b7b2e3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2608 ipv4=10.0.0.45 ipv6= k8sPodName=openstack/keystone-db-sync-4k7ms subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=86e6b7b2e3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2608 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=608ff36a-0d3b-40e1-b4dd-4fd9d204b2d7,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=608ff36a-0d3b-40e1-b4dd-4fd9d204b2d7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.45 ipv6= k8sPodName=openstack/keystone-db-sync-4k7ms subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=608ff36a-0d3b-40e1-b4dd-4fd9d204b2d7;k8s:batch.kubernetes.io/job-name=keystone-db-sync;k8s:component=db-sync;k8s:controller-uid=608ff36a-0d3b-40e1-b4dd-4fd9d204b2d7;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-sync;k8s:release_group=keystone;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=86e6b7b2e3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2608 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.45 ipv6= k8sPodName=openstack/keystone-db-sync-4k7ms line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=86e6b7b2e3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2608 identity=42555 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=608ff36a-0d3b-40e1-b4dd-4fd9d204b2d7,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=608ff36a-0d3b-40e1-b4dd-4fd9d204b2d7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.45 ipv6= k8sPodName=openstack/keystone-db-sync-4k7ms oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=86e6b7b2e3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2608 identity=42555 ipv4=10.0.0.45 ipv6= k8sPodName=openstack/keystone-db-sync-4k7ms subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=86e6b7b2e3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2608 identity=42555 ipv4=10.0.0.45 ipv6= k8sPodName=openstack/keystone-db-sync-4k7ms subsys=endpoint level=info msg="Successful endpoint creation" containerID=86e6b7b2e3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2608 identity=42555 ipv4=10.0.0.45 ipv6= k8sPodName=openstack/keystone-db-sync-4k7ms subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=86e6b7b2e3 endpointID=2608 k8sNamespace=openstack k8sPodName=keystone-db-sync-4k7ms subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=608ff36a-0d3b-40e1-b4dd-4fd9d204b2d7 k8s:batch.kubernetes.io/job-name=keystone-db-sync k8s:component=db-sync k8s:controller-uid=608ff36a-0d3b-40e1-b4dd-4fd9d204b2d7 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-sync k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=86e6b7b2e3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2608 identity=42555 ipv4=10.0.0.45 ipv6= k8sPodName=openstack/keystone-db-sync-4k7ms subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.180 8c23f20e-98a0-451e-ae2e-423586946f43 default }" containerID=b6facf8f1635f1442d157c02d694932bf03431906d534efd1384f49d2c38c0ca datapathConfiguration="&{false false false false false }" interface=lxce9ffe287c127 k8sPodName=openstack/keystone-rabbit-init-vfxwk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b6facf8f16 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2739 ipv4=10.0.0.180 ipv6= k8sPodName=openstack/keystone-rabbit-init-vfxwk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b6facf8f16 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2739 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=c9fb3fac-ffa0-498e-95f2-83d6c15ec02c,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=c9fb3fac-ffa0-498e-95f2-83d6c15ec02c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.180 ipv6= k8sPodName=openstack/keystone-rabbit-init-vfxwk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=c9fb3fac-ffa0-498e-95f2-83d6c15ec02c;k8s:batch.kubernetes.io/job-name=keystone-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=c9fb3fac-ffa0-498e-95f2-83d6c15ec02c;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-rabbit-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b6facf8f16 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2739 identity=36308 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=c9fb3fac-ffa0-498e-95f2-83d6c15ec02c,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=c9fb3fac-ffa0-498e-95f2-83d6c15ec02c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.180 ipv6= k8sPodName=openstack/keystone-rabbit-init-vfxwk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b6facf8f16 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2739 identity=36308 ipv4=10.0.0.180 ipv6= k8sPodName=openstack/keystone-rabbit-init-vfxwk subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=b6facf8f16 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2739 identity=36308 ipv4=10.0.0.180 ipv6= k8sPodName=openstack/keystone-rabbit-init-vfxwk subsys=endpoint level=info msg="Successful endpoint creation" containerID=b6facf8f16 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2739 identity=36308 ipv4=10.0.0.180 ipv6= k8sPodName=openstack/keystone-rabbit-init-vfxwk subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=b6facf8f16 endpointID=2739 k8sNamespace=openstack k8sPodName=keystone-rabbit-init-vfxwk subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=c9fb3fac-ffa0-498e-95f2-83d6c15ec02c k8s:batch.kubernetes.io/job-name=keystone-rabbit-init k8s:component=rabbit-init k8s:controller-uid=c9fb3fac-ffa0-498e-95f2-83d6c15ec02c k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-rabbit-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=b6facf8f16 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2739 identity=36308 ipv4=10.0.0.180 ipv6= k8sPodName=openstack/keystone-rabbit-init-vfxwk subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.98 28d130e4-62df-44e9-81e8-1b4711e0f9ad default }" containerID=247060f37bfd3924facfde2734d97f7053bc19cb442b21ad6bf521487822e4d4 datapathConfiguration="&{false false false false false }" interface=lxca217679e79cc k8sPodName=openstack/keystone-domain-manage-jxxzw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=247060f37b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2027 ipv4=10.0.0.98 ipv6= k8sPodName=openstack/keystone-domain-manage-jxxzw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=247060f37b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2027 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=9973cb9d-6bb1-42ed-9452-403eeb9d45d3,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=9973cb9d-6bb1-42ed-9452-403eeb9d45d3,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.98 ipv6= k8sPodName=openstack/keystone-domain-manage-jxxzw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=9973cb9d-6bb1-42ed-9452-403eeb9d45d3;k8s:batch.kubernetes.io/job-name=keystone-domain-manage;k8s:component=domain-manage;k8s:controller-uid=9973cb9d-6bb1-42ed-9452-403eeb9d45d3;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-domain-manage;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=247060f37b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2027 identity=1265 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=9973cb9d-6bb1-42ed-9452-403eeb9d45d3,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=9973cb9d-6bb1-42ed-9452-403eeb9d45d3,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.98 ipv6= k8sPodName=openstack/keystone-domain-manage-jxxzw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=247060f37b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2027 identity=1265 ipv4=10.0.0.98 ipv6= k8sPodName=openstack/keystone-domain-manage-jxxzw subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=247060f37b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2027 identity=1265 ipv4=10.0.0.98 ipv6= k8sPodName=openstack/keystone-domain-manage-jxxzw subsys=endpoint level=info msg="Successful endpoint creation" containerID=247060f37b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2027 identity=1265 ipv4=10.0.0.98 ipv6= k8sPodName=openstack/keystone-domain-manage-jxxzw subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=247060f37b endpointID=2027 k8sNamespace=openstack k8sPodName=keystone-domain-manage-jxxzw subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=9973cb9d-6bb1-42ed-9452-403eeb9d45d3 k8s:batch.kubernetes.io/job-name=keystone-domain-manage k8s:component=domain-manage k8s:controller-uid=9973cb9d-6bb1-42ed-9452-403eeb9d45d3 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-domain-manage k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=247060f37b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2027 identity=1265 ipv4=10.0.0.98 ipv6= k8sPodName=openstack/keystone-domain-manage-jxxzw subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.223 5d0d3921-82ce-4cce-95f3-a75217911c8c default }" containerID=5918d8767edb697771e59ea03db09c0c14c015b9d9b05dd4fcae59a47596fcce datapathConfiguration="&{false false false false false }" interface=lxc588f7df6a46d k8sPodName=openstack/keystone-bootstrap-7f7bz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5918d8767e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=333 ipv4=10.0.0.223 ipv6= k8sPodName=openstack/keystone-bootstrap-7f7bz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5918d8767e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=333 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=21874cab-67e8-44f2-91d7-2e5bef74a3bf,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=21874cab-67e8-44f2-91d7-2e5bef74a3bf,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.223 ipv6= k8sPodName=openstack/keystone-bootstrap-7f7bz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=21874cab-67e8-44f2-91d7-2e5bef74a3bf;k8s:batch.kubernetes.io/job-name=keystone-bootstrap;k8s:component=bootstrap;k8s:controller-uid=21874cab-67e8-44f2-91d7-2e5bef74a3bf;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-bootstrap;k8s:release_group=keystone;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=5918d8767e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=333 identity=19894 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=21874cab-67e8-44f2-91d7-2e5bef74a3bf,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=21874cab-67e8-44f2-91d7-2e5bef74a3bf,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.223 ipv6= k8sPodName=openstack/keystone-bootstrap-7f7bz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5918d8767e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=333 identity=19894 ipv4=10.0.0.223 ipv6= k8sPodName=openstack/keystone-bootstrap-7f7bz subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5918d8767e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=333 identity=19894 ipv4=10.0.0.223 ipv6= k8sPodName=openstack/keystone-bootstrap-7f7bz subsys=endpoint level=info msg="Successful endpoint creation" containerID=5918d8767e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=333 identity=19894 ipv4=10.0.0.223 ipv6= k8sPodName=openstack/keystone-bootstrap-7f7bz subsys=daemon level=info msg="Delete endpoint request" containerID=5918d8767e endpointID=333 k8sNamespace=openstack k8sPodName=keystone-bootstrap-7f7bz subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=21874cab-67e8-44f2-91d7-2e5bef74a3bf k8s:batch.kubernetes.io/job-name=keystone-bootstrap k8s:component=bootstrap k8s:controller-uid=21874cab-67e8-44f2-91d7-2e5bef74a3bf k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-bootstrap k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=5918d8767e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=333 identity=19894 ipv4=10.0.0.223 ipv6= k8sPodName=openstack/keystone-bootstrap-7f7bz subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.191 933558ed-5345-46d2-9823-cd403df3cc11 default }" containerID=89fcb55ff8d030afda6ecdb8999968131a219664e7e43b5e0e15338a2eb85a77 datapathConfiguration="&{false false false false false }" interface=lxce1eb8bf9d396 k8sPodName=local-path-storage/helper-pod-create-pvc-19426eec-6046-4b17-bb2b-66fe583b6222 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=89fcb55ff8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1951 ipv4=10.0.0.191 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-19426eec-6046-4b17-bb2b-66fe583b6222 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=89fcb55ff8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1951 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.191 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-19426eec-6046-4b17-bb2b-66fe583b6222 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=89fcb55ff8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1951 identity=1234 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.191 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-19426eec-6046-4b17-bb2b-66fe583b6222 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=89fcb55ff8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1951 identity=1234 ipv4=10.0.0.191 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-19426eec-6046-4b17-bb2b-66fe583b6222 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=89fcb55ff8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1951 identity=1234 ipv4=10.0.0.191 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-19426eec-6046-4b17-bb2b-66fe583b6222 subsys=endpoint level=info msg="Successful endpoint creation" containerID=89fcb55ff8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1951 identity=1234 ipv4=10.0.0.191 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-19426eec-6046-4b17-bb2b-66fe583b6222 subsys=daemon level=info msg="Delete endpoint request" containerID=89fcb55ff8 endpointID=1951 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-19426eec-6046-4b17-bb2b-66fe583b6222 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=89fcb55ff8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1951 identity=1234 ipv4=10.0.0.191 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-19426eec-6046-4b17-bb2b-66fe583b6222 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.238 d7854e4d-e279-41af-88c8-0a213a841526 default }" containerID=0c4bd1b92315559c943adeaee8135503d63e3255c75ef8d4aac37a545a10e697 datapathConfiguration="&{false false false false false }" interface=lxc833042729e22 k8sPodName=openstack/rabbitmq-barbican-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0c4bd1b923 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2935 ipv4=10.0.0.238 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0c4bd1b923 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2935 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.238 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-barbican;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0c4bd1b923 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2935 identity=14585 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.238 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0c4bd1b923 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2935 identity=14585 ipv4=10.0.0.238 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=0c4bd1b923 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2935 identity=14585 ipv4=10.0.0.238 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=0c4bd1b923 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2935 identity=14585 ipv4=10.0.0.238 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.28 1fbf641d-025b-44e6-927f-23ef8d6faa1b default }" containerID=ab673110a288140c23220c83d8e10f6fb9bb04fd0df05e532137d7c04d3f0f4e datapathConfiguration="&{false false false false false }" interface=lxcb60c7e34a8ff k8sPodName=openstack/barbican-api-5bc745d576-kw2xm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ab673110a2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3630 ipv4=10.0.0.28 ipv6= k8sPodName=openstack/barbican-api-5bc745d576-kw2xm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ab673110a2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3630 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.28 ipv6= k8sPodName=openstack/barbican-api-5bc745d576-kw2xm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ab673110a2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3630 identity=12552 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.28 ipv6= k8sPodName=openstack/barbican-api-5bc745d576-kw2xm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ab673110a2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3630 identity=12552 ipv4=10.0.0.28 ipv6= k8sPodName=openstack/barbican-api-5bc745d576-kw2xm subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.146 de9bb3ab-44a5-4a71-8e32-c86aefd84775 default }" containerID=0b4a40159b9815f0cf8d2e8e37cf67bcdf432288de0cb65584ac7e605eb2b9ac datapathConfiguration="&{false false false false false }" interface=lxc297bcce642fa k8sPodName=openstack/barbican-db-init-7ndcr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0b4a40159b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2110 ipv4=10.0.0.146 ipv6= k8sPodName=openstack/barbican-db-init-7ndcr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0b4a40159b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2110 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=e7deeebf-991f-4fba-8dde-33e5df58e12d,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=e7deeebf-991f-4fba-8dde-33e5df58e12d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.146 ipv6= k8sPodName=openstack/barbican-db-init-7ndcr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=e7deeebf-991f-4fba-8dde-33e5df58e12d;k8s:batch.kubernetes.io/job-name=barbican-db-init;k8s:component=db-init;k8s:controller-uid=e7deeebf-991f-4fba-8dde-33e5df58e12d;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0b4a40159b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2110 identity=42279 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=e7deeebf-991f-4fba-8dde-33e5df58e12d,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=e7deeebf-991f-4fba-8dde-33e5df58e12d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.146 ipv6= k8sPodName=openstack/barbican-db-init-7ndcr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0b4a40159b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2110 identity=42279 ipv4=10.0.0.146 ipv6= k8sPodName=openstack/barbican-db-init-7ndcr subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ab673110a2 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3630 identity=12552 ipv4=10.0.0.28 ipv6= k8sPodName=openstack/barbican-api-5bc745d576-kw2xm subsys=endpoint level=info msg="Successful endpoint creation" containerID=ab673110a2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3630 identity=12552 ipv4=10.0.0.28 ipv6= k8sPodName=openstack/barbican-api-5bc745d576-kw2xm subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=0b4a40159b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2110 identity=42279 ipv4=10.0.0.146 ipv6= k8sPodName=openstack/barbican-db-init-7ndcr subsys=endpoint level=info msg="Successful endpoint creation" containerID=0b4a40159b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2110 identity=42279 ipv4=10.0.0.146 ipv6= k8sPodName=openstack/barbican-db-init-7ndcr subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.04856480041121647 newInterval=16m53s subsys=map-ct level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=0b4a40159b endpointID=2110 k8sNamespace=openstack k8sPodName=barbican-db-init-7ndcr subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=e7deeebf-991f-4fba-8dde-33e5df58e12d k8s:batch.kubernetes.io/job-name=barbican-db-init k8s:component=db-init k8s:controller-uid=e7deeebf-991f-4fba-8dde-33e5df58e12d k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=0b4a40159b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2110 identity=42279 ipv4=10.0.0.146 ipv6= k8sPodName=openstack/barbican-db-init-7ndcr subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.232 7d498cb2-b1fc-4e5b-bdbe-17d8ced3b7ed default }" containerID=6127781f4a566e401a00ef3efdea82ff4c9d7a6a8442bc15668efd7d6678470b datapathConfiguration="&{false false false false false }" interface=lxc5fd72711a8ad k8sPodName=openstack/barbican-db-sync-754b8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6127781f4a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=867 ipv4=10.0.0.232 ipv6= k8sPodName=openstack/barbican-db-sync-754b8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6127781f4a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=867 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=faf58159-4c2d-4134-b42a-5b2aa98260f9,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=faf58159-4c2d-4134-b42a-5b2aa98260f9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.232 ipv6= k8sPodName=openstack/barbican-db-sync-754b8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=faf58159-4c2d-4134-b42a-5b2aa98260f9;k8s:batch.kubernetes.io/job-name=barbican-db-sync;k8s:component=db-sync;k8s:controller-uid=faf58159-4c2d-4134-b42a-5b2aa98260f9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-sync;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6127781f4a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=867 identity=9644 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=faf58159-4c2d-4134-b42a-5b2aa98260f9,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=faf58159-4c2d-4134-b42a-5b2aa98260f9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.232 ipv6= k8sPodName=openstack/barbican-db-sync-754b8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6127781f4a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=867 identity=9644 ipv4=10.0.0.232 ipv6= k8sPodName=openstack/barbican-db-sync-754b8 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=6127781f4a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=867 identity=9644 ipv4=10.0.0.232 ipv6= k8sPodName=openstack/barbican-db-sync-754b8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=6127781f4a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=867 identity=9644 ipv4=10.0.0.232 ipv6= k8sPodName=openstack/barbican-db-sync-754b8 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=6127781f4a endpointID=867 k8sNamespace=openstack k8sPodName=barbican-db-sync-754b8 subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=faf58159-4c2d-4134-b42a-5b2aa98260f9 k8s:batch.kubernetes.io/job-name=barbican-db-sync k8s:component=db-sync k8s:controller-uid=faf58159-4c2d-4134-b42a-5b2aa98260f9 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-sync k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=6127781f4a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=867 identity=9644 ipv4=10.0.0.232 ipv6= k8sPodName=openstack/barbican-db-sync-754b8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.42 0d8f496d-979d-44a6-a482-33e8d9256e7e default }" containerID=3e161642cc55070ae01a5d1af89e5eff8c5ca82fbc66cdecd2ee050cd95cd25c datapathConfiguration="&{false false false false false }" interface=lxc6c248812aa1a k8sPodName=openstack/barbican-rabbit-init-jdqhx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3e161642cc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=87 ipv4=10.0.0.42 ipv6= k8sPodName=openstack/barbican-rabbit-init-jdqhx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3e161642cc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=87 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=c9ef2e21-04a8-4830-9d4c-fee45b0c7775,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=c9ef2e21-04a8-4830-9d4c-fee45b0c7775,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.42 ipv6= k8sPodName=openstack/barbican-rabbit-init-jdqhx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=c9ef2e21-04a8-4830-9d4c-fee45b0c7775;k8s:batch.kubernetes.io/job-name=barbican-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=c9ef2e21-04a8-4830-9d4c-fee45b0c7775;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-rabbit-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3e161642cc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=87 identity=19035 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=c9ef2e21-04a8-4830-9d4c-fee45b0c7775,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=c9ef2e21-04a8-4830-9d4c-fee45b0c7775,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.42 ipv6= k8sPodName=openstack/barbican-rabbit-init-jdqhx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3e161642cc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=87 identity=19035 ipv4=10.0.0.42 ipv6= k8sPodName=openstack/barbican-rabbit-init-jdqhx subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=3e161642cc datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=87 identity=19035 ipv4=10.0.0.42 ipv6= k8sPodName=openstack/barbican-rabbit-init-jdqhx subsys=endpoint level=info msg="Successful endpoint creation" containerID=3e161642cc datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=87 identity=19035 ipv4=10.0.0.42 ipv6= k8sPodName=openstack/barbican-rabbit-init-jdqhx subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=3e161642cc endpointID=87 k8sNamespace=openstack k8sPodName=barbican-rabbit-init-jdqhx subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=c9ef2e21-04a8-4830-9d4c-fee45b0c7775 k8s:batch.kubernetes.io/job-name=barbican-rabbit-init k8s:component=rabbit-init k8s:controller-uid=c9ef2e21-04a8-4830-9d4c-fee45b0c7775 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-rabbit-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=3e161642cc datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=87 identity=19035 ipv4=10.0.0.42 ipv6= k8sPodName=openstack/barbican-rabbit-init-jdqhx subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.214 8fac3036-c546-44f2-80c7-1d4c4d5b26c5 default }" containerID=0986aded44017ab0b6fb3b571728bc5860a3266e8fb220da1de2f6f48e90bc45 datapathConfiguration="&{false false false false false }" interface=lxc4597d53b5618 k8sPodName=openstack/barbican-ks-service-wrcwk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0986aded44 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1809 ipv4=10.0.0.214 ipv6= k8sPodName=openstack/barbican-ks-service-wrcwk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0986aded44 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1809 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=417dcd86-d240-43c4-ba4b-c99715c160fc,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=417dcd86-d240-43c4-ba4b-c99715c160fc,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.214 ipv6= k8sPodName=openstack/barbican-ks-service-wrcwk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=417dcd86-d240-43c4-ba4b-c99715c160fc;k8s:batch.kubernetes.io/job-name=barbican-ks-service;k8s:component=ks-service;k8s:controller-uid=417dcd86-d240-43c4-ba4b-c99715c160fc;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-service;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0986aded44 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1809 identity=6682 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=417dcd86-d240-43c4-ba4b-c99715c160fc,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=417dcd86-d240-43c4-ba4b-c99715c160fc,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.214 ipv6= k8sPodName=openstack/barbican-ks-service-wrcwk oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=0986aded44 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1809 identity=6682 ipv4=10.0.0.214 ipv6= k8sPodName=openstack/barbican-ks-service-wrcwk subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0986aded44 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1809 identity=6682 ipv4=10.0.0.214 ipv6= k8sPodName=openstack/barbican-ks-service-wrcwk subsys=endpoint level=info msg="Successful endpoint creation" containerID=0986aded44 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1809 identity=6682 ipv4=10.0.0.214 ipv6= k8sPodName=openstack/barbican-ks-service-wrcwk subsys=daemon level=info msg="Delete endpoint request" containerID=0986aded44 endpointID=1809 k8sNamespace=openstack k8sPodName=barbican-ks-service-wrcwk subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=417dcd86-d240-43c4-ba4b-c99715c160fc k8s:batch.kubernetes.io/job-name=barbican-ks-service k8s:component=ks-service k8s:controller-uid=417dcd86-d240-43c4-ba4b-c99715c160fc k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-service k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=0986aded44 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1809 identity=6682 ipv4=10.0.0.214 ipv6= k8sPodName=openstack/barbican-ks-service-wrcwk subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.201 690d5d84-81fe-44da-bdc8-1ee01cf0d538 default }" containerID=dd591a6329780a1cefb8f24ad6ef358b93836b977f887cab7c129509a10ec20a datapathConfiguration="&{false false false false false }" interface=lxcee3379ba8c93 k8sPodName=openstack/barbican-ks-endpoints-6vphq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=dd591a6329 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=544 ipv4=10.0.0.201 ipv6= k8sPodName=openstack/barbican-ks-endpoints-6vphq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=dd591a6329 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=544 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=46f21250-4198-49c8-bc0a-d9cea8971d5d,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=46f21250-4198-49c8-bc0a-d9cea8971d5d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.201 ipv6= k8sPodName=openstack/barbican-ks-endpoints-6vphq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=46f21250-4198-49c8-bc0a-d9cea8971d5d;k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=46f21250-4198-49c8-bc0a-d9cea8971d5d;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-endpoints;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=dd591a6329 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=544 identity=3217 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=46f21250-4198-49c8-bc0a-d9cea8971d5d,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=46f21250-4198-49c8-bc0a-d9cea8971d5d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.201 ipv6= k8sPodName=openstack/barbican-ks-endpoints-6vphq oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=dd591a6329 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=544 identity=3217 ipv4=10.0.0.201 ipv6= k8sPodName=openstack/barbican-ks-endpoints-6vphq subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=dd591a6329 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=544 identity=3217 ipv4=10.0.0.201 ipv6= k8sPodName=openstack/barbican-ks-endpoints-6vphq subsys=endpoint level=info msg="Successful endpoint creation" containerID=dd591a6329 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=544 identity=3217 ipv4=10.0.0.201 ipv6= k8sPodName=openstack/barbican-ks-endpoints-6vphq subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=dd591a6329 endpointID=544 k8sNamespace=openstack k8sPodName=barbican-ks-endpoints-6vphq subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=46f21250-4198-49c8-bc0a-d9cea8971d5d k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=46f21250-4198-49c8-bc0a-d9cea8971d5d k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-endpoints k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=dd591a6329 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=544 identity=3217 ipv4=10.0.0.201 ipv6= k8sPodName=openstack/barbican-ks-endpoints-6vphq subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.181 1574b488-c3e8-403a-b8eb-72e70d67a73b default }" containerID=830faeb3c4907b71d99ca4f32603da8a37f44bda4b0cb7006e3bf0f4d7c46ffc datapathConfiguration="&{false false false false false }" interface=lxcf9f9057bc320 k8sPodName=openstack/barbican-ks-user-hxc47 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=830faeb3c4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2374 ipv4=10.0.0.181 ipv6= k8sPodName=openstack/barbican-ks-user-hxc47 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=830faeb3c4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2374 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=a8671bff-a5ba-4d6e-bde3-75fdd1c82856,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=a8671bff-a5ba-4d6e-bde3-75fdd1c82856,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.181 ipv6= k8sPodName=openstack/barbican-ks-user-hxc47 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=a8671bff-a5ba-4d6e-bde3-75fdd1c82856;k8s:batch.kubernetes.io/job-name=barbican-ks-user;k8s:component=ks-user;k8s:controller-uid=a8671bff-a5ba-4d6e-bde3-75fdd1c82856;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-user;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=830faeb3c4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2374 identity=7822 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=a8671bff-a5ba-4d6e-bde3-75fdd1c82856,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=a8671bff-a5ba-4d6e-bde3-75fdd1c82856,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.181 ipv6= k8sPodName=openstack/barbican-ks-user-hxc47 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=830faeb3c4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2374 identity=7822 ipv4=10.0.0.181 ipv6= k8sPodName=openstack/barbican-ks-user-hxc47 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=830faeb3c4 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2374 identity=7822 ipv4=10.0.0.181 ipv6= k8sPodName=openstack/barbican-ks-user-hxc47 subsys=endpoint level=info msg="Successful endpoint creation" containerID=830faeb3c4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2374 identity=7822 ipv4=10.0.0.181 ipv6= k8sPodName=openstack/barbican-ks-user-hxc47 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=830faeb3c4 endpointID=2374 k8sNamespace=openstack k8sPodName=barbican-ks-user-hxc47 subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=a8671bff-a5ba-4d6e-bde3-75fdd1c82856 k8s:batch.kubernetes.io/job-name=barbican-ks-user k8s:component=ks-user k8s:controller-uid=a8671bff-a5ba-4d6e-bde3-75fdd1c82856 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-user k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=830faeb3c4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2374 identity=7822 ipv4=10.0.0.181 ipv6= k8sPodName=openstack/barbican-ks-user-hxc47 subsys=endpoint level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Create endpoint request" addressing="&{10.0.0.7 bf5bd5a9-8809-49a3-9c09-3f6619a9a5e4 default }" containerID=18808b1f5cb93c43cfad34a809adef9380120d2937f70c1d4c284b60dee4a3e0 datapathConfiguration="&{false false false false false }" interface=lxcdf1dce8ea80a k8sPodName=rook-ceph/rook-ceph-operator-7b66cfb94c-86d4j labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=18808b1f5c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1011 ipv4=10.0.0.7 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-7b66cfb94c-86d4j subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=18808b1f5c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1011 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.14.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.7 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-7b66cfb94c-86d4j subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:rook-ceph k8s:io.cilium.k8s.namespace.labels.name:rook-ceph]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-operator;k8s:helm.sh/chart=rook-ceph-v1.14.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph;k8s:io.cilium.k8s.namespace.labels.name=rook-ceph;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system;k8s:io.kubernetes.pod.namespace=rook-ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=18808b1f5c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1011 identity=13305 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.14.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.7 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-7b66cfb94c-86d4j oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=18808b1f5c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1011 identity=13305 ipv4=10.0.0.7 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-7b66cfb94c-86d4j subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=18808b1f5c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1011 identity=13305 ipv4=10.0.0.7 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-7b66cfb94c-86d4j subsys=endpoint level=info msg="Successful endpoint creation" containerID=18808b1f5c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1011 identity=13305 ipv4=10.0.0.7 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-7b66cfb94c-86d4j subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.96 91766ec0-ff97-4ba1-b0ba-2d81a6570df9 default }" containerID=81835312a70c5f5bb896dfc14bf52983cffa2ab55d9ae248fde2735cf54c751f datapathConfiguration="&{false false false false false }" interface=lxc404934389fd9 k8sPodName=openstack/rook-ceph-detect-version-hc765 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=81835312a7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=548 ipv4=10.0.0.96 ipv6= k8sPodName=openstack/rook-ceph-detect-version-hc765 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=81835312a7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=548 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=145d1026-419b-4c56-ba9a-404ba7254be0,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=145d1026-419b-4c56-ba9a-404ba7254be0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.14.5" ipv4=10.0.0.96 ipv6= k8sPodName=openstack/rook-ceph-detect-version-hc765 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-detect-version;k8s:batch.kubernetes.io/controller-uid=145d1026-419b-4c56-ba9a-404ba7254be0;k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version;k8s:controller-uid=145d1026-419b-4c56-ba9a-404ba7254be0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=rook-ceph-detect-version;k8s:rook-version=v1.14.5;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=81835312a7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=548 identity=45624 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=145d1026-419b-4c56-ba9a-404ba7254be0,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=145d1026-419b-4c56-ba9a-404ba7254be0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.14.5" ipv4=10.0.0.96 ipv6= k8sPodName=openstack/rook-ceph-detect-version-hc765 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=81835312a7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=548 identity=45624 ipv4=10.0.0.96 ipv6= k8sPodName=openstack/rook-ceph-detect-version-hc765 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=81835312a7 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=548 identity=45624 ipv4=10.0.0.96 ipv6= k8sPodName=openstack/rook-ceph-detect-version-hc765 subsys=endpoint level=info msg="Successful endpoint creation" containerID=81835312a7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=548 identity=45624 ipv4=10.0.0.96 ipv6= k8sPodName=openstack/rook-ceph-detect-version-hc765 subsys=daemon level=info msg="Delete endpoint request" containerID=81835312a7 endpointID=548 k8sNamespace=openstack k8sPodName=rook-ceph-detect-version-hc765 subsys=daemon level=info msg="Releasing key" key="[k8s:app=rook-ceph-detect-version k8s:batch.kubernetes.io/controller-uid=145d1026-419b-4c56-ba9a-404ba7254be0 k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version k8s:controller-uid=145d1026-419b-4c56-ba9a-404ba7254be0 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=rook-ceph-detect-version k8s:rook-version=v1.14.5]" subsys=allocator level=info msg="Removed endpoint" containerID=81835312a7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=548 identity=45624 ipv4=10.0.0.96 ipv6= k8sPodName=openstack/rook-ceph-detect-version-hc765 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.253 1242d3ec-8aef-40b1-9905-c358734aa3ab default }" containerID=5749be4d5bc36530fc20e4c0a64162240cc2da30a2f8314a5a243e0667d02884 datapathConfiguration="&{false false false false false }" interface=lxcfe33fbe4bd0b k8sPodName=openstack/ceph-object-controller-detect-version-8d9hv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5749be4d5b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=932 ipv4=10.0.0.253 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-8d9hv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5749be4d5b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=932 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=a608c6a6-2ab3-4d33-8d78-e0f4175bdda3,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=a608c6a6-2ab3-4d33-8d78-e0f4175bdda3,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.14.5" ipv4=10.0.0.253 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-8d9hv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app=ceph-object-controller-detect-version;k8s:batch.kubernetes.io/controller-uid=a608c6a6-2ab3-4d33-8d78-e0f4175bdda3;k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version;k8s:controller-uid=a608c6a6-2ab3-4d33-8d78-e0f4175bdda3;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=ceph-object-controller-detect-version;k8s:rook-version=v1.14.5;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5749be4d5b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=932 identity=22391 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=a608c6a6-2ab3-4d33-8d78-e0f4175bdda3,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=a608c6a6-2ab3-4d33-8d78-e0f4175bdda3,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.14.5" ipv4=10.0.0.253 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-8d9hv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5749be4d5b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=932 identity=22391 ipv4=10.0.0.253 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-8d9hv subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5749be4d5b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=932 identity=22391 ipv4=10.0.0.253 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-8d9hv subsys=endpoint level=info msg="Successful endpoint creation" containerID=5749be4d5b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=932 identity=22391 ipv4=10.0.0.253 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-8d9hv subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=5749be4d5b endpointID=932 k8sNamespace=openstack k8sPodName=ceph-object-controller-detect-version-8d9hv subsys=daemon level=info msg="Releasing key" key="[k8s:app=ceph-object-controller-detect-version k8s:batch.kubernetes.io/controller-uid=a608c6a6-2ab3-4d33-8d78-e0f4175bdda3 k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version k8s:controller-uid=a608c6a6-2ab3-4d33-8d78-e0f4175bdda3 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=ceph-object-controller-detect-version k8s:rook-version=v1.14.5]" subsys=allocator level=info msg="Removed endpoint" containerID=5749be4d5b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=932 identity=22391 ipv4=10.0.0.253 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-8d9hv subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.88 d22c8b25-5803-431c-b680-8a029e956042 default }" containerID=2c3ea4e5c7efb210f980e6edd0880f5dc4afd45d2574b37802d9d639a504b0f8 datapathConfiguration="&{false false false false false }" interface=lxcc62bfaa7d143 k8sPodName=local-path-storage/helper-pod-create-pvc-bf8f2307-ebf5-4387-b17f-344b3de46767 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2c3ea4e5c7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=449 ipv4=10.0.0.88 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-bf8f2307-ebf5-4387-b17f-344b3de46767 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2c3ea4e5c7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=449 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.88 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-bf8f2307-ebf5-4387-b17f-344b3de46767 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2c3ea4e5c7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=449 identity=1234 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.88 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-bf8f2307-ebf5-4387-b17f-344b3de46767 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2c3ea4e5c7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=449 identity=1234 ipv4=10.0.0.88 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-bf8f2307-ebf5-4387-b17f-344b3de46767 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2c3ea4e5c7 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=449 identity=1234 ipv4=10.0.0.88 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-bf8f2307-ebf5-4387-b17f-344b3de46767 subsys=endpoint level=info msg="Successful endpoint creation" containerID=2c3ea4e5c7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=449 identity=1234 ipv4=10.0.0.88 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-bf8f2307-ebf5-4387-b17f-344b3de46767 subsys=daemon level=info msg="Delete endpoint request" containerID=2c3ea4e5c7 endpointID=449 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-bf8f2307-ebf5-4387-b17f-344b3de46767 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=2c3ea4e5c7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=449 identity=1234 ipv4=10.0.0.88 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-bf8f2307-ebf5-4387-b17f-344b3de46767 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.170 e710c24f-deb9-4d04-8042-f9695e54b818 default }" containerID=7ea86f7346e7d1ecb02fcecc9ddd671f96e13120fe3e7cd3e92686fe407c00ef datapathConfiguration="&{false false false false false }" interface=lxc96e8ac7bf3fd k8sPodName=openstack/rabbitmq-glance-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7ea86f7346 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=353 ipv4=10.0.0.170 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7ea86f7346 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=353 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.170 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-glance;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7ea86f7346 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=353 identity=33833 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.170 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=7ea86f7346 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=353 identity=33833 ipv4=10.0.0.170 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7ea86f7346 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=353 identity=33833 ipv4=10.0.0.170 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=7ea86f7346 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=353 identity=33833 ipv4=10.0.0.170 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.213 f3f8c6a9-1e49-49df-8a4f-bb35c9fa42b0 default }" containerID=6f116ecbf38c57c51aef12eb63cf9e68c0ddfbf1b692207a505e81bdabdbafd8 datapathConfiguration="&{false false false false false }" interface=lxcf0ea6d2aaa91 k8sPodName=openstack/glance-db-init-5rccx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6f116ecbf3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=597 ipv4=10.0.0.213 ipv6= k8sPodName=openstack/glance-db-init-5rccx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6f116ecbf3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=597 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=6c51d197-f6cf-4e99-931f-0235ad8a50cd,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=6c51d197-f6cf-4e99-931f-0235ad8a50cd,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.213 ipv6= k8sPodName=openstack/glance-db-init-5rccx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=6c51d197-f6cf-4e99-931f-0235ad8a50cd;k8s:batch.kubernetes.io/job-name=glance-db-init;k8s:component=db-init;k8s:controller-uid=6c51d197-f6cf-4e99-931f-0235ad8a50cd;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6f116ecbf3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=597 identity=12280 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=6c51d197-f6cf-4e99-931f-0235ad8a50cd,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=6c51d197-f6cf-4e99-931f-0235ad8a50cd,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.213 ipv6= k8sPodName=openstack/glance-db-init-5rccx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6f116ecbf3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=597 identity=12280 ipv4=10.0.0.213 ipv6= k8sPodName=openstack/glance-db-init-5rccx subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=6f116ecbf3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=597 identity=12280 ipv4=10.0.0.213 ipv6= k8sPodName=openstack/glance-db-init-5rccx subsys=endpoint level=info msg="Successful endpoint creation" containerID=6f116ecbf3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=597 identity=12280 ipv4=10.0.0.213 ipv6= k8sPodName=openstack/glance-db-init-5rccx subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=6f116ecbf3 endpointID=597 k8sNamespace=openstack k8sPodName=glance-db-init-5rccx subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=6c51d197-f6cf-4e99-931f-0235ad8a50cd k8s:batch.kubernetes.io/job-name=glance-db-init k8s:component=db-init k8s:controller-uid=6c51d197-f6cf-4e99-931f-0235ad8a50cd k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=6f116ecbf3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=597 identity=12280 ipv4=10.0.0.213 ipv6= k8sPodName=openstack/glance-db-init-5rccx subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.154 0e0ac685-7fdb-4709-b2f7-094cff94a4a2 default }" containerID=bf6a915b2de0e3ed9b024dd29336bbd71245032ba0e06f992200d369a691fa9d datapathConfiguration="&{false false false false false }" interface=lxcefa0ead7459b k8sPodName=openstack/glance-db-sync-fqjbf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bf6a915b2d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1392 ipv4=10.0.0.154 ipv6= k8sPodName=openstack/glance-db-sync-fqjbf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bf6a915b2d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1392 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=a9f5bc97-b0d1-4ebd-95ae-96d5da333a3a,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=a9f5bc97-b0d1-4ebd-95ae-96d5da333a3a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.154 ipv6= k8sPodName=openstack/glance-db-sync-fqjbf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=a9f5bc97-b0d1-4ebd-95ae-96d5da333a3a;k8s:batch.kubernetes.io/job-name=glance-db-sync;k8s:component=db-sync;k8s:controller-uid=a9f5bc97-b0d1-4ebd-95ae-96d5da333a3a;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-sync;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=bf6a915b2d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1392 identity=11218 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=a9f5bc97-b0d1-4ebd-95ae-96d5da333a3a,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=a9f5bc97-b0d1-4ebd-95ae-96d5da333a3a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.154 ipv6= k8sPodName=openstack/glance-db-sync-fqjbf oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=bf6a915b2d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1392 identity=11218 ipv4=10.0.0.154 ipv6= k8sPodName=openstack/glance-db-sync-fqjbf subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=bf6a915b2d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1392 identity=11218 ipv4=10.0.0.154 ipv6= k8sPodName=openstack/glance-db-sync-fqjbf subsys=endpoint level=info msg="Successful endpoint creation" containerID=bf6a915b2d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1392 identity=11218 ipv4=10.0.0.154 ipv6= k8sPodName=openstack/glance-db-sync-fqjbf subsys=daemon level=info msg="Delete endpoint request" containerID=bf6a915b2d endpointID=1392 k8sNamespace=openstack k8sPodName=glance-db-sync-fqjbf subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=a9f5bc97-b0d1-4ebd-95ae-96d5da333a3a k8s:batch.kubernetes.io/job-name=glance-db-sync k8s:component=db-sync k8s:controller-uid=a9f5bc97-b0d1-4ebd-95ae-96d5da333a3a k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-sync k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=bf6a915b2d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1392 identity=11218 ipv4=10.0.0.154 ipv6= k8sPodName=openstack/glance-db-sync-fqjbf subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.244 b9111d9c-b9a0-40ef-b750-236f2850e0ae default }" containerID=92ce7748112cb18b837368570a6326f8ace0efce5f000045424228a99ba9c527 datapathConfiguration="&{false false false false false }" interface=lxc57ba5781dcba k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-xmjvj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=92ce774811 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3525 ipv4=10.0.0.244 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-xmjvj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=92ce774811 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3525 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.244 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-xmjvj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-rgw;k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io;k8s:app.kubernetes.io/created-by=rook-ceph-operator;k8s:app.kubernetes.io/instance=ceph;k8s:app.kubernetes.io/managed-by=rook-ceph-operator;k8s:app.kubernetes.io/name=ceph-rgw;k8s:app.kubernetes.io/part-of=ceph;k8s:ceph_daemon_id=ceph;k8s:ceph_daemon_type=rgw;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw;k8s:io.kubernetes.pod.namespace=openstack;k8s:rgw=ceph;k8s:rook.io/operator-namespace=rook-ceph;k8s:rook_cluster=openstack;k8s:rook_object_store=ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=92ce774811 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3525 identity=55969 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.244 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-xmjvj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=92ce774811 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3525 identity=55969 ipv4=10.0.0.244 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-xmjvj subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.58 5b317126-f86f-43de-9135-92bc84891009 default }" containerID=00c1de1ad85429dce268c6ade8db36cddd7e97d9166ddf6378b7cd2fa60dc4dc datapathConfiguration="&{false false false false false }" interface=lxccb94e74a31e4 k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-wkrmx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=00c1de1ad8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3908 ipv4=10.0.0.58 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-wkrmx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=00c1de1ad8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3908 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.58 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-wkrmx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-crashcollector;k8s:ceph-version=18.2.7-0;k8s:ceph_daemon_id=crash;k8s:crashcollector=crash;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default;k8s:io.kubernetes.pod.namespace=openstack;k8s:node_name=instance;k8s:rook_cluster=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=00c1de1ad8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3908 identity=17096 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.58 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-wkrmx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=00c1de1ad8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3908 identity=17096 ipv4=10.0.0.58 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-wkrmx subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=92ce774811 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3525 identity=55969 ipv4=10.0.0.244 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-xmjvj subsys=endpoint level=info msg="Successful endpoint creation" containerID=92ce774811 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3525 identity=55969 ipv4=10.0.0.244 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-xmjvj subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=00c1de1ad8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3908 identity=17096 ipv4=10.0.0.58 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-wkrmx subsys=endpoint level=info msg="Successful endpoint creation" containerID=00c1de1ad8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3908 identity=17096 ipv4=10.0.0.58 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-wkrmx subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.119 6d3e44bd-4c1c-4009-bd9d-d026428cfc48 default }" containerID=7590392d588e87d92a7b013787eb02559b877294fd96200ca8690ddb32e1298c datapathConfiguration="&{false false false false false }" interface=lxc38aa7a9faf92 k8sPodName=openstack/glance-rabbit-init-5m5qj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7590392d58 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1409 ipv4=10.0.0.119 ipv6= k8sPodName=openstack/glance-rabbit-init-5m5qj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7590392d58 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1409 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=53376c4c-6f9c-4a7c-aa34-b652f23739e9,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=53376c4c-6f9c-4a7c-aa34-b652f23739e9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.119 ipv6= k8sPodName=openstack/glance-rabbit-init-5m5qj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=53376c4c-6f9c-4a7c-aa34-b652f23739e9;k8s:batch.kubernetes.io/job-name=glance-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=53376c4c-6f9c-4a7c-aa34-b652f23739e9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-rabbit-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7590392d58 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1409 identity=58978 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=53376c4c-6f9c-4a7c-aa34-b652f23739e9,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=53376c4c-6f9c-4a7c-aa34-b652f23739e9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.119 ipv6= k8sPodName=openstack/glance-rabbit-init-5m5qj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7590392d58 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1409 identity=58978 ipv4=10.0.0.119 ipv6= k8sPodName=openstack/glance-rabbit-init-5m5qj subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7590392d58 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1409 identity=58978 ipv4=10.0.0.119 ipv6= k8sPodName=openstack/glance-rabbit-init-5m5qj subsys=endpoint level=info msg="Successful endpoint creation" containerID=7590392d58 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1409 identity=58978 ipv4=10.0.0.119 ipv6= k8sPodName=openstack/glance-rabbit-init-5m5qj subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=7590392d58 endpointID=1409 k8sNamespace=openstack k8sPodName=glance-rabbit-init-5m5qj subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=53376c4c-6f9c-4a7c-aa34-b652f23739e9 k8s:batch.kubernetes.io/job-name=glance-rabbit-init k8s:component=rabbit-init k8s:controller-uid=53376c4c-6f9c-4a7c-aa34-b652f23739e9 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-rabbit-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=7590392d58 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1409 identity=58978 ipv4=10.0.0.119 ipv6= k8sPodName=openstack/glance-rabbit-init-5m5qj subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.105 578496c9-ac85-4d8e-b9da-6fc3fef03cc1 default }" containerID=18c6539c4b76fe3ddbcb66924594bd086a1467735b911d74e62a10e221d1a992 datapathConfiguration="&{false false false false false }" interface=lxca368aea1d44e k8sPodName=openstack/glance-ks-service-vk5dq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=18c6539c4b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1848 ipv4=10.0.0.105 ipv6= k8sPodName=openstack/glance-ks-service-vk5dq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=18c6539c4b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1848 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=878471be-285b-47fa-bfc1-be63729455dc,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=878471be-285b-47fa-bfc1-be63729455dc,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.105 ipv6= k8sPodName=openstack/glance-ks-service-vk5dq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=18c6539c4b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1848 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.105 ipv6= k8sPodName=openstack/glance-ks-service-vk5dq line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=878471be-285b-47fa-bfc1-be63729455dc;k8s:batch.kubernetes.io/job-name=glance-ks-service;k8s:component=ks-service;k8s:controller-uid=878471be-285b-47fa-bfc1-be63729455dc;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-service;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=18c6539c4b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1848 identity=11026 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=878471be-285b-47fa-bfc1-be63729455dc,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=878471be-285b-47fa-bfc1-be63729455dc,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.105 ipv6= k8sPodName=openstack/glance-ks-service-vk5dq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=18c6539c4b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1848 identity=11026 ipv4=10.0.0.105 ipv6= k8sPodName=openstack/glance-ks-service-vk5dq subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=18c6539c4b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1848 identity=11026 ipv4=10.0.0.105 ipv6= k8sPodName=openstack/glance-ks-service-vk5dq subsys=endpoint level=info msg="Successful endpoint creation" containerID=18c6539c4b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1848 identity=11026 ipv4=10.0.0.105 ipv6= k8sPodName=openstack/glance-ks-service-vk5dq subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=18c6539c4b endpointID=1848 k8sNamespace=openstack k8sPodName=glance-ks-service-vk5dq subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=878471be-285b-47fa-bfc1-be63729455dc k8s:batch.kubernetes.io/job-name=glance-ks-service k8s:component=ks-service k8s:controller-uid=878471be-285b-47fa-bfc1-be63729455dc k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-service k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=18c6539c4b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1848 identity=11026 ipv4=10.0.0.105 ipv6= k8sPodName=openstack/glance-ks-service-vk5dq subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.150 b8a17d1c-aac2-4cc8-b537-90b4aecb9d6c default }" containerID=6ce3f4f694c1159f4312489462c757cda24dea8baa2cfc1ac34bdf1f97ba03c8 datapathConfiguration="&{false false false false false }" interface=lxc1eb692772c28 k8sPodName=openstack/glance-ks-endpoints-fhk44 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6ce3f4f694 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=576 ipv4=10.0.0.150 ipv6= k8sPodName=openstack/glance-ks-endpoints-fhk44 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6ce3f4f694 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=576 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=ea3f8507-db4a-471a-9aef-812259b364b4,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=ea3f8507-db4a-471a-9aef-812259b364b4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.150 ipv6= k8sPodName=openstack/glance-ks-endpoints-fhk44 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=ea3f8507-db4a-471a-9aef-812259b364b4;k8s:batch.kubernetes.io/job-name=glance-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=ea3f8507-db4a-471a-9aef-812259b364b4;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-endpoints;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6ce3f4f694 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=576 identity=2194 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=ea3f8507-db4a-471a-9aef-812259b364b4,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=ea3f8507-db4a-471a-9aef-812259b364b4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.150 ipv6= k8sPodName=openstack/glance-ks-endpoints-fhk44 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6ce3f4f694 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=576 identity=2194 ipv4=10.0.0.150 ipv6= k8sPodName=openstack/glance-ks-endpoints-fhk44 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=6ce3f4f694 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=576 identity=2194 ipv4=10.0.0.150 ipv6= k8sPodName=openstack/glance-ks-endpoints-fhk44 subsys=endpoint level=info msg="Successful endpoint creation" containerID=6ce3f4f694 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=576 identity=2194 ipv4=10.0.0.150 ipv6= k8sPodName=openstack/glance-ks-endpoints-fhk44 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.219 2d1823d1-ab18-43c4-ab26-5de3b7ba789e default }" containerID=5450e8f00b5831a59bad9e3930fd4a63aa48584f7efb09788a66ee08486845f0 datapathConfiguration="&{false false false false false }" interface=lxc49a844275657 k8sPodName=openstack/ceph-object-controller-detect-version-wwcqq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5450e8f00b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2044 ipv4=10.0.0.219 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-wwcqq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5450e8f00b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2044 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=60868469-5280-4178-ac6b-b2101a018184,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=60868469-5280-4178-ac6b-b2101a018184,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.14.5" ipv4=10.0.0.219 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-wwcqq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app=ceph-object-controller-detect-version;k8s:batch.kubernetes.io/controller-uid=60868469-5280-4178-ac6b-b2101a018184;k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version;k8s:controller-uid=60868469-5280-4178-ac6b-b2101a018184;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=ceph-object-controller-detect-version;k8s:rook-version=v1.14.5;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5450e8f00b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2044 identity=6179 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=60868469-5280-4178-ac6b-b2101a018184,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=60868469-5280-4178-ac6b-b2101a018184,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.14.5" ipv4=10.0.0.219 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-wwcqq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5450e8f00b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2044 identity=6179 ipv4=10.0.0.219 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-wwcqq subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5450e8f00b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2044 identity=6179 ipv4=10.0.0.219 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-wwcqq subsys=endpoint level=info msg="Successful endpoint creation" containerID=5450e8f00b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2044 identity=6179 ipv4=10.0.0.219 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-wwcqq subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=5450e8f00b endpointID=2044 k8sNamespace=openstack k8sPodName=ceph-object-controller-detect-version-wwcqq subsys=daemon level=info msg="Releasing key" key="[k8s:app=ceph-object-controller-detect-version k8s:batch.kubernetes.io/controller-uid=60868469-5280-4178-ac6b-b2101a018184 k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version k8s:controller-uid=60868469-5280-4178-ac6b-b2101a018184 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=ceph-object-controller-detect-version k8s:rook-version=v1.14.5]" subsys=allocator level=info msg="Removed endpoint" containerID=5450e8f00b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2044 identity=6179 ipv4=10.0.0.219 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-wwcqq subsys=endpoint level=info msg="Delete endpoint request" containerID=6ce3f4f694 endpointID=576 k8sNamespace=openstack k8sPodName=glance-ks-endpoints-fhk44 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=ea3f8507-db4a-471a-9aef-812259b364b4 k8s:batch.kubernetes.io/job-name=glance-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=ea3f8507-db4a-471a-9aef-812259b364b4 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-endpoints k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=6ce3f4f694 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=576 identity=2194 ipv4=10.0.0.150 ipv6= k8sPodName=openstack/glance-ks-endpoints-fhk44 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.208 dd6c49bd-e868-41cb-bd0b-1660b00090ed default }" containerID=524186a3bcc45850930f8bd2732c61c5caa8e7c2c50867c1cd83dcb8f043ebe2 datapathConfiguration="&{false false false false false }" interface=lxcc479946a127f k8sPodName=openstack/glance-ks-user-ctw46 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=524186a3bc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=875 ipv4=10.0.0.208 ipv6= k8sPodName=openstack/glance-ks-user-ctw46 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=524186a3bc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=875 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=c06b261e-9517-4f70-92e5-838268fa7744,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=c06b261e-9517-4f70-92e5-838268fa7744,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.208 ipv6= k8sPodName=openstack/glance-ks-user-ctw46 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=c06b261e-9517-4f70-92e5-838268fa7744;k8s:batch.kubernetes.io/job-name=glance-ks-user;k8s:component=ks-user;k8s:controller-uid=c06b261e-9517-4f70-92e5-838268fa7744;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-user;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=524186a3bc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=875 identity=16635 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=c06b261e-9517-4f70-92e5-838268fa7744,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=c06b261e-9517-4f70-92e5-838268fa7744,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.208 ipv6= k8sPodName=openstack/glance-ks-user-ctw46 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=524186a3bc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=875 identity=16635 ipv4=10.0.0.208 ipv6= k8sPodName=openstack/glance-ks-user-ctw46 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=524186a3bc datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=875 identity=16635 ipv4=10.0.0.208 ipv6= k8sPodName=openstack/glance-ks-user-ctw46 subsys=endpoint level=info msg="Successful endpoint creation" containerID=524186a3bc datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=875 identity=16635 ipv4=10.0.0.208 ipv6= k8sPodName=openstack/glance-ks-user-ctw46 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=524186a3bc endpointID=875 k8sNamespace=openstack k8sPodName=glance-ks-user-ctw46 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=c06b261e-9517-4f70-92e5-838268fa7744 k8s:batch.kubernetes.io/job-name=glance-ks-user k8s:component=ks-user k8s:controller-uid=c06b261e-9517-4f70-92e5-838268fa7744 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-user k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=524186a3bc datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=875 identity=16635 ipv4=10.0.0.208 ipv6= k8sPodName=openstack/glance-ks-user-ctw46 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.191 e5a0f650-aec0-4620-b05c-f0cf65b363ea default }" containerID=79fd8894101c82f488bf550e49133363fcf1221da579516b467536ab8316207e datapathConfiguration="&{false false false false false }" interface=lxcfe637caa5ec2 k8sPodName=openstack/glance-metadefs-load-5h9mt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=79fd889410 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1670 ipv4=10.0.0.191 ipv6= k8sPodName=openstack/glance-metadefs-load-5h9mt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=79fd889410 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1670 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=83fdb9b4-e451-46ed-8398-3860db651d06,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=83fdb9b4-e451-46ed-8398-3860db651d06,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.191 ipv6= k8sPodName=openstack/glance-metadefs-load-5h9mt subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=79fd889410 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1670 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.191 ipv6= k8sPodName=openstack/glance-metadefs-load-5h9mt line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=83fdb9b4-e451-46ed-8398-3860db651d06;k8s:batch.kubernetes.io/job-name=glance-metadefs-load;k8s:component=metadefs_load;k8s:controller-uid=83fdb9b4-e451-46ed-8398-3860db651d06;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-metadefs-load;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=79fd889410 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1670 identity=11368 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=83fdb9b4-e451-46ed-8398-3860db651d06,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=83fdb9b4-e451-46ed-8398-3860db651d06,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.191 ipv6= k8sPodName=openstack/glance-metadefs-load-5h9mt oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=79fd889410 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1670 identity=11368 ipv4=10.0.0.191 ipv6= k8sPodName=openstack/glance-metadefs-load-5h9mt subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=79fd889410 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1670 identity=11368 ipv4=10.0.0.191 ipv6= k8sPodName=openstack/glance-metadefs-load-5h9mt subsys=endpoint level=info msg="Successful endpoint creation" containerID=79fd889410 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1670 identity=11368 ipv4=10.0.0.191 ipv6= k8sPodName=openstack/glance-metadefs-load-5h9mt subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=79fd889410 endpointID=1670 k8sNamespace=openstack k8sPodName=glance-metadefs-load-5h9mt subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=83fdb9b4-e451-46ed-8398-3860db651d06 k8s:batch.kubernetes.io/job-name=glance-metadefs-load k8s:component=metadefs_load k8s:controller-uid=83fdb9b4-e451-46ed-8398-3860db651d06 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-metadefs-load k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=79fd889410 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1670 identity=11368 ipv4=10.0.0.191 ipv6= k8sPodName=openstack/glance-metadefs-load-5h9mt subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.207 c906c490-568e-476f-b3a0-599dbcb9c3a9 default }" containerID=19c1b51f9b775a3a17fb62bc809461bc5dcfa48734edceb58634441e6155bbd4 datapathConfiguration="&{false false false false false }" interface=lxc256f7ed26b80 k8sPodName=openstack/glance-storage-init-5m84k labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=19c1b51f9b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1694 ipv4=10.0.0.207 ipv6= k8sPodName=openstack/glance-storage-init-5m84k subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=19c1b51f9b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1694 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=c2565b6b-bcaf-4aaa-8a46-b18f0448f3e8,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=c2565b6b-bcaf-4aaa-8a46-b18f0448f3e8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.207 ipv6= k8sPodName=openstack/glance-storage-init-5m84k subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=c2565b6b-bcaf-4aaa-8a46-b18f0448f3e8;k8s:batch.kubernetes.io/job-name=glance-storage-init;k8s:component=storage-init;k8s:controller-uid=c2565b6b-bcaf-4aaa-8a46-b18f0448f3e8;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-storage-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=19c1b51f9b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1694 identity=24147 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=c2565b6b-bcaf-4aaa-8a46-b18f0448f3e8,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=c2565b6b-bcaf-4aaa-8a46-b18f0448f3e8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.207 ipv6= k8sPodName=openstack/glance-storage-init-5m84k oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=19c1b51f9b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1694 identity=24147 ipv4=10.0.0.207 ipv6= k8sPodName=openstack/glance-storage-init-5m84k subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=19c1b51f9b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1694 identity=24147 ipv4=10.0.0.207 ipv6= k8sPodName=openstack/glance-storage-init-5m84k subsys=endpoint level=info msg="Successful endpoint creation" containerID=19c1b51f9b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1694 identity=24147 ipv4=10.0.0.207 ipv6= k8sPodName=openstack/glance-storage-init-5m84k subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=19c1b51f9b endpointID=1694 k8sNamespace=openstack k8sPodName=glance-storage-init-5m84k subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=c2565b6b-bcaf-4aaa-8a46-b18f0448f3e8 k8s:batch.kubernetes.io/job-name=glance-storage-init k8s:component=storage-init k8s:controller-uid=c2565b6b-bcaf-4aaa-8a46-b18f0448f3e8 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-storage-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=19c1b51f9b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1694 identity=24147 ipv4=10.0.0.207 ipv6= k8sPodName=openstack/glance-storage-init-5m84k subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.165 a48ef75a-a853-414b-9db8-d457ec5aaf4a default }" containerID=437def9d568b626d5fc89badb25b6ee36c77fc1c913e1c712cfcd032acc9cb0f datapathConfiguration="&{false false false false false }" interface=lxc31e1a458f873 k8sPodName=openstack/glance-api-654d55987c-jl9mf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=437def9d56 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=614 ipv4=10.0.0.165 ipv6= k8sPodName=openstack/glance-api-654d55987c-jl9mf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=437def9d56 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=614 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.165 ipv6= k8sPodName=openstack/glance-api-654d55987c-jl9mf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=glance;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=437def9d56 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=614 identity=14911 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.165 ipv6= k8sPodName=openstack/glance-api-654d55987c-jl9mf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=437def9d56 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=614 identity=14911 ipv4=10.0.0.165 ipv6= k8sPodName=openstack/glance-api-654d55987c-jl9mf subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=437def9d56 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=614 identity=14911 ipv4=10.0.0.165 ipv6= k8sPodName=openstack/glance-api-654d55987c-jl9mf subsys=endpoint level=info msg="Successful endpoint creation" containerID=437def9d56 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=614 identity=14911 ipv4=10.0.0.165 ipv6= k8sPodName=openstack/glance-api-654d55987c-jl9mf subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.194 283ac219-91aa-49d8-afc2-f78fc3a34cf5 default }" containerID=6a95ead8226b89bf25dec20fbb9cd324c61374a1d92006a1399fe51c73051733 datapathConfiguration="&{false false false false false }" interface=lxcdf4e365515a2 k8sPodName=openstack/staffeln-api-6fddb4cdc4-8z7kk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6a95ead822 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1867 ipv4=10.0.0.194 ipv6= k8sPodName=openstack/staffeln-api-6fddb4cdc4-8z7kk subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.140 416be166-7280-4856-9dcc-9c3ccfcb084e default }" containerID=c1eb641a8fd0fe0389e32de2833cc4575e111d9b7938fdbc9712629c95bd900d datapathConfiguration="&{false false false false false }" interface=lxc59fe4ece65b1 k8sPodName=openstack/staffeln-conductor-57d955845-fp8tp labels="[]" subsys=daemon sync-build=true level=info msg="Resolving identity labels (blocking)" containerID=6a95ead822 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1867 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.194 ipv6= k8sPodName=openstack/staffeln-api-6fddb4cdc4-8z7kk subsys=endpoint level=info msg="New endpoint" containerID=c1eb641a8f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4053 ipv4=10.0.0.140 ipv6= k8sPodName=openstack/staffeln-conductor-57d955845-fp8tp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Resolving identity labels (blocking)" containerID=c1eb641a8f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4053 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.140 ipv6= k8sPodName=openstack/staffeln-conductor-57d955845-fp8tp subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=6a95ead822 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1867 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.194 ipv6= k8sPodName=openstack/staffeln-api-6fddb4cdc4-8z7kk line=611 subsys=endpoint level=info msg="Invalid state transition skipped" containerID=c1eb641a8f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4053 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.140 ipv6= k8sPodName=openstack/staffeln-conductor-57d955845-fp8tp line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6a95ead822 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1867 identity=3743 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.194 ipv6= k8sPodName=openstack/staffeln-api-6fddb4cdc4-8z7kk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6a95ead822 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1867 identity=3743 ipv4=10.0.0.194 ipv6= k8sPodName=openstack/staffeln-api-6fddb4cdc4-8z7kk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=conductor;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c1eb641a8f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4053 identity=50984 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.140 ipv6= k8sPodName=openstack/staffeln-conductor-57d955845-fp8tp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c1eb641a8f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4053 identity=50984 ipv4=10.0.0.140 ipv6= k8sPodName=openstack/staffeln-conductor-57d955845-fp8tp subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c1eb641a8f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=4053 identity=50984 ipv4=10.0.0.140 ipv6= k8sPodName=openstack/staffeln-conductor-57d955845-fp8tp subsys=endpoint level=info msg="Successful endpoint creation" containerID=c1eb641a8f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=4053 identity=50984 ipv4=10.0.0.140 ipv6= k8sPodName=openstack/staffeln-conductor-57d955845-fp8tp subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=6a95ead822 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1867 identity=3743 ipv4=10.0.0.194 ipv6= k8sPodName=openstack/staffeln-api-6fddb4cdc4-8z7kk subsys=endpoint level=info msg="Successful endpoint creation" containerID=6a95ead822 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1867 identity=3743 ipv4=10.0.0.194 ipv6= k8sPodName=openstack/staffeln-api-6fddb4cdc4-8z7kk subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.25 a1620340-3291-4ca0-a54f-eb99c73e42fc default }" containerID=6176d897687ee082a8e6264bdb00feadba7c95cf9b968d7d5b696969e3b94cbe datapathConfiguration="&{false false false false false }" interface=lxc8e0d98afe695 k8sPodName=openstack/staffeln-db-init-fdkdj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6176d89768 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=153 ipv4=10.0.0.25 ipv6= k8sPodName=openstack/staffeln-db-init-fdkdj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6176d89768 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=153 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=9bfba3ce-7e8c-4da2-9eee-6e2d5e90ddf8,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=9bfba3ce-7e8c-4da2-9eee-6e2d5e90ddf8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.25 ipv6= k8sPodName=openstack/staffeln-db-init-fdkdj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=9bfba3ce-7e8c-4da2-9eee-6e2d5e90ddf8;k8s:batch.kubernetes.io/job-name=staffeln-db-init;k8s:component=db-init;k8s:controller-uid=9bfba3ce-7e8c-4da2-9eee-6e2d5e90ddf8;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-init;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6176d89768 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=153 identity=63066 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=9bfba3ce-7e8c-4da2-9eee-6e2d5e90ddf8,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=9bfba3ce-7e8c-4da2-9eee-6e2d5e90ddf8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.25 ipv6= k8sPodName=openstack/staffeln-db-init-fdkdj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6176d89768 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=153 identity=63066 ipv4=10.0.0.25 ipv6= k8sPodName=openstack/staffeln-db-init-fdkdj subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6176d89768 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=153 identity=63066 ipv4=10.0.0.25 ipv6= k8sPodName=openstack/staffeln-db-init-fdkdj subsys=endpoint level=info msg="Successful endpoint creation" containerID=6176d89768 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=153 identity=63066 ipv4=10.0.0.25 ipv6= k8sPodName=openstack/staffeln-db-init-fdkdj subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=6176d89768 endpointID=153 k8sNamespace=openstack k8sPodName=staffeln-db-init-fdkdj subsys=daemon level=info msg="Releasing key" key="[k8s:application=staffeln k8s:batch.kubernetes.io/controller-uid=9bfba3ce-7e8c-4da2-9eee-6e2d5e90ddf8 k8s:batch.kubernetes.io/job-name=staffeln-db-init k8s:component=db-init k8s:controller-uid=9bfba3ce-7e8c-4da2-9eee-6e2d5e90ddf8 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=staffeln-db-init k8s:release_group=staffeln]" subsys=allocator level=info msg="Removed endpoint" containerID=6176d89768 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=153 identity=63066 ipv4=10.0.0.25 ipv6= k8sPodName=openstack/staffeln-db-init-fdkdj subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.144 81b2cde0-5ed0-480f-b740-9c4ae6dda0dd default }" containerID=ec7f0c4fbb7ea666a5e53bcbb2466aa71a960235204d3cbbd68f0a26ccb0ed06 datapathConfiguration="&{false false false false false }" interface=lxcfea7deb4d2cc k8sPodName=openstack/staffeln-db-sync-pc69p labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ec7f0c4fbb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=32 ipv4=10.0.0.144 ipv6= k8sPodName=openstack/staffeln-db-sync-pc69p subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ec7f0c4fbb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=32 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=b0391c95-222d-4a14-b4d0-aef5afd95d4f,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=b0391c95-222d-4a14-b4d0-aef5afd95d4f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.144 ipv6= k8sPodName=openstack/staffeln-db-sync-pc69p subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=b0391c95-222d-4a14-b4d0-aef5afd95d4f;k8s:batch.kubernetes.io/job-name=staffeln-db-sync;k8s:component=db-sync;k8s:controller-uid=b0391c95-222d-4a14-b4d0-aef5afd95d4f;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-sync;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ec7f0c4fbb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=32 identity=1518 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=b0391c95-222d-4a14-b4d0-aef5afd95d4f,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=b0391c95-222d-4a14-b4d0-aef5afd95d4f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.144 ipv6= k8sPodName=openstack/staffeln-db-sync-pc69p oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=ec7f0c4fbb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=32 identity=1518 ipv4=10.0.0.144 ipv6= k8sPodName=openstack/staffeln-db-sync-pc69p subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ec7f0c4fbb datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=32 identity=1518 ipv4=10.0.0.144 ipv6= k8sPodName=openstack/staffeln-db-sync-pc69p subsys=endpoint level=info msg="Successful endpoint creation" containerID=ec7f0c4fbb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=32 identity=1518 ipv4=10.0.0.144 ipv6= k8sPodName=openstack/staffeln-db-sync-pc69p subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager