level=info msg="Memory available for map entries (0.003% of 67421638656B): 168554096B" subsys=config level=info msg="option bpf-ct-global-tcp-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-ct-global-any-max set by dynamic sizing to 295708" subsys=config level=info msg="option bpf-nat-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-neigh-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-sock-rev-map-max set by dynamic sizing to 295708" subsys=config level=info msg=" --agent-health-port='9879'" subsys=daemon level=info msg=" --agent-labels=''" subsys=daemon level=info msg=" --agent-liveness-update-interval='1s'" subsys=daemon level=info msg=" --agent-not-ready-taint-key='node.cilium.io/agent-not-ready'" subsys=daemon level=info msg=" --allocator-list-timeout='3m0s'" subsys=daemon level=info msg=" --allow-icmp-frag-needed='true'" subsys=daemon level=info msg=" --allow-localhost='auto'" subsys=daemon level=info msg=" --annotate-k8s-node='false'" subsys=daemon level=info msg=" --api-rate-limit=''" subsys=daemon level=info msg=" --arping-refresh-period='30s'" subsys=daemon level=info msg=" --auto-create-cilium-node-resource='true'" subsys=daemon level=info msg=" --auto-direct-node-routes='false'" subsys=daemon level=info msg=" --bgp-announce-lb-ip='false'" subsys=daemon level=info msg=" --bgp-announce-pod-cidr='false'" subsys=daemon level=info msg=" --bgp-config-path='/var/lib/cilium/bgp/config.yaml'" subsys=daemon level=info msg=" --bpf-auth-map-max='524288'" subsys=daemon level=info msg=" --bpf-ct-global-any-max='262144'" subsys=daemon level=info msg=" --bpf-ct-global-tcp-max='524288'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-fin='10s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-syn='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp-grace='1m0s'" subsys=daemon level=info msg=" --bpf-filter-priority='1'" subsys=daemon level=info msg=" --bpf-fragments-map-max='8192'" subsys=daemon level=info msg=" --bpf-lb-acceleration='disabled'" subsys=daemon level=info msg=" --bpf-lb-affinity-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-algorithm='random'" subsys=daemon level=info msg=" --bpf-lb-dev-ip-addr-inherit=''" subsys=daemon level=info msg=" --bpf-lb-dsr-dispatch='opt'" subsys=daemon level=info msg=" --bpf-lb-dsr-l4-xlate='frontend'" subsys=daemon level=info msg=" --bpf-lb-external-clusterip='false'" subsys=daemon level=info msg=" --bpf-lb-maglev-hash-seed='JLfvgnHc2kaSUFaI'" subsys=daemon level=info msg=" --bpf-lb-maglev-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-maglev-table-size='16381'" subsys=daemon level=info msg=" --bpf-lb-map-max='65536'" subsys=daemon level=info msg=" --bpf-lb-mode='snat'" subsys=daemon level=info msg=" --bpf-lb-rev-nat-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-rss-ipv4-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-rss-ipv6-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-service-backend-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-service-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-sock='false'" subsys=daemon level=info msg=" --bpf-lb-sock-hostns-only='false'" subsys=daemon level=info msg=" --bpf-lb-source-range-map-max='0'" subsys=daemon level=info msg=" --bpf-map-dynamic-size-ratio='0.0025'" subsys=daemon level=info msg=" --bpf-map-event-buffers=''" subsys=daemon level=info msg=" --bpf-nat-global-max='524288'" subsys=daemon level=info msg=" --bpf-neigh-global-max='524288'" subsys=daemon level=info msg=" --bpf-policy-map-full-reconciliation-interval='15m0s'" subsys=daemon level=info msg=" --bpf-policy-map-max='16384'" subsys=daemon level=info msg=" --bpf-root='/sys/fs/bpf'" subsys=daemon level=info msg=" --bpf-sock-rev-map-max='262144'" subsys=daemon level=info msg=" --bypass-ip-availability-upon-restore='false'" subsys=daemon level=info msg=" --certificates-directory='/var/run/cilium/certs'" subsys=daemon level=info msg=" --cflags=''" subsys=daemon level=info msg=" --cgroup-root='/run/cilium/cgroupv2'" subsys=daemon level=info msg=" --cilium-endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --cluster-health-port='4240'" subsys=daemon level=info msg=" --cluster-id='0'" subsys=daemon level=info msg=" --cluster-name='default'" subsys=daemon level=info msg=" --cluster-pool-ipv4-cidr='10.0.0.0/8'" subsys=daemon level=info msg=" --cluster-pool-ipv4-mask-size='24'" subsys=daemon level=info msg=" --clustermesh-config='/var/lib/cilium/clustermesh/'" subsys=daemon level=info msg=" --clustermesh-ip-identities-sync-timeout='1m0s'" subsys=daemon level=info msg=" --cmdref=''" subsys=daemon level=info msg=" --cni-chaining-mode='none'" subsys=daemon level=info msg=" --cni-chaining-target=''" subsys=daemon level=info msg=" --cni-exclusive='true'" subsys=daemon level=info msg=" --cni-external-routing='false'" subsys=daemon level=info msg=" --cni-log-file='/var/run/cilium/cilium-cni.log'" subsys=daemon level=info msg=" --cnp-node-status-gc-interval='0s'" subsys=daemon level=info msg=" --config=''" subsys=daemon level=info msg=" --config-dir='/tmp/cilium/config-map'" subsys=daemon level=info msg=" --config-sources='config-map:kube-system/cilium-config'" subsys=daemon level=info msg=" --conntrack-gc-interval='0s'" subsys=daemon level=info msg=" --conntrack-gc-max-interval='0s'" subsys=daemon level=info msg=" --crd-wait-timeout='5m0s'" subsys=daemon level=info msg=" --custom-cni-conf='false'" subsys=daemon level=info msg=" --datapath-mode='veth'" subsys=daemon level=info msg=" --debug='false'" subsys=daemon level=info msg=" --debug-verbose=''" subsys=daemon level=info msg=" --derive-masquerade-ip-addr-from-device=''" subsys=daemon level=info msg=" --devices=''" subsys=daemon level=info msg=" --direct-routing-device=''" subsys=daemon level=info msg=" --disable-cnp-status-updates='true'" subsys=daemon level=info msg=" --disable-endpoint-crd='false'" subsys=daemon level=info msg=" --disable-envoy-version-check='false'" subsys=daemon level=info msg=" --disable-iptables-feeder-rules=''" subsys=daemon level=info msg=" --dns-max-ips-per-restored-rule='1000'" subsys=daemon level=info msg=" --dns-policy-unload-on-shutdown='false'" subsys=daemon level=info msg=" --dnsproxy-concurrency-limit='0'" subsys=daemon level=info msg=" --dnsproxy-concurrency-processing-grace-period='0s'" subsys=daemon level=info msg=" --dnsproxy-enable-transparent-mode='true'" subsys=daemon level=info msg=" --dnsproxy-lock-count='128'" subsys=daemon level=info msg=" --dnsproxy-lock-timeout='500ms'" subsys=daemon level=info msg=" --egress-gateway-policy-map-max='16384'" subsys=daemon level=info msg=" --egress-gateway-reconciliation-trigger-interval='1s'" subsys=daemon level=info msg=" --egress-masquerade-interfaces=''" subsys=daemon level=info msg=" --egress-multi-home-ip-rule-compat='false'" subsys=daemon level=info msg=" --enable-auto-protect-node-port-range='true'" subsys=daemon level=info msg=" --enable-bandwidth-manager='false'" subsys=daemon level=info msg=" --enable-bbr='false'" subsys=daemon level=info msg=" --enable-bgp-control-plane='false'" subsys=daemon level=info msg=" --enable-bpf-clock-probe='false'" subsys=daemon level=info msg=" --enable-bpf-masquerade='false'" subsys=daemon level=info msg=" --enable-bpf-tproxy='false'" subsys=daemon level=info msg=" --enable-cilium-api-server-access='*'" subsys=daemon level=info msg=" --enable-cilium-endpoint-slice='false'" subsys=daemon level=info msg=" --enable-cilium-health-api-server-access='*'" subsys=daemon level=info msg=" --enable-custom-calls='false'" subsys=daemon level=info msg=" --enable-endpoint-health-checking='true'" subsys=daemon level=info msg=" --enable-endpoint-routes='false'" subsys=daemon level=info msg=" --enable-envoy-config='false'" subsys=daemon level=info msg=" --enable-external-ips='false'" subsys=daemon level=info msg=" --enable-health-check-nodeport='true'" subsys=daemon level=info msg=" --enable-health-checking='true'" subsys=daemon level=info msg=" --enable-high-scale-ipcache='false'" subsys=daemon level=info msg=" --enable-host-firewall='false'" subsys=daemon level=info msg=" --enable-host-legacy-routing='false'" subsys=daemon level=info msg=" --enable-host-port='false'" subsys=daemon level=info msg=" --enable-hubble='false'" subsys=daemon level=info msg=" --enable-hubble-recorder-api='true'" subsys=daemon level=info msg=" --enable-icmp-rules='true'" subsys=daemon level=info msg=" --enable-identity-mark='true'" subsys=daemon level=info msg=" --enable-ip-masq-agent='false'" subsys=daemon level=info msg=" --enable-ipsec='false'" subsys=daemon level=info msg=" --enable-ipsec-key-watcher='true'" subsys=daemon level=info msg=" --enable-ipv4='true'" subsys=daemon level=info msg=" --enable-ipv4-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv4-egress-gateway='false'" subsys=daemon level=info msg=" --enable-ipv4-fragment-tracking='true'" subsys=daemon level=info msg=" --enable-ipv4-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6='false'" subsys=daemon level=info msg=" --enable-ipv6-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv6-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6-ndp='false'" subsys=daemon level=info msg=" --enable-k8s='true'" subsys=daemon level=info msg=" --enable-k8s-api-discovery='false'" subsys=daemon level=info msg=" --enable-k8s-endpoint-slice='true'" subsys=daemon level=info msg=" --enable-k8s-event-handover='false'" subsys=daemon level=info msg=" --enable-k8s-networkpolicy='true'" subsys=daemon level=info msg=" --enable-k8s-terminating-endpoint='true'" subsys=daemon level=info msg=" --enable-l2-announcements='false'" subsys=daemon level=info msg=" --enable-l2-neigh-discovery='true'" subsys=daemon level=info msg=" --enable-l2-pod-announcements='false'" subsys=daemon level=info msg=" --enable-l7-proxy='true'" subsys=daemon level=info msg=" --enable-local-node-route='true'" subsys=daemon level=info msg=" --enable-local-redirect-policy='false'" subsys=daemon level=info msg=" --enable-mke='false'" subsys=daemon level=info msg=" --enable-monitor='true'" subsys=daemon level=info msg=" --enable-nat46x64-gateway='false'" subsys=daemon level=info msg=" --enable-node-port='false'" subsys=daemon level=info msg=" --enable-pmtu-discovery='false'" subsys=daemon level=info msg=" --enable-policy='default'" subsys=daemon level=info msg=" --enable-recorder='false'" subsys=daemon level=info msg=" --enable-remote-node-identity='true'" subsys=daemon level=info msg=" --enable-runtime-device-detection='false'" subsys=daemon level=info msg=" --enable-sctp='false'" subsys=daemon level=info msg=" --enable-service-topology='false'" subsys=daemon level=info msg=" --enable-session-affinity='false'" subsys=daemon level=info msg=" --enable-srv6='false'" subsys=daemon level=info msg=" --enable-stale-cilium-endpoint-cleanup='true'" subsys=daemon level=info msg=" --enable-svc-source-range-check='true'" subsys=daemon level=info msg=" --enable-tracing='false'" subsys=daemon level=info msg=" --enable-unreachable-routes='false'" subsys=daemon level=info msg=" --enable-vtep='false'" subsys=daemon level=info msg=" --enable-well-known-identities='false'" subsys=daemon level=info msg=" --enable-wireguard='false'" subsys=daemon level=info msg=" --enable-wireguard-userspace-fallback='false'" subsys=daemon level=info msg=" --enable-xdp-prefilter='false'" subsys=daemon level=info msg=" --enable-xt-socket-fallback='true'" subsys=daemon level=info msg=" --encrypt-interface=''" subsys=daemon level=info msg=" --encrypt-node='false'" subsys=daemon level=info msg=" --endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --endpoint-queue-size='25'" subsys=daemon level=info msg=" --endpoint-status=''" subsys=daemon level=info msg=" --envoy-config-timeout='2m0s'" subsys=daemon level=info msg=" --envoy-log=''" subsys=daemon level=info msg=" --exclude-local-address=''" subsys=daemon level=info msg=" --external-envoy-proxy='false'" subsys=daemon level=info msg=" --fixed-identity-mapping=''" subsys=daemon level=info msg=" --fqdn-regex-compile-lru-size='1024'" subsys=daemon level=info msg=" --gops-port='9890'" subsys=daemon level=info msg=" --http-403-msg=''" subsys=daemon level=info msg=" --http-idle-timeout='0'" subsys=daemon level=info msg=" --http-max-grpc-timeout='0'" subsys=daemon level=info msg=" --http-normalize-path='true'" subsys=daemon level=info msg=" --http-request-timeout='3600'" subsys=daemon level=info msg=" --http-retry-count='3'" subsys=daemon level=info msg=" --http-retry-timeout='0'" subsys=daemon level=info msg=" --hubble-disable-tls='false'" subsys=daemon level=info msg=" --hubble-event-buffer-capacity='4095'" subsys=daemon level=info msg=" --hubble-event-queue-size='0'" subsys=daemon level=info msg=" --hubble-export-file-compress='false'" subsys=daemon level=info msg=" --hubble-export-file-max-backups='5'" subsys=daemon level=info msg=" --hubble-export-file-max-size-mb='10'" subsys=daemon level=info msg=" --hubble-export-file-path=''" subsys=daemon level=info msg=" --hubble-listen-address=''" subsys=daemon level=info msg=" --hubble-metrics=''" subsys=daemon level=info msg=" --hubble-metrics-server=''" subsys=daemon level=info msg=" --hubble-monitor-events=''" subsys=daemon level=info msg=" --hubble-prefer-ipv6='false'" subsys=daemon level=info msg=" --hubble-recorder-sink-queue-size='1024'" subsys=daemon level=info msg=" --hubble-recorder-storage-path='/var/run/cilium/pcaps'" subsys=daemon level=info msg=" --hubble-skip-unknown-cgroup-ids='true'" subsys=daemon level=info msg=" --hubble-socket-path='/var/run/cilium/hubble.sock'" subsys=daemon level=info msg=" --hubble-tls-cert-file=''" subsys=daemon level=info msg=" --hubble-tls-client-ca-files=''" subsys=daemon level=info msg=" --hubble-tls-key-file=''" subsys=daemon level=info msg=" --identity-allocation-mode='crd'" subsys=daemon level=info msg=" --identity-change-grace-period='5s'" subsys=daemon level=info msg=" --identity-gc-interval='15m0s'" subsys=daemon level=info msg=" --identity-heartbeat-timeout='30m0s'" subsys=daemon level=info msg=" --identity-restore-grace-period='10m0s'" subsys=daemon level=info msg=" --install-egress-gateway-routes='false'" subsys=daemon level=info msg=" --install-iptables-rules='true'" subsys=daemon level=info msg=" --install-no-conntrack-iptables-rules='false'" subsys=daemon level=info msg=" --ip-allocation-timeout='2m0s'" subsys=daemon level=info msg=" --ip-masq-agent-config-path='/etc/config/ip-masq-agent'" subsys=daemon level=info msg=" --ipam='cluster-pool'" subsys=daemon level=info msg=" --ipam-cilium-node-update-rate='15s'" subsys=daemon level=info msg=" --ipam-multi-pool-pre-allocation='default=8'" subsys=daemon level=info msg=" --ipsec-key-file=''" subsys=daemon level=info msg=" --ipsec-key-rotation-duration='5m0s'" subsys=daemon level=info msg=" --iptables-lock-timeout='5s'" subsys=daemon level=info msg=" --iptables-random-fully='false'" subsys=daemon level=info msg=" --ipv4-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv4-node='auto'" subsys=daemon level=info msg=" --ipv4-pod-subnets=''" subsys=daemon level=info msg=" --ipv4-range='auto'" subsys=daemon level=info msg=" --ipv4-service-loopback-address='169.254.42.1'" subsys=daemon level=info msg=" --ipv4-service-range='auto'" subsys=daemon level=info msg=" --ipv6-cluster-alloc-cidr='f00d::/64'" subsys=daemon level=info msg=" --ipv6-mcast-device=''" subsys=daemon level=info msg=" --ipv6-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv6-node='auto'" subsys=daemon level=info msg=" --ipv6-pod-subnets=''" subsys=daemon level=info msg=" --ipv6-range='auto'" subsys=daemon level=info msg=" --ipv6-service-range='auto'" subsys=daemon level=info msg=" --join-cluster='false'" subsys=daemon level=info msg=" --k8s-api-server=''" subsys=daemon level=info msg=" --k8s-client-burst='10'" subsys=daemon level=info msg=" --k8s-client-qps='5'" subsys=daemon level=info msg=" --k8s-heartbeat-timeout='30s'" subsys=daemon level=info msg=" --k8s-kubeconfig-path=''" subsys=daemon level=info msg=" --k8s-namespace='kube-system'" subsys=daemon level=info msg=" --k8s-require-ipv4-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-require-ipv6-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-service-cache-size='128'" subsys=daemon level=info msg=" --k8s-service-proxy-name=''" subsys=daemon level=info msg=" --k8s-sync-timeout='3m0s'" subsys=daemon level=info msg=" --k8s-watcher-endpoint-selector='metadata.name!=kube-scheduler,metadata.name!=kube-controller-manager,metadata.name!=etcd-operator,metadata.name!=gcp-controller-manager'" subsys=daemon level=info msg=" --keep-config='false'" subsys=daemon level=info msg=" --kube-proxy-replacement='disabled'" subsys=daemon level=info msg=" --kube-proxy-replacement-healthz-bind-address=''" subsys=daemon level=info msg=" --kvstore=''" subsys=daemon level=info msg=" --kvstore-connectivity-timeout='2m0s'" subsys=daemon level=info msg=" --kvstore-lease-ttl='15m0s'" subsys=daemon level=info msg=" --kvstore-max-consecutive-quorum-errors='2'" subsys=daemon level=info msg=" --kvstore-opt=''" subsys=daemon level=info msg=" --kvstore-periodic-sync='5m0s'" subsys=daemon level=info msg=" --l2-announcements-lease-duration='15s'" subsys=daemon level=info msg=" --l2-announcements-renew-deadline='5s'" subsys=daemon level=info msg=" --l2-announcements-retry-period='2s'" subsys=daemon level=info msg=" --l2-pod-announcements-interface=''" subsys=daemon level=info msg=" --label-prefix-file=''" subsys=daemon level=info msg=" --labels=''" subsys=daemon level=info msg=" --lib-dir='/var/lib/cilium'" subsys=daemon level=info msg=" --local-max-addr-scope='252'" subsys=daemon level=info msg=" --local-router-ipv4=''" subsys=daemon level=info msg=" --local-router-ipv6=''" subsys=daemon level=info msg=" --log-driver=''" subsys=daemon level=info msg=" --log-opt=''" subsys=daemon level=info msg=" --log-system-load='false'" subsys=daemon level=info msg=" --max-controller-interval='0'" subsys=daemon level=info msg=" --mesh-auth-enabled='true'" subsys=daemon level=info msg=" --mesh-auth-gc-interval='5m0s'" subsys=daemon level=info msg=" --mesh-auth-mutual-listener-port='0'" subsys=daemon level=info msg=" --mesh-auth-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-rotated-identities-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-signal-backoff-duration='1s'" subsys=daemon level=info msg=" --mesh-auth-spiffe-trust-domain='spiffe.cilium'" subsys=daemon level=info msg=" --mesh-auth-spire-admin-socket=''" subsys=daemon level=info msg=" --metrics=''" subsys=daemon level=info msg=" --mke-cgroup-mount=''" subsys=daemon level=info msg=" --monitor-aggregation='medium'" subsys=daemon level=info msg=" --monitor-aggregation-flags='all'" subsys=daemon level=info msg=" --monitor-aggregation-interval='5s'" subsys=daemon level=info msg=" --monitor-queue-size='0'" subsys=daemon level=info msg=" --mtu='0'" subsys=daemon level=info msg=" --node-encryption-opt-out-labels='node-role.kubernetes.io/control-plane'" subsys=daemon level=info msg=" --node-port-acceleration='disabled'" subsys=daemon level=info msg=" --node-port-algorithm='random'" subsys=daemon level=info msg=" --node-port-bind-protection='true'" subsys=daemon level=info msg=" --node-port-mode='snat'" subsys=daemon level=info msg=" --node-port-range='30000,32767'" subsys=daemon level=info msg=" --nodes-gc-interval='5m0s'" subsys=daemon level=info msg=" --operator-api-serve-addr='127.0.0.1:9234'" subsys=daemon level=info msg=" --policy-audit-mode='false'" subsys=daemon level=info msg=" --policy-queue-size='100'" subsys=daemon level=info msg=" --policy-trigger-interval='1s'" subsys=daemon level=info msg=" --pprof='false'" subsys=daemon level=info msg=" --pprof-address='localhost'" subsys=daemon level=info msg=" --pprof-port='6060'" subsys=daemon level=info msg=" --preallocate-bpf-maps='false'" subsys=daemon level=info msg=" --prepend-iptables-chains='true'" subsys=daemon level=info msg=" --procfs='/host/proc'" subsys=daemon level=info msg=" --prometheus-serve-addr=':9962'" subsys=daemon level=info msg=" --proxy-connect-timeout='2'" subsys=daemon level=info msg=" --proxy-gid='1337'" subsys=daemon level=info msg=" --proxy-idle-timeout-seconds='60'" subsys=daemon level=info msg=" --proxy-max-connection-duration-seconds='0'" subsys=daemon level=info msg=" --proxy-max-requests-per-connection='0'" subsys=daemon level=info msg=" --proxy-prometheus-port='9964'" subsys=daemon level=info msg=" --read-cni-conf=''" subsys=daemon level=info msg=" --remove-cilium-node-taints='true'" subsys=daemon level=info msg=" --restore='true'" subsys=daemon level=info msg=" --route-metric='0'" subsys=daemon level=info msg=" --routing-mode='tunnel'" subsys=daemon level=info msg=" --set-cilium-is-up-condition='true'" subsys=daemon level=info msg=" --set-cilium-node-taints='true'" subsys=daemon level=info msg=" --sidecar-istio-proxy-image='cilium/istio_proxy'" subsys=daemon level=info msg=" --single-cluster-route='false'" subsys=daemon level=info msg=" --skip-cnp-status-startup-clean='false'" subsys=daemon level=info msg=" --socket-path='/var/run/cilium/cilium.sock'" subsys=daemon level=info msg=" --srv6-encap-mode='reduced'" subsys=daemon level=info msg=" --state-dir='/var/run/cilium'" subsys=daemon level=info msg=" --synchronize-k8s-nodes='true'" subsys=daemon level=info msg=" --tofqdns-dns-reject-response-code='refused'" subsys=daemon level=info msg=" --tofqdns-enable-dns-compression='true'" subsys=daemon level=info msg=" --tofqdns-endpoint-max-ip-per-hostname='50'" subsys=daemon level=info msg=" --tofqdns-idle-connection-grace-period='0s'" subsys=daemon level=info msg=" --tofqdns-max-deferred-connection-deletes='10000'" subsys=daemon level=info msg=" --tofqdns-min-ttl='0'" subsys=daemon level=info msg=" --tofqdns-pre-cache=''" subsys=daemon level=info msg=" --tofqdns-proxy-port='0'" subsys=daemon level=info msg=" --tofqdns-proxy-response-max-delay='100ms'" subsys=daemon level=info msg=" --trace-payloadlen='128'" subsys=daemon level=info msg=" --trace-sock='true'" subsys=daemon level=info msg=" --tunnel=''" subsys=daemon level=info msg=" --tunnel-port='6082'" subsys=daemon level=info msg=" --tunnel-protocol='geneve'" subsys=daemon level=info msg=" --unmanaged-pod-watcher-interval='15'" subsys=daemon level=info msg=" --use-cilium-internal-ip-for-ipsec='false'" subsys=daemon level=info msg=" --version='false'" subsys=daemon level=info msg=" --vlan-bpf-bypass=''" subsys=daemon level=info msg=" --vtep-cidr=''" subsys=daemon level=info msg=" --vtep-endpoint=''" subsys=daemon level=info msg=" --vtep-mac=''" subsys=daemon level=info msg=" --vtep-mask=''" subsys=daemon level=info msg=" --wireguard-encapsulate='false'" subsys=daemon level=info msg=" --write-cni-conf-when-ready='/host/etc/cni/net.d/05-cilium.conflist'" subsys=daemon level=info msg=" _ _ _" subsys=daemon level=info msg=" ___|_| |_|_ _ _____" subsys=daemon level=info msg="| _| | | | | | |" subsys=daemon level=info msg="|___|_|_|_|___|_|_|_|" subsys=daemon level=info msg="Cilium 1.14.8 cf6e022e 2024-03-13T12:23:35-04:00 go version go1.21.8 linux/amd64" subsys=daemon level=info msg="clang (10.0.0) and kernel (5.15.0) versions: OK!" subsys=linux-datapath level=info msg="linking environment: OK!" subsys=linux-datapath level=info msg="Kernel config file not found: if the agent fails to start, check the system requirements at https://docs.cilium.io/en/stable/operations/system_requirements" subsys=probes level=info msg="Detected mounted BPF filesystem at /sys/fs/bpf" subsys=bpf level=info msg="Mounted cgroupv2 filesystem at /run/cilium/cgroupv2" subsys=cgroups level=info msg="Parsing base label prefixes from default label list" subsys=labels-filter level=info msg="Parsing additional label prefixes from user inputs: []" subsys=labels-filter level=info msg="Final label prefixes to be used for identity evaluation:" subsys=labels-filter level=info msg=" - reserved:.*" subsys=labels-filter level=info msg=" - :io\\.kubernetes\\.pod\\.namespace" subsys=labels-filter level=info msg=" - :io\\.cilium\\.k8s\\.namespace\\.labels" subsys=labels-filter level=info msg=" - :app\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:io\\.kubernetes" subsys=labels-filter level=info msg=" - !:kubernetes\\.io" subsys=labels-filter level=info msg=" - !:.*beta\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:k8s\\.io" subsys=labels-filter level=info msg=" - !:pod-template-generation" subsys=labels-filter level=info msg=" - !:pod-template-hash" subsys=labels-filter level=info msg=" - !:controller-revision-hash" subsys=labels-filter level=info msg=" - !:annotation.*" subsys=labels-filter level=info msg=" - !:etcd_node" subsys=labels-filter level=info msg=Invoked duration="965.626µs" function="pprof.glob..func1 (cell.go:50)" subsys=hive level=info msg=Invoked duration="62.791µs" function="gops.registerGopsHooks (cell.go:38)" subsys=hive level=info msg=Invoked duration=1.058198ms function="metrics.NewRegistry (registry.go:65)" subsys=hive level=info msg=Invoked duration="5.04µs" function="metrics.glob..func1 (cell.go:12)" subsys=hive level=info msg="Spire Delegate API Client is disabled as no socket path is configured" subsys=spire-delegate level=info msg="Mutual authentication handler is disabled as no port is configured" subsys=auth level=info msg=Invoked duration=100.980279ms function="cmd.glob..func4 (daemon_main.go:1607)" subsys=hive level=info msg=Invoked duration="62.821µs" function="gc.registerSignalHandler (cell.go:47)" subsys=hive level=info msg=Invoked duration="21.9µs" function="utime.initUtimeSync (cell.go:29)" subsys=hive level=info msg=Invoked duration="90.462µs" function="agentliveness.newAgentLivenessUpdater (agent_liveness.go:43)" subsys=hive level=info msg=Invoked duration="115.103µs" function="l2responder.NewL2ResponderReconciler (l2responder.go:63)" subsys=hive level=info msg=Invoked duration="160.785µs" function="garp.newGARPProcessor (processor.go:27)" subsys=hive level=info msg=Starting subsys=hive level=info msg="Started gops server" address="127.0.0.1:9890" subsys=gops level=info msg="Start hook executed" duration="589.505µs" function="gops.registerGopsHooks.func1 (cell.go:43)" subsys=hive level=info msg="Start hook executed" duration="2.08µs" function="metrics.NewRegistry.func1 (registry.go:86)" subsys=hive level=info msg="Establishing connection to apiserver" host="https://10.96.0.1:443" subsys=k8s-client level=info msg="Serving prometheus metrics on :9962" subsys=metrics level=info msg="Connected to apiserver" subsys=k8s-client level=info msg="Start hook executed" duration=13.908607ms function="client.(*compositeClientset).onStart" subsys=hive level=info msg="Start hook executed" duration=7.857319ms function="authmap.newAuthMap.func1 (cell.go:27)" subsys=hive level=info msg="Start hook executed" duration="35.611µs" function="configmap.newMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="94.023µs" function="signalmap.newMap.func1 (cell.go:44)" subsys=hive level=info msg="Start hook executed" duration="270.857µs" function="nodemap.newNodeMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="123.234µs" function="eventsmap.newEventsMap.func1 (cell.go:35)" subsys=hive level=info msg="Start hook executed" duration="100.402µs" function="*cni.cniConfigManager.Start" subsys=hive level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Wrote CNI configuration file to /host/etc/cni/net.d/05-cilium.conflist" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Start hook executed" duration=52.047735ms function="datapath.newDatapath.func1 (cells.go:113)" subsys=hive level=info msg="Restored 0 node IDs from the BPF map" subsys=linux-datapath level=info msg="Start hook executed" duration="155.065µs" function="datapath.newDatapath.func2 (cells.go:126)" subsys=hive level=info msg="Start hook executed" duration="14.25µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Node].Start" subsys=hive level=info msg="Start hook executed" duration="3.06µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNode].Start" subsys=hive level=info msg="Using autogenerated IPv4 allocation range" subsys=node v4Prefix=10.74.0.0/16 level=info msg="no local ciliumnode found, will not restore cilium internal ips from k8s" subsys=daemon level=info msg="Start hook executed" duration=104.086551ms function="node.NewLocalNodeStore.func1 (local_node_store.go:76)" subsys=hive level=info msg="Start hook executed" duration="6.19µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration=201.031434ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration="6.14µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Using discoveryv1.EndpointSlice" subsys=k8s level=info msg="Start hook executed" duration=100.764444ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Start hook executed" duration="5.07µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Pod].Start" subsys=hive level=info msg="Start hook executed" duration="2.18µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Namespace].Start" subsys=hive level=info msg="Start hook executed" duration="2.25µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="6.651µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumClusterwideNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="3.09µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumCIDRGroup].Start" subsys=hive level=info msg="Start hook executed" duration="30.14µs" function="endpointmanager.newDefaultEndpointManager.func1 (cell.go:203)" subsys=hive level=info msg="Start hook executed" duration="62.902µs" function="cmd.newPolicyTrifecta.func1 (policy.go:135)" subsys=hive level=info msg="Start hook executed" duration="45.522µs" function="*manager.manager.Start" subsys=hive level=info msg="Serving cilium node monitor v1.2 API at unix:///var/run/cilium/monitor1_2.sock" subsys=monitor-agent level=info msg="Start hook executed" duration="848.793µs" function="agent.newMonitorAgent.func1 (cell.go:61)" subsys=hive level=info msg="Start hook executed" duration="4.16µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumL2AnnouncementPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="10.37µs" function="*job.group.Start" subsys=hive level=info msg="Start hook executed" duration="192.595µs" function="proxy.newProxy.func1 (cell.go:55)" subsys=hive level=info msg="Envoy: Starting xDS gRPC server listening on /var/run/cilium/envoy/sockets/xds.sock" subsys=envoy-manager level=info msg="Start hook executed" duration="786.252µs" function="signal.provideSignalManager.func1 (cell.go:25)" subsys=hive level=info msg="Datapath signal listener running" subsys=signal level=info msg="Start hook executed" duration=1.045687ms function="auth.registerAuthManager.func1 (cell.go:109)" subsys=hive level=info msg="Start hook executed" duration="4.5µs" function="auth.registerGCJobs.func1 (cell.go:158)" subsys=hive level=info msg="Start hook executed" duration="19.411µs" function="*job.group.Start" subsys=hive level=warning msg="Deprecated value for --kube-proxy-replacement: disabled (use either \"true\", or \"false\")" subsys=daemon level=info msg="Auto-disabling \"enable-node-port\", \"enable-external-ips\", \"bpf-lb-sock\", \"enable-host-port\" features and falling back to \"enable-host-legacy-routing\"" subsys=daemon level=info msg="Inheriting MTU from external network interface" device=ens3 ipAddr=199.204.45.74 mtu=1500 subsys=mtu level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_ipcache, recreating and re-pinning map cilium_ipcache" file-path=/sys/fs/bpf/tc/globals/cilium_ipcache name=cilium_ipcache subsys=bpf level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_tunnel_map, recreating and re-pinning map cilium_tunnel_map" file-path=/sys/fs/bpf/tc/globals/cilium_tunnel_map name=cilium_tunnel_map subsys=bpf level=info msg="Restored services from maps" failedServices=0 restoredServices=0 subsys=service level=info msg="Restored backends from maps" failedBackends=0 restoredBackends=0 skippedBackends=0 subsys=service level=info msg="Reading old endpoints..." subsys=daemon level=info msg="No old endpoints found." subsys=daemon level=info msg="Waiting until all Cilium CRDs are available" subsys=k8s level=info msg="All Cilium CRDs have been found and are available" subsys=k8s level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=info msg="Successfully created CiliumNode resource" subsys=nodediscovery level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=warning msg="Waiting for k8s node information" error="required IPv4 PodCIDR not available" subsys=k8s level=warning msg="Unable to create CiliumNode resource, will retry" error="ciliumnodes.cilium.io \"instance\" already exists" subsys=nodediscovery level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=info msg="Received own node information from API server" ipAddr.ipv4=199.204.45.74 ipAddr.ipv6="" k8sNodeIP=199.204.45.74 labels="map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:]" nodeName=instance subsys=k8s v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="k8s mode: Allowing localhost to reach local endpoints" subsys=daemon level=info msg="Detected devices" devices="[]" subsys=linux-datapath level=info msg="Enabling k8s event listener" subsys=k8s-watcher level=info msg="Removing stale endpoint interfaces" subsys=daemon level=info msg="Waiting until local node addressing before starting watchers depending on it" subsys=k8s-watcher level=info msg="Skipping kvstore configuration" subsys=daemon level=info msg="Initializing node addressing" subsys=daemon level=info msg="Initializing cluster-pool IPAM" subsys=ipam v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="Restoring endpoints..." subsys=daemon level=info msg="Endpoints restored" failed=0 restored=0 subsys=daemon level=info msg="Addressing information:" subsys=daemon level=info msg=" Cluster-Name: default" subsys=daemon level=info msg=" Cluster-ID: 0" subsys=daemon level=info msg=" Local node-name: instance" subsys=daemon level=info msg=" Node-IPv6: " subsys=daemon level=info msg=" External-Node IPv4: 199.204.45.74" subsys=daemon level=info msg=" Internal-Node IPv4: 10.0.0.7" subsys=daemon level=info msg=" IPv4 allocation prefix: 10.0.0.0/24" subsys=daemon level=info msg=" Loopback IPv4: 169.254.42.1" subsys=daemon level=info msg=" Local IPv4 addresses:" subsys=daemon level=info msg=" - 199.204.45.74" subsys=daemon level=info msg=" - 172.17.0.100" subsys=daemon level=info msg=" - 10.96.240.200" subsys=daemon level=info msg="Node updated" clusterName=default nodeName=instance subsys=nodemanager level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Waiting until all pre-existing resources have been received" subsys=k8s-watcher level=info msg="Adding local node to cluster" node="{instance default [{InternalIP 199.204.45.74} {CiliumInternalIP 10.0.0.7}] 10.0.0.0/24 [] [] 10.0.0.189 0 local 0 map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:] map[] 1 }" subsys=nodediscovery level=info msg="Initializing identity allocator" subsys=identity-cache level=info msg="Allocating identities between range" cluster-id=0 max=65535 min=256 subsys=identity-cache level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.core.bpf_jit_enable sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.all.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.fib_multipath_use_neigh sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.unprivileged_bpf_disabled sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.timer_migration sysParamValue=0 level=info msg="Setting up BPF datapath" bpfClockSource=ktime bpfInsnSet="" subsys=datapath-loader level=info msg="Iptables rules installed" subsys=iptables level=info msg="Adding new proxy port rules for cilium-dns-egress:34311" id=cilium-dns-egress subsys=proxy level=info msg="Iptables proxy rules installed" subsys=iptables level=info msg="Start hook executed" duration=2.453471106s function="cmd.newDaemonPromise.func1 (daemon_main.go:1663)" subsys=hive level=info msg="Initializing daemon" subsys=daemon level=info msg="Validating configured node address ranges" subsys=daemon level=info msg="Starting connection tracking garbage collector" subsys=daemon level=info msg="Start hook executed" duration="37.091µs" function="utime.initUtimeSync.func1 (cell.go:33)" subsys=hive level=info msg="Start hook executed" duration="10.82µs" function="*job.group.Start" subsys=hive level=info msg="Start hook executed" duration="102.253µs" function="l2respondermap.newMap.func1 (l2_responder_map4.go:44)" subsys=hive level=info msg="Start hook executed" duration="5.42µs" function="*job.group.Start" subsys=hive level=info msg="Starting IP identity watcher" subsys=ipcache level=info msg="Initial scan of connection tracking completed" subsys=ct-gc level=info msg="Regenerating restored endpoints" numRestored=0 subsys=daemon level=info msg="Creating host endpoint" subsys=daemon level=info msg="Finished regenerating restored endpoints" regenerated=0 subsys=daemon total=0 level=info msg="Deleted orphan backends" orphanBackends=0 subsys=service level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3442 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3442 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3442 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Launching Cilium health daemon" subsys=daemon level=info msg="Launching Cilium health endpoint" subsys=daemon level=info msg="Started healthz status API server" address="127.0.0.1:9879" subsys=daemon level=info msg="Processing queued endpoint deletion requests from /var/run/cilium/deleteQueue" subsys=daemon level=info msg="processing 0 queued deletion requests" subsys=daemon level=info msg="Initializing Cilium API" subsys=daemon level=info msg="Daemon initialization completed" bootstrapTime=3.516762631s subsys=daemon level=info msg="Hubble server is disabled" subsys=hubble level=info msg="Serving cilium API at unix:///var/run/cilium/cilium.sock" subsys=daemon level=info msg="Compiled new BPF template" BPFCompilationTime=318.261854ms file-path=/var/run/cilium/state/templates/c696bb275f6f034e9c6ce5cb7772eedcc4a61f09b3d68886cec5b024afa81e3c/bpf_host.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3442 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.168 dd85cc3a-5947-472b-aea7-ab53817ca3a0 default }" containerID=7585fb178c02abe83b81f4a5b1c4e10932c5366507d20159b422f728b30cd7b8 datapathConfiguration="&{false false false false false }" interface=lxcd4c287749c45 k8sPodName=kube-system/coredns-7c96b6546b-n9gkb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7585fb178c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=671 ipv4=10.0.0.168 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-n9gkb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7585fb178c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=671 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.168 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-n9gkb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:kube-system]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.160 bf5b9350-7603-4c8d-8986-163076d269b2 default }" containerID=72ee4d5109ea6a1f713954828dcb660cde82d7b89bed1e33d28ffb968dd3ed29 datapathConfiguration="&{false false false false false }" interface=lxc6d4762123180 k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-fw2hg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=72ee4d5109 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3020 ipv4=10.0.0.160 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-fw2hg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=72ee4d5109 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3020 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=593158c5-8c2c-4285-9a6b-1c0a4f5434e9,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=593158c5-8c2c-4285-9a6b-1c0a4f5434e9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.160 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-fw2hg subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=7585fb178c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=671 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.168 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-n9gkb line=611 subsys=endpoint level=info msg="Invalid state transition skipped" containerID=72ee4d5109 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3020 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.160 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-fw2hg line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=coredns;k8s:io.kubernetes.pod.namespace=kube-system;k8s:k8s-app=kube-dns;" subsys=allocator level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="Identity of endpoint changed" containerID=7585fb178c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=671 identity=7106 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.168 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-n9gkb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7585fb178c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=671 identity=7106 ipv4=10.0.0.168 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-n9gkb subsys=endpoint level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4045 ipv4=10.0.0.189 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4045 identityLabels="reserved:health" ipv4=10.0.0.189 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4045 identity=4 identityLabels="reserved:health" ipv4=10.0.0.189 ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=certgen;k8s:batch.kubernetes.io/controller-uid=593158c5-8c2c-4285-9a6b-1c0a4f5434e9;k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen;k8s:controller-uid=593158c5-8c2c-4285-9a6b-1c0a4f5434e9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;k8s:job-name=envoy-gateway-gateway-helm-certgen;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=72ee4d5109 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3020 identity=47617 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=593158c5-8c2c-4285-9a6b-1c0a4f5434e9,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=593158c5-8c2c-4285-9a6b-1c0a4f5434e9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.160 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-fw2hg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=72ee4d5109 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3020 identity=47617 ipv4=10.0.0.160 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-fw2hg subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Serving cilium health API at unix:///var/run/cilium/health.sock" subsys=health-server level=info msg="Compiled new BPF template" BPFCompilationTime=1.150105852s file-path=/var/run/cilium/state/templates/91b28c06ef31366437a333e402e3a2d149b2c7b48470a6ad79d080dad267b95b/bpf_lxc.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=4045 identity=4 ipv4=10.0.0.189 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=72ee4d5109 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3020 identity=47617 ipv4=10.0.0.160 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-fw2hg subsys=endpoint level=info msg="Successful endpoint creation" containerID=72ee4d5109 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3020 identity=47617 ipv4=10.0.0.160 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-fw2hg subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=7585fb178c datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=671 identity=7106 ipv4=10.0.0.168 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-n9gkb subsys=endpoint level=info msg="Successful endpoint creation" containerID=7585fb178c datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=671 identity=7106 ipv4=10.0.0.168 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-n9gkb subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=72ee4d5109 endpointID=3020 k8sNamespace=envoy-gateway-system k8sPodName=envoy-gateway-gateway-helm-certgen-fw2hg subsys=daemon level=info msg="Releasing key" key="[k8s:app=certgen k8s:batch.kubernetes.io/controller-uid=593158c5-8c2c-4285-9a6b-1c0a4f5434e9 k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen k8s:controller-uid=593158c5-8c2c-4285-9a6b-1c0a4f5434e9 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen k8s:io.kubernetes.pod.namespace=envoy-gateway-system k8s:job-name=envoy-gateway-gateway-helm-certgen]" subsys=allocator level=info msg="Removed endpoint" containerID=72ee4d5109 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3020 identity=47617 ipv4=10.0.0.160 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-fw2hg subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.137 8b20206e-29e7-4eff-b599-bcebc955953d default }" containerID=9fc51809b4c7c7169346df98bcf34e6f229bc32165df7350f4cfaac4c3c5a7d6 datapathConfiguration="&{false false false false false }" interface=lxcf15e2c4d3dfd k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-gc9wb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9fc51809b4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2690 ipv4=10.0.0.137 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-gc9wb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9fc51809b4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2690 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.137 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-gc9wb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=envoy-gateway;k8s:app.kubernetes.io/name=gateway-helm;k8s:control-plane=envoy-gateway;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9fc51809b4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2690 identity=11246 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.137 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-gc9wb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9fc51809b4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2690 identity=11246 ipv4=10.0.0.137 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-gc9wb subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=9fc51809b4 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2690 identity=11246 ipv4=10.0.0.137 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-gc9wb subsys=endpoint level=info msg="Successful endpoint creation" containerID=9fc51809b4 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2690 identity=11246 ipv4=10.0.0.137 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-gc9wb subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3442 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_03442 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_03442 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_03442 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_03442:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3442 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.38 26949f44-f385-4b0b-bf93-69fdd9984beb default }" containerID=34f667c0c1c68391161cb758a1bd738c161ec15383ff5a3e636546de044e5d17 datapathConfiguration="&{false false false false false }" interface=lxc9a75d9147277 k8sPodName=kube-system/coredns-67659f764b-hwckc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=34f667c0c1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=276 ipv4=10.0.0.38 ipv6= k8sPodName=kube-system/coredns-67659f764b-hwckc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=34f667c0c1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=276 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.38 ipv6= k8sPodName=kube-system/coredns-67659f764b-hwckc subsys=endpoint level=info msg="Identity of endpoint changed" containerID=34f667c0c1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=276 identity=7106 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.38 ipv6= k8sPodName=kube-system/coredns-67659f764b-hwckc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=34f667c0c1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=276 identity=7106 ipv4=10.0.0.38 ipv6= k8sPodName=kube-system/coredns-67659f764b-hwckc subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=34f667c0c1 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=276 identity=7106 ipv4=10.0.0.38 ipv6= k8sPodName=kube-system/coredns-67659f764b-hwckc subsys=endpoint level=info msg="Successful endpoint creation" containerID=34f667c0c1 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=276 identity=7106 ipv4=10.0.0.38 ipv6= k8sPodName=kube-system/coredns-67659f764b-hwckc subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.120 f47336c0-dae1-44f4-ad7f-ddfd9f6ff7e1 default }" containerID=87be9ae50ffb514e2c78cceb81669c55460b41c1a52b94c236f9e07d66984222 datapathConfiguration="&{false false false false false }" interface=lxc43cbcfbb2678 k8sPodName=kube-system/coredns-67659f764b-c2r26 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=87be9ae50f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1276 ipv4=10.0.0.120 ipv6= k8sPodName=kube-system/coredns-67659f764b-c2r26 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=87be9ae50f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1276 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.120 ipv6= k8sPodName=kube-system/coredns-67659f764b-c2r26 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=87be9ae50f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1276 identity=7106 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.120 ipv6= k8sPodName=kube-system/coredns-67659f764b-c2r26 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=87be9ae50f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1276 identity=7106 ipv4=10.0.0.120 ipv6= k8sPodName=kube-system/coredns-67659f764b-c2r26 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=87be9ae50f datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1276 identity=7106 ipv4=10.0.0.120 ipv6= k8sPodName=kube-system/coredns-67659f764b-c2r26 subsys=endpoint level=info msg="Successful endpoint creation" containerID=87be9ae50f datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1276 identity=7106 ipv4=10.0.0.120 ipv6= k8sPodName=kube-system/coredns-67659f764b-c2r26 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.123 364d6fc1-fdd3-47a2-8691-d6acd2474d0b default }" containerID=b657d33c218a106ade76dd9b7e0c0500424c6741c45491fc04443f93e85fcb02 datapathConfiguration="&{false false false false false }" interface=lxcc0d13e26a3ad k8sPodName=local-path-storage/local-path-provisioner-679c578f5-5dh85 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b657d33c21 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=5 ipv4=10.0.0.123 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-5dh85 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b657d33c21 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=5 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.123 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-5dh85 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=local-path-provisioner;k8s:app.kubernetes.io/name=local-path-provisioner;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b657d33c21 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=5 identity=15440 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.123 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-5dh85 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b657d33c21 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=5 identity=15440 ipv4=10.0.0.123 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-5dh85 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=b657d33c21 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=5 identity=15440 ipv4=10.0.0.123 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-5dh85 subsys=endpoint level=info msg="Successful endpoint creation" containerID=b657d33c21 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=5 identity=15440 ipv4=10.0.0.123 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-5dh85 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=7585fb178c endpointID=671 k8sNamespace=kube-system k8sPodName=coredns-7c96b6546b-n9gkb subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=coredns k8s:io.kubernetes.pod.namespace=kube-system k8s:k8s-app=kube-dns]" subsys=allocator level=info msg="Removed endpoint" containerID=7585fb178c datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=671 identity=7106 ipv4=10.0.0.168 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-n9gkb subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.9 81feb38e-0aa3-40ca-b2e0-98f8371747f7 default }" containerID=8af32338c8b4bd7a014f44e9ff0ebb5486240bc55d6401208974d5204a34cb98 datapathConfiguration="&{false false false false false }" interface=lxc82f22c6cd0cc k8sPodName=cert-manager/cert-manager-75c4c745bc-9stmk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8af32338c8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=166 ipv4=10.0.0.9 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-9stmk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8af32338c8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=166 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.9 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-9stmk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=cert-manager;k8s:app.kubernetes.io/component=controller;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cert-manager;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=8af32338c8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=166 identity=33545 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.9 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-9stmk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8af32338c8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=166 identity=33545 ipv4=10.0.0.9 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-9stmk subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.225 ae2e3ad3-19dd-493e-ae2b-cbcd4ca3198b default }" containerID=704bdf44d11a889fd70140757f2e0710628d0be0e48c67b9be8007da0220c49e datapathConfiguration="&{false false false false false }" interface=lxc430cc0ac75e5 k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-kv7lh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=704bdf44d1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1192 ipv4=10.0.0.225 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-kv7lh subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.210 1ecafd7d-a13e-42c5-a874-4f2211b119f6 default }" containerID=77abd7530667bedbfc4b8aeef225ee828a4c06078196b37d07d68459556a5ecd datapathConfiguration="&{false false false false false }" interface=lxc095b64241ff0 k8sPodName=cert-manager/cert-manager-webhook-548949fc64-dq6lw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=77abd75306 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3106 ipv4=10.0.0.210 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-dq6lw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=77abd75306 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3106 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.210 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-dq6lw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Resolving identity labels (blocking)" containerID=704bdf44d1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1192 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.225 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-kv7lh subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=webhook;k8s:app.kubernetes.io/component=webhook;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=webhook;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Identity of endpoint changed" containerID=77abd75306 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3106 identity=3881 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.210 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-dq6lw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=77abd75306 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3106 identity=3881 ipv4=10.0.0.210 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-dq6lw subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=cainjector;k8s:app.kubernetes.io/component=cainjector;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cainjector;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=704bdf44d1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1192 identity=22915 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.225 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-kv7lh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=704bdf44d1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1192 identity=22915 ipv4=10.0.0.225 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-kv7lh subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8af32338c8 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=166 identity=33545 ipv4=10.0.0.9 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-9stmk subsys=endpoint level=info msg="Successful endpoint creation" containerID=8af32338c8 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=166 identity=33545 ipv4=10.0.0.9 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-9stmk subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=77abd75306 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3106 identity=3881 ipv4=10.0.0.210 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-dq6lw subsys=endpoint level=info msg="Successful endpoint creation" containerID=77abd75306 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3106 identity=3881 ipv4=10.0.0.210 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-dq6lw subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=704bdf44d1 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1192 identity=22915 ipv4=10.0.0.225 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-kv7lh subsys=endpoint level=info msg="Successful endpoint creation" containerID=704bdf44d1 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1192 identity=22915 ipv4=10.0.0.225 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-kv7lh subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.172 d0434223-b116-4a97-b8a2-45773b2f239f default }" containerID=a33dd484ed7073a7d55e0189ee78d22add3d9a2805ee565215b75e2b8f0fc14e datapathConfiguration="&{false false false false false }" interface=lxc824d5abec72f k8sPodName=cert-manager/cert-manager-startupapicheck-c4bvw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a33dd484ed datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1162 ipv4=10.0.0.172 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-c4bvw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a33dd484ed datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1162 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=f7522fe3-3635-4f59-bdb5-738dbbb575e8,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=f7522fe3-3635-4f59-bdb5-738dbbb575e8,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.172 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-c4bvw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=startupapicheck;k8s:app.kubernetes.io/component=startupapicheck;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=startupapicheck;k8s:app.kubernetes.io/version=v1.11.5;k8s:batch.kubernetes.io/controller-uid=f7522fe3-3635-4f59-bdb5-738dbbb575e8;k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck;k8s:controller-uid=f7522fe3-3635-4f59-bdb5-738dbbb575e8;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck;k8s:io.kubernetes.pod.namespace=cert-manager;k8s:job-name=cert-manager-startupapicheck;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a33dd484ed datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1162 identity=37483 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=f7522fe3-3635-4f59-bdb5-738dbbb575e8,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=f7522fe3-3635-4f59-bdb5-738dbbb575e8,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.172 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-c4bvw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a33dd484ed datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1162 identity=37483 ipv4=10.0.0.172 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-c4bvw subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a33dd484ed datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1162 identity=37483 ipv4=10.0.0.172 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-c4bvw subsys=endpoint level=info msg="Successful endpoint creation" containerID=a33dd484ed datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1162 identity=37483 ipv4=10.0.0.172 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-c4bvw subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=a33dd484ed endpointID=1162 k8sNamespace=cert-manager k8sPodName=cert-manager-startupapicheck-c4bvw subsys=daemon level=info msg="Releasing key" key="[k8s:app=startupapicheck k8s:app.kubernetes.io/component=startupapicheck k8s:app.kubernetes.io/instance=cert-manager k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=startupapicheck k8s:app.kubernetes.io/version=v1.11.5 k8s:batch.kubernetes.io/controller-uid=f7522fe3-3635-4f59-bdb5-738dbbb575e8 k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck k8s:controller-uid=f7522fe3-3635-4f59-bdb5-738dbbb575e8 k8s:helm.sh/chart=cert-manager-v1.11.5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager k8s:io.cilium.k8s.namespace.labels.name=cert-manager k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck k8s:io.kubernetes.pod.namespace=cert-manager k8s:job-name=cert-manager-startupapicheck]" subsys=allocator level=info msg="Removed endpoint" containerID=a33dd484ed datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1162 identity=37483 ipv4=10.0.0.172 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-c4bvw subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.149 06670e25-cbbf-459e-ad1e-1ad60b47bb0f default }" containerID=6bc627cba66c95261ea58e2d3f6772d537c0dcfa5a4f135434232a780f788ae8 datapathConfiguration="&{false false false false false }" interface=lxc7332ddc1593c k8sPodName=ingress-nginx/ingress-nginx-admission-create-6kqhf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6bc627cba6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3902 ipv4=10.0.0.149 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-6kqhf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6bc627cba6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3902 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=297127b9-1236-4927-b88c-63ddc2fa486f,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=297127b9-1236-4927-b88c-63ddc2fa486f,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.149 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-6kqhf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=297127b9-1236-4927-b88c-63ddc2fa486f;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create;k8s:controller-uid=297127b9-1236-4927-b88c-63ddc2fa486f;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-create;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6bc627cba6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3902 identity=16730 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=297127b9-1236-4927-b88c-63ddc2fa486f,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=297127b9-1236-4927-b88c-63ddc2fa486f,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.149 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-6kqhf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6bc627cba6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3902 identity=16730 ipv4=10.0.0.149 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-6kqhf subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=6bc627cba6 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3902 identity=16730 ipv4=10.0.0.149 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-6kqhf subsys=endpoint level=info msg="Successful endpoint creation" containerID=6bc627cba6 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3902 identity=16730 ipv4=10.0.0.149 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-6kqhf subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=6bc627cba6 endpointID=3902 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-create-6kqhf subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=297127b9-1236-4927-b88c-63ddc2fa486f k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create k8s:controller-uid=297127b9-1236-4927-b88c-63ddc2fa486f k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-create]" subsys=allocator level=info msg="Removed endpoint" containerID=6bc627cba6 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3902 identity=16730 ipv4=10.0.0.149 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-6kqhf subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.160 86fc3c28-880e-4a3a-96a1-fdeed460fe9a default }" containerID=34a0e222d1329ac284f7cbe7800d30ad0434cd25e4369131078a9a53c42ca489 datapathConfiguration="&{false false false false false }" interface=lxcb0e8a475cc21 k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-b6kh8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=34a0e222d1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=225 ipv4=10.0.0.160 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-b6kh8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=34a0e222d1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=225 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.160 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-b6kh8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=34a0e222d1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=225 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.160 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-b6kh8 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=default-backend;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend;k8s:io.kubernetes.pod.namespace=ingress-nginx;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=34a0e222d1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=225 identity=928 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.160 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-b6kh8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=34a0e222d1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=225 identity=928 ipv4=10.0.0.160 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-b6kh8 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=34a0e222d1 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=225 identity=928 ipv4=10.0.0.160 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-b6kh8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=34a0e222d1 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=225 identity=928 ipv4=10.0.0.160 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-b6kh8 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.10 d1f25cae-31f1-4257-a640-fcdf495f11c8 default }" containerID=3a9149c989a13199a7eee31756118632a425fc11da82134cbd3e79b075ca7fea datapathConfiguration="&{false false false false false }" interface=lxc8a943b6ce111 k8sPodName=ingress-nginx/ingress-nginx-admission-patch-f77n7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3a9149c989 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3501 ipv4=10.0.0.10 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-f77n7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3a9149c989 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3501 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=3bd46351-2421-4b89-abf8-97d6f2f73089,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=3bd46351-2421-4b89-abf8-97d6f2f73089,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.10 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-f77n7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=3bd46351-2421-4b89-abf8-97d6f2f73089;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch;k8s:controller-uid=3bd46351-2421-4b89-abf8-97d6f2f73089;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-patch;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3a9149c989 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3501 identity=63287 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=3bd46351-2421-4b89-abf8-97d6f2f73089,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=3bd46351-2421-4b89-abf8-97d6f2f73089,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.10 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-f77n7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3a9149c989 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3501 identity=63287 ipv4=10.0.0.10 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-f77n7 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3a9149c989 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3501 identity=63287 ipv4=10.0.0.10 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-f77n7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=3a9149c989 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3501 identity=63287 ipv4=10.0.0.10 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-f77n7 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=3a9149c989 endpointID=3501 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-patch-f77n7 subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=3bd46351-2421-4b89-abf8-97d6f2f73089 k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch k8s:controller-uid=3bd46351-2421-4b89-abf8-97d6f2f73089 k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-patch]" subsys=allocator level=info msg="Removed endpoint" containerID=3a9149c989 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3501 identity=63287 ipv4=10.0.0.10 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-f77n7 subsys=endpoint level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"messaging-topology-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9443 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-messaging-topology-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=29635df2-bc72-41e3-b50f-f0c7ac78379a] Description:}]" policyAddRequest=f79a14c3-700b-45d9-b415-dc252b0a2435 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=f79a14c3-700b-45d9-b415-dc252b0a2435 policyRevision=2 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-messaging-topology-operator subsys=k8s-watcher level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"rabbitmq-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-cluster-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=6128e8ca-43fc-4ac5-b4c5-770f4bc4ae11] Description:}]" policyAddRequest=848ae3af-cf22-4bb4-b33d-f61cf4bc15c7 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=848ae3af-cf22-4bb4-b33d-f61cf4bc15c7 policyRevision=3 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-cluster-operator subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.128 487c1576-8940-4fe9-895f-bd86dc5adf99 default }" containerID=df5188a96783e45f0f7541e013b7cc002336ce4f2a787f6633e2df90a7e0f358 datapathConfiguration="&{false false false false false }" interface=lxce13f8ef530b7 k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-87pgh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=df5188a967 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1470 ipv4=10.0.0.128 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-87pgh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=df5188a967 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1470 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.14.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.128 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-87pgh subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.56 50cde86d-294e-4a38-b2a8-1e3a089f8492 default }" containerID=5145cdc8670dc82168c1f024d14f926367553ea3ce390db90b367c15420c2db9 datapathConfiguration="&{false false false false false }" interface=lxc6d6d254ec50f k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-gm4kf labels="[]" subsys=daemon sync-build=true level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="New endpoint" containerID=5145cdc867 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1542 ipv4=10.0.0.56 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-gm4kf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5145cdc867 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1542 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.9.0,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.56 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-gm4kf subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=messaging-topology-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=1.14.1;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=df5188a967 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1470 identity=36317 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.14.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.128 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-87pgh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=df5188a967 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1470 identity=36317 ipv4=10.0.0.128 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-87pgh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=5145cdc867 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1542 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.56 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-gm4kf line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=2.9.0;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5145cdc867 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1542 identity=1744 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.9.0,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.56 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-gm4kf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5145cdc867 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1542 identity=1744 ipv4=10.0.0.56 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-gm4kf subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5145cdc867 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1542 identity=1744 ipv4=10.0.0.56 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-gm4kf subsys=endpoint level=info msg="Successful endpoint creation" containerID=5145cdc867 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1542 identity=1744 ipv4=10.0.0.56 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-gm4kf subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=df5188a967 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1470 identity=36317 ipv4=10.0.0.128 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-87pgh subsys=endpoint level=info msg="Successful endpoint creation" containerID=df5188a967 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1470 identity=36317 ipv4=10.0.0.128 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-87pgh subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.33 0292c42a-8708-4787-b0ed-581dc474aa38 default }" containerID=44349937da78c97df6bde53006270c532d5fb4629057509b5af8425ccbc2f589 datapathConfiguration="&{false false false false false }" interface=lxc4cc8f3c8395d k8sPodName=openstack/pxc-operator-7cff949c8b-z7zdt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=44349937da datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1720 ipv4=10.0.0.33 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-z7zdt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=44349937da datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1720 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.33 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-z7zdt subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=operator;k8s:app.kubernetes.io/instance=pxc-operator;k8s:app.kubernetes.io/name=pxc-operator;k8s:app.kubernetes.io/part-of=pxc-operator;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=44349937da datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1720 identity=12292 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.33 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-z7zdt oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=44349937da datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1720 identity=12292 ipv4=10.0.0.33 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-z7zdt subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=44349937da datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1720 identity=12292 ipv4=10.0.0.33 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-z7zdt subsys=endpoint level=info msg="Successful endpoint creation" containerID=44349937da datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1720 identity=12292 ipv4=10.0.0.33 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-z7zdt subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.153 5bb301f5-704d-448f-98e3-1eb5cbd58a18 default }" containerID=d89678bc17a62225908ec42b1135d483bceef1d0242d524904cd652f66834de3 datapathConfiguration="&{false false false false false }" interface=lxc018119caf203 k8sPodName=openstack/percona-xtradb-haproxy-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d89678bc17 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=13 ipv4=10.0.0.153 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d89678bc17 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=13 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.153 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=haproxy;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=d89678bc17 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=13 identity=40988 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.153 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d89678bc17 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=13 identity=40988 ipv4=10.0.0.153 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d89678bc17 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=13 identity=40988 ipv4=10.0.0.153 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=d89678bc17 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=13 identity=40988 ipv4=10.0.0.153 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.176 9abebdc9-d05c-4ae9-8c3c-b777b28dd880 default }" containerID=14f2e6cf70dca5817c17762f059250a62690357ad2e9a2c5ce9db7efae5705e3 datapathConfiguration="&{false false false false false }" interface=lxcf5135da65a4e k8sPodName=local-path-storage/helper-pod-create-pvc-3fbe18ed-7ea1-4d32-b73a-9c3461d5443d labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=14f2e6cf70 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1191 ipv4=10.0.0.176 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3fbe18ed-7ea1-4d32-b73a-9c3461d5443d subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=14f2e6cf70 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1191 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.176 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3fbe18ed-7ea1-4d32-b73a-9c3461d5443d subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=14f2e6cf70 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1191 identity=12427 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.176 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3fbe18ed-7ea1-4d32-b73a-9c3461d5443d oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=14f2e6cf70 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1191 identity=12427 ipv4=10.0.0.176 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3fbe18ed-7ea1-4d32-b73a-9c3461d5443d subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=14f2e6cf70 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1191 identity=12427 ipv4=10.0.0.176 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3fbe18ed-7ea1-4d32-b73a-9c3461d5443d subsys=endpoint level=info msg="Successful endpoint creation" containerID=14f2e6cf70 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1191 identity=12427 ipv4=10.0.0.176 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3fbe18ed-7ea1-4d32-b73a-9c3461d5443d subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=14f2e6cf70 endpointID=1191 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-3fbe18ed-7ea1-4d32-b73a-9c3461d5443d subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=14f2e6cf70 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1191 identity=12427 ipv4=10.0.0.176 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3fbe18ed-7ea1-4d32-b73a-9c3461d5443d subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.94 dd4af2f3-477b-4f27-873a-77b0a000ae35 default }" containerID=a2b2efeba127d907ec0663baac47965e2daf20b76be6b4b8764166cc6e7519ca datapathConfiguration="&{false false false false false }" interface=lxc50a806c2d19e k8sPodName=openstack/percona-xtradb-pxc-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a2b2efeba1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=10 ipv4=10.0.0.94 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a2b2efeba1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=10 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.94 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=a2b2efeba1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=10 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.94 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=pxc;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a2b2efeba1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=10 identity=55526 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.94 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a2b2efeba1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=10 identity=55526 ipv4=10.0.0.94 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a2b2efeba1 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=10 identity=55526 ipv4=10.0.0.94 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=a2b2efeba1 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=10 identity=55526 ipv4=10.0.0.94 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/instance\":\"valkey\",\"k8s:app.kubernetes.io/name\":\"valkey\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:6379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:26379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:} {IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9121 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=valkey k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=6fa8a4ba-bbe6-42d0-976a-81bbd12c2921] Description:}]" policyAddRequest=3eb211c6-fb8a-4686-9f08-34ea9f39093c subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=3eb211c6-fb8a-4686-9f08-34ea9f39093c policyRevision=4 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=valkey subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.252 bbbb99cc-dde5-48e4-a570-413c033262ca default }" containerID=58129c657d42b7097e3074103cc8a6c9b3d1cd58a4558d8b1b2ac047e4e297bd datapathConfiguration="&{false false false false false }" interface=lxcfdf91c8cc1db k8sPodName=local-path-storage/helper-pod-create-pvc-8124ca2d-be1b-4d67-b303-046f1d8d7a3b labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=58129c657d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=836 ipv4=10.0.0.252 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8124ca2d-be1b-4d67-b303-046f1d8d7a3b subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=58129c657d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=836 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.252 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8124ca2d-be1b-4d67-b303-046f1d8d7a3b subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=58129c657d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=836 identity=12427 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.252 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8124ca2d-be1b-4d67-b303-046f1d8d7a3b oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=58129c657d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=836 identity=12427 ipv4=10.0.0.252 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8124ca2d-be1b-4d67-b303-046f1d8d7a3b subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=58129c657d datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=836 identity=12427 ipv4=10.0.0.252 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8124ca2d-be1b-4d67-b303-046f1d8d7a3b subsys=endpoint level=info msg="Successful endpoint creation" containerID=58129c657d datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=836 identity=12427 ipv4=10.0.0.252 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8124ca2d-be1b-4d67-b303-046f1d8d7a3b subsys=daemon level=info msg="Delete endpoint request" containerID=58129c657d endpointID=836 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-8124ca2d-be1b-4d67-b303-046f1d8d7a3b subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=58129c657d datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=836 identity=12427 ipv4=10.0.0.252 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8124ca2d-be1b-4d67-b303-046f1d8d7a3b subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.142 f14d79bd-52d8-470e-8753-3737de156431 default }" containerID=171edcbddb30300bffd361e2366ba150e0eea0d836f131437891575530a6d50d datapathConfiguration="&{false false false false false }" interface=lxcaa26a3ad06ac k8sPodName=openstack/valkey-node-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=171edcbddb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=553 ipv4=10.0.0.142 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=171edcbddb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=553 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.142 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=node;k8s:app.kubernetes.io/instance=valkey;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=valkey;k8s:app.kubernetes.io/version=8.0.2;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=valkey-2.4.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=valkey;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=valkey-node-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=171edcbddb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=553 identity=36436 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.142 ipv6= k8sPodName=openstack/valkey-node-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=171edcbddb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=553 identity=36436 ipv4=10.0.0.142 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=171edcbddb datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=553 identity=36436 ipv4=10.0.0.142 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=171edcbddb datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=553 identity=36436 ipv4=10.0.0.142 ipv6= k8sPodName=openstack/valkey-node-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"keycloak\",\"k8s:app.kubernetes.io/instance\":\"keycloak\",\"k8s:app.kubernetes.io/name\":\"keycloak\",\"k8s:io.kubernetes.pod.namespace\":\"auth-system\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:7800 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:8080 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=keycloak k8s:io.cilium.k8s.policy.namespace=auth-system k8s:io.cilium.k8s.policy.uid=54e080d3-8f04-4db5-8e2c-683c80893265] Description:}]" policyAddRequest=549439d6-8f75-49b8-a6a8-788027a214c4 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=549439d6-8f75-49b8-a6a8-788027a214c4 policyRevision=5 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=keycloak subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.10 60118cd4-7e93-4ef4-96bb-7958076780bc default }" containerID=c1a5b88f8664e70a480d556aae947b33308d614d2ffe3b59f88cd2dea9d43489 datapathConfiguration="&{false false false false false }" interface=lxcb06e4cdd862e k8sPodName=auth-system/keycloak-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c1a5b88f86 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1545 ipv4=10.0.0.10 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c1a5b88f86 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1545 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.10 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:auth-system k8s:io.cilium.k8s.namespace.labels.name:auth-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=keycloak;k8s:app.kubernetes.io/instance=keycloak;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=keycloak;k8s:app.kubernetes.io/version=24.0.5;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=keycloak-21.4.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system;k8s:io.cilium.k8s.namespace.labels.name=auth-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keycloak;k8s:io.kubernetes.pod.namespace=auth-system;k8s:statefulset.kubernetes.io/pod-name=keycloak-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c1a5b88f86 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1545 identity=9401 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.10 ipv6= k8sPodName=auth-system/keycloak-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=c1a5b88f86 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1545 identity=9401 ipv4=10.0.0.10 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c1a5b88f86 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1545 identity=9401 ipv4=10.0.0.10 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=c1a5b88f86 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1545 identity=9401 ipv4=10.0.0.10 ipv6= k8sPodName=auth-system/keycloak-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.00974271916890987 newInterval=7m30s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.3 a91c2d32-fa60-4af3-b46b-c6ebb0222c20 default }" containerID=e99184b512d79225d824f2702bbfd958523acf76441d978e4519ef4525c4a6a5 datapathConfiguration="&{false false false false false }" interface=lxc1bd842fc7eb9 k8sPodName=monitoring/node-feature-discovery-worker-8n464 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e99184b512 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=368 ipv4=10.0.0.3 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-8n464 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e99184b512 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=368 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.3 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-8n464 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=e99184b512 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=368 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.3 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-8n464 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=worker;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e99184b512 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=368 identity=51873 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.3 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-8n464 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e99184b512 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=368 identity=51873 ipv4=10.0.0.3 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-8n464 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e99184b512 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=368 identity=51873 ipv4=10.0.0.3 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-8n464 subsys=endpoint level=info msg="Successful endpoint creation" containerID=e99184b512 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=368 identity=51873 ipv4=10.0.0.3 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-8n464 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.14 70155066-68ee-4968-ad5a-5934ef6c83fa default }" containerID=e2bb19586ded4bf53cc3d27d72cdd242076e0ade1d65f47a664f2f6e33e17717 datapathConfiguration="&{false false false false false }" interface=lxc4c69403da881 k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-z2g7l labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e2bb19586d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=52 ipv4=10.0.0.14 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-z2g7l subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e2bb19586d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=52 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.14 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-z2g7l subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.21 2cb21788-f342-43e7-9045-573582bfac0d default }" containerID=3fd62fd7898811093a7c1a71a3ef7c767d61fad44963e5d1af4fc07acdc2da79 datapathConfiguration="&{false false false false false }" interface=lxcdbb2ca8cc663 k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-hlcxk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3fd62fd789 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=156 ipv4=10.0.0.21 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-hlcxk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3fd62fd789 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=156 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.21 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-hlcxk subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=master;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e2bb19586d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=52 identity=10349 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.14 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-z2g7l oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e2bb19586d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=52 identity=10349 ipv4=10.0.0.14 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-z2g7l subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=gc;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3fd62fd789 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=156 identity=36769 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.21 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-hlcxk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3fd62fd789 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=156 identity=36769 ipv4=10.0.0.21 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-hlcxk subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e2bb19586d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=52 identity=10349 ipv4=10.0.0.14 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-z2g7l subsys=endpoint level=info msg="Successful endpoint creation" containerID=e2bb19586d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=52 identity=10349 ipv4=10.0.0.14 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-z2g7l subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=3fd62fd789 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=156 identity=36769 ipv4=10.0.0.21 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-hlcxk subsys=endpoint level=info msg="Successful endpoint creation" containerID=3fd62fd789 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=156 identity=36769 ipv4=10.0.0.21 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-hlcxk subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.130 cc6f537e-535f-4161-99d9-d1aaef22ea96 default }" containerID=3be3613aa7e07e391bcfcf06be570ed56f96cbf2a4dcf2eb672c25c91768640d datapathConfiguration="&{false false false false false }" interface=lxca8597f71767e k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-6jwkg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3be3613aa7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2817 ipv4=10.0.0.130 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-6jwkg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3be3613aa7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2817 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.130 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-6jwkg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:secretgen-controller]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=secretgen-controller;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa;k8s:io.kubernetes.pod.namespace=secretgen-controller;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3be3613aa7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2817 identity=24177 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.130 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-6jwkg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3be3613aa7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2817 identity=24177 ipv4=10.0.0.130 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-6jwkg subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3be3613aa7 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2817 identity=24177 ipv4=10.0.0.130 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-6jwkg subsys=endpoint level=info msg="Successful endpoint creation" containerID=3be3613aa7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2817 identity=24177 ipv4=10.0.0.130 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-6jwkg subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3442 identity=1 identityLabels="k8s:feature.node.kubernetes.io/cpu-cpuid.ADX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AESNI=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX2=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CLZERO=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CMPXCHG8=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FMA3=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSROPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.HYPERVISOR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IA32_ARCH_CAP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBPB=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBRS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.LAHF=true,k8s:feature.node.kubernetes.io/cpu-cpuid.MOVBE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.NRIPS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.OSXSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SHA=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SPEC_CTRL_SSBD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SSE4A=true,k8s:feature.node.kubernetes.io/cpu-cpuid.STIBP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVM=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVMNP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSCALL=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSEE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.TOPEXT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.WBNOINVD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.X87=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XGETBV1=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEC=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEOPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVES=true,k8s:feature.node.kubernetes.io/cpu-hardware_multithreading=false,k8s:feature.node.kubernetes.io/cpu-model.family=23,k8s:feature.node.kubernetes.io/cpu-model.id=49,k8s:feature.node.kubernetes.io/cpu-model.vendor_id=AMD,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ=true,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ_IDLE=true,k8s:feature.node.kubernetes.io/kernel-version.full=5.15.0-174-generic,k8s:feature.node.kubernetes.io/kernel-version.major=5,k8s:feature.node.kubernetes.io/kernel-version.minor=15,k8s:feature.node.kubernetes.io/kernel-version.revision=0,k8s:feature.node.kubernetes.io/pci-0300_1af4.present=true,k8s:feature.node.kubernetes.io/system-os_release.ID=ubuntu,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.major=22,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.minor=04,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID=22.04,k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_03442 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_03442 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_03442 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_03442:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3442 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.190 6d6ecbac-8187-4868-87cd-5ece5c61e45f default }" containerID=700e72ceffbb3883818c9cb8f828079fda21f66b5f885cb159920a54e2096448 datapathConfiguration="&{false false false false false }" interface=lxcb336185b4487 k8sPodName=monitoring/kube-prometheus-stack-admission-create-sk9rd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=700e72ceff datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=845 ipv4=10.0.0.190 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-sk9rd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=700e72ceff datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=845 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=ec15491a-75fa-47ae-aa88-99c71857f592,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=ec15491a-75fa-47ae-aa88-99c71857f592,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.190 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-sk9rd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-create;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=ec15491a-75fa-47ae-aa88-99c71857f592;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=ec15491a-75fa-47ae-aa88-99c71857f592;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-create;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=700e72ceff datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=845 identity=2475 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=ec15491a-75fa-47ae-aa88-99c71857f592,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=ec15491a-75fa-47ae-aa88-99c71857f592,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.190 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-sk9rd oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=700e72ceff datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=845 identity=2475 ipv4=10.0.0.190 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-sk9rd subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=700e72ceff datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=845 identity=2475 ipv4=10.0.0.190 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-sk9rd subsys=endpoint level=info msg="Successful endpoint creation" containerID=700e72ceff datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=845 identity=2475 ipv4=10.0.0.190 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-sk9rd subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=700e72ceff endpointID=845 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-create-sk9rd subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-create k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=ec15491a-75fa-47ae-aa88-99c71857f592 k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=ec15491a-75fa-47ae-aa88-99c71857f592 k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-create k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=700e72ceff datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=845 identity=2475 ipv4=10.0.0.190 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-sk9rd subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.80 07451784-e6f8-4b7f-b751-fe6ec9f8a0e8 default }" containerID=45142ad5e23825768cf104341f3f0166deb481413c3c7c95687fffb1678526b9 datapathConfiguration="&{false false false false false }" interface=lxc351d7522f512 k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-n66tr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=45142ad5e2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1267 ipv4=10.0.0.80 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-n66tr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=45142ad5e2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1267 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.80 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-n66tr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.133 bf62f640-9376-4203-b219-3938e39cf2c3 default }" containerID=ac27e6a5d95d2bc37a5eabaec33d2a64bb544b7e8ddcd7c38d2562da00994e06 datapathConfiguration="&{false false false false false }" interface=lxc889de34c9606 k8sPodName=monitoring/kube-prometheus-stack-grafana-74b8454c79-wbctm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ac27e6a5d9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1069 ipv4=10.0.0.133 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-74b8454c79-wbctm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ac27e6a5d9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1069 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.133 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-74b8454c79-wbctm subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-operator;k8s:app.kubernetes.io/component=prometheus-operator;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:chart=kube-prometheus-stack-60.2.0;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=45142ad5e2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1267 identity=52785 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.80 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-n66tr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=45142ad5e2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1267 identity=52785 ipv4=10.0.0.80 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-n66tr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=ac27e6a5d9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1069 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.133 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-74b8454c79-wbctm line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/name=grafana;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ac27e6a5d9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1069 identity=23946 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.133 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-74b8454c79-wbctm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ac27e6a5d9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1069 identity=23946 ipv4=10.0.0.133 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-74b8454c79-wbctm subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.32 aebd5184-6527-41c6-b76a-effbc66ca4e4 default }" containerID=5855a4e89a85ed77bb313e2cbcb15711bff16a01d0821dbf9d1b9de967437707 datapathConfiguration="&{false false false false false }" interface=lxcee8c7fd8a1e5 k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-ghf75 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5855a4e89a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=979 ipv4=10.0.0.32 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-ghf75 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5855a4e89a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=979 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.32 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-ghf75 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=metrics;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-state-metrics;k8s:app.kubernetes.io/part-of=kube-state-metrics;k8s:app.kubernetes.io/version=2.12.0;k8s:helm.sh/chart=kube-state-metrics-5.20.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5855a4e89a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=979 identity=24350 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.32 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-ghf75 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5855a4e89a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=979 identity=24350 ipv4=10.0.0.32 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-ghf75 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=45142ad5e2 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1267 identity=52785 ipv4=10.0.0.80 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-n66tr subsys=endpoint level=info msg="Successful endpoint creation" containerID=45142ad5e2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1267 identity=52785 ipv4=10.0.0.80 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-n66tr subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=ac27e6a5d9 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1069 identity=23946 ipv4=10.0.0.133 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-74b8454c79-wbctm subsys=endpoint level=info msg="Successful endpoint creation" containerID=ac27e6a5d9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1069 identity=23946 ipv4=10.0.0.133 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-74b8454c79-wbctm subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=5855a4e89a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=979 identity=24350 ipv4=10.0.0.32 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-ghf75 subsys=endpoint level=info msg="Successful endpoint creation" containerID=5855a4e89a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=979 identity=24350 ipv4=10.0.0.32 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-ghf75 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.193 543c63d6-d036-49db-aeae-b11f0f443133 default }" containerID=1719ecc0683645995c7220b12c82ff9d3910d90b29fba7d795783b64205e2b3c datapathConfiguration="&{false false false false false }" interface=lxcaa6035c0fc3b k8sPodName=monitoring/kube-prometheus-stack-admission-patch-mlbmk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1719ecc068 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1535 ipv4=10.0.0.193 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-mlbmk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1719ecc068 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1535 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=c2c23433-c739-4d1d-88bc-f0907db72be5,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=c2c23433-c739-4d1d-88bc-f0907db72be5,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.193 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-mlbmk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-patch;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=c2c23433-c739-4d1d-88bc-f0907db72be5;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=c2c23433-c739-4d1d-88bc-f0907db72be5;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-patch;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1719ecc068 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1535 identity=33310 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=c2c23433-c739-4d1d-88bc-f0907db72be5,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=c2c23433-c739-4d1d-88bc-f0907db72be5,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.193 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-mlbmk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1719ecc068 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1535 identity=33310 ipv4=10.0.0.193 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-mlbmk subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1719ecc068 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1535 identity=33310 ipv4=10.0.0.193 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-mlbmk subsys=endpoint level=info msg="Successful endpoint creation" containerID=1719ecc068 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1535 identity=33310 ipv4=10.0.0.193 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-mlbmk subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.85 f4490d29-d584-435c-992b-d6fe7f2bdece default }" containerID=f354fdd43bb81ebee5bddba2afcc6c56cc4dbbcd1bfbf08e68698173863b78b2 datapathConfiguration="&{false false false false false }" interface=lxceca2e862b393 k8sPodName=local-path-storage/helper-pod-create-pvc-6ade44b3-9f75-4c5e-8c43-1595bdce3683 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f354fdd43b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=400 ipv4=10.0.0.85 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6ade44b3-9f75-4c5e-8c43-1595bdce3683 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f354fdd43b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=400 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.85 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6ade44b3-9f75-4c5e-8c43-1595bdce3683 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f354fdd43b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=400 identity=12427 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.85 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6ade44b3-9f75-4c5e-8c43-1595bdce3683 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f354fdd43b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=400 identity=12427 ipv4=10.0.0.85 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6ade44b3-9f75-4c5e-8c43-1595bdce3683 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f354fdd43b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=400 identity=12427 ipv4=10.0.0.85 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6ade44b3-9f75-4c5e-8c43-1595bdce3683 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f354fdd43b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=400 identity=12427 ipv4=10.0.0.85 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6ade44b3-9f75-4c5e-8c43-1595bdce3683 subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.224 9b588813-e7ae-4757-bf1d-0294af233f89 default }" containerID=fe5b344ea78add1c09a4f01af249f5b4f1672236c92bb97ca9f8dbfce925b720 datapathConfiguration="&{false false false false false }" interface=lxcf94ff8a753ae k8sPodName=local-path-storage/helper-pod-create-pvc-de52dd12-dc35-42c9-9f4e-99ca02f3c464 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fe5b344ea7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=342 ipv4=10.0.0.224 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-de52dd12-dc35-42c9-9f4e-99ca02f3c464 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fe5b344ea7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=342 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.224 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-de52dd12-dc35-42c9-9f4e-99ca02f3c464 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=fe5b344ea7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=342 identity=12427 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.224 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-de52dd12-dc35-42c9-9f4e-99ca02f3c464 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fe5b344ea7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=342 identity=12427 ipv4=10.0.0.224 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-de52dd12-dc35-42c9-9f4e-99ca02f3c464 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=fe5b344ea7 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=342 identity=12427 ipv4=10.0.0.224 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-de52dd12-dc35-42c9-9f4e-99ca02f3c464 subsys=endpoint level=info msg="Successful endpoint creation" containerID=fe5b344ea7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=342 identity=12427 ipv4=10.0.0.224 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-de52dd12-dc35-42c9-9f4e-99ca02f3c464 subsys=daemon level=info msg="Delete endpoint request" containerID=1719ecc068 endpointID=1535 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-patch-mlbmk subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-patch k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=c2c23433-c739-4d1d-88bc-f0907db72be5 k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=c2c23433-c739-4d1d-88bc-f0907db72be5 k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-patch k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=1719ecc068 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1535 identity=33310 ipv4=10.0.0.193 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-mlbmk subsys=endpoint level=info msg="Delete endpoint request" containerID=fe5b344ea7 endpointID=342 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-de52dd12-dc35-42c9-9f4e-99ca02f3c464 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Delete endpoint request" containerID=f354fdd43b endpointID=400 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-6ade44b3-9f75-4c5e-8c43-1595bdce3683 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=fe5b344ea7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=342 identity=12427 ipv4=10.0.0.224 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-de52dd12-dc35-42c9-9f4e-99ca02f3c464 subsys=endpoint level=info msg="Removed endpoint" containerID=f354fdd43b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=400 identity=12427 ipv4=10.0.0.85 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6ade44b3-9f75-4c5e-8c43-1595bdce3683 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.203 c91929dc-7f8b-491e-923e-ff20f519383b default }" containerID=ebf7b61ac18c07fcc8cac0b669de0ef02f174706ab0c43febd61477980b86224 datapathConfiguration="&{false false false false false }" interface=lxcd40bfd7da9ae k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ebf7b61ac1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1655 ipv4=10.0.0.203 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ebf7b61ac1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1655 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.203 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:alertmanager=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=alertmanager;k8s:app.kubernetes.io/version=0.27.0;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ebf7b61ac1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1655 identity=14015 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.203 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ebf7b61ac1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1655 identity=14015 ipv4=10.0.0.203 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=ebf7b61ac1 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1655 identity=14015 ipv4=10.0.0.203 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=ebf7b61ac1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1655 identity=14015 ipv4=10.0.0.203 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.44 c2541956-0dbc-4669-b3de-db32853d7494 default }" containerID=21cb59607e27206e5358b0079219c6b988b6223571210f4b9baa194777687f5f datapathConfiguration="&{false false false false false }" interface=lxcc72c979d03a5 k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=21cb59607e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3029 ipv4=10.0.0.44 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=21cb59607e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3029 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.44 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=prometheus;k8s:app.kubernetes.io/version=2.51.2;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus;k8s:io.kubernetes.pod.namespace=monitoring;k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus;k8s:operator.prometheus.io/shard=0;k8s:prometheus=kube-prometheus-stack-prometheus;k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=21cb59607e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3029 identity=30202 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.44 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=21cb59607e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3029 identity=30202 ipv4=10.0.0.44 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=21cb59607e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3029 identity=30202 ipv4=10.0.0.44 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=21cb59607e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3029 identity=30202 ipv4=10.0.0.44 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.105 98dd2bce-387e-4afc-82fc-f56bebc273fc default }" containerID=ea1cad9ad1c5ffa86abf5ccdec2b22e40e4dd985c9b6952bd56f46fae9d5df19 datapathConfiguration="&{false false false false false }" interface=lxc379d17cb74f6 k8sPodName=monitoring/loki-gateway-cf54cb88c-7zklh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ea1cad9ad1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3916 ipv4=10.0.0.105 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-7zklh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ea1cad9ad1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3916 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.105 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-7zklh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=gateway;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ea1cad9ad1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3916 identity=6274 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.105 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-7zklh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ea1cad9ad1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3916 identity=6274 ipv4=10.0.0.105 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-7zklh subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=ea1cad9ad1 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3916 identity=6274 ipv4=10.0.0.105 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-7zklh subsys=endpoint level=info msg="Successful endpoint creation" containerID=ea1cad9ad1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3916 identity=6274 ipv4=10.0.0.105 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-7zklh subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.161 404b261c-3d93-4c6c-bba6-d946ec989b3b default }" containerID=7bb66947fea9b690a3aee545f086b5555490ce8a7a58a74d065a7ca2d5059fdd datapathConfiguration="&{false false false false false }" interface=lxc53b6a0f51d29 k8sPodName=monitoring/loki-chunks-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7bb66947fe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=626 ipv4=10.0.0.161 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.131 b0c63cbf-1ac6-402d-9e0d-b536145f1ffb default }" containerID=67cfbc7ca5e38c1d570d77103db7eb3289091309cc267cee0e1ca1b5d74f5421 datapathConfiguration="&{false false false false false }" interface=lxc2324287f867d k8sPodName=monitoring/loki-results-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="Resolving identity labels (blocking)" containerID=7bb66947fe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=626 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.161 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="New endpoint" containerID=67cfbc7ca5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=51 ipv4=10.0.0.131 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=67cfbc7ca5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=51 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.131 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-chunks-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-chunks-cache;k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7bb66947fe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=626 identity=14762 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.161 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7bb66947fe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=626 identity=14762 ipv4=10.0.0.161 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-results-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-results-cache;k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=67cfbc7ca5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=51 identity=42679 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.131 ipv6= k8sPodName=monitoring/loki-results-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=67cfbc7ca5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=51 identity=42679 ipv4=10.0.0.131 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7bb66947fe datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=626 identity=14762 ipv4=10.0.0.161 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=7bb66947fe datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=626 identity=14762 ipv4=10.0.0.161 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=67cfbc7ca5 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=51 identity=42679 ipv4=10.0.0.131 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=67cfbc7ca5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=51 identity=42679 ipv4=10.0.0.131 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.155 411e5749-3512-4ef9-ba7c-404bf6fee703 default }" containerID=1920db5c6a91d2bf552902905fefa68e487d65de3b000b005d0cbfdac37c83af datapathConfiguration="&{false false false false false }" interface=lxc67257e3f8f9c k8sPodName=local-path-storage/helper-pod-create-pvc-29178e41-ab9b-4d89-9229-4e1a87b2cc37 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1920db5c6a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=212 ipv4=10.0.0.155 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-29178e41-ab9b-4d89-9229-4e1a87b2cc37 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1920db5c6a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=212 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.155 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-29178e41-ab9b-4d89-9229-4e1a87b2cc37 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1920db5c6a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=212 identity=12427 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.155 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-29178e41-ab9b-4d89-9229-4e1a87b2cc37 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1920db5c6a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=212 identity=12427 ipv4=10.0.0.155 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-29178e41-ab9b-4d89-9229-4e1a87b2cc37 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1920db5c6a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=212 identity=12427 ipv4=10.0.0.155 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-29178e41-ab9b-4d89-9229-4e1a87b2cc37 subsys=endpoint level=info msg="Successful endpoint creation" containerID=1920db5c6a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=212 identity=12427 ipv4=10.0.0.155 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-29178e41-ab9b-4d89-9229-4e1a87b2cc37 subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.106 c8255ae0-6836-46a7-9d5d-4f7cbb392577 default }" containerID=a2074cc7ec76c1bfa4873a7fc3b9990950124b57e10f0b084201e9dabf87cf26 datapathConfiguration="&{false false false false false }" interface=lxcbaac35a8343c k8sPodName=monitoring/vector-crznn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a2074cc7ec datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3273 ipv4=10.0.0.106 ipv6= k8sPodName=monitoring/vector-crznn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a2074cc7ec datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3273 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.106 ipv6= k8sPodName=monitoring/vector-crznn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=Agent;k8s:app.kubernetes.io/instance=vector;k8s:app.kubernetes.io/name=vector;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=vector;k8s:io.kubernetes.pod.namespace=monitoring;k8s:vector.dev/exclude=true;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a2074cc7ec datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3273 identity=2412 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.106 ipv6= k8sPodName=monitoring/vector-crznn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a2074cc7ec datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3273 identity=2412 ipv4=10.0.0.106 ipv6= k8sPodName=monitoring/vector-crznn subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a2074cc7ec datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3273 identity=2412 ipv4=10.0.0.106 ipv6= k8sPodName=monitoring/vector-crznn subsys=endpoint level=info msg="Successful endpoint creation" containerID=a2074cc7ec datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3273 identity=2412 ipv4=10.0.0.106 ipv6= k8sPodName=monitoring/vector-crznn subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=1920db5c6a endpointID=212 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-29178e41-ab9b-4d89-9229-4e1a87b2cc37 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=1920db5c6a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=212 identity=12427 ipv4=10.0.0.155 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-29178e41-ab9b-4d89-9229-4e1a87b2cc37 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.226 5efab343-c515-4f30-a0f0-99ee14c19793 default }" containerID=05ec2a0dd88051af51401edd7768b7bd14e9ead54f4f5f960432a89bfea45b63 datapathConfiguration="&{false false false false false }" interface=lxc7124e5d967b0 k8sPodName=monitoring/loki-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=05ec2a0dd8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3913 ipv4=10.0.0.226 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=05ec2a0dd8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3913 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.226 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=single-binary;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:app.kubernetes.io/part-of=memberlist;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=loki-0;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=05ec2a0dd8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3913 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.226 ipv6= k8sPodName=monitoring/loki-0 line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=05ec2a0dd8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3913 identity=18881 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.226 ipv6= k8sPodName=monitoring/loki-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=05ec2a0dd8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3913 identity=18881 ipv4=10.0.0.226 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=05ec2a0dd8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3913 identity=18881 ipv4=10.0.0.226 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=05ec2a0dd8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3913 identity=18881 ipv4=10.0.0.226 ipv6= k8sPodName=monitoring/loki-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.163 5bb7e770-ec21-4934-be50-257a41d62230 default }" containerID=2991b510cbdd738c59ccc4f86f8d7ede5bf1409c857cf3917d9c4735b0908ea1 datapathConfiguration="&{false false false false false }" interface=lxccdc943f05bd6 k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-gdgbc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2991b510cb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1453 ipv4=10.0.0.163 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-gdgbc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2991b510cb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1453 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.163 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-gdgbc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=prometheus-pushgateway;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=prometheus-pushgateway;k8s:app.kubernetes.io/version=v1.8.0;k8s:helm.sh/chart=prometheus-pushgateway-2.13.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2991b510cb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1453 identity=12473 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.163 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-gdgbc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2991b510cb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1453 identity=12473 ipv4=10.0.0.163 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-gdgbc subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2991b510cb datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1453 identity=12473 ipv4=10.0.0.163 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-gdgbc subsys=endpoint level=info msg="Successful endpoint creation" containerID=2991b510cb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1453 identity=12473 ipv4=10.0.0.163 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-gdgbc subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.200 ed9f6ada-b594-4141-8a04-59584bfc4461 default }" containerID=43e6768a0924b1fb8ea428693add708e89e488fbc5483b2a2815b7c645d3f193 datapathConfiguration="&{false false false false false }" interface=lxceeda3479f819 k8sPodName=openstack/memcached-memcached-6479589586-mn2cc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=43e6768a09 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=868 ipv4=10.0.0.200 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-mn2cc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=43e6768a09 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=868 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.200 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-mn2cc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=43e6768a09 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=868 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.200 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-mn2cc line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=memcached;k8s:component=server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=memcached;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=43e6768a09 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=868 identity=899 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.200 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-mn2cc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=43e6768a09 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=868 identity=899 ipv4=10.0.0.200 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-mn2cc subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=43e6768a09 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=868 identity=899 ipv4=10.0.0.200 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-mn2cc subsys=endpoint level=info msg="Successful endpoint creation" containerID=43e6768a09 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=868 identity=899 ipv4=10.0.0.200 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-mn2cc subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.138 0194dec3-b4bc-4371-ab16-86d8f7cc53a2 default }" containerID=427fdc0e27ced9770884c32278a25b6f70896abd9153f733f62a237dde91ab92 datapathConfiguration="&{false false false false false }" interface=lxcc50f3ff87ffc k8sPodName=local-path-storage/helper-pod-create-pvc-35ae4637-0fe5-4b76-816f-46803e638255 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=427fdc0e27 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=112 ipv4=10.0.0.138 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-35ae4637-0fe5-4b76-816f-46803e638255 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=427fdc0e27 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=112 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.138 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-35ae4637-0fe5-4b76-816f-46803e638255 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=427fdc0e27 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=112 identity=12427 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.138 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-35ae4637-0fe5-4b76-816f-46803e638255 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=427fdc0e27 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=112 identity=12427 ipv4=10.0.0.138 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-35ae4637-0fe5-4b76-816f-46803e638255 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=427fdc0e27 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=112 identity=12427 ipv4=10.0.0.138 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-35ae4637-0fe5-4b76-816f-46803e638255 subsys=endpoint level=info msg="Successful endpoint creation" containerID=427fdc0e27 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=112 identity=12427 ipv4=10.0.0.138 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-35ae4637-0fe5-4b76-816f-46803e638255 subsys=daemon level=info msg="Delete endpoint request" containerID=427fdc0e27 endpointID=112 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-35ae4637-0fe5-4b76-816f-46803e638255 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=427fdc0e27 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=112 identity=12427 ipv4=10.0.0.138 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-35ae4637-0fe5-4b76-816f-46803e638255 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.40 e3f136ba-31df-41da-867a-ef86c840e41a default }" containerID=4c9fde1211841d2a2ef019dff7b5249eb8284eae65fb6ed10ec19a2692426ef2 datapathConfiguration="&{false false false false false }" interface=lxc48b612124529 k8sPodName=openstack/rabbitmq-keystone-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4c9fde1211 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2454 ipv4=10.0.0.40 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4c9fde1211 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2454 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.40 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-keystone;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=4c9fde1211 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2454 identity=2117 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.40 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4c9fde1211 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2454 identity=2117 ipv4=10.0.0.40 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4c9fde1211 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2454 identity=2117 ipv4=10.0.0.40 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=4c9fde1211 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2454 identity=2117 ipv4=10.0.0.40 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.41 9319a370-1601-46c1-9f40-695b4438e981 default }" containerID=6112a0b8f4345e680ca3b43761f51e24dc3620085e9b581e15ddec5b0e91202a datapathConfiguration="&{false false false false false }" interface=lxc6e9297981c06 k8sPodName=openstack/keystone-api-76bc967dc8-7gjwh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6112a0b8f4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3856 ipv4=10.0.0.41 ipv6= k8sPodName=openstack/keystone-api-76bc967dc8-7gjwh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6112a0b8f4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3856 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.41 ipv6= k8sPodName=openstack/keystone-api-76bc967dc8-7gjwh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=6112a0b8f4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3856 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.41 ipv6= k8sPodName=openstack/keystone-api-76bc967dc8-7gjwh line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6112a0b8f4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3856 identity=64810 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.41 ipv6= k8sPodName=openstack/keystone-api-76bc967dc8-7gjwh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6112a0b8f4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3856 identity=64810 ipv4=10.0.0.41 ipv6= k8sPodName=openstack/keystone-api-76bc967dc8-7gjwh subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.92 39643550-d0dd-4c32-a550-05867c7789c7 default }" containerID=8c1930dcd4b6c8db4979d1b8d86bcd6b55726c0a65b6f29c1b56735d40038e53 datapathConfiguration="&{false false false false false }" interface=lxc07306952c921 k8sPodName=openstack/keystone-credential-setup-752dh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8c1930dcd4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2201 ipv4=10.0.0.92 ipv6= k8sPodName=openstack/keystone-credential-setup-752dh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8c1930dcd4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2201 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=570158a4-ae07-45e9-86e4-5a1b47eea1e5,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=570158a4-ae07-45e9-86e4-5a1b47eea1e5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.92 ipv6= k8sPodName=openstack/keystone-credential-setup-752dh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=570158a4-ae07-45e9-86e4-5a1b47eea1e5;k8s:batch.kubernetes.io/job-name=keystone-credential-setup;k8s:component=credential-setup;k8s:controller-uid=570158a4-ae07-45e9-86e4-5a1b47eea1e5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-credential-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8c1930dcd4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2201 identity=15602 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=570158a4-ae07-45e9-86e4-5a1b47eea1e5,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=570158a4-ae07-45e9-86e4-5a1b47eea1e5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.92 ipv6= k8sPodName=openstack/keystone-credential-setup-752dh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8c1930dcd4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2201 identity=15602 ipv4=10.0.0.92 ipv6= k8sPodName=openstack/keystone-credential-setup-752dh subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6112a0b8f4 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3856 identity=64810 ipv4=10.0.0.41 ipv6= k8sPodName=openstack/keystone-api-76bc967dc8-7gjwh subsys=endpoint level=info msg="Successful endpoint creation" containerID=6112a0b8f4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3856 identity=64810 ipv4=10.0.0.41 ipv6= k8sPodName=openstack/keystone-api-76bc967dc8-7gjwh subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=8c1930dcd4 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2201 identity=15602 ipv4=10.0.0.92 ipv6= k8sPodName=openstack/keystone-credential-setup-752dh subsys=endpoint level=info msg="Successful endpoint creation" containerID=8c1930dcd4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2201 identity=15602 ipv4=10.0.0.92 ipv6= k8sPodName=openstack/keystone-credential-setup-752dh subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=8c1930dcd4 endpointID=2201 k8sNamespace=openstack k8sPodName=keystone-credential-setup-752dh subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=570158a4-ae07-45e9-86e4-5a1b47eea1e5 k8s:batch.kubernetes.io/job-name=keystone-credential-setup k8s:component=credential-setup k8s:controller-uid=570158a4-ae07-45e9-86e4-5a1b47eea1e5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-credential-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=8c1930dcd4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2201 identity=15602 ipv4=10.0.0.92 ipv6= k8sPodName=openstack/keystone-credential-setup-752dh subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.121 836495f1-0e6e-4b87-b2f6-49e6b92e12ca default }" containerID=154fb5f0ca0690f1196e11b8dbf06a21f5a459a5953f0cfb79eb523691a2f975 datapathConfiguration="&{false false false false false }" interface=lxc5e388c16700e k8sPodName=openstack/keystone-db-init-vbsht labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=154fb5f0ca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2123 ipv4=10.0.0.121 ipv6= k8sPodName=openstack/keystone-db-init-vbsht subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=154fb5f0ca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2123 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=bb4bb697-cc8c-43c7-bfac-2fd13c15b511,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=bb4bb697-cc8c-43c7-bfac-2fd13c15b511,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.121 ipv6= k8sPodName=openstack/keystone-db-init-vbsht subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=bb4bb697-cc8c-43c7-bfac-2fd13c15b511;k8s:batch.kubernetes.io/job-name=keystone-db-init;k8s:component=db-init;k8s:controller-uid=bb4bb697-cc8c-43c7-bfac-2fd13c15b511;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=154fb5f0ca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2123 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.121 ipv6= k8sPodName=openstack/keystone-db-init-vbsht line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=154fb5f0ca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2123 identity=13723 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=bb4bb697-cc8c-43c7-bfac-2fd13c15b511,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=bb4bb697-cc8c-43c7-bfac-2fd13c15b511,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.121 ipv6= k8sPodName=openstack/keystone-db-init-vbsht oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=154fb5f0ca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2123 identity=13723 ipv4=10.0.0.121 ipv6= k8sPodName=openstack/keystone-db-init-vbsht subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=154fb5f0ca datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2123 identity=13723 ipv4=10.0.0.121 ipv6= k8sPodName=openstack/keystone-db-init-vbsht subsys=endpoint level=info msg="Successful endpoint creation" containerID=154fb5f0ca datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2123 identity=13723 ipv4=10.0.0.121 ipv6= k8sPodName=openstack/keystone-db-init-vbsht subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=154fb5f0ca endpointID=2123 k8sNamespace=openstack k8sPodName=keystone-db-init-vbsht subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=bb4bb697-cc8c-43c7-bfac-2fd13c15b511 k8s:batch.kubernetes.io/job-name=keystone-db-init k8s:component=db-init k8s:controller-uid=bb4bb697-cc8c-43c7-bfac-2fd13c15b511 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=154fb5f0ca datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2123 identity=13723 ipv4=10.0.0.121 ipv6= k8sPodName=openstack/keystone-db-init-vbsht subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.109 6fbd6473-93af-4221-9280-a26d3338affe default }" containerID=c169d58c8fae834318813300ddce1d82579f63bc6f23f8cc3e372006acde31f7 datapathConfiguration="&{false false false false false }" interface=lxc3bc84a8b0077 k8sPodName=openstack/keystone-fernet-setup-qjtdm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c169d58c8f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=99 ipv4=10.0.0.109 ipv6= k8sPodName=openstack/keystone-fernet-setup-qjtdm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c169d58c8f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=99 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=b5932f4c-78a1-4a8c-a986-0ff1f81602f7,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=b5932f4c-78a1-4a8c-a986-0ff1f81602f7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.109 ipv6= k8sPodName=openstack/keystone-fernet-setup-qjtdm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=b5932f4c-78a1-4a8c-a986-0ff1f81602f7;k8s:batch.kubernetes.io/job-name=keystone-fernet-setup;k8s:component=fernet-setup;k8s:controller-uid=b5932f4c-78a1-4a8c-a986-0ff1f81602f7;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-fernet-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=c169d58c8f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=99 identity=56281 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=b5932f4c-78a1-4a8c-a986-0ff1f81602f7,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=b5932f4c-78a1-4a8c-a986-0ff1f81602f7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.109 ipv6= k8sPodName=openstack/keystone-fernet-setup-qjtdm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c169d58c8f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=99 identity=56281 ipv4=10.0.0.109 ipv6= k8sPodName=openstack/keystone-fernet-setup-qjtdm subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c169d58c8f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=99 identity=56281 ipv4=10.0.0.109 ipv6= k8sPodName=openstack/keystone-fernet-setup-qjtdm subsys=endpoint level=info msg="Successful endpoint creation" containerID=c169d58c8f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=99 identity=56281 ipv4=10.0.0.109 ipv6= k8sPodName=openstack/keystone-fernet-setup-qjtdm subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=c169d58c8f endpointID=99 k8sNamespace=openstack k8sPodName=keystone-fernet-setup-qjtdm subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=b5932f4c-78a1-4a8c-a986-0ff1f81602f7 k8s:batch.kubernetes.io/job-name=keystone-fernet-setup k8s:component=fernet-setup k8s:controller-uid=b5932f4c-78a1-4a8c-a986-0ff1f81602f7 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-fernet-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=c169d58c8f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=99 identity=56281 ipv4=10.0.0.109 ipv6= k8sPodName=openstack/keystone-fernet-setup-qjtdm subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.180 afa6b891-042c-4118-9008-24caeaeb39f6 default }" containerID=0518479601039ae0e818d0430b24922ec0d6e50a9007b91b600d8fc002dc8beb datapathConfiguration="&{false false false false false }" interface=lxcd3778a2bd34c k8sPodName=openstack/keystone-db-sync-v7vk6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0518479601 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1681 ipv4=10.0.0.180 ipv6= k8sPodName=openstack/keystone-db-sync-v7vk6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0518479601 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1681 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=ec291211-9e3c-4517-bd8f-3b0bf9f10c1d,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=ec291211-9e3c-4517-bd8f-3b0bf9f10c1d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.180 ipv6= k8sPodName=openstack/keystone-db-sync-v7vk6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=0518479601 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1681 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.180 ipv6= k8sPodName=openstack/keystone-db-sync-v7vk6 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=ec291211-9e3c-4517-bd8f-3b0bf9f10c1d;k8s:batch.kubernetes.io/job-name=keystone-db-sync;k8s:component=db-sync;k8s:controller-uid=ec291211-9e3c-4517-bd8f-3b0bf9f10c1d;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-sync;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0518479601 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1681 identity=48265 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=ec291211-9e3c-4517-bd8f-3b0bf9f10c1d,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=ec291211-9e3c-4517-bd8f-3b0bf9f10c1d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.180 ipv6= k8sPodName=openstack/keystone-db-sync-v7vk6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0518479601 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1681 identity=48265 ipv4=10.0.0.180 ipv6= k8sPodName=openstack/keystone-db-sync-v7vk6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0518479601 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1681 identity=48265 ipv4=10.0.0.180 ipv6= k8sPodName=openstack/keystone-db-sync-v7vk6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=0518479601 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1681 identity=48265 ipv4=10.0.0.180 ipv6= k8sPodName=openstack/keystone-db-sync-v7vk6 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=0518479601 endpointID=1681 k8sNamespace=openstack k8sPodName=keystone-db-sync-v7vk6 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=ec291211-9e3c-4517-bd8f-3b0bf9f10c1d k8s:batch.kubernetes.io/job-name=keystone-db-sync k8s:component=db-sync k8s:controller-uid=ec291211-9e3c-4517-bd8f-3b0bf9f10c1d k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-sync k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=0518479601 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1681 identity=48265 ipv4=10.0.0.180 ipv6= k8sPodName=openstack/keystone-db-sync-v7vk6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.112 55868c9a-52ff-4870-adbd-912c38efe4d2 default }" containerID=758440a525b7099fc9ea5d134cd91d9909f078a8fd63ec5933bdea0cd7758702 datapathConfiguration="&{false false false false false }" interface=lxcbfaca88a17fd k8sPodName=openstack/keystone-rabbit-init-7vhl6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=758440a525 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=613 ipv4=10.0.0.112 ipv6= k8sPodName=openstack/keystone-rabbit-init-7vhl6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=758440a525 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=613 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=65617a58-c726-46c1-bfae-2fb2592f8f85,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=65617a58-c726-46c1-bfae-2fb2592f8f85,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.112 ipv6= k8sPodName=openstack/keystone-rabbit-init-7vhl6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=65617a58-c726-46c1-bfae-2fb2592f8f85;k8s:batch.kubernetes.io/job-name=keystone-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=65617a58-c726-46c1-bfae-2fb2592f8f85;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-rabbit-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=758440a525 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=613 identity=3017 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=65617a58-c726-46c1-bfae-2fb2592f8f85,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=65617a58-c726-46c1-bfae-2fb2592f8f85,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.112 ipv6= k8sPodName=openstack/keystone-rabbit-init-7vhl6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=758440a525 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=613 identity=3017 ipv4=10.0.0.112 ipv6= k8sPodName=openstack/keystone-rabbit-init-7vhl6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=758440a525 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=613 identity=3017 ipv4=10.0.0.112 ipv6= k8sPodName=openstack/keystone-rabbit-init-7vhl6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=758440a525 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=613 identity=3017 ipv4=10.0.0.112 ipv6= k8sPodName=openstack/keystone-rabbit-init-7vhl6 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=758440a525 endpointID=613 k8sNamespace=openstack k8sPodName=keystone-rabbit-init-7vhl6 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=65617a58-c726-46c1-bfae-2fb2592f8f85 k8s:batch.kubernetes.io/job-name=keystone-rabbit-init k8s:component=rabbit-init k8s:controller-uid=65617a58-c726-46c1-bfae-2fb2592f8f85 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-rabbit-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=758440a525 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=613 identity=3017 ipv4=10.0.0.112 ipv6= k8sPodName=openstack/keystone-rabbit-init-7vhl6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.13 6ba7234c-c9e4-4846-85f4-c584c4f9d403 default }" containerID=c7141a7e333b3b07776c4cae5a59fc22b890100fa9dbee8ba5ce5eb5653cd3e3 datapathConfiguration="&{false false false false false }" interface=lxc3c44355a8218 k8sPodName=openstack/keystone-domain-manage-r5dqk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c7141a7e33 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2296 ipv4=10.0.0.13 ipv6= k8sPodName=openstack/keystone-domain-manage-r5dqk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c7141a7e33 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2296 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=f005bddb-9f29-4028-988b-52c1480bc836,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=f005bddb-9f29-4028-988b-52c1480bc836,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.13 ipv6= k8sPodName=openstack/keystone-domain-manage-r5dqk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=f005bddb-9f29-4028-988b-52c1480bc836;k8s:batch.kubernetes.io/job-name=keystone-domain-manage;k8s:component=domain-manage;k8s:controller-uid=f005bddb-9f29-4028-988b-52c1480bc836;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-domain-manage;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c7141a7e33 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2296 identity=24996 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=f005bddb-9f29-4028-988b-52c1480bc836,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=f005bddb-9f29-4028-988b-52c1480bc836,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.13 ipv6= k8sPodName=openstack/keystone-domain-manage-r5dqk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c7141a7e33 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2296 identity=24996 ipv4=10.0.0.13 ipv6= k8sPodName=openstack/keystone-domain-manage-r5dqk subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=c7141a7e33 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2296 identity=24996 ipv4=10.0.0.13 ipv6= k8sPodName=openstack/keystone-domain-manage-r5dqk subsys=endpoint level=info msg="Successful endpoint creation" containerID=c7141a7e33 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2296 identity=24996 ipv4=10.0.0.13 ipv6= k8sPodName=openstack/keystone-domain-manage-r5dqk subsys=daemon level=info msg="Delete endpoint request" containerID=c7141a7e33 endpointID=2296 k8sNamespace=openstack k8sPodName=keystone-domain-manage-r5dqk subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=f005bddb-9f29-4028-988b-52c1480bc836 k8s:batch.kubernetes.io/job-name=keystone-domain-manage k8s:component=domain-manage k8s:controller-uid=f005bddb-9f29-4028-988b-52c1480bc836 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-domain-manage k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=c7141a7e33 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2296 identity=24996 ipv4=10.0.0.13 ipv6= k8sPodName=openstack/keystone-domain-manage-r5dqk subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.190 7b464aca-acb0-46b6-acf3-d665aaaba868 default }" containerID=10f38c7870e56cb4a52bf8d475ed0a2822ae33a72b4f18d715d18efbe04efc87 datapathConfiguration="&{false false false false false }" interface=lxc6c0f3bcc3537 k8sPodName=openstack/keystone-bootstrap-2bf2w labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=10f38c7870 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1283 ipv4=10.0.0.190 ipv6= k8sPodName=openstack/keystone-bootstrap-2bf2w subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=10f38c7870 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1283 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=0228a870-0e71-48d2-86bc-3204563f2117,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=0228a870-0e71-48d2-86bc-3204563f2117,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.190 ipv6= k8sPodName=openstack/keystone-bootstrap-2bf2w subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=0228a870-0e71-48d2-86bc-3204563f2117;k8s:batch.kubernetes.io/job-name=keystone-bootstrap;k8s:component=bootstrap;k8s:controller-uid=0228a870-0e71-48d2-86bc-3204563f2117;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-bootstrap;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=10f38c7870 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1283 identity=62794 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=0228a870-0e71-48d2-86bc-3204563f2117,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=0228a870-0e71-48d2-86bc-3204563f2117,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.190 ipv6= k8sPodName=openstack/keystone-bootstrap-2bf2w oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=10f38c7870 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1283 identity=62794 ipv4=10.0.0.190 ipv6= k8sPodName=openstack/keystone-bootstrap-2bf2w subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=10f38c7870 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1283 identity=62794 ipv4=10.0.0.190 ipv6= k8sPodName=openstack/keystone-bootstrap-2bf2w subsys=endpoint level=info msg="Successful endpoint creation" containerID=10f38c7870 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1283 identity=62794 ipv4=10.0.0.190 ipv6= k8sPodName=openstack/keystone-bootstrap-2bf2w subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=10f38c7870 endpointID=1283 k8sNamespace=openstack k8sPodName=keystone-bootstrap-2bf2w subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=0228a870-0e71-48d2-86bc-3204563f2117 k8s:batch.kubernetes.io/job-name=keystone-bootstrap k8s:component=bootstrap k8s:controller-uid=0228a870-0e71-48d2-86bc-3204563f2117 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-bootstrap k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=10f38c7870 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1283 identity=62794 ipv4=10.0.0.190 ipv6= k8sPodName=openstack/keystone-bootstrap-2bf2w subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.99 f782558a-8f5b-4f1c-a63b-c745215f130e default }" containerID=7478544fdcfa0e0aa264e47d3f0ec56182c79726176d8e920719f090f4d0d669 datapathConfiguration="&{false false false false false }" interface=lxccf7042f3f142 k8sPodName=local-path-storage/helper-pod-create-pvc-14ffb39e-0540-4dc2-85d4-2284b0636622 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7478544fdc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1778 ipv4=10.0.0.99 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-14ffb39e-0540-4dc2-85d4-2284b0636622 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7478544fdc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1778 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.99 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-14ffb39e-0540-4dc2-85d4-2284b0636622 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7478544fdc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1778 identity=12427 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.99 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-14ffb39e-0540-4dc2-85d4-2284b0636622 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7478544fdc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1778 identity=12427 ipv4=10.0.0.99 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-14ffb39e-0540-4dc2-85d4-2284b0636622 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7478544fdc datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1778 identity=12427 ipv4=10.0.0.99 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-14ffb39e-0540-4dc2-85d4-2284b0636622 subsys=endpoint level=info msg="Successful endpoint creation" containerID=7478544fdc datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1778 identity=12427 ipv4=10.0.0.99 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-14ffb39e-0540-4dc2-85d4-2284b0636622 subsys=daemon level=info msg="Delete endpoint request" containerID=7478544fdc endpointID=1778 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-14ffb39e-0540-4dc2-85d4-2284b0636622 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=7478544fdc datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1778 identity=12427 ipv4=10.0.0.99 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-14ffb39e-0540-4dc2-85d4-2284b0636622 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.230 64da58cb-35dc-409b-84d4-f2d83a478b5e default }" containerID=169756a6a86821d00933cba29a9c750113804392bf8f080983ee041642505d6d datapathConfiguration="&{false false false false false }" interface=lxc1549cf6d544b k8sPodName=openstack/rabbitmq-barbican-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=169756a6a8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=908 ipv4=10.0.0.230 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=169756a6a8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=908 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.230 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-barbican;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=169756a6a8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=908 identity=27966 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.230 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=169756a6a8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=908 identity=27966 ipv4=10.0.0.230 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=169756a6a8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=908 identity=27966 ipv4=10.0.0.230 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=169756a6a8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=908 identity=27966 ipv4=10.0.0.230 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.141 43c13b61-aea7-43a2-89ca-d9ce9f60768f default }" containerID=93d35c8b9411a010717bfbdd054c129a2aa0856d1662216c5ccaff33bd47c3e0 datapathConfiguration="&{false false false false false }" interface=lxc42f73cbb09ef k8sPodName=openstack/barbican-api-7d9bb44bc9-tptjn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=93d35c8b94 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2146 ipv4=10.0.0.141 ipv6= k8sPodName=openstack/barbican-api-7d9bb44bc9-tptjn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=93d35c8b94 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2146 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.141 ipv6= k8sPodName=openstack/barbican-api-7d9bb44bc9-tptjn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=93d35c8b94 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2146 identity=61188 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.141 ipv6= k8sPodName=openstack/barbican-api-7d9bb44bc9-tptjn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=93d35c8b94 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2146 identity=61188 ipv4=10.0.0.141 ipv6= k8sPodName=openstack/barbican-api-7d9bb44bc9-tptjn subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.241 6f278f7d-ed34-47ae-9a4e-dd69cdaa55a6 default }" containerID=ff88a106743aeac701de17c40e467e33b705ab60fc26a60f541485b57505c091 datapathConfiguration="&{false false false false false }" interface=lxc0d4163a5694a k8sPodName=openstack/barbican-db-init-2l8lv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ff88a10674 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=114 ipv4=10.0.0.241 ipv6= k8sPodName=openstack/barbican-db-init-2l8lv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ff88a10674 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=114 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=a137814f-cce9-4fd2-a835-9291dfb29992,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=a137814f-cce9-4fd2-a835-9291dfb29992,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.241 ipv6= k8sPodName=openstack/barbican-db-init-2l8lv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=a137814f-cce9-4fd2-a835-9291dfb29992;k8s:batch.kubernetes.io/job-name=barbican-db-init;k8s:component=db-init;k8s:controller-uid=a137814f-cce9-4fd2-a835-9291dfb29992;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ff88a10674 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=114 identity=45830 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=a137814f-cce9-4fd2-a835-9291dfb29992,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=a137814f-cce9-4fd2-a835-9291dfb29992,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.241 ipv6= k8sPodName=openstack/barbican-db-init-2l8lv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ff88a10674 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=114 identity=45830 ipv4=10.0.0.241 ipv6= k8sPodName=openstack/barbican-db-init-2l8lv subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=93d35c8b94 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2146 identity=61188 ipv4=10.0.0.141 ipv6= k8sPodName=openstack/barbican-api-7d9bb44bc9-tptjn subsys=endpoint level=info msg="Successful endpoint creation" containerID=93d35c8b94 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2146 identity=61188 ipv4=10.0.0.141 ipv6= k8sPodName=openstack/barbican-api-7d9bb44bc9-tptjn subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=ff88a10674 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=114 identity=45830 ipv4=10.0.0.241 ipv6= k8sPodName=openstack/barbican-db-init-2l8lv subsys=endpoint level=info msg="Successful endpoint creation" containerID=ff88a10674 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=114 identity=45830 ipv4=10.0.0.241 ipv6= k8sPodName=openstack/barbican-db-init-2l8lv subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=ff88a10674 endpointID=114 k8sNamespace=openstack k8sPodName=barbican-db-init-2l8lv subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=a137814f-cce9-4fd2-a835-9291dfb29992 k8s:batch.kubernetes.io/job-name=barbican-db-init k8s:component=db-init k8s:controller-uid=a137814f-cce9-4fd2-a835-9291dfb29992 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=ff88a10674 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=114 identity=45830 ipv4=10.0.0.241 ipv6= k8sPodName=openstack/barbican-db-init-2l8lv subsys=endpoint level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.03603216686731506 newInterval=11m15s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.229 2742dec2-1ca1-486c-b1a4-710d30f53555 default }" containerID=55471cf080928238f38ed37190a941f5fdc2aa45cc404193eeffb4194754cb0c datapathConfiguration="&{false false false false false }" interface=lxc2e832971f4ff k8sPodName=openstack/barbican-db-sync-t6bxd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=55471cf080 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=737 ipv4=10.0.0.229 ipv6= k8sPodName=openstack/barbican-db-sync-t6bxd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=55471cf080 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=737 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=9524ef00-9457-4d48-9845-43bdd9430d45,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=9524ef00-9457-4d48-9845-43bdd9430d45,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.229 ipv6= k8sPodName=openstack/barbican-db-sync-t6bxd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=9524ef00-9457-4d48-9845-43bdd9430d45;k8s:batch.kubernetes.io/job-name=barbican-db-sync;k8s:component=db-sync;k8s:controller-uid=9524ef00-9457-4d48-9845-43bdd9430d45;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-sync;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=55471cf080 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=737 identity=13463 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=9524ef00-9457-4d48-9845-43bdd9430d45,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=9524ef00-9457-4d48-9845-43bdd9430d45,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.229 ipv6= k8sPodName=openstack/barbican-db-sync-t6bxd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=55471cf080 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=737 identity=13463 ipv4=10.0.0.229 ipv6= k8sPodName=openstack/barbican-db-sync-t6bxd subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=55471cf080 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=737 identity=13463 ipv4=10.0.0.229 ipv6= k8sPodName=openstack/barbican-db-sync-t6bxd subsys=endpoint level=info msg="Successful endpoint creation" containerID=55471cf080 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=737 identity=13463 ipv4=10.0.0.229 ipv6= k8sPodName=openstack/barbican-db-sync-t6bxd subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=55471cf080 endpointID=737 k8sNamespace=openstack k8sPodName=barbican-db-sync-t6bxd subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=9524ef00-9457-4d48-9845-43bdd9430d45 k8s:batch.kubernetes.io/job-name=barbican-db-sync k8s:component=db-sync k8s:controller-uid=9524ef00-9457-4d48-9845-43bdd9430d45 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-sync k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=55471cf080 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=737 identity=13463 ipv4=10.0.0.229 ipv6= k8sPodName=openstack/barbican-db-sync-t6bxd subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.11 0440f141-efa2-4090-975c-ef213bc9ac4b default }" containerID=1ce53159859b52ca88f42991d1115d3e91b2c2cb96b797482dc79ee582923940 datapathConfiguration="&{false false false false false }" interface=lxc5888422a9605 k8sPodName=openstack/barbican-rabbit-init-jkcqc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1ce5315985 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=386 ipv4=10.0.0.11 ipv6= k8sPodName=openstack/barbican-rabbit-init-jkcqc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1ce5315985 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=386 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=740b637f-9c9e-476a-a323-824c9003ebb1,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=740b637f-9c9e-476a-a323-824c9003ebb1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.11 ipv6= k8sPodName=openstack/barbican-rabbit-init-jkcqc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=740b637f-9c9e-476a-a323-824c9003ebb1;k8s:batch.kubernetes.io/job-name=barbican-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=740b637f-9c9e-476a-a323-824c9003ebb1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-rabbit-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1ce5315985 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=386 identity=4404 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=740b637f-9c9e-476a-a323-824c9003ebb1,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=740b637f-9c9e-476a-a323-824c9003ebb1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.11 ipv6= k8sPodName=openstack/barbican-rabbit-init-jkcqc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1ce5315985 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=386 identity=4404 ipv4=10.0.0.11 ipv6= k8sPodName=openstack/barbican-rabbit-init-jkcqc subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=1ce5315985 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=386 identity=4404 ipv4=10.0.0.11 ipv6= k8sPodName=openstack/barbican-rabbit-init-jkcqc subsys=endpoint level=info msg="Successful endpoint creation" containerID=1ce5315985 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=386 identity=4404 ipv4=10.0.0.11 ipv6= k8sPodName=openstack/barbican-rabbit-init-jkcqc subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=1ce5315985 endpointID=386 k8sNamespace=openstack k8sPodName=barbican-rabbit-init-jkcqc subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=740b637f-9c9e-476a-a323-824c9003ebb1 k8s:batch.kubernetes.io/job-name=barbican-rabbit-init k8s:component=rabbit-init k8s:controller-uid=740b637f-9c9e-476a-a323-824c9003ebb1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-rabbit-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=1ce5315985 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=386 identity=4404 ipv4=10.0.0.11 ipv6= k8sPodName=openstack/barbican-rabbit-init-jkcqc subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.69 60707791-a247-44c9-831a-e6588c32b103 default }" containerID=40e6096df218d739b21006bd785126918081090523d812a3f9dad02d22ee13d7 datapathConfiguration="&{false false false false false }" interface=lxc8f6f56b944d0 k8sPodName=openstack/barbican-ks-service-7ljqh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=40e6096df2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3567 ipv4=10.0.0.69 ipv6= k8sPodName=openstack/barbican-ks-service-7ljqh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=40e6096df2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3567 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=274390f3-6dd6-4872-b68c-ea0f78bb8017,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=274390f3-6dd6-4872-b68c-ea0f78bb8017,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.69 ipv6= k8sPodName=openstack/barbican-ks-service-7ljqh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=274390f3-6dd6-4872-b68c-ea0f78bb8017;k8s:batch.kubernetes.io/job-name=barbican-ks-service;k8s:component=ks-service;k8s:controller-uid=274390f3-6dd6-4872-b68c-ea0f78bb8017;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-service;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=40e6096df2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3567 identity=2141 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=274390f3-6dd6-4872-b68c-ea0f78bb8017,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=274390f3-6dd6-4872-b68c-ea0f78bb8017,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.69 ipv6= k8sPodName=openstack/barbican-ks-service-7ljqh oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=40e6096df2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3567 identity=2141 ipv4=10.0.0.69 ipv6= k8sPodName=openstack/barbican-ks-service-7ljqh subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=40e6096df2 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3567 identity=2141 ipv4=10.0.0.69 ipv6= k8sPodName=openstack/barbican-ks-service-7ljqh subsys=endpoint level=info msg="Successful endpoint creation" containerID=40e6096df2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3567 identity=2141 ipv4=10.0.0.69 ipv6= k8sPodName=openstack/barbican-ks-service-7ljqh subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=40e6096df2 endpointID=3567 k8sNamespace=openstack k8sPodName=barbican-ks-service-7ljqh subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=274390f3-6dd6-4872-b68c-ea0f78bb8017 k8s:batch.kubernetes.io/job-name=barbican-ks-service k8s:component=ks-service k8s:controller-uid=274390f3-6dd6-4872-b68c-ea0f78bb8017 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-service k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=40e6096df2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3567 identity=2141 ipv4=10.0.0.69 ipv6= k8sPodName=openstack/barbican-ks-service-7ljqh subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.204 6befb24f-25ce-43ea-972d-b48020cec8c7 default }" containerID=0b6752d4fd1192d4c6358a4885668db59dc0c7915d35a10161bb071510c792ee datapathConfiguration="&{false false false false false }" interface=lxc309f6e89ee33 k8sPodName=openstack/barbican-ks-endpoints-7h4vs labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0b6752d4fd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2784 ipv4=10.0.0.204 ipv6= k8sPodName=openstack/barbican-ks-endpoints-7h4vs subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0b6752d4fd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2784 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=ccd4f662-a248-41a2-b277-027f3059436b,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=ccd4f662-a248-41a2-b277-027f3059436b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.204 ipv6= k8sPodName=openstack/barbican-ks-endpoints-7h4vs subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=ccd4f662-a248-41a2-b277-027f3059436b;k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=ccd4f662-a248-41a2-b277-027f3059436b;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-endpoints;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0b6752d4fd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2784 identity=10783 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=ccd4f662-a248-41a2-b277-027f3059436b,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=ccd4f662-a248-41a2-b277-027f3059436b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.204 ipv6= k8sPodName=openstack/barbican-ks-endpoints-7h4vs oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0b6752d4fd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2784 identity=10783 ipv4=10.0.0.204 ipv6= k8sPodName=openstack/barbican-ks-endpoints-7h4vs subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=0b6752d4fd datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2784 identity=10783 ipv4=10.0.0.204 ipv6= k8sPodName=openstack/barbican-ks-endpoints-7h4vs subsys=endpoint level=info msg="Successful endpoint creation" containerID=0b6752d4fd datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2784 identity=10783 ipv4=10.0.0.204 ipv6= k8sPodName=openstack/barbican-ks-endpoints-7h4vs subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=0b6752d4fd endpointID=2784 k8sNamespace=openstack k8sPodName=barbican-ks-endpoints-7h4vs subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=ccd4f662-a248-41a2-b277-027f3059436b k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=ccd4f662-a248-41a2-b277-027f3059436b k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-endpoints k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=0b6752d4fd datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2784 identity=10783 ipv4=10.0.0.204 ipv6= k8sPodName=openstack/barbican-ks-endpoints-7h4vs subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.143 d2708a24-872d-4d8e-995c-0c88e45e3488 default }" containerID=7461b351ad499362e1926200506fdc29fd1f7a8c393e92e008599da49e0d7618 datapathConfiguration="&{false false false false false }" interface=lxcf83f8f1b4b91 k8sPodName=openstack/barbican-ks-user-vwzzj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7461b351ad datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3027 ipv4=10.0.0.143 ipv6= k8sPodName=openstack/barbican-ks-user-vwzzj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7461b351ad datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3027 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=cdd81299-9e42-44eb-b81e-190144c88e60,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=cdd81299-9e42-44eb-b81e-190144c88e60,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.143 ipv6= k8sPodName=openstack/barbican-ks-user-vwzzj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=7461b351ad datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3027 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.143 ipv6= k8sPodName=openstack/barbican-ks-user-vwzzj line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=cdd81299-9e42-44eb-b81e-190144c88e60;k8s:batch.kubernetes.io/job-name=barbican-ks-user;k8s:component=ks-user;k8s:controller-uid=cdd81299-9e42-44eb-b81e-190144c88e60;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-user;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7461b351ad datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3027 identity=1576 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=cdd81299-9e42-44eb-b81e-190144c88e60,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=cdd81299-9e42-44eb-b81e-190144c88e60,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.143 ipv6= k8sPodName=openstack/barbican-ks-user-vwzzj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7461b351ad datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3027 identity=1576 ipv4=10.0.0.143 ipv6= k8sPodName=openstack/barbican-ks-user-vwzzj subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7461b351ad datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3027 identity=1576 ipv4=10.0.0.143 ipv6= k8sPodName=openstack/barbican-ks-user-vwzzj subsys=endpoint level=info msg="Successful endpoint creation" containerID=7461b351ad datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3027 identity=1576 ipv4=10.0.0.143 ipv6= k8sPodName=openstack/barbican-ks-user-vwzzj subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=7461b351ad endpointID=3027 k8sNamespace=openstack k8sPodName=barbican-ks-user-vwzzj subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=cdd81299-9e42-44eb-b81e-190144c88e60 k8s:batch.kubernetes.io/job-name=barbican-ks-user k8s:component=ks-user k8s:controller-uid=cdd81299-9e42-44eb-b81e-190144c88e60 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-user k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=7461b351ad datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3027 identity=1576 ipv4=10.0.0.143 ipv6= k8sPodName=openstack/barbican-ks-user-vwzzj subsys=endpoint level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Create endpoint request" addressing="&{10.0.0.19 4a21deac-6e1e-4892-bcac-8f3cab53e961 default }" containerID=96a0fc6e167e41c7e4bcc67bf96d083ce0dc84c667bdbd6981ee0c11b6a3141b datapathConfiguration="&{false false false false false }" interface=lxc8fba4acecd67 k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-5jt7c labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=96a0fc6e16 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3176 ipv4=10.0.0.19 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-5jt7c subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=96a0fc6e16 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3176 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.15.9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.19 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-5jt7c subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:rook-ceph k8s:io.cilium.k8s.namespace.labels.name:rook-ceph]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=96a0fc6e16 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3176 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.19 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-5jt7c line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=rook-ceph-operator;k8s:helm.sh/chart=rook-ceph-v1.15.9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph;k8s:io.cilium.k8s.namespace.labels.name=rook-ceph;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system;k8s:io.kubernetes.pod.namespace=rook-ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=96a0fc6e16 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3176 identity=29959 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.15.9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.19 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-5jt7c oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=96a0fc6e16 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3176 identity=29959 ipv4=10.0.0.19 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-5jt7c subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=96a0fc6e16 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3176 identity=29959 ipv4=10.0.0.19 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-5jt7c subsys=endpoint level=info msg="Successful endpoint creation" containerID=96a0fc6e16 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3176 identity=29959 ipv4=10.0.0.19 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-5jt7c subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.42 43558a76-94c8-4c1b-a535-d22f2343364f default }" containerID=f1a6d1764f8adb6d30a59ec807a65a10311ffbd1afcc6419ba1c5641c32a1a95 datapathConfiguration="&{false false false false false }" interface=lxceb2df659ef6f k8sPodName=openstack/rook-ceph-detect-version-zdrnn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f1a6d1764f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=924 ipv4=10.0.0.42 ipv6= k8sPodName=openstack/rook-ceph-detect-version-zdrnn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f1a6d1764f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=924 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=4591b1c0-fcc2-4b80-a181-2cb8caac5d52,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=4591b1c0-fcc2-4b80-a181-2cb8caac5d52,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.42 ipv6= k8sPodName=openstack/rook-ceph-detect-version-zdrnn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-detect-version;k8s:batch.kubernetes.io/controller-uid=4591b1c0-fcc2-4b80-a181-2cb8caac5d52;k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version;k8s:controller-uid=4591b1c0-fcc2-4b80-a181-2cb8caac5d52;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=rook-ceph-detect-version;k8s:rook-version=v1.15.9;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f1a6d1764f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=924 identity=22279 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=4591b1c0-fcc2-4b80-a181-2cb8caac5d52,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=4591b1c0-fcc2-4b80-a181-2cb8caac5d52,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.42 ipv6= k8sPodName=openstack/rook-ceph-detect-version-zdrnn oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=f1a6d1764f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=924 identity=22279 ipv4=10.0.0.42 ipv6= k8sPodName=openstack/rook-ceph-detect-version-zdrnn subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f1a6d1764f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=924 identity=22279 ipv4=10.0.0.42 ipv6= k8sPodName=openstack/rook-ceph-detect-version-zdrnn subsys=endpoint level=info msg="Successful endpoint creation" containerID=f1a6d1764f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=924 identity=22279 ipv4=10.0.0.42 ipv6= k8sPodName=openstack/rook-ceph-detect-version-zdrnn subsys=daemon level=info msg="Delete endpoint request" containerID=f1a6d1764f endpointID=924 k8sNamespace=openstack k8sPodName=rook-ceph-detect-version-zdrnn subsys=daemon level=info msg="Releasing key" key="[k8s:app=rook-ceph-detect-version k8s:batch.kubernetes.io/controller-uid=4591b1c0-fcc2-4b80-a181-2cb8caac5d52 k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version k8s:controller-uid=4591b1c0-fcc2-4b80-a181-2cb8caac5d52 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=rook-ceph-detect-version k8s:rook-version=v1.15.9]" subsys=allocator level=info msg="Removed endpoint" containerID=f1a6d1764f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=924 identity=22279 ipv4=10.0.0.42 ipv6= k8sPodName=openstack/rook-ceph-detect-version-zdrnn subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.67 a37d4b72-52c6-4994-b2a8-17830a6291c9 default }" containerID=afdf47a8a98d95af97b124f4df3fc1e0f533f83f9eaccbdab443a2fe4823bfca datapathConfiguration="&{false false false false false }" interface=lxcde7d115a2a8a k8sPodName=openstack/ceph-object-controller-detect-version-p9bnn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=afdf47a8a9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1855 ipv4=10.0.0.67 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-p9bnn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=afdf47a8a9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1855 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=94977f47-e0fc-44d0-b328-5cd02b799d93,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=94977f47-e0fc-44d0-b328-5cd02b799d93,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.67 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-p9bnn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=ceph-object-controller-detect-version;k8s:batch.kubernetes.io/controller-uid=94977f47-e0fc-44d0-b328-5cd02b799d93;k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version;k8s:controller-uid=94977f47-e0fc-44d0-b328-5cd02b799d93;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=ceph-object-controller-detect-version;k8s:rook-version=v1.15.9;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=afdf47a8a9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1855 identity=15336 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=94977f47-e0fc-44d0-b328-5cd02b799d93,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=94977f47-e0fc-44d0-b328-5cd02b799d93,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.67 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-p9bnn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=afdf47a8a9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1855 identity=15336 ipv4=10.0.0.67 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-p9bnn subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=afdf47a8a9 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1855 identity=15336 ipv4=10.0.0.67 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-p9bnn subsys=endpoint level=info msg="Successful endpoint creation" containerID=afdf47a8a9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1855 identity=15336 ipv4=10.0.0.67 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-p9bnn subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=afdf47a8a9 endpointID=1855 k8sNamespace=openstack k8sPodName=ceph-object-controller-detect-version-p9bnn subsys=daemon level=info msg="Releasing key" key="[k8s:app=ceph-object-controller-detect-version k8s:batch.kubernetes.io/controller-uid=94977f47-e0fc-44d0-b328-5cd02b799d93 k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version k8s:controller-uid=94977f47-e0fc-44d0-b328-5cd02b799d93 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=ceph-object-controller-detect-version k8s:rook-version=v1.15.9]" subsys=allocator level=info msg="Removed endpoint" containerID=afdf47a8a9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1855 identity=15336 ipv4=10.0.0.67 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-p9bnn subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.42 0f4c9c82-5cd0-4fd3-8e8a-ca9455747ad7 default }" containerID=dc9bbb4717d912b580b5d8215cfa5f8a983242d22f28c740f2f0ecc2f694f1c8 datapathConfiguration="&{false false false false false }" interface=lxcb9ba1381e396 k8sPodName=local-path-storage/helper-pod-create-pvc-624d6394-0437-43c7-8870-3ec793614d5c labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=dc9bbb4717 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2795 ipv4=10.0.0.42 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-624d6394-0437-43c7-8870-3ec793614d5c subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=dc9bbb4717 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2795 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.42 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-624d6394-0437-43c7-8870-3ec793614d5c subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=dc9bbb4717 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2795 identity=12427 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.42 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-624d6394-0437-43c7-8870-3ec793614d5c oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=dc9bbb4717 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2795 identity=12427 ipv4=10.0.0.42 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-624d6394-0437-43c7-8870-3ec793614d5c subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=dc9bbb4717 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2795 identity=12427 ipv4=10.0.0.42 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-624d6394-0437-43c7-8870-3ec793614d5c subsys=endpoint level=info msg="Successful endpoint creation" containerID=dc9bbb4717 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2795 identity=12427 ipv4=10.0.0.42 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-624d6394-0437-43c7-8870-3ec793614d5c subsys=daemon level=info msg="Delete endpoint request" containerID=dc9bbb4717 endpointID=2795 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-624d6394-0437-43c7-8870-3ec793614d5c subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=dc9bbb4717 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2795 identity=12427 ipv4=10.0.0.42 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-624d6394-0437-43c7-8870-3ec793614d5c subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.140 3e8a461c-dfc3-47d8-9817-b84dca93ea5e default }" containerID=177a0cab3a30886701bc5888089aefb7ae0773037efc738a777bd311d07d687a datapathConfiguration="&{false false false false false }" interface=lxcbf6de0e202d9 k8sPodName=openstack/rabbitmq-glance-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=177a0cab3a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=372 ipv4=10.0.0.140 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=177a0cab3a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=372 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.140 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-glance;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=177a0cab3a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=372 identity=40976 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.140 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=177a0cab3a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=372 identity=40976 ipv4=10.0.0.140 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=177a0cab3a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=372 identity=40976 ipv4=10.0.0.140 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=177a0cab3a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=372 identity=40976 ipv4=10.0.0.140 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.35 2e43efff-2305-4160-96d5-c55c8f925110 default }" containerID=14d9fd050569201be9e92e2df14dd4d7d082e55a3ed04da5ab15d4513250c9c7 datapathConfiguration="&{false false false false false }" interface=lxcaa8277d089c3 k8sPodName=openstack/glance-db-init-lsmdh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=14d9fd0505 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3038 ipv4=10.0.0.35 ipv6= k8sPodName=openstack/glance-db-init-lsmdh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=14d9fd0505 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3038 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=a48c0541-854d-49d8-9480-4de9b1f2e869,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=a48c0541-854d-49d8-9480-4de9b1f2e869,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.35 ipv6= k8sPodName=openstack/glance-db-init-lsmdh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=14d9fd0505 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3038 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.35 ipv6= k8sPodName=openstack/glance-db-init-lsmdh line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=a48c0541-854d-49d8-9480-4de9b1f2e869;k8s:batch.kubernetes.io/job-name=glance-db-init;k8s:component=db-init;k8s:controller-uid=a48c0541-854d-49d8-9480-4de9b1f2e869;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=14d9fd0505 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3038 identity=13504 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=a48c0541-854d-49d8-9480-4de9b1f2e869,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=a48c0541-854d-49d8-9480-4de9b1f2e869,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.35 ipv6= k8sPodName=openstack/glance-db-init-lsmdh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=14d9fd0505 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3038 identity=13504 ipv4=10.0.0.35 ipv6= k8sPodName=openstack/glance-db-init-lsmdh subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=14d9fd0505 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3038 identity=13504 ipv4=10.0.0.35 ipv6= k8sPodName=openstack/glance-db-init-lsmdh subsys=endpoint level=info msg="Successful endpoint creation" containerID=14d9fd0505 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3038 identity=13504 ipv4=10.0.0.35 ipv6= k8sPodName=openstack/glance-db-init-lsmdh subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=14d9fd0505 endpointID=3038 k8sNamespace=openstack k8sPodName=glance-db-init-lsmdh subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=a48c0541-854d-49d8-9480-4de9b1f2e869 k8s:batch.kubernetes.io/job-name=glance-db-init k8s:component=db-init k8s:controller-uid=a48c0541-854d-49d8-9480-4de9b1f2e869 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=14d9fd0505 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3038 identity=13504 ipv4=10.0.0.35 ipv6= k8sPodName=openstack/glance-db-init-lsmdh subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.127 f41f15c5-4073-497c-8f65-f02c72dd8987 default }" containerID=e76c9163ed74ce6abe5f05a396b5b628fc82888cdfd05fa112d48a845d09a779 datapathConfiguration="&{false false false false false }" interface=lxc9c334b401c47 k8sPodName=openstack/glance-db-sync-wkq27 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e76c9163ed datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1241 ipv4=10.0.0.127 ipv6= k8sPodName=openstack/glance-db-sync-wkq27 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e76c9163ed datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1241 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=2ea852db-0ef6-4a8f-ba58-b5f2cafd0ac9,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=2ea852db-0ef6-4a8f-ba58-b5f2cafd0ac9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.127 ipv6= k8sPodName=openstack/glance-db-sync-wkq27 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=2ea852db-0ef6-4a8f-ba58-b5f2cafd0ac9;k8s:batch.kubernetes.io/job-name=glance-db-sync;k8s:component=db-sync;k8s:controller-uid=2ea852db-0ef6-4a8f-ba58-b5f2cafd0ac9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-sync;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e76c9163ed datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1241 identity=45287 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=2ea852db-0ef6-4a8f-ba58-b5f2cafd0ac9,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=2ea852db-0ef6-4a8f-ba58-b5f2cafd0ac9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.127 ipv6= k8sPodName=openstack/glance-db-sync-wkq27 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e76c9163ed datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1241 identity=45287 ipv4=10.0.0.127 ipv6= k8sPodName=openstack/glance-db-sync-wkq27 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=e76c9163ed datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1241 identity=45287 ipv4=10.0.0.127 ipv6= k8sPodName=openstack/glance-db-sync-wkq27 subsys=endpoint level=info msg="Successful endpoint creation" containerID=e76c9163ed datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1241 identity=45287 ipv4=10.0.0.127 ipv6= k8sPodName=openstack/glance-db-sync-wkq27 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.143 57849467-f629-46b4-9dcb-bed682e5aa54 default }" containerID=e33bb2ca744468b0ed4db3c93d24ad934ecd92b002bccc00569babe0307cb873 datapathConfiguration="&{false false false false false }" interface=lxc922f5229321b k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-hfdcz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e33bb2ca74 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3583 ipv4=10.0.0.143 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-hfdcz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e33bb2ca74 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3583 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.143 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-hfdcz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-rgw;k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io;k8s:app.kubernetes.io/created-by=rook-ceph-operator;k8s:app.kubernetes.io/instance=ceph;k8s:app.kubernetes.io/managed-by=rook-ceph-operator;k8s:app.kubernetes.io/name=ceph-rgw;k8s:app.kubernetes.io/part-of=ceph;k8s:ceph_daemon_id=ceph;k8s:ceph_daemon_type=rgw;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw;k8s:io.kubernetes.pod.namespace=openstack;k8s:rgw=ceph;k8s:rook.io/operator-namespace=rook-ceph;k8s:rook_cluster=openstack;k8s:rook_object_store=ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e33bb2ca74 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3583 identity=57233 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.143 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-hfdcz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e33bb2ca74 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3583 identity=57233 ipv4=10.0.0.143 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-hfdcz subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.39 c74262da-127c-4cb5-b830-9f0ac111b969 default }" containerID=8ddf0e981756a168560566619e566b06e559bea48fc9c9e24b4d7c53ad9a9f6a datapathConfiguration="&{false false false false false }" interface=lxc77207eb4fd72 k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-dxwwh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8ddf0e9817 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1416 ipv4=10.0.0.39 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-dxwwh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8ddf0e9817 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1416 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.39 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-dxwwh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-crashcollector;k8s:ceph-version=18.2.7-0;k8s:ceph_daemon_id=crash;k8s:crashcollector=crash;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default;k8s:io.kubernetes.pod.namespace=openstack;k8s:node_name=instance;k8s:rook_cluster=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8ddf0e9817 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1416 identity=3276 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.39 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-dxwwh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8ddf0e9817 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1416 identity=3276 ipv4=10.0.0.39 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-dxwwh subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e33bb2ca74 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3583 identity=57233 ipv4=10.0.0.143 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-hfdcz subsys=endpoint level=info msg="Successful endpoint creation" containerID=e33bb2ca74 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3583 identity=57233 ipv4=10.0.0.143 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-hfdcz subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=8ddf0e9817 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1416 identity=3276 ipv4=10.0.0.39 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-dxwwh subsys=endpoint level=info msg="Successful endpoint creation" containerID=8ddf0e9817 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1416 identity=3276 ipv4=10.0.0.39 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-dxwwh subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=e76c9163ed endpointID=1241 k8sNamespace=openstack k8sPodName=glance-db-sync-wkq27 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=2ea852db-0ef6-4a8f-ba58-b5f2cafd0ac9 k8s:batch.kubernetes.io/job-name=glance-db-sync k8s:component=db-sync k8s:controller-uid=2ea852db-0ef6-4a8f-ba58-b5f2cafd0ac9 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-sync k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=e76c9163ed datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1241 identity=45287 ipv4=10.0.0.127 ipv6= k8sPodName=openstack/glance-db-sync-wkq27 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.71 69d0de42-7732-49c8-94e1-e5d95dc88b2b default }" containerID=660e589306fbc688209e5af029b3f9af8bcd306e5a197c7c8e81428ef23006a6 datapathConfiguration="&{false false false false false }" interface=lxc492bca37a268 k8sPodName=openstack/glance-rabbit-init-fkgrf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=660e589306 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1059 ipv4=10.0.0.71 ipv6= k8sPodName=openstack/glance-rabbit-init-fkgrf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=660e589306 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1059 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=51339061-6a45-4acb-bce0-b702fcd22d6e,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=51339061-6a45-4acb-bce0-b702fcd22d6e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.71 ipv6= k8sPodName=openstack/glance-rabbit-init-fkgrf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=51339061-6a45-4acb-bce0-b702fcd22d6e;k8s:batch.kubernetes.io/job-name=glance-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=51339061-6a45-4acb-bce0-b702fcd22d6e;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-rabbit-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=660e589306 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1059 identity=35785 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=51339061-6a45-4acb-bce0-b702fcd22d6e,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=51339061-6a45-4acb-bce0-b702fcd22d6e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.71 ipv6= k8sPodName=openstack/glance-rabbit-init-fkgrf oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=660e589306 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1059 identity=35785 ipv4=10.0.0.71 ipv6= k8sPodName=openstack/glance-rabbit-init-fkgrf subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=660e589306 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1059 identity=35785 ipv4=10.0.0.71 ipv6= k8sPodName=openstack/glance-rabbit-init-fkgrf subsys=endpoint level=info msg="Successful endpoint creation" containerID=660e589306 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1059 identity=35785 ipv4=10.0.0.71 ipv6= k8sPodName=openstack/glance-rabbit-init-fkgrf subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=660e589306 endpointID=1059 k8sNamespace=openstack k8sPodName=glance-rabbit-init-fkgrf subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=51339061-6a45-4acb-bce0-b702fcd22d6e k8s:batch.kubernetes.io/job-name=glance-rabbit-init k8s:component=rabbit-init k8s:controller-uid=51339061-6a45-4acb-bce0-b702fcd22d6e k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-rabbit-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=660e589306 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1059 identity=35785 ipv4=10.0.0.71 ipv6= k8sPodName=openstack/glance-rabbit-init-fkgrf subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.164 eb2aeed9-3400-40ac-8e6e-76952c7684dd default }" containerID=fcc9baab1fd6cf849ffc5fa5089540efd2d123ffef59f456ec0278650f9fd118 datapathConfiguration="&{false false false false false }" interface=lxc9f8f11f6172b k8sPodName=openstack/glance-ks-service-h4fvg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fcc9baab1f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1871 ipv4=10.0.0.164 ipv6= k8sPodName=openstack/glance-ks-service-h4fvg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fcc9baab1f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1871 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=ae6ac53f-72d4-44c4-90d8-146769155378,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=ae6ac53f-72d4-44c4-90d8-146769155378,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.164 ipv6= k8sPodName=openstack/glance-ks-service-h4fvg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=ae6ac53f-72d4-44c4-90d8-146769155378;k8s:batch.kubernetes.io/job-name=glance-ks-service;k8s:component=ks-service;k8s:controller-uid=ae6ac53f-72d4-44c4-90d8-146769155378;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-service;k8s:release_group=glance;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=fcc9baab1f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1871 identity=32123 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=ae6ac53f-72d4-44c4-90d8-146769155378,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=ae6ac53f-72d4-44c4-90d8-146769155378,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.164 ipv6= k8sPodName=openstack/glance-ks-service-h4fvg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fcc9baab1f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1871 identity=32123 ipv4=10.0.0.164 ipv6= k8sPodName=openstack/glance-ks-service-h4fvg subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=fcc9baab1f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1871 identity=32123 ipv4=10.0.0.164 ipv6= k8sPodName=openstack/glance-ks-service-h4fvg subsys=endpoint level=info msg="Successful endpoint creation" containerID=fcc9baab1f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1871 identity=32123 ipv4=10.0.0.164 ipv6= k8sPodName=openstack/glance-ks-service-h4fvg subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=fcc9baab1f endpointID=1871 k8sNamespace=openstack k8sPodName=glance-ks-service-h4fvg subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=ae6ac53f-72d4-44c4-90d8-146769155378 k8s:batch.kubernetes.io/job-name=glance-ks-service k8s:component=ks-service k8s:controller-uid=ae6ac53f-72d4-44c4-90d8-146769155378 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-service k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=fcc9baab1f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1871 identity=32123 ipv4=10.0.0.164 ipv6= k8sPodName=openstack/glance-ks-service-h4fvg subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.62 21d2e005-3e14-4507-87fd-2726afd50644 default }" containerID=5687592a22925d1579a3978127d924f5a7c0bef037a2d9d2d2c23f76b722fbee datapathConfiguration="&{false false false false false }" interface=lxc2d02effb480e k8sPodName=openstack/glance-ks-endpoints-rzs4q labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5687592a22 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2516 ipv4=10.0.0.62 ipv6= k8sPodName=openstack/glance-ks-endpoints-rzs4q subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5687592a22 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2516 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=f2a58d7f-d3f1-4b5c-af83-3f327d4cff68,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=f2a58d7f-d3f1-4b5c-af83-3f327d4cff68,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.62 ipv6= k8sPodName=openstack/glance-ks-endpoints-rzs4q subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=f2a58d7f-d3f1-4b5c-af83-3f327d4cff68;k8s:batch.kubernetes.io/job-name=glance-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=f2a58d7f-d3f1-4b5c-af83-3f327d4cff68;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-endpoints;k8s:release_group=glance;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=5687592a22 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2516 identity=9652 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=f2a58d7f-d3f1-4b5c-af83-3f327d4cff68,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=f2a58d7f-d3f1-4b5c-af83-3f327d4cff68,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.62 ipv6= k8sPodName=openstack/glance-ks-endpoints-rzs4q oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5687592a22 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2516 identity=9652 ipv4=10.0.0.62 ipv6= k8sPodName=openstack/glance-ks-endpoints-rzs4q subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5687592a22 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2516 identity=9652 ipv4=10.0.0.62 ipv6= k8sPodName=openstack/glance-ks-endpoints-rzs4q subsys=endpoint level=info msg="Successful endpoint creation" containerID=5687592a22 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2516 identity=9652 ipv4=10.0.0.62 ipv6= k8sPodName=openstack/glance-ks-endpoints-rzs4q subsys=daemon level=info msg="Delete endpoint request" containerID=5687592a22 endpointID=2516 k8sNamespace=openstack k8sPodName=glance-ks-endpoints-rzs4q subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=f2a58d7f-d3f1-4b5c-af83-3f327d4cff68 k8s:batch.kubernetes.io/job-name=glance-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=f2a58d7f-d3f1-4b5c-af83-3f327d4cff68 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-endpoints k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=5687592a22 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2516 identity=9652 ipv4=10.0.0.62 ipv6= k8sPodName=openstack/glance-ks-endpoints-rzs4q subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.214 83f65cb5-55ba-44f5-95c5-1a7dc6fcadf4 default }" containerID=48fcf077b1a0e6eef1a21f2b3b1ed0aef60d4455e5eb88bfdc841003360d4b15 datapathConfiguration="&{false false false false false }" interface=lxc1ce95cf8150c k8sPodName=openstack/glance-ks-user-8jrbw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=48fcf077b1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3334 ipv4=10.0.0.214 ipv6= k8sPodName=openstack/glance-ks-user-8jrbw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=48fcf077b1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3334 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=d20d583f-00a5-490f-842c-7ab0ee7a4c44,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=d20d583f-00a5-490f-842c-7ab0ee7a4c44,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.214 ipv6= k8sPodName=openstack/glance-ks-user-8jrbw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=d20d583f-00a5-490f-842c-7ab0ee7a4c44;k8s:batch.kubernetes.io/job-name=glance-ks-user;k8s:component=ks-user;k8s:controller-uid=d20d583f-00a5-490f-842c-7ab0ee7a4c44;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-user;k8s:release_group=glance;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=48fcf077b1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3334 identity=3246 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=d20d583f-00a5-490f-842c-7ab0ee7a4c44,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=d20d583f-00a5-490f-842c-7ab0ee7a4c44,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.214 ipv6= k8sPodName=openstack/glance-ks-user-8jrbw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=48fcf077b1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3334 identity=3246 ipv4=10.0.0.214 ipv6= k8sPodName=openstack/glance-ks-user-8jrbw subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=48fcf077b1 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3334 identity=3246 ipv4=10.0.0.214 ipv6= k8sPodName=openstack/glance-ks-user-8jrbw subsys=endpoint level=info msg="Successful endpoint creation" containerID=48fcf077b1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3334 identity=3246 ipv4=10.0.0.214 ipv6= k8sPodName=openstack/glance-ks-user-8jrbw subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=48fcf077b1 endpointID=3334 k8sNamespace=openstack k8sPodName=glance-ks-user-8jrbw subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=d20d583f-00a5-490f-842c-7ab0ee7a4c44 k8s:batch.kubernetes.io/job-name=glance-ks-user k8s:component=ks-user k8s:controller-uid=d20d583f-00a5-490f-842c-7ab0ee7a4c44 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-user k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=48fcf077b1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3334 identity=3246 ipv4=10.0.0.214 ipv6= k8sPodName=openstack/glance-ks-user-8jrbw subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.184 c225992c-f3a5-4cdc-815f-cfb932a4baa4 default }" containerID=56504a39f1f57eb144d82d21b161cb84cce17834a4673c8e625bcc28750b51bd datapathConfiguration="&{false false false false false }" interface=lxc763db7c5c5bf k8sPodName=openstack/glance-metadefs-load-sqd4b labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=56504a39f1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=138 ipv4=10.0.0.184 ipv6= k8sPodName=openstack/glance-metadefs-load-sqd4b subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=56504a39f1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=138 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=f4f1c185-3398-4a68-80bd-ad85b05015d6,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=f4f1c185-3398-4a68-80bd-ad85b05015d6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.184 ipv6= k8sPodName=openstack/glance-metadefs-load-sqd4b subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=f4f1c185-3398-4a68-80bd-ad85b05015d6;k8s:batch.kubernetes.io/job-name=glance-metadefs-load;k8s:component=metadefs_load;k8s:controller-uid=f4f1c185-3398-4a68-80bd-ad85b05015d6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-metadefs-load;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=56504a39f1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=138 identity=14734 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=f4f1c185-3398-4a68-80bd-ad85b05015d6,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=f4f1c185-3398-4a68-80bd-ad85b05015d6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.184 ipv6= k8sPodName=openstack/glance-metadefs-load-sqd4b oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=56504a39f1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=138 identity=14734 ipv4=10.0.0.184 ipv6= k8sPodName=openstack/glance-metadefs-load-sqd4b subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=56504a39f1 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=138 identity=14734 ipv4=10.0.0.184 ipv6= k8sPodName=openstack/glance-metadefs-load-sqd4b subsys=endpoint level=info msg="Successful endpoint creation" containerID=56504a39f1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=138 identity=14734 ipv4=10.0.0.184 ipv6= k8sPodName=openstack/glance-metadefs-load-sqd4b subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=56504a39f1 endpointID=138 k8sNamespace=openstack k8sPodName=glance-metadefs-load-sqd4b subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=f4f1c185-3398-4a68-80bd-ad85b05015d6 k8s:batch.kubernetes.io/job-name=glance-metadefs-load k8s:component=metadefs_load k8s:controller-uid=f4f1c185-3398-4a68-80bd-ad85b05015d6 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-metadefs-load k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=56504a39f1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=138 identity=14734 ipv4=10.0.0.184 ipv6= k8sPodName=openstack/glance-metadefs-load-sqd4b subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.102 7b8b8926-3036-49ab-be96-8a1095164ca7 default }" containerID=3edd6146d6640029898239fc64b4fc7465e8b4d59945affc7b087feb827fe9ba datapathConfiguration="&{false false false false false }" interface=lxcdd9f6fc3570a k8sPodName=openstack/glance-storage-init-9cz4j labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3edd6146d6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1003 ipv4=10.0.0.102 ipv6= k8sPodName=openstack/glance-storage-init-9cz4j subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3edd6146d6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1003 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=07752166-9560-4ade-a3dc-b6b0fa4c370d,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=07752166-9560-4ade-a3dc-b6b0fa4c370d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.102 ipv6= k8sPodName=openstack/glance-storage-init-9cz4j subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=3edd6146d6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1003 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.102 ipv6= k8sPodName=openstack/glance-storage-init-9cz4j line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=07752166-9560-4ade-a3dc-b6b0fa4c370d;k8s:batch.kubernetes.io/job-name=glance-storage-init;k8s:component=storage-init;k8s:controller-uid=07752166-9560-4ade-a3dc-b6b0fa4c370d;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-storage-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3edd6146d6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1003 identity=18116 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=07752166-9560-4ade-a3dc-b6b0fa4c370d,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=07752166-9560-4ade-a3dc-b6b0fa4c370d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.102 ipv6= k8sPodName=openstack/glance-storage-init-9cz4j oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3edd6146d6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1003 identity=18116 ipv4=10.0.0.102 ipv6= k8sPodName=openstack/glance-storage-init-9cz4j subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3edd6146d6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1003 identity=18116 ipv4=10.0.0.102 ipv6= k8sPodName=openstack/glance-storage-init-9cz4j subsys=endpoint level=info msg="Successful endpoint creation" containerID=3edd6146d6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1003 identity=18116 ipv4=10.0.0.102 ipv6= k8sPodName=openstack/glance-storage-init-9cz4j subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=3edd6146d6 endpointID=1003 k8sNamespace=openstack k8sPodName=glance-storage-init-9cz4j subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=07752166-9560-4ade-a3dc-b6b0fa4c370d k8s:batch.kubernetes.io/job-name=glance-storage-init k8s:component=storage-init k8s:controller-uid=07752166-9560-4ade-a3dc-b6b0fa4c370d k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-storage-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=3edd6146d6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1003 identity=18116 ipv4=10.0.0.102 ipv6= k8sPodName=openstack/glance-storage-init-9cz4j subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.95 66ad2398-14d3-48ea-88be-eeb11f37375b default }" containerID=ef8428cc0b5f0ca8c8e18d76451896c428cd6bb8f3fe86e21a7d176e000c411d datapathConfiguration="&{false false false false false }" interface=lxc478af70a818f k8sPodName=openstack/glance-api-6899b9f49d-5vgt7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ef8428cc0b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2795 ipv4=10.0.0.95 ipv6= k8sPodName=openstack/glance-api-6899b9f49d-5vgt7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ef8428cc0b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2795 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.95 ipv6= k8sPodName=openstack/glance-api-6899b9f49d-5vgt7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ef8428cc0b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2795 identity=63330 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.95 ipv6= k8sPodName=openstack/glance-api-6899b9f49d-5vgt7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ef8428cc0b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2795 identity=63330 ipv4=10.0.0.95 ipv6= k8sPodName=openstack/glance-api-6899b9f49d-5vgt7 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=ef8428cc0b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2795 identity=63330 ipv4=10.0.0.95 ipv6= k8sPodName=openstack/glance-api-6899b9f49d-5vgt7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=ef8428cc0b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2795 identity=63330 ipv4=10.0.0.95 ipv6= k8sPodName=openstack/glance-api-6899b9f49d-5vgt7 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.116 952c462e-7406-41c2-bd90-22348bfbe5c5 default }" containerID=da942cb4e91fef07fabcc51bed25d5c17b04791582df77a3f3d7ad9c27e24786 datapathConfiguration="&{false false false false false }" interface=lxc77e11ca3d792 k8sPodName=openstack/staffeln-api-f57f9ffc-g5vgs labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=da942cb4e9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=582 ipv4=10.0.0.116 ipv6= k8sPodName=openstack/staffeln-api-f57f9ffc-g5vgs subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=da942cb4e9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=582 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.116 ipv6= k8sPodName=openstack/staffeln-api-f57f9ffc-g5vgs subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=da942cb4e9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=582 identity=33505 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.116 ipv6= k8sPodName=openstack/staffeln-api-f57f9ffc-g5vgs oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=da942cb4e9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=582 identity=33505 ipv4=10.0.0.116 ipv6= k8sPodName=openstack/staffeln-api-f57f9ffc-g5vgs subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.97 c91ca396-7436-47cf-93b7-de0bcb373a08 default }" containerID=b0529338226928003ece33d3e8f2f71fef9d80d5d6f369d3f3df2d2855220cd0 datapathConfiguration="&{false false false false false }" interface=lxcdb8b3798064f k8sPodName=openstack/staffeln-conductor-6884cb4774-4zxmc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b052933822 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=98 ipv4=10.0.0.97 ipv6= k8sPodName=openstack/staffeln-conductor-6884cb4774-4zxmc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b052933822 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=98 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.97 ipv6= k8sPodName=openstack/staffeln-conductor-6884cb4774-4zxmc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=conductor;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b052933822 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=98 identity=63094 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.97 ipv6= k8sPodName=openstack/staffeln-conductor-6884cb4774-4zxmc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b052933822 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=98 identity=63094 ipv4=10.0.0.97 ipv6= k8sPodName=openstack/staffeln-conductor-6884cb4774-4zxmc subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.227 97ef0a70-3cb3-412b-ae72-0153c8fdc6db default }" containerID=a528f1a33c0e9bded43858793e9a3b973fde29bbc161fe0824e47c822ff59393 datapathConfiguration="&{false false false false false }" interface=lxcdbbe3e81c45b k8sPodName=openstack/staffeln-db-init-648g4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a528f1a33c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3896 ipv4=10.0.0.227 ipv6= k8sPodName=openstack/staffeln-db-init-648g4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a528f1a33c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3896 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=68cf969e-7d3a-4027-a6b9-8c8deb190337,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=68cf969e-7d3a-4027-a6b9-8c8deb190337,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.227 ipv6= k8sPodName=openstack/staffeln-db-init-648g4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=68cf969e-7d3a-4027-a6b9-8c8deb190337;k8s:batch.kubernetes.io/job-name=staffeln-db-init;k8s:component=db-init;k8s:controller-uid=68cf969e-7d3a-4027-a6b9-8c8deb190337;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-init;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a528f1a33c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3896 identity=4229 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=68cf969e-7d3a-4027-a6b9-8c8deb190337,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=68cf969e-7d3a-4027-a6b9-8c8deb190337,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.227 ipv6= k8sPodName=openstack/staffeln-db-init-648g4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a528f1a33c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3896 identity=4229 ipv4=10.0.0.227 ipv6= k8sPodName=openstack/staffeln-db-init-648g4 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b052933822 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=98 identity=63094 ipv4=10.0.0.97 ipv6= k8sPodName=openstack/staffeln-conductor-6884cb4774-4zxmc subsys=endpoint level=info msg="Successful endpoint creation" containerID=b052933822 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=98 identity=63094 ipv4=10.0.0.97 ipv6= k8sPodName=openstack/staffeln-conductor-6884cb4774-4zxmc subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=da942cb4e9 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=582 identity=33505 ipv4=10.0.0.116 ipv6= k8sPodName=openstack/staffeln-api-f57f9ffc-g5vgs subsys=endpoint level=info msg="Successful endpoint creation" containerID=da942cb4e9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=582 identity=33505 ipv4=10.0.0.116 ipv6= k8sPodName=openstack/staffeln-api-f57f9ffc-g5vgs subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=a528f1a33c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3896 identity=4229 ipv4=10.0.0.227 ipv6= k8sPodName=openstack/staffeln-db-init-648g4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=a528f1a33c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3896 identity=4229 ipv4=10.0.0.227 ipv6= k8sPodName=openstack/staffeln-db-init-648g4 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=a528f1a33c endpointID=3896 k8sNamespace=openstack k8sPodName=staffeln-db-init-648g4 subsys=daemon level=info msg="Releasing key" key="[k8s:application=staffeln k8s:batch.kubernetes.io/controller-uid=68cf969e-7d3a-4027-a6b9-8c8deb190337 k8s:batch.kubernetes.io/job-name=staffeln-db-init k8s:component=db-init k8s:controller-uid=68cf969e-7d3a-4027-a6b9-8c8deb190337 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=staffeln-db-init k8s:release_group=staffeln]" subsys=allocator level=info msg="Removed endpoint" containerID=a528f1a33c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3896 identity=4229 ipv4=10.0.0.227 ipv6= k8sPodName=openstack/staffeln-db-init-648g4 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.27 eec2cc3d-3a4d-4e7b-9c64-e983c0ee3cb9 default }" containerID=53961f656d1d17f832d0b7a43c1e019dfa510c5cbfca77ca438e0020881b0c76 datapathConfiguration="&{false false false false false }" interface=lxc939e1f2ad217 k8sPodName=openstack/staffeln-db-sync-fc8wq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=53961f656d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=481 ipv4=10.0.0.27 ipv6= k8sPodName=openstack/staffeln-db-sync-fc8wq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=53961f656d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=481 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=d692645c-dbc2-475a-80df-0d52c5e0a2ef,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=d692645c-dbc2-475a-80df-0d52c5e0a2ef,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.27 ipv6= k8sPodName=openstack/staffeln-db-sync-fc8wq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=d692645c-dbc2-475a-80df-0d52c5e0a2ef;k8s:batch.kubernetes.io/job-name=staffeln-db-sync;k8s:component=db-sync;k8s:controller-uid=d692645c-dbc2-475a-80df-0d52c5e0a2ef;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-sync;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=53961f656d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=481 identity=9899 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=d692645c-dbc2-475a-80df-0d52c5e0a2ef,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=d692645c-dbc2-475a-80df-0d52c5e0a2ef,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.27 ipv6= k8sPodName=openstack/staffeln-db-sync-fc8wq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=53961f656d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=481 identity=9899 ipv4=10.0.0.27 ipv6= k8sPodName=openstack/staffeln-db-sync-fc8wq subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=53961f656d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=481 identity=9899 ipv4=10.0.0.27 ipv6= k8sPodName=openstack/staffeln-db-sync-fc8wq subsys=endpoint level=info msg="Successful endpoint creation" containerID=53961f656d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=481 identity=9899 ipv4=10.0.0.27 ipv6= k8sPodName=openstack/staffeln-db-sync-fc8wq subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager