level=info msg="Memory available for map entries (0.003% of 67421638656B): 168554096B" subsys=config level=info msg="option bpf-ct-global-tcp-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-ct-global-any-max set by dynamic sizing to 295708" subsys=config level=info msg="option bpf-nat-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-neigh-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-sock-rev-map-max set by dynamic sizing to 295708" subsys=config level=info msg=" --agent-health-port='9879'" subsys=daemon level=info msg=" --agent-labels=''" subsys=daemon level=info msg=" --agent-liveness-update-interval='1s'" subsys=daemon level=info msg=" --agent-not-ready-taint-key='node.cilium.io/agent-not-ready'" subsys=daemon level=info msg=" --allocator-list-timeout='3m0s'" subsys=daemon level=info msg=" --allow-icmp-frag-needed='true'" subsys=daemon level=info msg=" --allow-localhost='auto'" subsys=daemon level=info msg=" --annotate-k8s-node='false'" subsys=daemon level=info msg=" --api-rate-limit=''" subsys=daemon level=info msg=" --arping-refresh-period='30s'" subsys=daemon level=info msg=" --auto-create-cilium-node-resource='true'" subsys=daemon level=info msg=" --auto-direct-node-routes='false'" subsys=daemon level=info msg=" --bgp-announce-lb-ip='false'" subsys=daemon level=info msg=" --bgp-announce-pod-cidr='false'" subsys=daemon level=info msg=" --bgp-config-path='/var/lib/cilium/bgp/config.yaml'" subsys=daemon level=info msg=" --bpf-auth-map-max='524288'" subsys=daemon level=info msg=" --bpf-ct-global-any-max='262144'" subsys=daemon level=info msg=" --bpf-ct-global-tcp-max='524288'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-fin='10s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-syn='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp-grace='1m0s'" subsys=daemon level=info msg=" --bpf-filter-priority='1'" subsys=daemon level=info msg=" --bpf-fragments-map-max='8192'" subsys=daemon level=info msg=" --bpf-lb-acceleration='disabled'" subsys=daemon level=info msg=" --bpf-lb-affinity-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-algorithm='random'" subsys=daemon level=info msg=" --bpf-lb-dev-ip-addr-inherit=''" subsys=daemon level=info msg=" --bpf-lb-dsr-dispatch='opt'" subsys=daemon level=info msg=" --bpf-lb-dsr-l4-xlate='frontend'" subsys=daemon level=info msg=" --bpf-lb-external-clusterip='false'" subsys=daemon level=info msg=" --bpf-lb-maglev-hash-seed='JLfvgnHc2kaSUFaI'" subsys=daemon level=info msg=" --bpf-lb-maglev-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-maglev-table-size='16381'" subsys=daemon level=info msg=" --bpf-lb-map-max='65536'" subsys=daemon level=info msg=" --bpf-lb-mode='snat'" subsys=daemon level=info msg=" --bpf-lb-rev-nat-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-rss-ipv4-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-rss-ipv6-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-service-backend-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-service-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-sock='false'" subsys=daemon level=info msg=" --bpf-lb-sock-hostns-only='false'" subsys=daemon level=info msg=" --bpf-lb-source-range-map-max='0'" subsys=daemon level=info msg=" --bpf-map-dynamic-size-ratio='0.0025'" subsys=daemon level=info msg=" --bpf-map-event-buffers=''" subsys=daemon level=info msg=" --bpf-nat-global-max='524288'" subsys=daemon level=info msg=" --bpf-neigh-global-max='524288'" subsys=daemon level=info msg=" --bpf-policy-map-full-reconciliation-interval='15m0s'" subsys=daemon level=info msg=" --bpf-policy-map-max='16384'" subsys=daemon level=info msg=" --bpf-root='/sys/fs/bpf'" subsys=daemon level=info msg=" --bpf-sock-rev-map-max='262144'" subsys=daemon level=info msg=" --bypass-ip-availability-upon-restore='false'" subsys=daemon level=info msg=" --certificates-directory='/var/run/cilium/certs'" subsys=daemon level=info msg=" --cflags=''" subsys=daemon level=info msg=" --cgroup-root='/run/cilium/cgroupv2'" subsys=daemon level=info msg=" --cilium-endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --cluster-health-port='4240'" subsys=daemon level=info msg=" --cluster-id='0'" subsys=daemon level=info msg=" --cluster-name='default'" subsys=daemon level=info msg=" --cluster-pool-ipv4-cidr='10.0.0.0/8'" subsys=daemon level=info msg=" --cluster-pool-ipv4-mask-size='24'" subsys=daemon level=info msg=" --clustermesh-config='/var/lib/cilium/clustermesh/'" subsys=daemon level=info msg=" --clustermesh-ip-identities-sync-timeout='1m0s'" subsys=daemon level=info msg=" --cmdref=''" subsys=daemon level=info msg=" --cni-chaining-mode='none'" subsys=daemon level=info msg=" --cni-chaining-target=''" subsys=daemon level=info msg=" --cni-exclusive='true'" subsys=daemon level=info msg=" --cni-external-routing='false'" subsys=daemon level=info msg=" --cni-log-file='/var/run/cilium/cilium-cni.log'" subsys=daemon level=info msg=" --cnp-node-status-gc-interval='0s'" subsys=daemon level=info msg=" --config=''" subsys=daemon level=info msg=" --config-dir='/tmp/cilium/config-map'" subsys=daemon level=info msg=" --config-sources='config-map:kube-system/cilium-config'" subsys=daemon level=info msg=" --conntrack-gc-interval='0s'" subsys=daemon level=info msg=" --conntrack-gc-max-interval='0s'" subsys=daemon level=info msg=" --crd-wait-timeout='5m0s'" subsys=daemon level=info msg=" --custom-cni-conf='false'" subsys=daemon level=info msg=" --datapath-mode='veth'" subsys=daemon level=info msg=" --debug='false'" subsys=daemon level=info msg=" --debug-verbose=''" subsys=daemon level=info msg=" --derive-masquerade-ip-addr-from-device=''" subsys=daemon level=info msg=" --devices=''" subsys=daemon level=info msg=" --direct-routing-device=''" subsys=daemon level=info msg=" --disable-cnp-status-updates='true'" subsys=daemon level=info msg=" --disable-endpoint-crd='false'" subsys=daemon level=info msg=" --disable-envoy-version-check='false'" subsys=daemon level=info msg=" --disable-iptables-feeder-rules=''" subsys=daemon level=info msg=" --dns-max-ips-per-restored-rule='1000'" subsys=daemon level=info msg=" --dns-policy-unload-on-shutdown='false'" subsys=daemon level=info msg=" --dnsproxy-concurrency-limit='0'" subsys=daemon level=info msg=" --dnsproxy-concurrency-processing-grace-period='0s'" subsys=daemon level=info msg=" --dnsproxy-enable-transparent-mode='true'" subsys=daemon level=info msg=" --dnsproxy-lock-count='128'" subsys=daemon level=info msg=" --dnsproxy-lock-timeout='500ms'" subsys=daemon level=info msg=" --egress-gateway-policy-map-max='16384'" subsys=daemon level=info msg=" --egress-gateway-reconciliation-trigger-interval='1s'" subsys=daemon level=info msg=" --egress-masquerade-interfaces=''" subsys=daemon level=info msg=" --egress-multi-home-ip-rule-compat='false'" subsys=daemon level=info msg=" --enable-auto-protect-node-port-range='true'" subsys=daemon level=info msg=" --enable-bandwidth-manager='false'" subsys=daemon level=info msg=" --enable-bbr='false'" subsys=daemon level=info msg=" --enable-bgp-control-plane='false'" subsys=daemon level=info msg=" --enable-bpf-clock-probe='false'" subsys=daemon level=info msg=" --enable-bpf-masquerade='false'" subsys=daemon level=info msg=" --enable-bpf-tproxy='false'" subsys=daemon level=info msg=" --enable-cilium-api-server-access='*'" subsys=daemon level=info msg=" --enable-cilium-endpoint-slice='false'" subsys=daemon level=info msg=" --enable-cilium-health-api-server-access='*'" subsys=daemon level=info msg=" --enable-custom-calls='false'" subsys=daemon level=info msg=" --enable-endpoint-health-checking='true'" subsys=daemon level=info msg=" --enable-endpoint-routes='false'" subsys=daemon level=info msg=" --enable-envoy-config='false'" subsys=daemon level=info msg=" --enable-external-ips='false'" subsys=daemon level=info msg=" --enable-health-check-nodeport='true'" subsys=daemon level=info msg=" --enable-health-checking='true'" subsys=daemon level=info msg=" --enable-high-scale-ipcache='false'" subsys=daemon level=info msg=" --enable-host-firewall='false'" subsys=daemon level=info msg=" --enable-host-legacy-routing='false'" subsys=daemon level=info msg=" --enable-host-port='false'" subsys=daemon level=info msg=" --enable-hubble='false'" subsys=daemon level=info msg=" --enable-hubble-recorder-api='true'" subsys=daemon level=info msg=" --enable-icmp-rules='true'" subsys=daemon level=info msg=" --enable-identity-mark='true'" subsys=daemon level=info msg=" --enable-ip-masq-agent='false'" subsys=daemon level=info msg=" --enable-ipsec='false'" subsys=daemon level=info msg=" --enable-ipsec-key-watcher='true'" subsys=daemon level=info msg=" --enable-ipv4='true'" subsys=daemon level=info msg=" --enable-ipv4-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv4-egress-gateway='false'" subsys=daemon level=info msg=" --enable-ipv4-fragment-tracking='true'" subsys=daemon level=info msg=" --enable-ipv4-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6='false'" subsys=daemon level=info msg=" --enable-ipv6-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv6-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6-ndp='false'" subsys=daemon level=info msg=" --enable-k8s='true'" subsys=daemon level=info msg=" --enable-k8s-api-discovery='false'" subsys=daemon level=info msg=" --enable-k8s-endpoint-slice='true'" subsys=daemon level=info msg=" --enable-k8s-event-handover='false'" subsys=daemon level=info msg=" --enable-k8s-networkpolicy='true'" subsys=daemon level=info msg=" --enable-k8s-terminating-endpoint='true'" subsys=daemon level=info msg=" --enable-l2-announcements='false'" subsys=daemon level=info msg=" --enable-l2-neigh-discovery='true'" subsys=daemon level=info msg=" --enable-l2-pod-announcements='false'" subsys=daemon level=info msg=" --enable-l7-proxy='true'" subsys=daemon level=info msg=" --enable-local-node-route='true'" subsys=daemon level=info msg=" --enable-local-redirect-policy='false'" subsys=daemon level=info msg=" --enable-mke='false'" subsys=daemon level=info msg=" --enable-monitor='true'" subsys=daemon level=info msg=" --enable-nat46x64-gateway='false'" subsys=daemon level=info msg=" --enable-node-port='false'" subsys=daemon level=info msg=" --enable-pmtu-discovery='false'" subsys=daemon level=info msg=" --enable-policy='default'" subsys=daemon level=info msg=" --enable-recorder='false'" subsys=daemon level=info msg=" --enable-remote-node-identity='true'" subsys=daemon level=info msg=" --enable-runtime-device-detection='false'" subsys=daemon level=info msg=" --enable-sctp='false'" subsys=daemon level=info msg=" --enable-service-topology='false'" subsys=daemon level=info msg=" --enable-session-affinity='false'" subsys=daemon level=info msg=" --enable-srv6='false'" subsys=daemon level=info msg=" --enable-stale-cilium-endpoint-cleanup='true'" subsys=daemon level=info msg=" --enable-svc-source-range-check='true'" subsys=daemon level=info msg=" --enable-tracing='false'" subsys=daemon level=info msg=" --enable-unreachable-routes='false'" subsys=daemon level=info msg=" --enable-vtep='false'" subsys=daemon level=info msg=" --enable-well-known-identities='false'" subsys=daemon level=info msg=" --enable-wireguard='false'" subsys=daemon level=info msg=" --enable-wireguard-userspace-fallback='false'" subsys=daemon level=info msg=" --enable-xdp-prefilter='false'" subsys=daemon level=info msg=" --enable-xt-socket-fallback='true'" subsys=daemon level=info msg=" --encrypt-interface=''" subsys=daemon level=info msg=" --encrypt-node='false'" subsys=daemon level=info msg=" --endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --endpoint-queue-size='25'" subsys=daemon level=info msg=" --endpoint-status=''" subsys=daemon level=info msg=" --envoy-config-timeout='2m0s'" subsys=daemon level=info msg=" --envoy-log=''" subsys=daemon level=info msg=" --exclude-local-address=''" subsys=daemon level=info msg=" --external-envoy-proxy='false'" subsys=daemon level=info msg=" --fixed-identity-mapping=''" subsys=daemon level=info msg=" --fqdn-regex-compile-lru-size='1024'" subsys=daemon level=info msg=" --gops-port='9890'" subsys=daemon level=info msg=" --http-403-msg=''" subsys=daemon level=info msg=" --http-idle-timeout='0'" subsys=daemon level=info msg=" --http-max-grpc-timeout='0'" subsys=daemon level=info msg=" --http-normalize-path='true'" subsys=daemon level=info msg=" --http-request-timeout='3600'" subsys=daemon level=info msg=" --http-retry-count='3'" subsys=daemon level=info msg=" --http-retry-timeout='0'" subsys=daemon level=info msg=" --hubble-disable-tls='false'" subsys=daemon level=info msg=" --hubble-event-buffer-capacity='4095'" subsys=daemon level=info msg=" --hubble-event-queue-size='0'" subsys=daemon level=info msg=" --hubble-export-file-compress='false'" subsys=daemon level=info msg=" --hubble-export-file-max-backups='5'" subsys=daemon level=info msg=" --hubble-export-file-max-size-mb='10'" subsys=daemon level=info msg=" --hubble-export-file-path=''" subsys=daemon level=info msg=" --hubble-listen-address=''" subsys=daemon level=info msg=" --hubble-metrics=''" subsys=daemon level=info msg=" --hubble-metrics-server=''" subsys=daemon level=info msg=" --hubble-monitor-events=''" subsys=daemon level=info msg=" --hubble-prefer-ipv6='false'" subsys=daemon level=info msg=" --hubble-recorder-sink-queue-size='1024'" subsys=daemon level=info msg=" --hubble-recorder-storage-path='/var/run/cilium/pcaps'" subsys=daemon level=info msg=" --hubble-skip-unknown-cgroup-ids='true'" subsys=daemon level=info msg=" --hubble-socket-path='/var/run/cilium/hubble.sock'" subsys=daemon level=info msg=" --hubble-tls-cert-file=''" subsys=daemon level=info msg=" --hubble-tls-client-ca-files=''" subsys=daemon level=info msg=" --hubble-tls-key-file=''" subsys=daemon level=info msg=" --identity-allocation-mode='crd'" subsys=daemon level=info msg=" --identity-change-grace-period='5s'" subsys=daemon level=info msg=" --identity-gc-interval='15m0s'" subsys=daemon level=info msg=" --identity-heartbeat-timeout='30m0s'" subsys=daemon level=info msg=" --identity-restore-grace-period='10m0s'" subsys=daemon level=info msg=" --install-egress-gateway-routes='false'" subsys=daemon level=info msg=" --install-iptables-rules='true'" subsys=daemon level=info msg=" --install-no-conntrack-iptables-rules='false'" subsys=daemon level=info msg=" --ip-allocation-timeout='2m0s'" subsys=daemon level=info msg=" --ip-masq-agent-config-path='/etc/config/ip-masq-agent'" subsys=daemon level=info msg=" --ipam='cluster-pool'" subsys=daemon level=info msg=" --ipam-cilium-node-update-rate='15s'" subsys=daemon level=info msg=" --ipam-multi-pool-pre-allocation='default=8'" subsys=daemon level=info msg=" --ipsec-key-file=''" subsys=daemon level=info msg=" --ipsec-key-rotation-duration='5m0s'" subsys=daemon level=info msg=" --iptables-lock-timeout='5s'" subsys=daemon level=info msg=" --iptables-random-fully='false'" subsys=daemon level=info msg=" --ipv4-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv4-node='auto'" subsys=daemon level=info msg=" --ipv4-pod-subnets=''" subsys=daemon level=info msg=" --ipv4-range='auto'" subsys=daemon level=info msg=" --ipv4-service-loopback-address='169.254.42.1'" subsys=daemon level=info msg=" --ipv4-service-range='auto'" subsys=daemon level=info msg=" --ipv6-cluster-alloc-cidr='f00d::/64'" subsys=daemon level=info msg=" --ipv6-mcast-device=''" subsys=daemon level=info msg=" --ipv6-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv6-node='auto'" subsys=daemon level=info msg=" --ipv6-pod-subnets=''" subsys=daemon level=info msg=" --ipv6-range='auto'" subsys=daemon level=info msg=" --ipv6-service-range='auto'" subsys=daemon level=info msg=" --join-cluster='false'" subsys=daemon level=info msg=" --k8s-api-server=''" subsys=daemon level=info msg=" --k8s-client-burst='10'" subsys=daemon level=info msg=" --k8s-client-qps='5'" subsys=daemon level=info msg=" --k8s-heartbeat-timeout='30s'" subsys=daemon level=info msg=" --k8s-kubeconfig-path=''" subsys=daemon level=info msg=" --k8s-namespace='kube-system'" subsys=daemon level=info msg=" --k8s-require-ipv4-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-require-ipv6-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-service-cache-size='128'" subsys=daemon level=info msg=" --k8s-service-proxy-name=''" subsys=daemon level=info msg=" --k8s-sync-timeout='3m0s'" subsys=daemon level=info msg=" --k8s-watcher-endpoint-selector='metadata.name!=kube-scheduler,metadata.name!=kube-controller-manager,metadata.name!=etcd-operator,metadata.name!=gcp-controller-manager'" subsys=daemon level=info msg=" --keep-config='false'" subsys=daemon level=info msg=" --kube-proxy-replacement='disabled'" subsys=daemon level=info msg=" --kube-proxy-replacement-healthz-bind-address=''" subsys=daemon level=info msg=" --kvstore=''" subsys=daemon level=info msg=" --kvstore-connectivity-timeout='2m0s'" subsys=daemon level=info msg=" --kvstore-lease-ttl='15m0s'" subsys=daemon level=info msg=" --kvstore-max-consecutive-quorum-errors='2'" subsys=daemon level=info msg=" --kvstore-opt=''" subsys=daemon level=info msg=" --kvstore-periodic-sync='5m0s'" subsys=daemon level=info msg=" --l2-announcements-lease-duration='15s'" subsys=daemon level=info msg=" --l2-announcements-renew-deadline='5s'" subsys=daemon level=info msg=" --l2-announcements-retry-period='2s'" subsys=daemon level=info msg=" --l2-pod-announcements-interface=''" subsys=daemon level=info msg=" --label-prefix-file=''" subsys=daemon level=info msg=" --labels=''" subsys=daemon level=info msg=" --lib-dir='/var/lib/cilium'" subsys=daemon level=info msg=" --local-max-addr-scope='252'" subsys=daemon level=info msg=" --local-router-ipv4=''" subsys=daemon level=info msg=" --local-router-ipv6=''" subsys=daemon level=info msg=" --log-driver=''" subsys=daemon level=info msg=" --log-opt=''" subsys=daemon level=info msg=" --log-system-load='false'" subsys=daemon level=info msg=" --max-controller-interval='0'" subsys=daemon level=info msg=" --mesh-auth-enabled='true'" subsys=daemon level=info msg=" --mesh-auth-gc-interval='5m0s'" subsys=daemon level=info msg=" --mesh-auth-mutual-listener-port='0'" subsys=daemon level=info msg=" --mesh-auth-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-rotated-identities-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-signal-backoff-duration='1s'" subsys=daemon level=info msg=" --mesh-auth-spiffe-trust-domain='spiffe.cilium'" subsys=daemon level=info msg=" --mesh-auth-spire-admin-socket=''" subsys=daemon level=info msg=" --metrics=''" subsys=daemon level=info msg=" --mke-cgroup-mount=''" subsys=daemon level=info msg=" --monitor-aggregation='medium'" subsys=daemon level=info msg=" --monitor-aggregation-flags='all'" subsys=daemon level=info msg=" --monitor-aggregation-interval='5s'" subsys=daemon level=info msg=" --monitor-queue-size='0'" subsys=daemon level=info msg=" --mtu='0'" subsys=daemon level=info msg=" --node-encryption-opt-out-labels='node-role.kubernetes.io/control-plane'" subsys=daemon level=info msg=" --node-port-acceleration='disabled'" subsys=daemon level=info msg=" --node-port-algorithm='random'" subsys=daemon level=info msg=" --node-port-bind-protection='true'" subsys=daemon level=info msg=" --node-port-mode='snat'" subsys=daemon level=info msg=" --node-port-range='30000,32767'" subsys=daemon level=info msg=" --nodes-gc-interval='5m0s'" subsys=daemon level=info msg=" --operator-api-serve-addr='127.0.0.1:9234'" subsys=daemon level=info msg=" --policy-audit-mode='false'" subsys=daemon level=info msg=" --policy-queue-size='100'" subsys=daemon level=info msg=" --policy-trigger-interval='1s'" subsys=daemon level=info msg=" --pprof='false'" subsys=daemon level=info msg=" --pprof-address='localhost'" subsys=daemon level=info msg=" --pprof-port='6060'" subsys=daemon level=info msg=" --preallocate-bpf-maps='false'" subsys=daemon level=info msg=" --prepend-iptables-chains='true'" subsys=daemon level=info msg=" --procfs='/host/proc'" subsys=daemon level=info msg=" --prometheus-serve-addr=':9962'" subsys=daemon level=info msg=" --proxy-connect-timeout='2'" subsys=daemon level=info msg=" --proxy-gid='1337'" subsys=daemon level=info msg=" --proxy-idle-timeout-seconds='60'" subsys=daemon level=info msg=" --proxy-max-connection-duration-seconds='0'" subsys=daemon level=info msg=" --proxy-max-requests-per-connection='0'" subsys=daemon level=info msg=" --proxy-prometheus-port='9964'" subsys=daemon level=info msg=" --read-cni-conf=''" subsys=daemon level=info msg=" --remove-cilium-node-taints='true'" subsys=daemon level=info msg=" --restore='true'" subsys=daemon level=info msg=" --route-metric='0'" subsys=daemon level=info msg=" --routing-mode='tunnel'" subsys=daemon level=info msg=" --set-cilium-is-up-condition='true'" subsys=daemon level=info msg=" --set-cilium-node-taints='true'" subsys=daemon level=info msg=" --sidecar-istio-proxy-image='cilium/istio_proxy'" subsys=daemon level=info msg=" --single-cluster-route='false'" subsys=daemon level=info msg=" --skip-cnp-status-startup-clean='false'" subsys=daemon level=info msg=" --socket-path='/var/run/cilium/cilium.sock'" subsys=daemon level=info msg=" --srv6-encap-mode='reduced'" subsys=daemon level=info msg=" --state-dir='/var/run/cilium'" subsys=daemon level=info msg=" --synchronize-k8s-nodes='true'" subsys=daemon level=info msg=" --tofqdns-dns-reject-response-code='refused'" subsys=daemon level=info msg=" --tofqdns-enable-dns-compression='true'" subsys=daemon level=info msg=" --tofqdns-endpoint-max-ip-per-hostname='50'" subsys=daemon level=info msg=" --tofqdns-idle-connection-grace-period='0s'" subsys=daemon level=info msg=" --tofqdns-max-deferred-connection-deletes='10000'" subsys=daemon level=info msg=" --tofqdns-min-ttl='0'" subsys=daemon level=info msg=" --tofqdns-pre-cache=''" subsys=daemon level=info msg=" --tofqdns-proxy-port='0'" subsys=daemon level=info msg=" --tofqdns-proxy-response-max-delay='100ms'" subsys=daemon level=info msg=" --trace-payloadlen='128'" subsys=daemon level=info msg=" --trace-sock='true'" subsys=daemon level=info msg=" --tunnel=''" subsys=daemon level=info msg=" --tunnel-port='6082'" subsys=daemon level=info msg=" --tunnel-protocol='geneve'" subsys=daemon level=info msg=" --unmanaged-pod-watcher-interval='15'" subsys=daemon level=info msg=" --use-cilium-internal-ip-for-ipsec='false'" subsys=daemon level=info msg=" --version='false'" subsys=daemon level=info msg=" --vlan-bpf-bypass=''" subsys=daemon level=info msg=" --vtep-cidr=''" subsys=daemon level=info msg=" --vtep-endpoint=''" subsys=daemon level=info msg=" --vtep-mac=''" subsys=daemon level=info msg=" --vtep-mask=''" subsys=daemon level=info msg=" --wireguard-encapsulate='false'" subsys=daemon level=info msg=" --write-cni-conf-when-ready='/host/etc/cni/net.d/05-cilium.conflist'" subsys=daemon level=info msg=" _ _ _" subsys=daemon level=info msg=" ___|_| |_|_ _ _____" subsys=daemon level=info msg="| _| | | | | | |" subsys=daemon level=info msg="|___|_|_|_|___|_|_|_|" subsys=daemon level=info msg="Cilium 1.14.8 cf6e022e 2024-03-13T12:23:35-04:00 go version go1.21.8 linux/amd64" subsys=daemon level=info msg="clang (10.0.0) and kernel (5.15.0) versions: OK!" subsys=linux-datapath level=info msg="linking environment: OK!" subsys=linux-datapath level=info msg="Kernel config file not found: if the agent fails to start, check the system requirements at https://docs.cilium.io/en/stable/operations/system_requirements" subsys=probes level=info msg="Detected mounted BPF filesystem at /sys/fs/bpf" subsys=bpf level=info msg="Mounted cgroupv2 filesystem at /run/cilium/cgroupv2" subsys=cgroups level=info msg="Parsing base label prefixes from default label list" subsys=labels-filter level=info msg="Parsing additional label prefixes from user inputs: []" subsys=labels-filter level=info msg="Final label prefixes to be used for identity evaluation:" subsys=labels-filter level=info msg=" - reserved:.*" subsys=labels-filter level=info msg=" - :io\\.kubernetes\\.pod\\.namespace" subsys=labels-filter level=info msg=" - :io\\.cilium\\.k8s\\.namespace\\.labels" subsys=labels-filter level=info msg=" - :app\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:io\\.kubernetes" subsys=labels-filter level=info msg=" - !:kubernetes\\.io" subsys=labels-filter level=info msg=" - !:.*beta\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:k8s\\.io" subsys=labels-filter level=info msg=" - !:pod-template-generation" subsys=labels-filter level=info msg=" - !:pod-template-hash" subsys=labels-filter level=info msg=" - !:controller-revision-hash" subsys=labels-filter level=info msg=" - !:annotation.*" subsys=labels-filter level=info msg=" - !:etcd_node" subsys=labels-filter level=info msg=Invoked duration="948.845µs" function="pprof.glob..func1 (cell.go:50)" subsys=hive level=info msg=Invoked duration="51.981µs" function="gops.registerGopsHooks (cell.go:38)" subsys=hive level=info msg=Invoked duration="988.476µs" function="metrics.NewRegistry (registry.go:65)" subsys=hive level=info msg=Invoked duration="4.56µs" function="metrics.glob..func1 (cell.go:12)" subsys=hive level=info msg="Spire Delegate API Client is disabled as no socket path is configured" subsys=spire-delegate level=info msg="Mutual authentication handler is disabled as no port is configured" subsys=auth level=info msg=Invoked duration=109.973246ms function="cmd.glob..func4 (daemon_main.go:1607)" subsys=hive level=info msg=Invoked duration="18.461µs" function="gc.registerSignalHandler (cell.go:47)" subsys=hive level=info msg=Invoked duration="25.361µs" function="utime.initUtimeSync (cell.go:29)" subsys=hive level=info msg=Invoked duration="104.653µs" function="agentliveness.newAgentLivenessUpdater (agent_liveness.go:43)" subsys=hive level=info msg=Invoked duration="108.273µs" function="l2responder.NewL2ResponderReconciler (l2responder.go:63)" subsys=hive level=info msg=Invoked duration="129.525µs" function="garp.newGARPProcessor (processor.go:27)" subsys=hive level=info msg=Starting subsys=hive level=info msg="Started gops server" address="127.0.0.1:9890" subsys=gops level=info msg="Start hook executed" duration="615.986µs" function="gops.registerGopsHooks.func1 (cell.go:43)" subsys=hive level=info msg="Start hook executed" duration="2.17µs" function="metrics.NewRegistry.func1 (registry.go:86)" subsys=hive level=info msg="Establishing connection to apiserver" host="https://10.96.0.1:443" subsys=k8s-client level=info msg="Serving prometheus metrics on :9962" subsys=metrics level=info msg="Connected to apiserver" subsys=k8s-client level=info msg="Start hook executed" duration=11.229565ms function="client.(*compositeClientset).onStart" subsys=hive level=info msg="Start hook executed" duration=8.927383ms function="authmap.newAuthMap.func1 (cell.go:27)" subsys=hive level=info msg="Start hook executed" duration="41.191µs" function="configmap.newMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="39.271µs" function="signalmap.newMap.func1 (cell.go:44)" subsys=hive level=info msg="Start hook executed" duration="215.046µs" function="nodemap.newNodeMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="95.303µs" function="eventsmap.newEventsMap.func1 (cell.go:35)" subsys=hive level=info msg="Start hook executed" duration="71.103µs" function="*cni.cniConfigManager.Start" subsys=hive level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Wrote CNI configuration file to /host/etc/cni/net.d/05-cilium.conflist" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Start hook executed" duration=53.852283ms function="datapath.newDatapath.func1 (cells.go:113)" subsys=hive level=info msg="Restored 0 node IDs from the BPF map" subsys=linux-datapath level=info msg="Start hook executed" duration="95.032µs" function="datapath.newDatapath.func2 (cells.go:126)" subsys=hive level=info msg="Start hook executed" duration="13.35µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Node].Start" subsys=hive level=info msg="Start hook executed" duration="2.2µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNode].Start" subsys=hive level=info msg="Using autogenerated IPv4 allocation range" subsys=node v4Prefix=10.36.0.0/16 level=info msg="no local ciliumnode found, will not restore cilium internal ips from k8s" subsys=daemon level=info msg="Start hook executed" duration=103.711732ms function="node.NewLocalNodeStore.func1 (local_node_store.go:76)" subsys=hive level=info msg="Start hook executed" duration="3.93µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration=100.504807ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration="2.33µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Using discoveryv1.EndpointSlice" subsys=k8s level=info msg="Start hook executed" duration=200.596373ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Start hook executed" duration="4.77µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Pod].Start" subsys=hive level=info msg="Start hook executed" duration="1.29µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Namespace].Start" subsys=hive level=info msg="Start hook executed" duration="1.09µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration=990ns function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumClusterwideNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="2.59µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumCIDRGroup].Start" subsys=hive level=info msg="Start hook executed" duration="20.14µs" function="endpointmanager.newDefaultEndpointManager.func1 (cell.go:203)" subsys=hive level=info msg="Start hook executed" duration="10.2µs" function="cmd.newPolicyTrifecta.func1 (policy.go:135)" subsys=hive level=info msg="Start hook executed" duration="121.053µs" function="*manager.manager.Start" subsys=hive level=info msg="Serving cilium node monitor v1.2 API at unix:///var/run/cilium/monitor1_2.sock" subsys=monitor-agent level=info msg="Start hook executed" duration="208.014µs" function="agent.newMonitorAgent.func1 (cell.go:61)" subsys=hive level=info msg="Start hook executed" duration="9.331µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumL2AnnouncementPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="6.37µs" function="*job.group.Start" subsys=hive level=info msg="Start hook executed" duration="174.425µs" function="proxy.newProxy.func1 (cell.go:55)" subsys=hive level=info msg="Envoy: Starting xDS gRPC server listening on /var/run/cilium/envoy/sockets/xds.sock" subsys=envoy-manager level=info msg="Start hook executed" duration="613.357µs" function="signal.provideSignalManager.func1 (cell.go:25)" subsys=hive level=info msg="Datapath signal listener running" subsys=signal level=info msg="Start hook executed" duration="940.455µs" function="auth.registerAuthManager.func1 (cell.go:109)" subsys=hive level=info msg="Start hook executed" duration="2.86µs" function="auth.registerGCJobs.func1 (cell.go:158)" subsys=hive level=info msg="Start hook executed" duration="16.921µs" function="*job.group.Start" subsys=hive level=warning msg="Deprecated value for --kube-proxy-replacement: disabled (use either \"true\", or \"false\")" subsys=daemon level=info msg="Auto-disabling \"enable-node-port\", \"enable-external-ips\", \"bpf-lb-sock\", \"enable-host-port\" features and falling back to \"enable-host-legacy-routing\"" subsys=daemon level=info msg="Inheriting MTU from external network interface" device=ens3 ipAddr=162.253.55.36 mtu=1500 subsys=mtu level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_ipcache, recreating and re-pinning map cilium_ipcache" file-path=/sys/fs/bpf/tc/globals/cilium_ipcache name=cilium_ipcache subsys=bpf level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_tunnel_map, recreating and re-pinning map cilium_tunnel_map" file-path=/sys/fs/bpf/tc/globals/cilium_tunnel_map name=cilium_tunnel_map subsys=bpf level=info msg="Restored services from maps" failedServices=0 restoredServices=0 subsys=service level=info msg="Restored backends from maps" failedBackends=0 restoredBackends=0 skippedBackends=0 subsys=service level=info msg="Reading old endpoints..." subsys=daemon level=info msg="No old endpoints found." subsys=daemon level=info msg="Waiting until all Cilium CRDs are available" subsys=k8s level=info msg="All Cilium CRDs have been found and are available" subsys=k8s level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=info msg="Successfully created CiliumNode resource" subsys=nodediscovery level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=warning msg="Waiting for k8s node information" error="required IPv4 PodCIDR not available" subsys=k8s level=warning msg="Unable to create CiliumNode resource, will retry" error="ciliumnodes.cilium.io \"instance\" already exists" subsys=nodediscovery level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=info msg="Received own node information from API server" ipAddr.ipv4=162.253.55.36 ipAddr.ipv6="" k8sNodeIP=162.253.55.36 labels="map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:]" nodeName=instance subsys=k8s v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="k8s mode: Allowing localhost to reach local endpoints" subsys=daemon level=info msg="Detected devices" devices="[]" subsys=linux-datapath level=info msg="Enabling k8s event listener" subsys=k8s-watcher level=info msg="Removing stale endpoint interfaces" subsys=daemon level=info msg="Waiting until local node addressing before starting watchers depending on it" subsys=k8s-watcher level=info msg="Skipping kvstore configuration" subsys=daemon level=info msg="Initializing node addressing" subsys=daemon level=info msg="Initializing cluster-pool IPAM" subsys=ipam v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="Restoring endpoints..." subsys=daemon level=info msg="Endpoints restored" failed=0 restored=0 subsys=daemon level=info msg="Addressing information:" subsys=daemon level=info msg=" Cluster-Name: default" subsys=daemon level=info msg=" Cluster-ID: 0" subsys=daemon level=info msg=" Local node-name: instance" subsys=daemon level=info msg=" Node-IPv6: " subsys=daemon level=info msg=" External-Node IPv4: 162.253.55.36" subsys=daemon level=info msg=" Internal-Node IPv4: 10.0.0.221" subsys=daemon level=info msg=" IPv4 allocation prefix: 10.0.0.0/24" subsys=daemon level=info msg=" Loopback IPv4: 169.254.42.1" subsys=daemon level=info msg=" Local IPv4 addresses:" subsys=daemon level=info msg=" - 162.253.55.36" subsys=daemon level=info msg=" - 172.17.0.100" subsys=daemon level=info msg=" - 10.96.240.200" subsys=daemon level=info msg="Node updated" clusterName=default nodeName=instance subsys=nodemanager level=info msg="Adding local node to cluster" node="{instance default [{InternalIP 162.253.55.36} {CiliumInternalIP 10.0.0.221}] 10.0.0.0/24 [] [] 10.0.0.45 0 local 0 map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:] map[] 1 }" subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Waiting until all pre-existing resources have been received" subsys=k8s-watcher level=info msg="Initializing identity allocator" subsys=identity-cache level=info msg="Allocating identities between range" cluster-id=0 max=65535 min=256 subsys=identity-cache level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.core.bpf_jit_enable sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.all.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.fib_multipath_use_neigh sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.unprivileged_bpf_disabled sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.timer_migration sysParamValue=0 level=info msg="Setting up BPF datapath" bpfClockSource=ktime bpfInsnSet="" subsys=datapath-loader level=info msg="Iptables rules installed" subsys=iptables level=info msg="Adding new proxy port rules for cilium-dns-egress:34325" id=cilium-dns-egress subsys=proxy level=info msg="Iptables proxy rules installed" subsys=iptables level=info msg="Start hook executed" duration=2.454045584s function="cmd.newDaemonPromise.func1 (daemon_main.go:1663)" subsys=hive level=info msg="Starting IP identity watcher" subsys=ipcache level=info msg="Start hook executed" duration="24.32µs" function="utime.initUtimeSync.func1 (cell.go:33)" subsys=hive level=info msg="Initializing daemon" subsys=daemon level=info msg="Validating configured node address ranges" subsys=daemon level=info msg="Start hook executed" duration="6.5µs" function="*job.group.Start" subsys=hive level=info msg="Starting connection tracking garbage collector" subsys=daemon level=info msg="Start hook executed" duration="35.501µs" function="l2respondermap.newMap.func1 (l2_responder_map4.go:44)" subsys=hive level=info msg="Start hook executed" duration="10.06µs" function="*job.group.Start" subsys=hive level=info msg="Initial scan of connection tracking completed" subsys=ct-gc level=info msg="Regenerating restored endpoints" numRestored=0 subsys=daemon level=info msg="Creating host endpoint" subsys=daemon level=info msg="Finished regenerating restored endpoints" regenerated=0 subsys=daemon total=0 level=info msg="Deleted orphan backends" orphanBackends=0 subsys=service level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=362 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=362 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=362 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Launching Cilium health daemon" subsys=daemon level=info msg="Launching Cilium health endpoint" subsys=daemon level=info msg="Started healthz status API server" address="127.0.0.1:9879" subsys=daemon level=info msg="Processing queued endpoint deletion requests from /var/run/cilium/deleteQueue" subsys=daemon level=info msg="processing 0 queued deletion requests" subsys=daemon level=info msg="Initializing Cilium API" subsys=daemon level=info msg="Daemon initialization completed" bootstrapTime=3.524524617s subsys=daemon level=info msg="Hubble server is disabled" subsys=hubble level=info msg="Serving cilium API at unix:///var/run/cilium/cilium.sock" subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.135 74984b88-c3b8-4a3f-aafc-a545d2bf98f9 default }" containerID=822679a74ea8b95d5f2903185d572c94a0ad04df696fd5f18df86f4b0b5ebe9f datapathConfiguration="&{false false false false false }" interface=lxc7163625ed934 k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-cvkgr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=822679a74e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3818 ipv4=10.0.0.135 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-cvkgr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=822679a74e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3818 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=645e1b44-2689-472b-bd58-8c5dd892e9d9,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=645e1b44-2689-472b-bd58-8c5dd892e9d9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.135 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-cvkgr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.114 aa346d01-f9cf-4aed-8b50-6489e43a7803 default }" containerID=1fd06bf52e3979a3c0ef0ad18d429cf5c0a992a75602819676c87ad433580645 datapathConfiguration="&{false false false false false }" interface=lxc88d4da9d0659 k8sPodName=kube-system/coredns-7c96b6546b-lnmb9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1fd06bf52e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2992 ipv4=10.0.0.114 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-lnmb9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1fd06bf52e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2992 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.114 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-lnmb9 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=certgen;k8s:batch.kubernetes.io/controller-uid=645e1b44-2689-472b-bd58-8c5dd892e9d9;k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen;k8s:controller-uid=645e1b44-2689-472b-bd58-8c5dd892e9d9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;k8s:job-name=envoy-gateway-gateway-helm-certgen;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=822679a74e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3818 identity=7581 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=645e1b44-2689-472b-bd58-8c5dd892e9d9,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=645e1b44-2689-472b-bd58-8c5dd892e9d9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.135 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-cvkgr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=822679a74e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3818 identity=7581 ipv4=10.0.0.135 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-cvkgr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:kube-system]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=1fd06bf52e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2992 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.114 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-lnmb9 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=coredns;k8s:io.kubernetes.pod.namespace=kube-system;k8s:k8s-app=kube-dns;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1fd06bf52e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2992 identity=2830 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.114 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-lnmb9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1fd06bf52e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2992 identity=2830 ipv4=10.0.0.114 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-lnmb9 subsys=endpoint level=info msg="Compiled new BPF template" BPFCompilationTime=301.501992ms file-path=/var/run/cilium/state/templates/7b62fe3bbd914de679e1442ac3868c7c1bd2f3a190f91691d3974e22172ab6ae/bpf_host.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=362 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=56 ipv4=10.0.0.45 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=56 identityLabels="reserved:health" ipv4=10.0.0.45 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=56 identity=4 identityLabels="reserved:health" ipv4=10.0.0.45 ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Compiled new BPF template" BPFCompilationTime=1.033385161s file-path=/var/run/cilium/state/templates/685349c504c3a53948bc83cfdaa1aa43d909a1666c77cc8fd795ef30c3e81e0d/bpf_lxc.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID=1fd06bf52e datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2992 identity=2830 ipv4=10.0.0.114 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-lnmb9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=1fd06bf52e datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2992 identity=2830 ipv4=10.0.0.114 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-lnmb9 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=822679a74e datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3818 identity=7581 ipv4=10.0.0.135 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-cvkgr subsys=endpoint level=info msg="Successful endpoint creation" containerID=822679a74e datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3818 identity=7581 ipv4=10.0.0.135 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-cvkgr subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=56 identity=4 ipv4=10.0.0.45 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Serving cilium health API at unix:///var/run/cilium/health.sock" subsys=health-server level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=822679a74e endpointID=3818 k8sNamespace=envoy-gateway-system k8sPodName=envoy-gateway-gateway-helm-certgen-cvkgr subsys=daemon level=info msg="Releasing key" key="[k8s:app=certgen k8s:batch.kubernetes.io/controller-uid=645e1b44-2689-472b-bd58-8c5dd892e9d9 k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen k8s:controller-uid=645e1b44-2689-472b-bd58-8c5dd892e9d9 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen k8s:io.kubernetes.pod.namespace=envoy-gateway-system k8s:job-name=envoy-gateway-gateway-helm-certgen]" subsys=allocator level=info msg="Removed endpoint" containerID=822679a74e datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3818 identity=7581 ipv4=10.0.0.135 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-cvkgr subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.77 c70fa53a-14ab-484b-bc4a-882601688daf default }" containerID=0b5d48556fd1430ec0601fbbad7cfb4be36faaf1f6cf4cffb19534f381672dbb datapathConfiguration="&{false false false false false }" interface=lxce597f29c9203 k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-nh55g labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0b5d48556f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2653 ipv4=10.0.0.77 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-nh55g subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0b5d48556f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2653 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.77 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-nh55g subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=0b5d48556f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2653 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.77 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-nh55g line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=envoy-gateway;k8s:app.kubernetes.io/name=gateway-helm;k8s:control-plane=envoy-gateway;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0b5d48556f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2653 identity=36324 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.77 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-nh55g oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0b5d48556f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2653 identity=36324 ipv4=10.0.0.77 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-nh55g subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0b5d48556f datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2653 identity=36324 ipv4=10.0.0.77 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-nh55g subsys=endpoint level=info msg="Successful endpoint creation" containerID=0b5d48556f datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2653 identity=36324 ipv4=10.0.0.77 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-nh55g subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=362 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_00362 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_00362 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_00362 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_00362:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=362 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.99 ef0d4b15-3375-45c3-ab91-9e6722ac223c default }" containerID=9a39d7850b6037fbd1067ef0b39b50c7f101c9d3b6544436f1dd80594579916f datapathConfiguration="&{false false false false false }" interface=lxc9cd4c31dd16b k8sPodName=kube-system/coredns-67659f764b-wg8cj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9a39d7850b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=918 ipv4=10.0.0.99 ipv6= k8sPodName=kube-system/coredns-67659f764b-wg8cj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9a39d7850b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=918 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.99 ipv6= k8sPodName=kube-system/coredns-67659f764b-wg8cj subsys=endpoint level=info msg="Identity of endpoint changed" containerID=9a39d7850b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=918 identity=2830 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.99 ipv6= k8sPodName=kube-system/coredns-67659f764b-wg8cj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9a39d7850b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=918 identity=2830 ipv4=10.0.0.99 ipv6= k8sPodName=kube-system/coredns-67659f764b-wg8cj subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.143 ef1bebf4-3080-4239-a154-63a5209b7c84 default }" containerID=6dfcdb75c5a6d49f79f484c755674d0a8179341b61309a8008812f1e7a59f436 datapathConfiguration="&{false false false false false }" interface=lxc9d00118f16e1 k8sPodName=kube-system/coredns-67659f764b-9s57f labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6dfcdb75c5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3072 ipv4=10.0.0.143 ipv6= k8sPodName=kube-system/coredns-67659f764b-9s57f subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6dfcdb75c5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3072 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.143 ipv6= k8sPodName=kube-system/coredns-67659f764b-9s57f subsys=endpoint level=info msg="Identity of endpoint changed" containerID=6dfcdb75c5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3072 identity=2830 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.143 ipv6= k8sPodName=kube-system/coredns-67659f764b-9s57f oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6dfcdb75c5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3072 identity=2830 ipv4=10.0.0.143 ipv6= k8sPodName=kube-system/coredns-67659f764b-9s57f subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9a39d7850b datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=918 identity=2830 ipv4=10.0.0.99 ipv6= k8sPodName=kube-system/coredns-67659f764b-wg8cj subsys=endpoint level=info msg="Successful endpoint creation" containerID=9a39d7850b datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=918 identity=2830 ipv4=10.0.0.99 ipv6= k8sPodName=kube-system/coredns-67659f764b-wg8cj subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=6dfcdb75c5 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3072 identity=2830 ipv4=10.0.0.143 ipv6= k8sPodName=kube-system/coredns-67659f764b-9s57f subsys=endpoint level=info msg="Successful endpoint creation" containerID=6dfcdb75c5 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3072 identity=2830 ipv4=10.0.0.143 ipv6= k8sPodName=kube-system/coredns-67659f764b-9s57f subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.135 0c8a89b4-93a8-43a0-b8f5-19698cb16f50 default }" containerID=28b95673154b9d34f3faaee497a8b7376118280cc7a4225004a5a79835e2ebe2 datapathConfiguration="&{false false false false false }" interface=lxcc104b333e824 k8sPodName=local-path-storage/local-path-provisioner-679c578f5-pbqw8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=28b9567315 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=748 ipv4=10.0.0.135 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-pbqw8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=28b9567315 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=748 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.135 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-pbqw8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=local-path-provisioner;k8s:app.kubernetes.io/name=local-path-provisioner;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=28b9567315 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=748 identity=13865 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.135 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-pbqw8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=28b9567315 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=748 identity=13865 ipv4=10.0.0.135 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-pbqw8 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=28b9567315 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=748 identity=13865 ipv4=10.0.0.135 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-pbqw8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=28b9567315 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=748 identity=13865 ipv4=10.0.0.135 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-pbqw8 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=1fd06bf52e endpointID=2992 k8sNamespace=kube-system k8sPodName=coredns-7c96b6546b-lnmb9 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=coredns k8s:io.kubernetes.pod.namespace=kube-system k8s:k8s-app=kube-dns]" subsys=allocator level=info msg="Removed endpoint" containerID=1fd06bf52e datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2992 identity=2830 ipv4=10.0.0.114 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-lnmb9 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.219 baa27c39-5ca1-499d-bb6c-7f1ffb322401 default }" containerID=dccbd2c245ffc8173a7f21dba249292dd692ca78c4b8cb4633b0c57af4cc4e66 datapathConfiguration="&{false false false false false }" interface=lxcf18ddf66d601 k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-sftlg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=dccbd2c245 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2867 ipv4=10.0.0.219 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-sftlg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=dccbd2c245 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2867 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.219 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-sftlg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.199 373dafe5-05bc-488e-88e2-1d27aa5df958 default }" containerID=8f30551fbf53bd29b9c007292f079baec111a2b05707d99d1ba88d89eca0f613 datapathConfiguration="&{false false false false false }" interface=lxc5a4afd2c33c2 k8sPodName=cert-manager/cert-manager-75c4c745bc-hhvtt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8f30551fbf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=386 ipv4=10.0.0.199 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-hhvtt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8f30551fbf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=386 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.199 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-hhvtt subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=cainjector;k8s:app.kubernetes.io/component=cainjector;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cainjector;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=dccbd2c245 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2867 identity=343 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.219 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-sftlg oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=dccbd2c245 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2867 identity=343 ipv4=10.0.0.219 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-sftlg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Invalid state transition skipped" containerID=8f30551fbf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=386 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.199 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-hhvtt line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=cert-manager;k8s:app.kubernetes.io/component=controller;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cert-manager;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8f30551fbf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=386 identity=18298 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.199 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-hhvtt oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8f30551fbf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=386 identity=18298 ipv4=10.0.0.199 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-hhvtt subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.58 f0c9c9d9-1b48-4a10-864c-b27781f5771c default }" containerID=72eba066d79e17933b485c9111a65452fe03013d0e4e94dfd117911f91725e2f datapathConfiguration="&{false false false false false }" interface=lxce7075311f5fd k8sPodName=cert-manager/cert-manager-webhook-548949fc64-c2c7g labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=72eba066d7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=576 ipv4=10.0.0.58 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-c2c7g subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=72eba066d7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=576 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.58 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-c2c7g subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=webhook;k8s:app.kubernetes.io/component=webhook;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=webhook;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=72eba066d7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=576 identity=7042 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.58 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-c2c7g oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=72eba066d7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=576 identity=7042 ipv4=10.0.0.58 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-c2c7g subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8f30551fbf datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=386 identity=18298 ipv4=10.0.0.199 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-hhvtt subsys=endpoint level=info msg="Successful endpoint creation" containerID=8f30551fbf datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=386 identity=18298 ipv4=10.0.0.199 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-hhvtt subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=dccbd2c245 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2867 identity=343 ipv4=10.0.0.219 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-sftlg subsys=endpoint level=info msg="Successful endpoint creation" containerID=dccbd2c245 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2867 identity=343 ipv4=10.0.0.219 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-sftlg subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=72eba066d7 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=576 identity=7042 ipv4=10.0.0.58 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-c2c7g subsys=endpoint level=info msg="Successful endpoint creation" containerID=72eba066d7 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=576 identity=7042 ipv4=10.0.0.58 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-c2c7g subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.194 40b02b70-0f62-4413-90b0-a8e3a4ed734a default }" containerID=4ad22dcdcc60d9e96ad8a9bb0445af35bb38c9e7652fec60903d1e80344739e1 datapathConfiguration="&{false false false false false }" interface=lxc6363c2c65946 k8sPodName=cert-manager/cert-manager-startupapicheck-c9zjn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4ad22dcdcc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=303 ipv4=10.0.0.194 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-c9zjn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4ad22dcdcc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=303 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=44585f7a-9057-416e-821a-8fae9926d7ac,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=44585f7a-9057-416e-821a-8fae9926d7ac,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.194 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-c9zjn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=startupapicheck;k8s:app.kubernetes.io/component=startupapicheck;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=startupapicheck;k8s:app.kubernetes.io/version=v1.11.5;k8s:batch.kubernetes.io/controller-uid=44585f7a-9057-416e-821a-8fae9926d7ac;k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck;k8s:controller-uid=44585f7a-9057-416e-821a-8fae9926d7ac;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck;k8s:io.kubernetes.pod.namespace=cert-manager;k8s:job-name=cert-manager-startupapicheck;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4ad22dcdcc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=303 identity=28541 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=44585f7a-9057-416e-821a-8fae9926d7ac,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=44585f7a-9057-416e-821a-8fae9926d7ac,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.194 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-c9zjn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4ad22dcdcc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=303 identity=28541 ipv4=10.0.0.194 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-c9zjn subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=4ad22dcdcc datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=303 identity=28541 ipv4=10.0.0.194 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-c9zjn subsys=endpoint level=info msg="Successful endpoint creation" containerID=4ad22dcdcc datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=303 identity=28541 ipv4=10.0.0.194 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-c9zjn subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=4ad22dcdcc endpointID=303 k8sNamespace=cert-manager k8sPodName=cert-manager-startupapicheck-c9zjn subsys=daemon level=info msg="Releasing key" key="[k8s:app=startupapicheck k8s:app.kubernetes.io/component=startupapicheck k8s:app.kubernetes.io/instance=cert-manager k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=startupapicheck k8s:app.kubernetes.io/version=v1.11.5 k8s:batch.kubernetes.io/controller-uid=44585f7a-9057-416e-821a-8fae9926d7ac k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck k8s:controller-uid=44585f7a-9057-416e-821a-8fae9926d7ac k8s:helm.sh/chart=cert-manager-v1.11.5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager k8s:io.cilium.k8s.namespace.labels.name=cert-manager k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck k8s:io.kubernetes.pod.namespace=cert-manager k8s:job-name=cert-manager-startupapicheck]" subsys=allocator level=info msg="Removed endpoint" containerID=4ad22dcdcc datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=303 identity=28541 ipv4=10.0.0.194 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-c9zjn subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.203 c71ea91f-492d-4080-b6a1-2da90fc30a27 default }" containerID=5ff0995cab37f17ab32e071f56330d8669ea9ab4b33b02d614d88dc8d72b3113 datapathConfiguration="&{false false false false false }" interface=lxc83f9b6a91670 k8sPodName=ingress-nginx/ingress-nginx-admission-create-wwrb2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5ff0995cab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1595 ipv4=10.0.0.203 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-wwrb2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5ff0995cab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1595 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=2cd8f481-3bca-4d6c-b1b4-3ec0fd9ac063,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=2cd8f481-3bca-4d6c-b1b4-3ec0fd9ac063,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.203 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-wwrb2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=2cd8f481-3bca-4d6c-b1b4-3ec0fd9ac063;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create;k8s:controller-uid=2cd8f481-3bca-4d6c-b1b4-3ec0fd9ac063;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-create;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5ff0995cab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1595 identity=42626 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=2cd8f481-3bca-4d6c-b1b4-3ec0fd9ac063,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=2cd8f481-3bca-4d6c-b1b4-3ec0fd9ac063,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.203 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-wwrb2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5ff0995cab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1595 identity=42626 ipv4=10.0.0.203 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-wwrb2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5ff0995cab datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1595 identity=42626 ipv4=10.0.0.203 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-wwrb2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=5ff0995cab datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1595 identity=42626 ipv4=10.0.0.203 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-wwrb2 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=5ff0995cab endpointID=1595 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-create-wwrb2 subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=2cd8f481-3bca-4d6c-b1b4-3ec0fd9ac063 k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create k8s:controller-uid=2cd8f481-3bca-4d6c-b1b4-3ec0fd9ac063 k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-create]" subsys=allocator level=info msg="Removed endpoint" containerID=5ff0995cab datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1595 identity=42626 ipv4=10.0.0.203 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-wwrb2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.162 bc32ab01-fb2b-4e9f-a1b5-d3e1c739ef0f default }" containerID=33429f8cac37accc9bc43eb1d868484b7cf4d2fdddca1ad3fa44d18bb22917d7 datapathConfiguration="&{false false false false false }" interface=lxc205050952460 k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-v7p2x labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=33429f8cac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2115 ipv4=10.0.0.162 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-v7p2x subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=33429f8cac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2115 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.162 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-v7p2x subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=default-backend;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend;k8s:io.kubernetes.pod.namespace=ingress-nginx;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=33429f8cac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2115 identity=10465 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.162 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-v7p2x oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=33429f8cac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2115 identity=10465 ipv4=10.0.0.162 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-v7p2x subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=33429f8cac datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2115 identity=10465 ipv4=10.0.0.162 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-v7p2x subsys=endpoint level=info msg="Successful endpoint creation" containerID=33429f8cac datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2115 identity=10465 ipv4=10.0.0.162 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-v7p2x subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.190 21b1ed62-1118-485b-ad6b-688c9c2df1ec default }" containerID=5e70ef1f42ceb1faa0e38490f3fcf29eeb5b5434dc0d3e785d698e323469d97d datapathConfiguration="&{false false false false false }" interface=lxc2ec32ccba2e1 k8sPodName=ingress-nginx/ingress-nginx-admission-patch-2cq46 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5e70ef1f42 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3071 ipv4=10.0.0.190 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-2cq46 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5e70ef1f42 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3071 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=1d214b48-91bb-47d0-b3e4-491805fbe5db,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=1d214b48-91bb-47d0-b3e4-491805fbe5db,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.190 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-2cq46 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=1d214b48-91bb-47d0-b3e4-491805fbe5db;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch;k8s:controller-uid=1d214b48-91bb-47d0-b3e4-491805fbe5db;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-patch;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5e70ef1f42 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3071 identity=24114 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=1d214b48-91bb-47d0-b3e4-491805fbe5db,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=1d214b48-91bb-47d0-b3e4-491805fbe5db,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.190 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-2cq46 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5e70ef1f42 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3071 identity=24114 ipv4=10.0.0.190 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-2cq46 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5e70ef1f42 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3071 identity=24114 ipv4=10.0.0.190 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-2cq46 subsys=endpoint level=info msg="Successful endpoint creation" containerID=5e70ef1f42 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3071 identity=24114 ipv4=10.0.0.190 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-2cq46 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=5e70ef1f42 endpointID=3071 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-patch-2cq46 subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=1d214b48-91bb-47d0-b3e4-491805fbe5db k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch k8s:controller-uid=1d214b48-91bb-47d0-b3e4-491805fbe5db k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-patch]" subsys=allocator level=info msg="Removed endpoint" containerID=5e70ef1f42 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3071 identity=24114 ipv4=10.0.0.190 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-2cq46 subsys=endpoint level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"messaging-topology-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9443 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-messaging-topology-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=58da068a-2247-443d-8167-9e2d88523668] Description:}]" policyAddRequest=98a74b99-303d-4033-a196-82789b1cd543 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=98a74b99-303d-4033-a196-82789b1cd543 policyRevision=2 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-messaging-topology-operator subsys=k8s-watcher level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"rabbitmq-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-cluster-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=f530bd03-6528-4732-8d9a-99c609148026] Description:}]" policyAddRequest=02cab620-a5b7-4107-a593-18863bde878d subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=02cab620-a5b7-4107-a593-18863bde878d policyRevision=3 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-cluster-operator subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.179 ccd18085-b492-4ca2-b830-157ece57a4bd default }" containerID=66093ae290208b529b2ac9bd959ebedf3158d4aba4e023ad417b5ec2d31a0512 datapathConfiguration="&{false false false false false }" interface=lxc5c6c5749e520 k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-94vdj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=66093ae290 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2829 ipv4=10.0.0.179 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-94vdj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=66093ae290 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2829 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.16.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.179 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-94vdj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=2.16.1;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=66093ae290 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2829 identity=54766 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.16.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.179 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-94vdj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=66093ae290 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2829 identity=54766 ipv4=10.0.0.179 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-94vdj subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=66093ae290 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=2829 identity=54766 ipv4=10.0.0.179 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-94vdj subsys=endpoint level=info msg="Successful endpoint creation" containerID=66093ae290 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=2829 identity=54766 ipv4=10.0.0.179 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-94vdj subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.139 42244883-3cf8-47ac-b512-29b658f0bb28 default }" containerID=71518b0cdabe391876f988bc05779cd5e7bf9f570db60c3191fafa7471f070ec datapathConfiguration="&{false false false false false }" interface=lxc7884a8659630 k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-hmvlm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=71518b0cda datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1757 ipv4=10.0.0.139 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-hmvlm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=71518b0cda datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1757 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.17.4,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.139 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-hmvlm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=messaging-topology-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=1.17.4;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=71518b0cda datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1757 identity=6873 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.17.4,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.139 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-hmvlm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=71518b0cda datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1757 identity=6873 ipv4=10.0.0.139 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-hmvlm subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=71518b0cda datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1757 identity=6873 ipv4=10.0.0.139 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-hmvlm subsys=endpoint level=info msg="Successful endpoint creation" containerID=71518b0cda datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1757 identity=6873 ipv4=10.0.0.139 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-hmvlm subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.253 4387d3d6-6ff8-445a-b848-0ce023e875bd default }" containerID=500107f70614290db7b591a4f8c2cf3f8dbca26c898ad78919dedcb0d0d076cf datapathConfiguration="&{false false false false false }" interface=lxcd001981db943 k8sPodName=openstack/pxc-operator-69cb5bbdb9-ggvf9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=500107f706 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3504 ipv4=10.0.0.253 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-ggvf9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=500107f706 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3504 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.253 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-ggvf9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=operator;k8s:app.kubernetes.io/instance=pxc-operator;k8s:app.kubernetes.io/name=pxc-operator;k8s:app.kubernetes.io/part-of=pxc-operator;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=500107f706 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3504 identity=21964 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.253 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-ggvf9 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=500107f706 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3504 identity=21964 ipv4=10.0.0.253 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-ggvf9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=500107f706 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=3504 identity=21964 ipv4=10.0.0.253 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-ggvf9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=500107f706 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=3504 identity=21964 ipv4=10.0.0.253 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-ggvf9 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.205 a9252a73-8c20-4596-a983-d2c858f59354 default }" containerID=f043c4d375122e14988162626f9683a83db3ad6629e93b429c1dcef4b7509303 datapathConfiguration="&{false false false false false }" interface=lxc5d8623c73047 k8sPodName=openstack/percona-xtradb-haproxy-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f043c4d375 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2978 ipv4=10.0.0.205 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f043c4d375 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2978 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.205 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=haproxy;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f043c4d375 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2978 identity=11783 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.205 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=f043c4d375 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2978 identity=11783 ipv4=10.0.0.205 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f043c4d375 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=2978 identity=11783 ipv4=10.0.0.205 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f043c4d375 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=2978 identity=11783 ipv4=10.0.0.205 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.180 43e1de95-c113-4413-930e-5d1261a8fcd3 default }" containerID=0a880c148a801467d5d5a2e0ad42f00d52971572c5ab9eeceb7c20dc95d6edcf datapathConfiguration="&{false false false false false }" interface=lxc7c0b9efd00ab k8sPodName=local-path-storage/helper-pod-create-pvc-6c46e394-d3b6-4b31-80bd-c0c8b2c28a2c labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0a880c148a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3835 ipv4=10.0.0.180 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6c46e394-d3b6-4b31-80bd-c0c8b2c28a2c subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0a880c148a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3835 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.180 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6c46e394-d3b6-4b31-80bd-c0c8b2c28a2c subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0a880c148a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3835 identity=21599 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.180 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6c46e394-d3b6-4b31-80bd-c0c8b2c28a2c oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0a880c148a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3835 identity=21599 ipv4=10.0.0.180 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6c46e394-d3b6-4b31-80bd-c0c8b2c28a2c subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0a880c148a datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=3835 identity=21599 ipv4=10.0.0.180 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6c46e394-d3b6-4b31-80bd-c0c8b2c28a2c subsys=endpoint level=info msg="Successful endpoint creation" containerID=0a880c148a datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=3835 identity=21599 ipv4=10.0.0.180 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6c46e394-d3b6-4b31-80bd-c0c8b2c28a2c subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=0a880c148a endpointID=3835 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-6c46e394-d3b6-4b31-80bd-c0c8b2c28a2c subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=0a880c148a datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=3835 identity=21599 ipv4=10.0.0.180 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6c46e394-d3b6-4b31-80bd-c0c8b2c28a2c subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.113 afad4243-1778-4cb6-a811-f72314631d65 default }" containerID=d88875b2e6bf43457c3c0196639ac043017f9cdc8c833b2f6117b1bb0aacfb7c datapathConfiguration="&{false false false false false }" interface=lxc5e0178609dd3 k8sPodName=openstack/percona-xtradb-pxc-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d88875b2e6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=601 ipv4=10.0.0.113 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d88875b2e6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=601 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.113 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=pxc;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d88875b2e6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=601 identity=4955 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.113 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d88875b2e6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=601 identity=4955 ipv4=10.0.0.113 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=d88875b2e6 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=601 identity=4955 ipv4=10.0.0.113 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=d88875b2e6 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=601 identity=4955 ipv4=10.0.0.113 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=daemon level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/instance\":\"valkey\",\"k8s:app.kubernetes.io/name\":\"valkey\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:6379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:26379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:} {IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9121 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=valkey k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=c00e01a5-18d2-48e1-a740-d2e67b66b1fd] Description:}]" policyAddRequest=5e546b8c-7ec8-41e0-94bc-b8139fdf3b30 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=5e546b8c-7ec8-41e0-94bc-b8139fdf3b30 policyRevision=4 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=valkey subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.38 47eb4c61-09b8-471c-ad53-475b872329ce default }" containerID=77ad4cf281cb1b52f970f9f02bd7d58872b224705896aca8e8c424c8f27eaccd datapathConfiguration="&{false false false false false }" interface=lxc2cbbb7f6cbf8 k8sPodName=local-path-storage/helper-pod-create-pvc-bd0197a5-7fb9-4c9f-9823-702e3eae59a1 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=77ad4cf281 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3822 ipv4=10.0.0.38 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-bd0197a5-7fb9-4c9f-9823-702e3eae59a1 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=77ad4cf281 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3822 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.38 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-bd0197a5-7fb9-4c9f-9823-702e3eae59a1 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=77ad4cf281 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3822 identity=21599 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.38 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-bd0197a5-7fb9-4c9f-9823-702e3eae59a1 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=77ad4cf281 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3822 identity=21599 ipv4=10.0.0.38 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-bd0197a5-7fb9-4c9f-9823-702e3eae59a1 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=77ad4cf281 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3822 identity=21599 ipv4=10.0.0.38 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-bd0197a5-7fb9-4c9f-9823-702e3eae59a1 subsys=endpoint level=info msg="Successful endpoint creation" containerID=77ad4cf281 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3822 identity=21599 ipv4=10.0.0.38 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-bd0197a5-7fb9-4c9f-9823-702e3eae59a1 subsys=daemon level=info msg="Delete endpoint request" containerID=77ad4cf281 endpointID=3822 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-bd0197a5-7fb9-4c9f-9823-702e3eae59a1 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=77ad4cf281 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3822 identity=21599 ipv4=10.0.0.38 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-bd0197a5-7fb9-4c9f-9823-702e3eae59a1 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.54 7978d27b-5ab6-4b40-9418-6ffd046ff195 default }" containerID=78c7d3daed05f3cf50a440d045812b839f2a517f50c75ffac8333d9bcb34b181 datapathConfiguration="&{false false false false false }" interface=lxc27d9c6fea8c2 k8sPodName=openstack/valkey-node-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=78c7d3daed datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1685 ipv4=10.0.0.54 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=78c7d3daed datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1685 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.54 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=node;k8s:app.kubernetes.io/instance=valkey;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=valkey;k8s:app.kubernetes.io/version=8.0.2;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=valkey-2.4.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=valkey;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=valkey-node-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=78c7d3daed datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1685 identity=18814 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.54 ipv6= k8sPodName=openstack/valkey-node-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=78c7d3daed datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1685 identity=18814 ipv4=10.0.0.54 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=78c7d3daed datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1685 identity=18814 ipv4=10.0.0.54 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=78c7d3daed datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1685 identity=18814 ipv4=10.0.0.54 ipv6= k8sPodName=openstack/valkey-node-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"keycloak\",\"k8s:app.kubernetes.io/instance\":\"keycloak\",\"k8s:app.kubernetes.io/name\":\"keycloak\",\"k8s:io.kubernetes.pod.namespace\":\"auth-system\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:7800 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:8080 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=keycloak k8s:io.cilium.k8s.policy.namespace=auth-system k8s:io.cilium.k8s.policy.uid=957e6b83-4c3c-4bb2-92a0-55f516d1b997] Description:}]" policyAddRequest=b0ca9a42-a521-432e-8049-55eb51949f5d subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=b0ca9a42-a521-432e-8049-55eb51949f5d policyRevision=5 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=keycloak subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.40 8393fdf4-6f04-46bd-9f2a-1f47aa99c82e default }" containerID=ab0d7a16df55615eb3b9e62e23464eb321b7a04802df15e0bfc33ab2688592d7 datapathConfiguration="&{false false false false false }" interface=lxc7840a886cd79 k8sPodName=auth-system/keycloak-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ab0d7a16df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2116 ipv4=10.0.0.40 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ab0d7a16df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2116 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.40 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:auth-system k8s:io.cilium.k8s.namespace.labels.name:auth-system]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=ab0d7a16df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2116 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.40 ipv6= k8sPodName=auth-system/keycloak-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=keycloak;k8s:app.kubernetes.io/instance=keycloak;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=keycloak;k8s:app.kubernetes.io/version=24.0.5;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=keycloak-21.4.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system;k8s:io.cilium.k8s.namespace.labels.name=auth-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keycloak;k8s:io.kubernetes.pod.namespace=auth-system;k8s:statefulset.kubernetes.io/pod-name=keycloak-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ab0d7a16df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2116 identity=10609 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.40 ipv6= k8sPodName=auth-system/keycloak-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ab0d7a16df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2116 identity=10609 ipv4=10.0.0.40 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ab0d7a16df datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2116 identity=10609 ipv4=10.0.0.40 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=ab0d7a16df datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2116 identity=10609 ipv4=10.0.0.40 ipv6= k8sPodName=auth-system/keycloak-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.00855235570224681 newInterval=7m30s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.71 5701f34f-c135-4670-a78f-e7f136b38ac2 default }" containerID=f52c4f7b2d9d08d8b62a49ca33734095df4b5efc61f9627012fb916cd6ee1cdd datapathConfiguration="&{false false false false false }" interface=lxc552ffcfa2cf5 k8sPodName=monitoring/node-feature-discovery-worker-q5746 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f52c4f7b2d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=297 ipv4=10.0.0.71 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-q5746 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f52c4f7b2d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=297 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.71 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-q5746 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=f52c4f7b2d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=297 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.71 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-q5746 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=worker;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f52c4f7b2d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=297 identity=6105 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.71 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-q5746 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f52c4f7b2d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=297 identity=6105 ipv4=10.0.0.71 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-q5746 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f52c4f7b2d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=297 identity=6105 ipv4=10.0.0.71 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-q5746 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f52c4f7b2d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=297 identity=6105 ipv4=10.0.0.71 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-q5746 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.203 25507444-2d88-47cd-a02f-ee6388107201 default }" containerID=564012bb3f80ca45cc9da84d167c4b3839a18a80fe76f52e6ca0680d7598cf04 datapathConfiguration="&{false false false false false }" interface=lxc11f93d964859 k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-vgtgh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=564012bb3f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=341 ipv4=10.0.0.203 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-vgtgh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=564012bb3f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=341 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.203 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-vgtgh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=master;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=564012bb3f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=341 identity=57733 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.203 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-vgtgh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=564012bb3f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=341 identity=57733 ipv4=10.0.0.203 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-vgtgh subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.227 04164b6f-c95f-4df1-b927-e8c66c782bfd default }" containerID=91c9696ac06c5583684ea79832035d2a3f51eef849a325178c2a57d2ed05dfc1 datapathConfiguration="&{false false false false false }" interface=lxc029baa73ee8c k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-bg8px labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=91c9696ac0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3636 ipv4=10.0.0.227 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-bg8px subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=91c9696ac0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3636 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.227 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-bg8px subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=gc;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=91c9696ac0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3636 identity=53401 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.227 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-bg8px oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=91c9696ac0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3636 identity=53401 ipv4=10.0.0.227 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-bg8px subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=564012bb3f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=341 identity=57733 ipv4=10.0.0.203 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-vgtgh subsys=endpoint level=info msg="Successful endpoint creation" containerID=564012bb3f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=341 identity=57733 ipv4=10.0.0.203 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-vgtgh subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=91c9696ac0 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3636 identity=53401 ipv4=10.0.0.227 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-bg8px subsys=endpoint level=info msg="Successful endpoint creation" containerID=91c9696ac0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3636 identity=53401 ipv4=10.0.0.227 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-bg8px subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.207 082d2f0b-3cc7-47c3-b8df-5fcc771a94d3 default }" containerID=86ed90ad3e62d1d5c93b8d421d2e2ee982b3f5f3c1a280d9b164609194fc32ce datapathConfiguration="&{false false false false false }" interface=lxc48209ec3679c k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-zs6jp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=86ed90ad3e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=31 ipv4=10.0.0.207 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-zs6jp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=86ed90ad3e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=31 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.207 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-zs6jp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:secretgen-controller]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=secretgen-controller;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa;k8s:io.kubernetes.pod.namespace=secretgen-controller;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=86ed90ad3e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=31 identity=63317 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.207 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-zs6jp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=86ed90ad3e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=31 identity=63317 ipv4=10.0.0.207 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-zs6jp subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=86ed90ad3e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=31 identity=63317 ipv4=10.0.0.207 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-zs6jp subsys=endpoint level=info msg="Successful endpoint creation" containerID=86ed90ad3e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=31 identity=63317 ipv4=10.0.0.207 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-zs6jp subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=362 identity=1 identityLabels="k8s:feature.node.kubernetes.io/cpu-cpuid.ADX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AESNI=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX2=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CLZERO=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CMPXCHG8=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FMA3=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSROPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.HYPERVISOR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IA32_ARCH_CAP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBPB=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBRS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.LAHF=true,k8s:feature.node.kubernetes.io/cpu-cpuid.MOVBE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.NRIPS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.OSXSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SHA=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SPEC_CTRL_SSBD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SSE4A=true,k8s:feature.node.kubernetes.io/cpu-cpuid.STIBP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVM=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVMNP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSCALL=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSEE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.TOPEXT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.WBNOINVD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.X87=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XGETBV1=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEC=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEOPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVES=true,k8s:feature.node.kubernetes.io/cpu-hardware_multithreading=false,k8s:feature.node.kubernetes.io/cpu-model.family=23,k8s:feature.node.kubernetes.io/cpu-model.id=49,k8s:feature.node.kubernetes.io/cpu-model.vendor_id=AMD,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ=true,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ_IDLE=true,k8s:feature.node.kubernetes.io/kernel-version.full=5.15.0-174-generic,k8s:feature.node.kubernetes.io/kernel-version.major=5,k8s:feature.node.kubernetes.io/kernel-version.minor=15,k8s:feature.node.kubernetes.io/kernel-version.revision=0,k8s:feature.node.kubernetes.io/pci-0300_1af4.present=true,k8s:feature.node.kubernetes.io/system-os_release.ID=ubuntu,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.major=22,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.minor=04,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID=22.04,k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_00362 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_00362 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_00362 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_00362:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=362 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.38 ce987b4d-b9b9-4040-9c13-c4127201165b default }" containerID=9d38ac5c1c07baa777fe5db95c4cc8a3f0a7ccd64faeb223158062c95fd10d78 datapathConfiguration="&{false false false false false }" interface=lxc00648bc4dd4b k8sPodName=monitoring/kube-prometheus-stack-admission-create-748pp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9d38ac5c1c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3337 ipv4=10.0.0.38 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-748pp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9d38ac5c1c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3337 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=13f54eb2-f2eb-4756-bad6-3419bf3e48e8,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=13f54eb2-f2eb-4756-bad6-3419bf3e48e8,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.38 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-748pp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-create;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=13f54eb2-f2eb-4756-bad6-3419bf3e48e8;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=13f54eb2-f2eb-4756-bad6-3419bf3e48e8;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-create;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9d38ac5c1c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3337 identity=51464 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=13f54eb2-f2eb-4756-bad6-3419bf3e48e8,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=13f54eb2-f2eb-4756-bad6-3419bf3e48e8,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.38 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-748pp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9d38ac5c1c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3337 identity=51464 ipv4=10.0.0.38 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-748pp subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=9d38ac5c1c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3337 identity=51464 ipv4=10.0.0.38 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-748pp subsys=endpoint level=info msg="Successful endpoint creation" containerID=9d38ac5c1c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3337 identity=51464 ipv4=10.0.0.38 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-748pp subsys=daemon level=info msg="Delete endpoint request" containerID=9d38ac5c1c endpointID=3337 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-create-748pp subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-create k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=13f54eb2-f2eb-4756-bad6-3419bf3e48e8 k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=13f54eb2-f2eb-4756-bad6-3419bf3e48e8 k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-create k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=9d38ac5c1c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3337 identity=51464 ipv4=10.0.0.38 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-748pp subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.70 ee382d9e-525a-4885-a316-ac0d9082c14d default }" containerID=58add5695c0dd6b390de64b2f197d945ff7f04a5062e49ea040449c08f3ebb00 datapathConfiguration="&{false false false false false }" interface=lxcf45d255f0587 k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-4mj5f labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=58add5695c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3984 ipv4=10.0.0.70 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-4mj5f subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=58add5695c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3984 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.70 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-4mj5f subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=metrics;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-state-metrics;k8s:app.kubernetes.io/part-of=kube-state-metrics;k8s:app.kubernetes.io/version=2.12.0;k8s:helm.sh/chart=kube-state-metrics-5.20.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=58add5695c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3984 identity=17302 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.70 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-4mj5f oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=58add5695c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3984 identity=17302 ipv4=10.0.0.70 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-4mj5f subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.229 b8f6fae4-b6d0-40a7-8424-4b9753a10af9 default }" containerID=a00e4d88f71ac6d36ee7c18f51437424388e1e54b1a761930856d50a17343ad6 datapathConfiguration="&{false false false false false }" interface=lxca8bbdd8ef8ed k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-fp8bl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a00e4d88f7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=346 ipv4=10.0.0.229 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-fp8bl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a00e4d88f7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=346 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.229 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-fp8bl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-operator;k8s:app.kubernetes.io/component=prometheus-operator;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:chart=kube-prometheus-stack-60.2.0;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a00e4d88f7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=346 identity=63451 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.229 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-fp8bl oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a00e4d88f7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=346 identity=63451 ipv4=10.0.0.229 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-fp8bl subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=58add5695c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3984 identity=17302 ipv4=10.0.0.70 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-4mj5f subsys=endpoint level=info msg="Successful endpoint creation" containerID=58add5695c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3984 identity=17302 ipv4=10.0.0.70 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-4mj5f subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.10 7c755987-0b6f-459e-adac-29bc6df6ff24 default }" containerID=4ce3aed333780ec71383d69d4572eeb6f473bcb01efa114d81e175f5d9b05979 datapathConfiguration="&{false false false false false }" interface=lxcb1686eba1c7e k8sPodName=monitoring/kube-prometheus-stack-grafana-c46475dc5-4kcd4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4ce3aed333 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2245 ipv4=10.0.0.10 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-c46475dc5-4kcd4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4ce3aed333 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2245 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.10 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-c46475dc5-4kcd4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/name=grafana;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4ce3aed333 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2245 identity=10373 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.10 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-c46475dc5-4kcd4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4ce3aed333 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2245 identity=10373 ipv4=10.0.0.10 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-c46475dc5-4kcd4 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a00e4d88f7 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=346 identity=63451 ipv4=10.0.0.229 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-fp8bl subsys=endpoint level=info msg="Successful endpoint creation" containerID=a00e4d88f7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=346 identity=63451 ipv4=10.0.0.229 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-fp8bl subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=4ce3aed333 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2245 identity=10373 ipv4=10.0.0.10 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-c46475dc5-4kcd4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=4ce3aed333 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2245 identity=10373 ipv4=10.0.0.10 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-c46475dc5-4kcd4 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.201 21384f7f-5809-44e0-b657-22f1453b32c1 default }" containerID=d5deb88a698260890bff24db15f7d79e8a289da9b8ea3353efdd96a15abee9d7 datapathConfiguration="&{false false false false false }" interface=lxcaf05c12dff48 k8sPodName=monitoring/kube-prometheus-stack-admission-patch-lpgvj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d5deb88a69 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1028 ipv4=10.0.0.201 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-lpgvj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d5deb88a69 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1028 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=77160fdf-d8e7-495f-8bc1-c47606c10017,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=77160fdf-d8e7-495f-8bc1-c47606c10017,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.201 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-lpgvj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-patch;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=77160fdf-d8e7-495f-8bc1-c47606c10017;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=77160fdf-d8e7-495f-8bc1-c47606c10017;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-patch;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d5deb88a69 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1028 identity=14977 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=77160fdf-d8e7-495f-8bc1-c47606c10017,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=77160fdf-d8e7-495f-8bc1-c47606c10017,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.201 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-lpgvj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d5deb88a69 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1028 identity=14977 ipv4=10.0.0.201 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-lpgvj subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d5deb88a69 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1028 identity=14977 ipv4=10.0.0.201 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-lpgvj subsys=endpoint level=info msg="Successful endpoint creation" containerID=d5deb88a69 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1028 identity=14977 ipv4=10.0.0.201 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-lpgvj subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=d5deb88a69 endpointID=1028 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-patch-lpgvj subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-patch k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=77160fdf-d8e7-495f-8bc1-c47606c10017 k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=77160fdf-d8e7-495f-8bc1-c47606c10017 k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-patch k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=d5deb88a69 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1028 identity=14977 ipv4=10.0.0.201 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-lpgvj subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.159 b5750982-b12f-46e1-875e-41e47f05124f default }" containerID=3408e21665b7d61a7c5f8dba780ef975716413b3dfa94bb1b714ed2015e629b2 datapathConfiguration="&{false false false false false }" interface=lxc239842b1d5d7 k8sPodName=local-path-storage/helper-pod-create-pvc-56d75b0d-62ba-4d5d-8aef-eb9ca2ad8317 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3408e21665 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1291 ipv4=10.0.0.159 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-56d75b0d-62ba-4d5d-8aef-eb9ca2ad8317 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3408e21665 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1291 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.159 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-56d75b0d-62ba-4d5d-8aef-eb9ca2ad8317 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3408e21665 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1291 identity=21599 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.159 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-56d75b0d-62ba-4d5d-8aef-eb9ca2ad8317 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3408e21665 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1291 identity=21599 ipv4=10.0.0.159 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-56d75b0d-62ba-4d5d-8aef-eb9ca2ad8317 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.78 697bc410-af24-4cf0-a705-fbbc70c00241 default }" containerID=e6e2ef209f685340065666e25e3fe973ec4f1397af812cba04c13b4ca4366799 datapathConfiguration="&{false false false false false }" interface=lxc9e00776afdb3 k8sPodName=local-path-storage/helper-pod-create-pvc-e855bd9e-15ae-41f1-9d8d-66c26c1014dc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e6e2ef209f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2045 ipv4=10.0.0.78 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e855bd9e-15ae-41f1-9d8d-66c26c1014dc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e6e2ef209f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2045 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.78 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e855bd9e-15ae-41f1-9d8d-66c26c1014dc subsys=endpoint level=info msg="Identity of endpoint changed" containerID=e6e2ef209f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2045 identity=21599 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.78 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e855bd9e-15ae-41f1-9d8d-66c26c1014dc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e6e2ef209f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2045 identity=21599 ipv4=10.0.0.78 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e855bd9e-15ae-41f1-9d8d-66c26c1014dc subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3408e21665 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1291 identity=21599 ipv4=10.0.0.159 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-56d75b0d-62ba-4d5d-8aef-eb9ca2ad8317 subsys=endpoint level=info msg="Successful endpoint creation" containerID=3408e21665 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1291 identity=21599 ipv4=10.0.0.159 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-56d75b0d-62ba-4d5d-8aef-eb9ca2ad8317 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=e6e2ef209f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2045 identity=21599 ipv4=10.0.0.78 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e855bd9e-15ae-41f1-9d8d-66c26c1014dc subsys=endpoint level=info msg="Successful endpoint creation" containerID=e6e2ef209f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2045 identity=21599 ipv4=10.0.0.78 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e855bd9e-15ae-41f1-9d8d-66c26c1014dc subsys=daemon level=info msg="Delete endpoint request" containerID=e6e2ef209f endpointID=2045 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-e855bd9e-15ae-41f1-9d8d-66c26c1014dc subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Delete endpoint request" containerID=3408e21665 endpointID=1291 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-56d75b0d-62ba-4d5d-8aef-eb9ca2ad8317 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=e6e2ef209f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2045 identity=21599 ipv4=10.0.0.78 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e855bd9e-15ae-41f1-9d8d-66c26c1014dc subsys=endpoint level=info msg="Removed endpoint" containerID=3408e21665 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1291 identity=21599 ipv4=10.0.0.159 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-56d75b0d-62ba-4d5d-8aef-eb9ca2ad8317 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.28 f26784cd-f132-4fab-b9bf-3f3d04dec6d4 default }" containerID=5435aeb3207a5aece55b68b248999ef04b42f57ac9b3d4f095846fce0a5c02ed datapathConfiguration="&{false false false false false }" interface=lxca7aaef63b4be k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5435aeb320 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2694 ipv4=10.0.0.28 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5435aeb320 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2694 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.28 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:alertmanager=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=alertmanager;k8s:app.kubernetes.io/version=0.27.0;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5435aeb320 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2694 identity=43087 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.28 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=5435aeb320 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2694 identity=43087 ipv4=10.0.0.28 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.59 6d537e52-09d7-4534-ba20-6a0ecf0da6c5 default }" containerID=ccc23d2a55102a34ee2104db03b4765060bddb44d1d63da708633816cec2d0b9 datapathConfiguration="&{false false false false false }" interface=lxc702ce48f5f3e k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ccc23d2a55 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1359 ipv4=10.0.0.59 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ccc23d2a55 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1359 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.59 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=prometheus;k8s:app.kubernetes.io/version=2.51.2;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus;k8s:io.kubernetes.pod.namespace=monitoring;k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus;k8s:operator.prometheus.io/shard=0;k8s:prometheus=kube-prometheus-stack-prometheus;k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ccc23d2a55 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1359 identity=1733 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.59 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ccc23d2a55 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1359 identity=1733 ipv4=10.0.0.59 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5435aeb320 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2694 identity=43087 ipv4=10.0.0.28 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=5435aeb320 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2694 identity=43087 ipv4=10.0.0.28 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=ccc23d2a55 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1359 identity=1733 ipv4=10.0.0.59 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=ccc23d2a55 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1359 identity=1733 ipv4=10.0.0.59 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.240 41f35149-8043-4ca7-a106-f1d319a7daea default }" containerID=aed359fb3a0ef071601d898a153ee379d5808ab94e971f0d24973becd5e6d8cd datapathConfiguration="&{false false false false false }" interface=lxc232bb23fa42f k8sPodName=monitoring/loki-gateway-cf54cb88c-6bkr9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=aed359fb3a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2939 ipv4=10.0.0.240 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-6bkr9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=aed359fb3a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2939 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.240 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-6bkr9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=gateway;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=aed359fb3a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2939 identity=32174 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.240 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-6bkr9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=aed359fb3a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2939 identity=32174 ipv4=10.0.0.240 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-6bkr9 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.82 2994d98e-2ab4-4593-b7fb-5af9c6d548dd default }" containerID=e8e12bcfa5bab2bb5d9aba3dac519b69a0cffaa8eaf81f9a0270cdcd6487367f datapathConfiguration="&{false false false false false }" interface=lxc3c0324a4342a k8sPodName=monitoring/loki-results-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e8e12bcfa5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1489 ipv4=10.0.0.82 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e8e12bcfa5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1489 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.82 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-results-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-results-cache;k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e8e12bcfa5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1489 identity=19427 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.82 ipv6= k8sPodName=monitoring/loki-results-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e8e12bcfa5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1489 identity=19427 ipv4=10.0.0.82 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.68 eff14a30-da6f-4346-842b-cbecfaaec203 default }" containerID=b7dd9637c9904c3b779d5c17e1e150d62a84cb4ca5e9ca04542b0667451819f3 datapathConfiguration="&{false false false false false }" interface=lxcd2e72f710e61 k8sPodName=monitoring/loki-chunks-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b7dd9637c9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3551 ipv4=10.0.0.68 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b7dd9637c9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3551 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.68 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-chunks-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-chunks-cache;k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b7dd9637c9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3551 identity=39278 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.68 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b7dd9637c9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3551 identity=39278 ipv4=10.0.0.68 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=aed359fb3a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2939 identity=32174 ipv4=10.0.0.240 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-6bkr9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=aed359fb3a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2939 identity=32174 ipv4=10.0.0.240 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-6bkr9 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=e8e12bcfa5 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1489 identity=19427 ipv4=10.0.0.82 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=e8e12bcfa5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1489 identity=19427 ipv4=10.0.0.82 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=b7dd9637c9 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3551 identity=39278 ipv4=10.0.0.68 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=b7dd9637c9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3551 identity=39278 ipv4=10.0.0.68 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.62 22032b9e-5f88-46c1-ad9e-803750100868 default }" containerID=4adb8e18a65e0a250f55618873217d9745ce62c2d0c49acb7b9f20faae2920de datapathConfiguration="&{false false false false false }" interface=lxc23514eb4ac67 k8sPodName=local-path-storage/helper-pod-create-pvc-15be6295-a513-4f40-af66-e8c55deea746 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4adb8e18a6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2783 ipv4=10.0.0.62 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-15be6295-a513-4f40-af66-e8c55deea746 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4adb8e18a6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2783 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.62 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-15be6295-a513-4f40-af66-e8c55deea746 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4adb8e18a6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2783 identity=21599 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.62 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-15be6295-a513-4f40-af66-e8c55deea746 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4adb8e18a6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2783 identity=21599 ipv4=10.0.0.62 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-15be6295-a513-4f40-af66-e8c55deea746 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4adb8e18a6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2783 identity=21599 ipv4=10.0.0.62 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-15be6295-a513-4f40-af66-e8c55deea746 subsys=endpoint level=info msg="Successful endpoint creation" containerID=4adb8e18a6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2783 identity=21599 ipv4=10.0.0.62 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-15be6295-a513-4f40-af66-e8c55deea746 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.140 50ffbc1d-16c4-46eb-8d3d-96ba63cb0a01 default }" containerID=918a198a5e353b84f61d82baa4cb3dc629d496e71dc101f5b087cd78edb1df59 datapathConfiguration="&{false false false false false }" interface=lxc94aca74e2241 k8sPodName=monitoring/vector-zxk2s labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=918a198a5e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=318 ipv4=10.0.0.140 ipv6= k8sPodName=monitoring/vector-zxk2s subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=918a198a5e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=318 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.140 ipv6= k8sPodName=monitoring/vector-zxk2s subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=Agent;k8s:app.kubernetes.io/instance=vector;k8s:app.kubernetes.io/name=vector;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=vector;k8s:io.kubernetes.pod.namespace=monitoring;k8s:vector.dev/exclude=true;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=918a198a5e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=318 identity=16292 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.140 ipv6= k8sPodName=monitoring/vector-zxk2s oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=918a198a5e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=318 identity=16292 ipv4=10.0.0.140 ipv6= k8sPodName=monitoring/vector-zxk2s subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=918a198a5e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=318 identity=16292 ipv4=10.0.0.140 ipv6= k8sPodName=monitoring/vector-zxk2s subsys=endpoint level=info msg="Successful endpoint creation" containerID=918a198a5e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=318 identity=16292 ipv4=10.0.0.140 ipv6= k8sPodName=monitoring/vector-zxk2s subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=4adb8e18a6 endpointID=2783 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-15be6295-a513-4f40-af66-e8c55deea746 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=4adb8e18a6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2783 identity=21599 ipv4=10.0.0.62 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-15be6295-a513-4f40-af66-e8c55deea746 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.166 1fd0c29a-a1b7-47c5-8a56-b71f531220e2 default }" containerID=54284920b7f3928f8d08667992b4c82d27351dce7f9054da2dac39793811bd9f datapathConfiguration="&{false false false false false }" interface=lxc59a0304e9daa k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-5s25z labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=54284920b7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4091 ipv4=10.0.0.166 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-5s25z subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=54284920b7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4091 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.166 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-5s25z subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=prometheus-pushgateway;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=prometheus-pushgateway;k8s:app.kubernetes.io/version=v1.8.0;k8s:helm.sh/chart=prometheus-pushgateway-2.13.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=54284920b7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4091 identity=20052 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.166 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-5s25z oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=54284920b7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4091 identity=20052 ipv4=10.0.0.166 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-5s25z subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=54284920b7 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=4091 identity=20052 ipv4=10.0.0.166 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-5s25z subsys=endpoint level=info msg="Successful endpoint creation" containerID=54284920b7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=4091 identity=20052 ipv4=10.0.0.166 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-5s25z subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.130 cf7669d4-98ae-4615-bae7-2d467cad81e4 default }" containerID=407118764b22e442b7feca0e0d2f562815e6cc84bfeb5c784f97468b6cfbdc13 datapathConfiguration="&{false false false false false }" interface=lxc9029a9acec7e k8sPodName=monitoring/loki-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=407118764b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=117 ipv4=10.0.0.130 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=407118764b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=117 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.130 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=single-binary;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:app.kubernetes.io/part-of=memberlist;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=loki-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=407118764b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=117 identity=34240 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.130 ipv6= k8sPodName=monitoring/loki-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=407118764b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=117 identity=34240 ipv4=10.0.0.130 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=407118764b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=117 identity=34240 ipv4=10.0.0.130 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=407118764b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=117 identity=34240 ipv4=10.0.0.130 ipv6= k8sPodName=monitoring/loki-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.51 ffd258d5-2701-4119-81e7-f514485e6432 default }" containerID=c7b1ae9025afe6612995a4fe0cd6d62a5e073be826e6e772b766dff2c5f08acf datapathConfiguration="&{false false false false false }" interface=lxc4946639451ef k8sPodName=openstack/memcached-memcached-6479589586-trvzd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c7b1ae9025 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2448 ipv4=10.0.0.51 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-trvzd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c7b1ae9025 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2448 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.51 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-trvzd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=memcached;k8s:component=server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=memcached;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=c7b1ae9025 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2448 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.51 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-trvzd line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=c7b1ae9025 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2448 identity=7620 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.51 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-trvzd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c7b1ae9025 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2448 identity=7620 ipv4=10.0.0.51 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-trvzd subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c7b1ae9025 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2448 identity=7620 ipv4=10.0.0.51 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-trvzd subsys=endpoint level=info msg="Successful endpoint creation" containerID=c7b1ae9025 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2448 identity=7620 ipv4=10.0.0.51 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-trvzd subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.27 c2e64952-b48e-4972-9fe0-effd6851192c default }" containerID=48410eaef14751fcecc80c610d4bdf011dc99c40b53657d437b87eba723247d6 datapathConfiguration="&{false false false false false }" interface=lxc597e0085b823 k8sPodName=local-path-storage/helper-pod-create-pvc-87681418-131c-4f1e-9b7c-41c48656000e labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=48410eaef1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3402 ipv4=10.0.0.27 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-87681418-131c-4f1e-9b7c-41c48656000e subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=48410eaef1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3402 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.27 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-87681418-131c-4f1e-9b7c-41c48656000e subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=48410eaef1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3402 identity=21599 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.27 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-87681418-131c-4f1e-9b7c-41c48656000e oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=48410eaef1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3402 identity=21599 ipv4=10.0.0.27 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-87681418-131c-4f1e-9b7c-41c48656000e subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=48410eaef1 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3402 identity=21599 ipv4=10.0.0.27 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-87681418-131c-4f1e-9b7c-41c48656000e subsys=endpoint level=info msg="Successful endpoint creation" containerID=48410eaef1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3402 identity=21599 ipv4=10.0.0.27 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-87681418-131c-4f1e-9b7c-41c48656000e subsys=daemon level=info msg="Delete endpoint request" containerID=48410eaef1 endpointID=3402 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-87681418-131c-4f1e-9b7c-41c48656000e subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=48410eaef1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3402 identity=21599 ipv4=10.0.0.27 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-87681418-131c-4f1e-9b7c-41c48656000e subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.164 d0d733e9-46ac-4d2c-9427-e607eb43251b default }" containerID=8e58d7aca77f88bacabebf4e35b3b2ee54cb2bbd47a061b4a281f7a594cf12d1 datapathConfiguration="&{false false false false false }" interface=lxcf2e66a031191 k8sPodName=openstack/rabbitmq-keystone-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8e58d7aca7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3015 ipv4=10.0.0.164 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8e58d7aca7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3015 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.164 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-keystone;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8e58d7aca7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3015 identity=13304 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.164 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8e58d7aca7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3015 identity=13304 ipv4=10.0.0.164 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=8e58d7aca7 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3015 identity=13304 ipv4=10.0.0.164 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=8e58d7aca7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3015 identity=13304 ipv4=10.0.0.164 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.241 56224355-579a-490d-9c54-d87c4a1cb29f default }" containerID=dc9d2a5f813bf0612c9f374bda6275a57b93ce9b9144f2403555f9089d22138c datapathConfiguration="&{false false false false false }" interface=lxc86087d8a90e4 k8sPodName=openstack/keystone-api-75fbdb757c-b6jv9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=dc9d2a5f81 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1589 ipv4=10.0.0.241 ipv6= k8sPodName=openstack/keystone-api-75fbdb757c-b6jv9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=dc9d2a5f81 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1589 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.241 ipv6= k8sPodName=openstack/keystone-api-75fbdb757c-b6jv9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=dc9d2a5f81 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1589 identity=39944 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.241 ipv6= k8sPodName=openstack/keystone-api-75fbdb757c-b6jv9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=dc9d2a5f81 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1589 identity=39944 ipv4=10.0.0.241 ipv6= k8sPodName=openstack/keystone-api-75fbdb757c-b6jv9 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.173 b60788c2-b60e-4768-b0b8-4da4f95117ce default }" containerID=226a3f865bf3e80d02747abd4c5078e4c87507da1fa20b88746ad4f6ba199080 datapathConfiguration="&{false false false false false }" interface=lxcf131fdff3fe4 k8sPodName=openstack/keystone-credential-setup-xhxdg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=226a3f865b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2422 ipv4=10.0.0.173 ipv6= k8sPodName=openstack/keystone-credential-setup-xhxdg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=226a3f865b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2422 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=706c47ee-5927-45e8-95cf-638ee1b7ac6a,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=706c47ee-5927-45e8-95cf-638ee1b7ac6a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.173 ipv6= k8sPodName=openstack/keystone-credential-setup-xhxdg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=706c47ee-5927-45e8-95cf-638ee1b7ac6a;k8s:batch.kubernetes.io/job-name=keystone-credential-setup;k8s:component=credential-setup;k8s:controller-uid=706c47ee-5927-45e8-95cf-638ee1b7ac6a;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-credential-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=226a3f865b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2422 identity=7434 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=706c47ee-5927-45e8-95cf-638ee1b7ac6a,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=706c47ee-5927-45e8-95cf-638ee1b7ac6a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.173 ipv6= k8sPodName=openstack/keystone-credential-setup-xhxdg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=226a3f865b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2422 identity=7434 ipv4=10.0.0.173 ipv6= k8sPodName=openstack/keystone-credential-setup-xhxdg subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=dc9d2a5f81 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1589 identity=39944 ipv4=10.0.0.241 ipv6= k8sPodName=openstack/keystone-api-75fbdb757c-b6jv9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=dc9d2a5f81 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1589 identity=39944 ipv4=10.0.0.241 ipv6= k8sPodName=openstack/keystone-api-75fbdb757c-b6jv9 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=226a3f865b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2422 identity=7434 ipv4=10.0.0.173 ipv6= k8sPodName=openstack/keystone-credential-setup-xhxdg subsys=endpoint level=info msg="Successful endpoint creation" containerID=226a3f865b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2422 identity=7434 ipv4=10.0.0.173 ipv6= k8sPodName=openstack/keystone-credential-setup-xhxdg subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=226a3f865b endpointID=2422 k8sNamespace=openstack k8sPodName=keystone-credential-setup-xhxdg subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=706c47ee-5927-45e8-95cf-638ee1b7ac6a k8s:batch.kubernetes.io/job-name=keystone-credential-setup k8s:component=credential-setup k8s:controller-uid=706c47ee-5927-45e8-95cf-638ee1b7ac6a k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-credential-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=226a3f865b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2422 identity=7434 ipv4=10.0.0.173 ipv6= k8sPodName=openstack/keystone-credential-setup-xhxdg subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.171 6d15010a-1519-447a-96d5-3679bec49cb3 default }" containerID=381732f1020a20ed507fc133cabbcbfbd9d36d5e6be8d270e4f3d7bf7947f95d datapathConfiguration="&{false false false false false }" interface=lxcb7dc5999bef9 k8sPodName=openstack/keystone-db-init-nm9nx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=381732f102 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=436 ipv4=10.0.0.171 ipv6= k8sPodName=openstack/keystone-db-init-nm9nx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=381732f102 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=436 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=e9259e37-cb89-4c42-9b67-868208ea19f6,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=e9259e37-cb89-4c42-9b67-868208ea19f6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.171 ipv6= k8sPodName=openstack/keystone-db-init-nm9nx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=e9259e37-cb89-4c42-9b67-868208ea19f6;k8s:batch.kubernetes.io/job-name=keystone-db-init;k8s:component=db-init;k8s:controller-uid=e9259e37-cb89-4c42-9b67-868208ea19f6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-init;k8s:release_group=keystone;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=381732f102 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=436 identity=26122 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=e9259e37-cb89-4c42-9b67-868208ea19f6,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=e9259e37-cb89-4c42-9b67-868208ea19f6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.171 ipv6= k8sPodName=openstack/keystone-db-init-nm9nx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=381732f102 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=436 identity=26122 ipv4=10.0.0.171 ipv6= k8sPodName=openstack/keystone-db-init-nm9nx subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=381732f102 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=436 identity=26122 ipv4=10.0.0.171 ipv6= k8sPodName=openstack/keystone-db-init-nm9nx subsys=endpoint level=info msg="Successful endpoint creation" containerID=381732f102 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=436 identity=26122 ipv4=10.0.0.171 ipv6= k8sPodName=openstack/keystone-db-init-nm9nx subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=381732f102 endpointID=436 k8sNamespace=openstack k8sPodName=keystone-db-init-nm9nx subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=e9259e37-cb89-4c42-9b67-868208ea19f6 k8s:batch.kubernetes.io/job-name=keystone-db-init k8s:component=db-init k8s:controller-uid=e9259e37-cb89-4c42-9b67-868208ea19f6 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=381732f102 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=436 identity=26122 ipv4=10.0.0.171 ipv6= k8sPodName=openstack/keystone-db-init-nm9nx subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.174 9a419eb3-7fe4-4a61-9a36-63d4552f7e09 default }" containerID=281217d0a3d75bf01159950d946406542d9253d4e4196626bbd8e26d34fb8109 datapathConfiguration="&{false false false false false }" interface=lxc6ca3970945f2 k8sPodName=openstack/keystone-fernet-setup-mwv6c labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=281217d0a3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1962 ipv4=10.0.0.174 ipv6= k8sPodName=openstack/keystone-fernet-setup-mwv6c subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=281217d0a3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1962 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=249491a4-89bc-49f6-9593-97611d61c444,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=249491a4-89bc-49f6-9593-97611d61c444,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.174 ipv6= k8sPodName=openstack/keystone-fernet-setup-mwv6c subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=281217d0a3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1962 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.174 ipv6= k8sPodName=openstack/keystone-fernet-setup-mwv6c line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=249491a4-89bc-49f6-9593-97611d61c444;k8s:batch.kubernetes.io/job-name=keystone-fernet-setup;k8s:component=fernet-setup;k8s:controller-uid=249491a4-89bc-49f6-9593-97611d61c444;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-fernet-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=281217d0a3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1962 identity=1236 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=249491a4-89bc-49f6-9593-97611d61c444,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=249491a4-89bc-49f6-9593-97611d61c444,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.174 ipv6= k8sPodName=openstack/keystone-fernet-setup-mwv6c oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=281217d0a3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1962 identity=1236 ipv4=10.0.0.174 ipv6= k8sPodName=openstack/keystone-fernet-setup-mwv6c subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=281217d0a3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1962 identity=1236 ipv4=10.0.0.174 ipv6= k8sPodName=openstack/keystone-fernet-setup-mwv6c subsys=endpoint level=info msg="Successful endpoint creation" containerID=281217d0a3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1962 identity=1236 ipv4=10.0.0.174 ipv6= k8sPodName=openstack/keystone-fernet-setup-mwv6c subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=281217d0a3 endpointID=1962 k8sNamespace=openstack k8sPodName=keystone-fernet-setup-mwv6c subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=249491a4-89bc-49f6-9593-97611d61c444 k8s:batch.kubernetes.io/job-name=keystone-fernet-setup k8s:component=fernet-setup k8s:controller-uid=249491a4-89bc-49f6-9593-97611d61c444 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-fernet-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=281217d0a3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1962 identity=1236 ipv4=10.0.0.174 ipv6= k8sPodName=openstack/keystone-fernet-setup-mwv6c subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.39 89723af0-b2db-4faa-bbb7-1530b5db5f04 default }" containerID=da572c0b2b5259bbafc9288048452826a6f483b816b88e92a0e9fa11c8c06b3e datapathConfiguration="&{false false false false false }" interface=lxc2048b26f9b81 k8sPodName=openstack/keystone-db-sync-qxp6g labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=da572c0b2b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=314 ipv4=10.0.0.39 ipv6= k8sPodName=openstack/keystone-db-sync-qxp6g subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=da572c0b2b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=314 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=bfa7a6db-b5cf-4dc6-8f8c-dd82e2350292,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=bfa7a6db-b5cf-4dc6-8f8c-dd82e2350292,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.39 ipv6= k8sPodName=openstack/keystone-db-sync-qxp6g subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=bfa7a6db-b5cf-4dc6-8f8c-dd82e2350292;k8s:batch.kubernetes.io/job-name=keystone-db-sync;k8s:component=db-sync;k8s:controller-uid=bfa7a6db-b5cf-4dc6-8f8c-dd82e2350292;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-sync;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=da572c0b2b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=314 identity=5105 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=bfa7a6db-b5cf-4dc6-8f8c-dd82e2350292,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=bfa7a6db-b5cf-4dc6-8f8c-dd82e2350292,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.39 ipv6= k8sPodName=openstack/keystone-db-sync-qxp6g oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=da572c0b2b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=314 identity=5105 ipv4=10.0.0.39 ipv6= k8sPodName=openstack/keystone-db-sync-qxp6g subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=da572c0b2b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=314 identity=5105 ipv4=10.0.0.39 ipv6= k8sPodName=openstack/keystone-db-sync-qxp6g subsys=endpoint level=info msg="Successful endpoint creation" containerID=da572c0b2b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=314 identity=5105 ipv4=10.0.0.39 ipv6= k8sPodName=openstack/keystone-db-sync-qxp6g subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=da572c0b2b endpointID=314 k8sNamespace=openstack k8sPodName=keystone-db-sync-qxp6g subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=bfa7a6db-b5cf-4dc6-8f8c-dd82e2350292 k8s:batch.kubernetes.io/job-name=keystone-db-sync k8s:component=db-sync k8s:controller-uid=bfa7a6db-b5cf-4dc6-8f8c-dd82e2350292 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-sync k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=da572c0b2b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=314 identity=5105 ipv4=10.0.0.39 ipv6= k8sPodName=openstack/keystone-db-sync-qxp6g subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.111 cb81e0c4-5ddb-4615-9749-4f0345660e0e default }" containerID=459d88a13999736383f700dc649091efae4dbec4ea2c2325695ddb09d46c2e40 datapathConfiguration="&{false false false false false }" interface=lxcecba2c5cd439 k8sPodName=openstack/keystone-rabbit-init-vfc78 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=459d88a139 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1620 ipv4=10.0.0.111 ipv6= k8sPodName=openstack/keystone-rabbit-init-vfc78 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=459d88a139 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1620 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=ec42dc22-efee-465e-ac0b-6d6839fa7416,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=ec42dc22-efee-465e-ac0b-6d6839fa7416,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.111 ipv6= k8sPodName=openstack/keystone-rabbit-init-vfc78 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=ec42dc22-efee-465e-ac0b-6d6839fa7416;k8s:batch.kubernetes.io/job-name=keystone-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=ec42dc22-efee-465e-ac0b-6d6839fa7416;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-rabbit-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=459d88a139 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1620 identity=31733 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=ec42dc22-efee-465e-ac0b-6d6839fa7416,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=ec42dc22-efee-465e-ac0b-6d6839fa7416,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.111 ipv6= k8sPodName=openstack/keystone-rabbit-init-vfc78 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=459d88a139 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1620 identity=31733 ipv4=10.0.0.111 ipv6= k8sPodName=openstack/keystone-rabbit-init-vfc78 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=459d88a139 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1620 identity=31733 ipv4=10.0.0.111 ipv6= k8sPodName=openstack/keystone-rabbit-init-vfc78 subsys=endpoint level=info msg="Successful endpoint creation" containerID=459d88a139 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1620 identity=31733 ipv4=10.0.0.111 ipv6= k8sPodName=openstack/keystone-rabbit-init-vfc78 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=459d88a139 endpointID=1620 k8sNamespace=openstack k8sPodName=keystone-rabbit-init-vfc78 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=ec42dc22-efee-465e-ac0b-6d6839fa7416 k8s:batch.kubernetes.io/job-name=keystone-rabbit-init k8s:component=rabbit-init k8s:controller-uid=ec42dc22-efee-465e-ac0b-6d6839fa7416 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-rabbit-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=459d88a139 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1620 identity=31733 ipv4=10.0.0.111 ipv6= k8sPodName=openstack/keystone-rabbit-init-vfc78 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.48 4f659911-247d-4e44-a1f6-b70c37b6e2bc default }" containerID=ae9d3b23f8da437b13d59a936c43e8433935d849757badf17ff2cc84151657c3 datapathConfiguration="&{false false false false false }" interface=lxc06fe586af735 k8sPodName=openstack/keystone-domain-manage-xkh7t labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ae9d3b23f8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4025 ipv4=10.0.0.48 ipv6= k8sPodName=openstack/keystone-domain-manage-xkh7t subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ae9d3b23f8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4025 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=d245baf7-a335-4127-b0ba-368cca67a5a2,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=d245baf7-a335-4127-b0ba-368cca67a5a2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.48 ipv6= k8sPodName=openstack/keystone-domain-manage-xkh7t subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=d245baf7-a335-4127-b0ba-368cca67a5a2;k8s:batch.kubernetes.io/job-name=keystone-domain-manage;k8s:component=domain-manage;k8s:controller-uid=d245baf7-a335-4127-b0ba-368cca67a5a2;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-domain-manage;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ae9d3b23f8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4025 identity=7137 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=d245baf7-a335-4127-b0ba-368cca67a5a2,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=d245baf7-a335-4127-b0ba-368cca67a5a2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.48 ipv6= k8sPodName=openstack/keystone-domain-manage-xkh7t oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ae9d3b23f8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4025 identity=7137 ipv4=10.0.0.48 ipv6= k8sPodName=openstack/keystone-domain-manage-xkh7t subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=ae9d3b23f8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=4025 identity=7137 ipv4=10.0.0.48 ipv6= k8sPodName=openstack/keystone-domain-manage-xkh7t subsys=endpoint level=info msg="Successful endpoint creation" containerID=ae9d3b23f8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=4025 identity=7137 ipv4=10.0.0.48 ipv6= k8sPodName=openstack/keystone-domain-manage-xkh7t subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=ae9d3b23f8 endpointID=4025 k8sNamespace=openstack k8sPodName=keystone-domain-manage-xkh7t subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=d245baf7-a335-4127-b0ba-368cca67a5a2 k8s:batch.kubernetes.io/job-name=keystone-domain-manage k8s:component=domain-manage k8s:controller-uid=d245baf7-a335-4127-b0ba-368cca67a5a2 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-domain-manage k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=ae9d3b23f8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=4025 identity=7137 ipv4=10.0.0.48 ipv6= k8sPodName=openstack/keystone-domain-manage-xkh7t subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.250 dbb94d44-5867-4bcd-9a56-303b82561b74 default }" containerID=24a21bd7f7da5cc69276e257aebc8b689c0aebb6e04333ea365d6718aced5631 datapathConfiguration="&{false false false false false }" interface=lxcfda43080690b k8sPodName=openstack/keystone-bootstrap-q4wrj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=24a21bd7f7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3992 ipv4=10.0.0.250 ipv6= k8sPodName=openstack/keystone-bootstrap-q4wrj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=24a21bd7f7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3992 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=6686067a-3c92-4478-8a18-62c2c5c13370,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=6686067a-3c92-4478-8a18-62c2c5c13370,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.250 ipv6= k8sPodName=openstack/keystone-bootstrap-q4wrj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=6686067a-3c92-4478-8a18-62c2c5c13370;k8s:batch.kubernetes.io/job-name=keystone-bootstrap;k8s:component=bootstrap;k8s:controller-uid=6686067a-3c92-4478-8a18-62c2c5c13370;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-bootstrap;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=24a21bd7f7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3992 identity=7578 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=6686067a-3c92-4478-8a18-62c2c5c13370,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=6686067a-3c92-4478-8a18-62c2c5c13370,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.250 ipv6= k8sPodName=openstack/keystone-bootstrap-q4wrj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=24a21bd7f7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3992 identity=7578 ipv4=10.0.0.250 ipv6= k8sPodName=openstack/keystone-bootstrap-q4wrj subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=24a21bd7f7 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3992 identity=7578 ipv4=10.0.0.250 ipv6= k8sPodName=openstack/keystone-bootstrap-q4wrj subsys=endpoint level=info msg="Successful endpoint creation" containerID=24a21bd7f7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3992 identity=7578 ipv4=10.0.0.250 ipv6= k8sPodName=openstack/keystone-bootstrap-q4wrj subsys=daemon level=info msg="Delete endpoint request" containerID=24a21bd7f7 endpointID=3992 k8sNamespace=openstack k8sPodName=keystone-bootstrap-q4wrj subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=6686067a-3c92-4478-8a18-62c2c5c13370 k8s:batch.kubernetes.io/job-name=keystone-bootstrap k8s:component=bootstrap k8s:controller-uid=6686067a-3c92-4478-8a18-62c2c5c13370 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-bootstrap k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=24a21bd7f7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3992 identity=7578 ipv4=10.0.0.250 ipv6= k8sPodName=openstack/keystone-bootstrap-q4wrj subsys=endpoint level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.03404371880368472 newInterval=11m15s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.69 d0e84f68-061e-44af-9744-245fa906858a default }" containerID=10f5620c0c8263204a4a06b4a58015cbb088fc6f7971829a7a4f8fdd67a550d1 datapathConfiguration="&{false false false false false }" interface=lxca9cdd2677880 k8sPodName=local-path-storage/helper-pod-create-pvc-f971e61c-8d5c-4fee-8214-f4ff6e29e463 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=10f5620c0c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2195 ipv4=10.0.0.69 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f971e61c-8d5c-4fee-8214-f4ff6e29e463 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=10f5620c0c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2195 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.69 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f971e61c-8d5c-4fee-8214-f4ff6e29e463 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=10f5620c0c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2195 identity=21599 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.69 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f971e61c-8d5c-4fee-8214-f4ff6e29e463 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=10f5620c0c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2195 identity=21599 ipv4=10.0.0.69 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f971e61c-8d5c-4fee-8214-f4ff6e29e463 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=10f5620c0c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2195 identity=21599 ipv4=10.0.0.69 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f971e61c-8d5c-4fee-8214-f4ff6e29e463 subsys=endpoint level=info msg="Successful endpoint creation" containerID=10f5620c0c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2195 identity=21599 ipv4=10.0.0.69 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f971e61c-8d5c-4fee-8214-f4ff6e29e463 subsys=daemon level=info msg="Delete endpoint request" containerID=10f5620c0c endpointID=2195 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-f971e61c-8d5c-4fee-8214-f4ff6e29e463 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=10f5620c0c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2195 identity=21599 ipv4=10.0.0.69 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f971e61c-8d5c-4fee-8214-f4ff6e29e463 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.215 18c1664c-90b8-48c9-8d52-0435e7647ccb default }" containerID=0be337b9ab58eaa7188d425b96431239aca914d955c743efba0ceced9f4b19c7 datapathConfiguration="&{false false false false false }" interface=lxc28767622e1d6 k8sPodName=openstack/rabbitmq-barbican-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0be337b9ab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2872 ipv4=10.0.0.215 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0be337b9ab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2872 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.215 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-barbican;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0be337b9ab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2872 identity=58813 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.215 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0be337b9ab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2872 identity=58813 ipv4=10.0.0.215 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=0be337b9ab datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2872 identity=58813 ipv4=10.0.0.215 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=0be337b9ab datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2872 identity=58813 ipv4=10.0.0.215 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.63 5eac4f33-3a85-4b99-9006-1f2c27957768 default }" containerID=971ea99374ced997ab6deb8061f6e7c77250add47cd543619266d674b9f4380c datapathConfiguration="&{false false false false false }" interface=lxc9c514898e539 k8sPodName=openstack/barbican-api-6cb7679d65-s88dg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=971ea99374 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=782 ipv4=10.0.0.63 ipv6= k8sPodName=openstack/barbican-api-6cb7679d65-s88dg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=971ea99374 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=782 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.63 ipv6= k8sPodName=openstack/barbican-api-6cb7679d65-s88dg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=971ea99374 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=782 identity=55449 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.63 ipv6= k8sPodName=openstack/barbican-api-6cb7679d65-s88dg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=971ea99374 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=782 identity=55449 ipv4=10.0.0.63 ipv6= k8sPodName=openstack/barbican-api-6cb7679d65-s88dg subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=971ea99374 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=782 identity=55449 ipv4=10.0.0.63 ipv6= k8sPodName=openstack/barbican-api-6cb7679d65-s88dg subsys=endpoint level=info msg="Successful endpoint creation" containerID=971ea99374 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=782 identity=55449 ipv4=10.0.0.63 ipv6= k8sPodName=openstack/barbican-api-6cb7679d65-s88dg subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.210 2bfdb6bc-9506-4864-91bb-87f371e4536b default }" containerID=bf726ea388073cd86617780ff81674bd32408bb5dcaa6d1aacf9cdbf19b7ccd5 datapathConfiguration="&{false false false false false }" interface=lxc191a5e681d9f k8sPodName=openstack/barbican-db-init-4r2g7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bf726ea388 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2018 ipv4=10.0.0.210 ipv6= k8sPodName=openstack/barbican-db-init-4r2g7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bf726ea388 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2018 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=9c16e800-32df-4c33-a130-16d5d6c582a2,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=9c16e800-32df-4c33-a130-16d5d6c582a2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.210 ipv6= k8sPodName=openstack/barbican-db-init-4r2g7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=9c16e800-32df-4c33-a130-16d5d6c582a2;k8s:batch.kubernetes.io/job-name=barbican-db-init;k8s:component=db-init;k8s:controller-uid=9c16e800-32df-4c33-a130-16d5d6c582a2;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=bf726ea388 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2018 identity=12213 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=9c16e800-32df-4c33-a130-16d5d6c582a2,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=9c16e800-32df-4c33-a130-16d5d6c582a2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.210 ipv6= k8sPodName=openstack/barbican-db-init-4r2g7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=bf726ea388 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2018 identity=12213 ipv4=10.0.0.210 ipv6= k8sPodName=openstack/barbican-db-init-4r2g7 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=bf726ea388 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2018 identity=12213 ipv4=10.0.0.210 ipv6= k8sPodName=openstack/barbican-db-init-4r2g7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=bf726ea388 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2018 identity=12213 ipv4=10.0.0.210 ipv6= k8sPodName=openstack/barbican-db-init-4r2g7 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=bf726ea388 endpointID=2018 k8sNamespace=openstack k8sPodName=barbican-db-init-4r2g7 subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=9c16e800-32df-4c33-a130-16d5d6c582a2 k8s:batch.kubernetes.io/job-name=barbican-db-init k8s:component=db-init k8s:controller-uid=9c16e800-32df-4c33-a130-16d5d6c582a2 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=bf726ea388 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2018 identity=12213 ipv4=10.0.0.210 ipv6= k8sPodName=openstack/barbican-db-init-4r2g7 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.141 17edb602-cad0-4d95-84ed-8e907408a597 default }" containerID=98d9fe11a2cd88f7450595dc930b1fa5d0c626b0df40fe7727a0de6d3af8a50c datapathConfiguration="&{false false false false false }" interface=lxc30c998f89ade k8sPodName=openstack/barbican-db-sync-x6prm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=98d9fe11a2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2291 ipv4=10.0.0.141 ipv6= k8sPodName=openstack/barbican-db-sync-x6prm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=98d9fe11a2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2291 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=354a6bda-1ba3-46ae-a49d-7ebe778dc70d,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=354a6bda-1ba3-46ae-a49d-7ebe778dc70d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.141 ipv6= k8sPodName=openstack/barbican-db-sync-x6prm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=354a6bda-1ba3-46ae-a49d-7ebe778dc70d;k8s:batch.kubernetes.io/job-name=barbican-db-sync;k8s:component=db-sync;k8s:controller-uid=354a6bda-1ba3-46ae-a49d-7ebe778dc70d;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-sync;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=98d9fe11a2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2291 identity=27485 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=354a6bda-1ba3-46ae-a49d-7ebe778dc70d,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=354a6bda-1ba3-46ae-a49d-7ebe778dc70d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.141 ipv6= k8sPodName=openstack/barbican-db-sync-x6prm oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=98d9fe11a2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2291 identity=27485 ipv4=10.0.0.141 ipv6= k8sPodName=openstack/barbican-db-sync-x6prm subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=98d9fe11a2 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2291 identity=27485 ipv4=10.0.0.141 ipv6= k8sPodName=openstack/barbican-db-sync-x6prm subsys=endpoint level=info msg="Successful endpoint creation" containerID=98d9fe11a2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2291 identity=27485 ipv4=10.0.0.141 ipv6= k8sPodName=openstack/barbican-db-sync-x6prm subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=98d9fe11a2 endpointID=2291 k8sNamespace=openstack k8sPodName=barbican-db-sync-x6prm subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=354a6bda-1ba3-46ae-a49d-7ebe778dc70d k8s:batch.kubernetes.io/job-name=barbican-db-sync k8s:component=db-sync k8s:controller-uid=354a6bda-1ba3-46ae-a49d-7ebe778dc70d k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-sync k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=98d9fe11a2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2291 identity=27485 ipv4=10.0.0.141 ipv6= k8sPodName=openstack/barbican-db-sync-x6prm subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.172 2c983161-b9b2-4426-9810-f4f4684d809b default }" containerID=ad963bce5bb2db02eebd531023ae31bd1bbb8b9eaf2624cabcc768f94b6ae9f3 datapathConfiguration="&{false false false false false }" interface=lxceceaa6e50d03 k8sPodName=openstack/barbican-rabbit-init-htnhq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ad963bce5b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=789 ipv4=10.0.0.172 ipv6= k8sPodName=openstack/barbican-rabbit-init-htnhq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ad963bce5b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=789 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=77ae8098-0d74-4779-b89f-c1aa3cbf9ba9,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=77ae8098-0d74-4779-b89f-c1aa3cbf9ba9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.172 ipv6= k8sPodName=openstack/barbican-rabbit-init-htnhq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=77ae8098-0d74-4779-b89f-c1aa3cbf9ba9;k8s:batch.kubernetes.io/job-name=barbican-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=77ae8098-0d74-4779-b89f-c1aa3cbf9ba9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-rabbit-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ad963bce5b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=789 identity=24325 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=77ae8098-0d74-4779-b89f-c1aa3cbf9ba9,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=77ae8098-0d74-4779-b89f-c1aa3cbf9ba9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.172 ipv6= k8sPodName=openstack/barbican-rabbit-init-htnhq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ad963bce5b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=789 identity=24325 ipv4=10.0.0.172 ipv6= k8sPodName=openstack/barbican-rabbit-init-htnhq subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ad963bce5b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=789 identity=24325 ipv4=10.0.0.172 ipv6= k8sPodName=openstack/barbican-rabbit-init-htnhq subsys=endpoint level=info msg="Successful endpoint creation" containerID=ad963bce5b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=789 identity=24325 ipv4=10.0.0.172 ipv6= k8sPodName=openstack/barbican-rabbit-init-htnhq subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=ad963bce5b endpointID=789 k8sNamespace=openstack k8sPodName=barbican-rabbit-init-htnhq subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=77ae8098-0d74-4779-b89f-c1aa3cbf9ba9 k8s:batch.kubernetes.io/job-name=barbican-rabbit-init k8s:component=rabbit-init k8s:controller-uid=77ae8098-0d74-4779-b89f-c1aa3cbf9ba9 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-rabbit-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=ad963bce5b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=789 identity=24325 ipv4=10.0.0.172 ipv6= k8sPodName=openstack/barbican-rabbit-init-htnhq subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.27 20d73d26-9115-479e-882b-22a4d3649cb3 default }" containerID=93144654ba02d786260a2770b1a6453044febb177aaf30f91d16d74c5d30549c datapathConfiguration="&{false false false false false }" interface=lxc0441764f20ae k8sPodName=openstack/barbican-ks-service-nvq5d labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=93144654ba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=107 ipv4=10.0.0.27 ipv6= k8sPodName=openstack/barbican-ks-service-nvq5d subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=93144654ba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=107 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=4a127591-2021-4317-9403-db968873c9d5,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=4a127591-2021-4317-9403-db968873c9d5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.27 ipv6= k8sPodName=openstack/barbican-ks-service-nvq5d subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=4a127591-2021-4317-9403-db968873c9d5;k8s:batch.kubernetes.io/job-name=barbican-ks-service;k8s:component=ks-service;k8s:controller-uid=4a127591-2021-4317-9403-db968873c9d5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-service;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=93144654ba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=107 identity=47798 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=4a127591-2021-4317-9403-db968873c9d5,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=4a127591-2021-4317-9403-db968873c9d5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.27 ipv6= k8sPodName=openstack/barbican-ks-service-nvq5d oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=93144654ba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=107 identity=47798 ipv4=10.0.0.27 ipv6= k8sPodName=openstack/barbican-ks-service-nvq5d subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=93144654ba datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=107 identity=47798 ipv4=10.0.0.27 ipv6= k8sPodName=openstack/barbican-ks-service-nvq5d subsys=endpoint level=info msg="Successful endpoint creation" containerID=93144654ba datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=107 identity=47798 ipv4=10.0.0.27 ipv6= k8sPodName=openstack/barbican-ks-service-nvq5d subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=93144654ba endpointID=107 k8sNamespace=openstack k8sPodName=barbican-ks-service-nvq5d subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=4a127591-2021-4317-9403-db968873c9d5 k8s:batch.kubernetes.io/job-name=barbican-ks-service k8s:component=ks-service k8s:controller-uid=4a127591-2021-4317-9403-db968873c9d5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-service k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=93144654ba datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=107 identity=47798 ipv4=10.0.0.27 ipv6= k8sPodName=openstack/barbican-ks-service-nvq5d subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.55 00395f29-fb0a-4468-89c2-7ffef94489ef default }" containerID=7eaa93c50fff05aba6c2dac5a9fe7b1b9a607cd3ac6aa75e9d1401100ba235d4 datapathConfiguration="&{false false false false false }" interface=lxcb0e8b982ee6f k8sPodName=openstack/barbican-ks-endpoints-m9vwv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7eaa93c50f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=470 ipv4=10.0.0.55 ipv6= k8sPodName=openstack/barbican-ks-endpoints-m9vwv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7eaa93c50f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=470 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=2faaabe0-d147-426f-878d-3514c2682860,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=2faaabe0-d147-426f-878d-3514c2682860,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.55 ipv6= k8sPodName=openstack/barbican-ks-endpoints-m9vwv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=2faaabe0-d147-426f-878d-3514c2682860;k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=2faaabe0-d147-426f-878d-3514c2682860;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-endpoints;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7eaa93c50f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=470 identity=7267 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=2faaabe0-d147-426f-878d-3514c2682860,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=2faaabe0-d147-426f-878d-3514c2682860,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.55 ipv6= k8sPodName=openstack/barbican-ks-endpoints-m9vwv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7eaa93c50f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=470 identity=7267 ipv4=10.0.0.55 ipv6= k8sPodName=openstack/barbican-ks-endpoints-m9vwv subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=7eaa93c50f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=470 identity=7267 ipv4=10.0.0.55 ipv6= k8sPodName=openstack/barbican-ks-endpoints-m9vwv subsys=endpoint level=info msg="Successful endpoint creation" containerID=7eaa93c50f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=470 identity=7267 ipv4=10.0.0.55 ipv6= k8sPodName=openstack/barbican-ks-endpoints-m9vwv subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=7eaa93c50f endpointID=470 k8sNamespace=openstack k8sPodName=barbican-ks-endpoints-m9vwv subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=2faaabe0-d147-426f-878d-3514c2682860 k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=2faaabe0-d147-426f-878d-3514c2682860 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-endpoints k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=7eaa93c50f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=470 identity=7267 ipv4=10.0.0.55 ipv6= k8sPodName=openstack/barbican-ks-endpoints-m9vwv subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.216 89c4e22f-82d4-48b9-b948-2cd8f0db1dab default }" containerID=6306dfc75a4ab53a5fef57a098e0af80c9155895ee82ce22f7b81df6f0072e52 datapathConfiguration="&{false false false false false }" interface=lxc11eeef57daec k8sPodName=openstack/barbican-ks-user-g6n5c labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6306dfc75a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2499 ipv4=10.0.0.216 ipv6= k8sPodName=openstack/barbican-ks-user-g6n5c subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6306dfc75a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2499 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=8be9f458-33cd-4a85-863c-3af03ec2f2f9,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=8be9f458-33cd-4a85-863c-3af03ec2f2f9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.216 ipv6= k8sPodName=openstack/barbican-ks-user-g6n5c subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=8be9f458-33cd-4a85-863c-3af03ec2f2f9;k8s:batch.kubernetes.io/job-name=barbican-ks-user;k8s:component=ks-user;k8s:controller-uid=8be9f458-33cd-4a85-863c-3af03ec2f2f9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-user;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6306dfc75a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2499 identity=59502 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=8be9f458-33cd-4a85-863c-3af03ec2f2f9,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=8be9f458-33cd-4a85-863c-3af03ec2f2f9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.216 ipv6= k8sPodName=openstack/barbican-ks-user-g6n5c oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6306dfc75a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2499 identity=59502 ipv4=10.0.0.216 ipv6= k8sPodName=openstack/barbican-ks-user-g6n5c subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=6306dfc75a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2499 identity=59502 ipv4=10.0.0.216 ipv6= k8sPodName=openstack/barbican-ks-user-g6n5c subsys=endpoint level=info msg="Successful endpoint creation" containerID=6306dfc75a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2499 identity=59502 ipv4=10.0.0.216 ipv6= k8sPodName=openstack/barbican-ks-user-g6n5c subsys=daemon level=info msg="Delete endpoint request" containerID=6306dfc75a endpointID=2499 k8sNamespace=openstack k8sPodName=barbican-ks-user-g6n5c subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=8be9f458-33cd-4a85-863c-3af03ec2f2f9 k8s:batch.kubernetes.io/job-name=barbican-ks-user k8s:component=ks-user k8s:controller-uid=8be9f458-33cd-4a85-863c-3af03ec2f2f9 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-user k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=6306dfc75a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2499 identity=59502 ipv4=10.0.0.216 ipv6= k8sPodName=openstack/barbican-ks-user-g6n5c subsys=endpoint level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Create endpoint request" addressing="&{10.0.0.137 011e8f20-bc46-4f38-be33-2d59e1b2b42b default }" containerID=c3eb2088f6f3c075758422c2145b94e7ac9c4f954ed511ffee818b3a48116f9c datapathConfiguration="&{false false false false false }" interface=lxc8b62a1c9c076 k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-kfqhp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c3eb2088f6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=996 ipv4=10.0.0.137 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-kfqhp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c3eb2088f6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=996 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.15.9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.137 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-kfqhp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:rook-ceph k8s:io.cilium.k8s.namespace.labels.name:rook-ceph]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-operator;k8s:helm.sh/chart=rook-ceph-v1.15.9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph;k8s:io.cilium.k8s.namespace.labels.name=rook-ceph;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system;k8s:io.kubernetes.pod.namespace=rook-ceph;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=c3eb2088f6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=996 identity=5443 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.15.9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.137 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-kfqhp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c3eb2088f6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=996 identity=5443 ipv4=10.0.0.137 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-kfqhp subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c3eb2088f6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=996 identity=5443 ipv4=10.0.0.137 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-kfqhp subsys=endpoint level=info msg="Successful endpoint creation" containerID=c3eb2088f6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=996 identity=5443 ipv4=10.0.0.137 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-kfqhp subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.126 aad34356-0d6c-4816-b691-c81d81e7d5de default }" containerID=28406e161583de46424c8598e7f57a42772559fb48a50c9f4fc892c0a373b6fe datapathConfiguration="&{false false false false false }" interface=lxc9666292599e4 k8sPodName=openstack/rook-ceph-detect-version-9thgf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=28406e1615 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=395 ipv4=10.0.0.126 ipv6= k8sPodName=openstack/rook-ceph-detect-version-9thgf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=28406e1615 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=395 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=57917533-60c6-4a53-b37b-21b0a412cd7f,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=57917533-60c6-4a53-b37b-21b0a412cd7f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.126 ipv6= k8sPodName=openstack/rook-ceph-detect-version-9thgf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app=rook-ceph-detect-version;k8s:batch.kubernetes.io/controller-uid=57917533-60c6-4a53-b37b-21b0a412cd7f;k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version;k8s:controller-uid=57917533-60c6-4a53-b37b-21b0a412cd7f;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=rook-ceph-detect-version;k8s:rook-version=v1.15.9;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=28406e1615 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=395 identity=64166 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=57917533-60c6-4a53-b37b-21b0a412cd7f,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=57917533-60c6-4a53-b37b-21b0a412cd7f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.126 ipv6= k8sPodName=openstack/rook-ceph-detect-version-9thgf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=28406e1615 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=395 identity=64166 ipv4=10.0.0.126 ipv6= k8sPodName=openstack/rook-ceph-detect-version-9thgf subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=28406e1615 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=395 identity=64166 ipv4=10.0.0.126 ipv6= k8sPodName=openstack/rook-ceph-detect-version-9thgf subsys=endpoint level=info msg="Successful endpoint creation" containerID=28406e1615 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=395 identity=64166 ipv4=10.0.0.126 ipv6= k8sPodName=openstack/rook-ceph-detect-version-9thgf subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=28406e1615 endpointID=395 k8sNamespace=openstack k8sPodName=rook-ceph-detect-version-9thgf subsys=daemon level=info msg="Releasing key" key="[k8s:app=rook-ceph-detect-version k8s:batch.kubernetes.io/controller-uid=57917533-60c6-4a53-b37b-21b0a412cd7f k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version k8s:controller-uid=57917533-60c6-4a53-b37b-21b0a412cd7f k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=rook-ceph-detect-version k8s:rook-version=v1.15.9]" subsys=allocator level=info msg="Removed endpoint" containerID=28406e1615 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=395 identity=64166 ipv4=10.0.0.126 ipv6= k8sPodName=openstack/rook-ceph-detect-version-9thgf subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.249 4b924f64-3659-481e-a2cd-dc8fbd95f1c3 default }" containerID=3fd8ce9c2532e905426e792e4b7fef9f3a1bc5350dd01fc1d5abc0392efe3402 datapathConfiguration="&{false false false false false }" interface=lxc2b3f7b76ab13 k8sPodName=openstack/ceph-object-controller-detect-version-5fwwp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3fd8ce9c25 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3864 ipv4=10.0.0.249 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-5fwwp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3fd8ce9c25 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3864 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=77bcac24-b8e9-451a-83a2-2a01ced2c9a7,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=77bcac24-b8e9-451a-83a2-2a01ced2c9a7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.249 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-5fwwp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=ceph-object-controller-detect-version;k8s:batch.kubernetes.io/controller-uid=77bcac24-b8e9-451a-83a2-2a01ced2c9a7;k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version;k8s:controller-uid=77bcac24-b8e9-451a-83a2-2a01ced2c9a7;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=ceph-object-controller-detect-version;k8s:rook-version=v1.15.9;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=3fd8ce9c25 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3864 identity=7855 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=77bcac24-b8e9-451a-83a2-2a01ced2c9a7,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=77bcac24-b8e9-451a-83a2-2a01ced2c9a7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.249 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-5fwwp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3fd8ce9c25 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3864 identity=7855 ipv4=10.0.0.249 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-5fwwp subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3fd8ce9c25 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3864 identity=7855 ipv4=10.0.0.249 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-5fwwp subsys=endpoint level=info msg="Successful endpoint creation" containerID=3fd8ce9c25 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3864 identity=7855 ipv4=10.0.0.249 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-5fwwp subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=3fd8ce9c25 endpointID=3864 k8sNamespace=openstack k8sPodName=ceph-object-controller-detect-version-5fwwp subsys=daemon level=info msg="Releasing key" key="[k8s:app=ceph-object-controller-detect-version k8s:batch.kubernetes.io/controller-uid=77bcac24-b8e9-451a-83a2-2a01ced2c9a7 k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version k8s:controller-uid=77bcac24-b8e9-451a-83a2-2a01ced2c9a7 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=ceph-object-controller-detect-version k8s:rook-version=v1.15.9]" subsys=allocator level=info msg="Removed endpoint" containerID=3fd8ce9c25 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3864 identity=7855 ipv4=10.0.0.249 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-5fwwp subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.183 ee3e40bc-6549-4ba2-a43b-d64309dfdd42 default }" containerID=1e9231e03ce5c0855bd3140a35d10b238346f9105bee8fa188834be61515e638 datapathConfiguration="&{false false false false false }" interface=lxc246c45e61743 k8sPodName=local-path-storage/helper-pod-create-pvc-bf00b785-6be6-4634-8025-6a8dd6891ba6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1e9231e03c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1886 ipv4=10.0.0.183 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-bf00b785-6be6-4634-8025-6a8dd6891ba6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1e9231e03c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1886 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.183 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-bf00b785-6be6-4634-8025-6a8dd6891ba6 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1e9231e03c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1886 identity=21599 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.183 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-bf00b785-6be6-4634-8025-6a8dd6891ba6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1e9231e03c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1886 identity=21599 ipv4=10.0.0.183 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-bf00b785-6be6-4634-8025-6a8dd6891ba6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1e9231e03c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1886 identity=21599 ipv4=10.0.0.183 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-bf00b785-6be6-4634-8025-6a8dd6891ba6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=1e9231e03c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1886 identity=21599 ipv4=10.0.0.183 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-bf00b785-6be6-4634-8025-6a8dd6891ba6 subsys=daemon level=info msg="Delete endpoint request" containerID=1e9231e03c endpointID=1886 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-bf00b785-6be6-4634-8025-6a8dd6891ba6 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=1e9231e03c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1886 identity=21599 ipv4=10.0.0.183 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-bf00b785-6be6-4634-8025-6a8dd6891ba6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.226 13b907cc-f746-413a-99b4-c14cc47ccfac default }" containerID=91da453a7c533682eac66bc3c2517607d233458477b2b7bca29f9dc7bdd76cd8 datapathConfiguration="&{false false false false false }" interface=lxcbe163065f939 k8sPodName=openstack/rabbitmq-glance-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=91da453a7c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2935 ipv4=10.0.0.226 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=91da453a7c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2935 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.226 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-glance;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=91da453a7c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2935 identity=1494 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.226 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=91da453a7c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2935 identity=1494 ipv4=10.0.0.226 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=91da453a7c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2935 identity=1494 ipv4=10.0.0.226 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=91da453a7c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2935 identity=1494 ipv4=10.0.0.226 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.3 aaab7f8c-4046-4301-95b7-810fd265563e default }" containerID=c0cd4e7d7fd1b57e4b59755e5070b354837cd32ec2be767e25028346e8f8bdd8 datapathConfiguration="&{false false false false false }" interface=lxc740ec305fcd8 k8sPodName=openstack/glance-db-init-srlgg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c0cd4e7d7f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1126 ipv4=10.0.0.3 ipv6= k8sPodName=openstack/glance-db-init-srlgg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c0cd4e7d7f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1126 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=9a9951aa-7333-4b5d-a4b0-58d2ee254501,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=9a9951aa-7333-4b5d-a4b0-58d2ee254501,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.3 ipv6= k8sPodName=openstack/glance-db-init-srlgg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=9a9951aa-7333-4b5d-a4b0-58d2ee254501;k8s:batch.kubernetes.io/job-name=glance-db-init;k8s:component=db-init;k8s:controller-uid=9a9951aa-7333-4b5d-a4b0-58d2ee254501;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-init;k8s:release_group=glance;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=c0cd4e7d7f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1126 identity=64689 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=9a9951aa-7333-4b5d-a4b0-58d2ee254501,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=9a9951aa-7333-4b5d-a4b0-58d2ee254501,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.3 ipv6= k8sPodName=openstack/glance-db-init-srlgg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c0cd4e7d7f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1126 identity=64689 ipv4=10.0.0.3 ipv6= k8sPodName=openstack/glance-db-init-srlgg subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c0cd4e7d7f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1126 identity=64689 ipv4=10.0.0.3 ipv6= k8sPodName=openstack/glance-db-init-srlgg subsys=endpoint level=info msg="Successful endpoint creation" containerID=c0cd4e7d7f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1126 identity=64689 ipv4=10.0.0.3 ipv6= k8sPodName=openstack/glance-db-init-srlgg subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.20 b53cef39-389e-4123-aa80-8ea29ce86d4b default }" containerID=87fb321c636ce34277998e420144f4b34646fca491c6a21ffa422a0602a60be5 datapathConfiguration="&{false false false false false }" interface=lxc431d2b2af609 k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-42sk2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=87fb321c63 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2959 ipv4=10.0.0.20 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-42sk2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=87fb321c63 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2959 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.20 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-42sk2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-rgw;k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io;k8s:app.kubernetes.io/created-by=rook-ceph-operator;k8s:app.kubernetes.io/instance=ceph;k8s:app.kubernetes.io/managed-by=rook-ceph-operator;k8s:app.kubernetes.io/name=ceph-rgw;k8s:app.kubernetes.io/part-of=ceph;k8s:ceph_daemon_id=ceph;k8s:ceph_daemon_type=rgw;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw;k8s:io.kubernetes.pod.namespace=openstack;k8s:rgw=ceph;k8s:rook.io/operator-namespace=rook-ceph;k8s:rook_cluster=openstack;k8s:rook_object_store=ceph;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=87fb321c63 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2959 identity=45645 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.20 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-42sk2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=87fb321c63 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2959 identity=45645 ipv4=10.0.0.20 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-42sk2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.153 869ffda6-e635-4f0a-8103-1ddbad4e9c3a default }" containerID=c36ed641c6d33b4f7b0288573dfa6f22bbfab8d37f7bdf78832931b34d02e902 datapathConfiguration="&{false false false false false }" interface=lxc0ff966defd32 k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-lsx9w labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c36ed641c6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=633 ipv4=10.0.0.153 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-lsx9w subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c36ed641c6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=633 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.153 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-lsx9w subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-crashcollector;k8s:ceph-version=18.2.7-0;k8s:ceph_daemon_id=crash;k8s:crashcollector=crash;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default;k8s:io.kubernetes.pod.namespace=openstack;k8s:node_name=instance;k8s:rook_cluster=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c36ed641c6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=633 identity=11862 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.153 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-lsx9w oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c36ed641c6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=633 identity=11862 ipv4=10.0.0.153 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-lsx9w subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=87fb321c63 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2959 identity=45645 ipv4=10.0.0.20 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-42sk2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=87fb321c63 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2959 identity=45645 ipv4=10.0.0.20 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-42sk2 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=c36ed641c6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=633 identity=11862 ipv4=10.0.0.153 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-lsx9w subsys=endpoint level=info msg="Successful endpoint creation" containerID=c36ed641c6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=633 identity=11862 ipv4=10.0.0.153 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-lsx9w subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=c0cd4e7d7f endpointID=1126 k8sNamespace=openstack k8sPodName=glance-db-init-srlgg subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=9a9951aa-7333-4b5d-a4b0-58d2ee254501 k8s:batch.kubernetes.io/job-name=glance-db-init k8s:component=db-init k8s:controller-uid=9a9951aa-7333-4b5d-a4b0-58d2ee254501 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=c0cd4e7d7f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1126 identity=64689 ipv4=10.0.0.3 ipv6= k8sPodName=openstack/glance-db-init-srlgg subsys=endpoint level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.187 eff86e1d-c648-458a-a1f7-b5792f7578e1 default }" containerID=b752a33d13b21ad0429ba7003056df9bdda168d0ab362f0ece7132e4b230becf datapathConfiguration="&{false false false false false }" interface=lxc1705c2b2de5d k8sPodName=openstack/glance-db-sync-wmts8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b752a33d13 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=441 ipv4=10.0.0.187 ipv6= k8sPodName=openstack/glance-db-sync-wmts8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b752a33d13 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=441 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=e0855ef2-b762-47b3-8dad-8ea29fca1815,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=e0855ef2-b762-47b3-8dad-8ea29fca1815,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.187 ipv6= k8sPodName=openstack/glance-db-sync-wmts8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=e0855ef2-b762-47b3-8dad-8ea29fca1815;k8s:batch.kubernetes.io/job-name=glance-db-sync;k8s:component=db-sync;k8s:controller-uid=e0855ef2-b762-47b3-8dad-8ea29fca1815;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-sync;k8s:release_group=glance;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=b752a33d13 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=441 identity=23937 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=e0855ef2-b762-47b3-8dad-8ea29fca1815,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=e0855ef2-b762-47b3-8dad-8ea29fca1815,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.187 ipv6= k8sPodName=openstack/glance-db-sync-wmts8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b752a33d13 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=441 identity=23937 ipv4=10.0.0.187 ipv6= k8sPodName=openstack/glance-db-sync-wmts8 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b752a33d13 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=441 identity=23937 ipv4=10.0.0.187 ipv6= k8sPodName=openstack/glance-db-sync-wmts8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=b752a33d13 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=441 identity=23937 ipv4=10.0.0.187 ipv6= k8sPodName=openstack/glance-db-sync-wmts8 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=b752a33d13 endpointID=441 k8sNamespace=openstack k8sPodName=glance-db-sync-wmts8 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=e0855ef2-b762-47b3-8dad-8ea29fca1815 k8s:batch.kubernetes.io/job-name=glance-db-sync k8s:component=db-sync k8s:controller-uid=e0855ef2-b762-47b3-8dad-8ea29fca1815 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-sync k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=b752a33d13 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=441 identity=23937 ipv4=10.0.0.187 ipv6= k8sPodName=openstack/glance-db-sync-wmts8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.175 7da452f9-8eb9-4fcd-ad47-ce0f588aa012 default }" containerID=0b3d2c2cbcedfda7e83827e882701beca38017f0e5d53eeb59e16d74a810150f datapathConfiguration="&{false false false false false }" interface=lxc45e91fee68e9 k8sPodName=openstack/glance-rabbit-init-st6m4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0b3d2c2cbc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=322 ipv4=10.0.0.175 ipv6= k8sPodName=openstack/glance-rabbit-init-st6m4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0b3d2c2cbc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=322 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=0f25ec50-9b2d-44c7-9962-53ea1d70d7b0,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=0f25ec50-9b2d-44c7-9962-53ea1d70d7b0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.175 ipv6= k8sPodName=openstack/glance-rabbit-init-st6m4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=0f25ec50-9b2d-44c7-9962-53ea1d70d7b0;k8s:batch.kubernetes.io/job-name=glance-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=0f25ec50-9b2d-44c7-9962-53ea1d70d7b0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-rabbit-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0b3d2c2cbc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=322 identity=44836 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=0f25ec50-9b2d-44c7-9962-53ea1d70d7b0,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=0f25ec50-9b2d-44c7-9962-53ea1d70d7b0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.175 ipv6= k8sPodName=openstack/glance-rabbit-init-st6m4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0b3d2c2cbc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=322 identity=44836 ipv4=10.0.0.175 ipv6= k8sPodName=openstack/glance-rabbit-init-st6m4 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=0b3d2c2cbc datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=322 identity=44836 ipv4=10.0.0.175 ipv6= k8sPodName=openstack/glance-rabbit-init-st6m4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=0b3d2c2cbc datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=322 identity=44836 ipv4=10.0.0.175 ipv6= k8sPodName=openstack/glance-rabbit-init-st6m4 subsys=daemon level=info msg="Delete endpoint request" containerID=0b3d2c2cbc endpointID=322 k8sNamespace=openstack k8sPodName=glance-rabbit-init-st6m4 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=0f25ec50-9b2d-44c7-9962-53ea1d70d7b0 k8s:batch.kubernetes.io/job-name=glance-rabbit-init k8s:component=rabbit-init k8s:controller-uid=0f25ec50-9b2d-44c7-9962-53ea1d70d7b0 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-rabbit-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=0b3d2c2cbc datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=322 identity=44836 ipv4=10.0.0.175 ipv6= k8sPodName=openstack/glance-rabbit-init-st6m4 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.13 eb60e8e4-8c44-4452-8b4e-b69fc20f6162 default }" containerID=684eac5edc0c20177d603e412d3de1f37e5a1f21950dd6d5f69ce98715e4875e datapathConfiguration="&{false false false false false }" interface=lxcd2ac9867a92d k8sPodName=openstack/glance-ks-service-q7cmv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=684eac5edc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=934 ipv4=10.0.0.13 ipv6= k8sPodName=openstack/glance-ks-service-q7cmv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=684eac5edc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=934 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=79292fcc-4e8f-4c45-b706-a7a6e96c618e,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=79292fcc-4e8f-4c45-b706-a7a6e96c618e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.13 ipv6= k8sPodName=openstack/glance-ks-service-q7cmv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=684eac5edc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=934 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.13 ipv6= k8sPodName=openstack/glance-ks-service-q7cmv line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=79292fcc-4e8f-4c45-b706-a7a6e96c618e;k8s:batch.kubernetes.io/job-name=glance-ks-service;k8s:component=ks-service;k8s:controller-uid=79292fcc-4e8f-4c45-b706-a7a6e96c618e;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-service;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=684eac5edc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=934 identity=48451 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=79292fcc-4e8f-4c45-b706-a7a6e96c618e,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=79292fcc-4e8f-4c45-b706-a7a6e96c618e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.13 ipv6= k8sPodName=openstack/glance-ks-service-q7cmv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=684eac5edc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=934 identity=48451 ipv4=10.0.0.13 ipv6= k8sPodName=openstack/glance-ks-service-q7cmv subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=684eac5edc datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=934 identity=48451 ipv4=10.0.0.13 ipv6= k8sPodName=openstack/glance-ks-service-q7cmv subsys=endpoint level=info msg="Successful endpoint creation" containerID=684eac5edc datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=934 identity=48451 ipv4=10.0.0.13 ipv6= k8sPodName=openstack/glance-ks-service-q7cmv subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=684eac5edc endpointID=934 k8sNamespace=openstack k8sPodName=glance-ks-service-q7cmv subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=79292fcc-4e8f-4c45-b706-a7a6e96c618e k8s:batch.kubernetes.io/job-name=glance-ks-service k8s:component=ks-service k8s:controller-uid=79292fcc-4e8f-4c45-b706-a7a6e96c618e k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-service k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=684eac5edc datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=934 identity=48451 ipv4=10.0.0.13 ipv6= k8sPodName=openstack/glance-ks-service-q7cmv subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.141 7e4dadd3-d5ec-420d-8a47-de8c1de88c0c default }" containerID=7f82400eda10a2309927fc0bb4bf0cd2a634110f618265f263609e05b7786a0b datapathConfiguration="&{false false false false false }" interface=lxc5ae338348e24 k8sPodName=openstack/glance-ks-endpoints-8h96t labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7f82400eda datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3614 ipv4=10.0.0.141 ipv6= k8sPodName=openstack/glance-ks-endpoints-8h96t subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7f82400eda datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3614 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=0d2d4e8b-10fd-4c92-8356-b7f028909b59,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=0d2d4e8b-10fd-4c92-8356-b7f028909b59,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.141 ipv6= k8sPodName=openstack/glance-ks-endpoints-8h96t subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=7f82400eda datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3614 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.141 ipv6= k8sPodName=openstack/glance-ks-endpoints-8h96t line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=0d2d4e8b-10fd-4c92-8356-b7f028909b59;k8s:batch.kubernetes.io/job-name=glance-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=0d2d4e8b-10fd-4c92-8356-b7f028909b59;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-endpoints;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7f82400eda datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3614 identity=22610 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=0d2d4e8b-10fd-4c92-8356-b7f028909b59,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=0d2d4e8b-10fd-4c92-8356-b7f028909b59,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.141 ipv6= k8sPodName=openstack/glance-ks-endpoints-8h96t oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7f82400eda datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3614 identity=22610 ipv4=10.0.0.141 ipv6= k8sPodName=openstack/glance-ks-endpoints-8h96t subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7f82400eda datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3614 identity=22610 ipv4=10.0.0.141 ipv6= k8sPodName=openstack/glance-ks-endpoints-8h96t subsys=endpoint level=info msg="Successful endpoint creation" containerID=7f82400eda datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3614 identity=22610 ipv4=10.0.0.141 ipv6= k8sPodName=openstack/glance-ks-endpoints-8h96t subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=7f82400eda endpointID=3614 k8sNamespace=openstack k8sPodName=glance-ks-endpoints-8h96t subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=0d2d4e8b-10fd-4c92-8356-b7f028909b59 k8s:batch.kubernetes.io/job-name=glance-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=0d2d4e8b-10fd-4c92-8356-b7f028909b59 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-endpoints k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=7f82400eda datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3614 identity=22610 ipv4=10.0.0.141 ipv6= k8sPodName=openstack/glance-ks-endpoints-8h96t subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.15 9dfa49a0-522f-40a8-94c0-c85f1a42ebc1 default }" containerID=1110dd846adf96331d9cace36d1ed1e561c7ea2aab9a070c3d0d725522b85c0a datapathConfiguration="&{false false false false false }" interface=lxc2ed79d15f38e k8sPodName=openstack/glance-ks-user-4ksv6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1110dd846a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=651 ipv4=10.0.0.15 ipv6= k8sPodName=openstack/glance-ks-user-4ksv6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1110dd846a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=651 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=012543bc-7585-4d3b-a4ac-769d073c6a79,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=012543bc-7585-4d3b-a4ac-769d073c6a79,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.15 ipv6= k8sPodName=openstack/glance-ks-user-4ksv6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=012543bc-7585-4d3b-a4ac-769d073c6a79;k8s:batch.kubernetes.io/job-name=glance-ks-user;k8s:component=ks-user;k8s:controller-uid=012543bc-7585-4d3b-a4ac-769d073c6a79;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-user;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1110dd846a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=651 identity=37141 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=012543bc-7585-4d3b-a4ac-769d073c6a79,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=012543bc-7585-4d3b-a4ac-769d073c6a79,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.15 ipv6= k8sPodName=openstack/glance-ks-user-4ksv6 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=1110dd846a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=651 identity=37141 ipv4=10.0.0.15 ipv6= k8sPodName=openstack/glance-ks-user-4ksv6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1110dd846a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=651 identity=37141 ipv4=10.0.0.15 ipv6= k8sPodName=openstack/glance-ks-user-4ksv6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=1110dd846a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=651 identity=37141 ipv4=10.0.0.15 ipv6= k8sPodName=openstack/glance-ks-user-4ksv6 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=1110dd846a endpointID=651 k8sNamespace=openstack k8sPodName=glance-ks-user-4ksv6 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=012543bc-7585-4d3b-a4ac-769d073c6a79 k8s:batch.kubernetes.io/job-name=glance-ks-user k8s:component=ks-user k8s:controller-uid=012543bc-7585-4d3b-a4ac-769d073c6a79 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-user k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=1110dd846a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=651 identity=37141 ipv4=10.0.0.15 ipv6= k8sPodName=openstack/glance-ks-user-4ksv6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.24 e283b101-ba9f-4a40-966b-9b188d7404b1 default }" containerID=482ab2f2060af79153416c2b0160a7ef7d3acda33ec09675218fbc3cdf567220 datapathConfiguration="&{false false false false false }" interface=lxc5eff0f1b385c k8sPodName=openstack/glance-metadefs-load-2mkrr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=482ab2f206 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=533 ipv4=10.0.0.24 ipv6= k8sPodName=openstack/glance-metadefs-load-2mkrr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=482ab2f206 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=533 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=002b53b8-da1e-4ffd-9ff3-e1309fe96cc5,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=002b53b8-da1e-4ffd-9ff3-e1309fe96cc5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.24 ipv6= k8sPodName=openstack/glance-metadefs-load-2mkrr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=002b53b8-da1e-4ffd-9ff3-e1309fe96cc5;k8s:batch.kubernetes.io/job-name=glance-metadefs-load;k8s:component=metadefs_load;k8s:controller-uid=002b53b8-da1e-4ffd-9ff3-e1309fe96cc5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-metadefs-load;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=482ab2f206 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=533 identity=20831 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=002b53b8-da1e-4ffd-9ff3-e1309fe96cc5,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=002b53b8-da1e-4ffd-9ff3-e1309fe96cc5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.24 ipv6= k8sPodName=openstack/glance-metadefs-load-2mkrr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=482ab2f206 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=533 identity=20831 ipv4=10.0.0.24 ipv6= k8sPodName=openstack/glance-metadefs-load-2mkrr subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=482ab2f206 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=533 identity=20831 ipv4=10.0.0.24 ipv6= k8sPodName=openstack/glance-metadefs-load-2mkrr subsys=endpoint level=info msg="Successful endpoint creation" containerID=482ab2f206 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=533 identity=20831 ipv4=10.0.0.24 ipv6= k8sPodName=openstack/glance-metadefs-load-2mkrr subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=482ab2f206 endpointID=533 k8sNamespace=openstack k8sPodName=glance-metadefs-load-2mkrr subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=002b53b8-da1e-4ffd-9ff3-e1309fe96cc5 k8s:batch.kubernetes.io/job-name=glance-metadefs-load k8s:component=metadefs_load k8s:controller-uid=002b53b8-da1e-4ffd-9ff3-e1309fe96cc5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-metadefs-load k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=482ab2f206 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=533 identity=20831 ipv4=10.0.0.24 ipv6= k8sPodName=openstack/glance-metadefs-load-2mkrr subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.120 8550a080-2ea8-413c-9196-583f67faa705 default }" containerID=b258a7666ee92191b51785d8ce0778ada08dc788caac18c7a0b4b3ea516dd4af datapathConfiguration="&{false false false false false }" interface=lxc70aae8832c75 k8sPodName=openstack/glance-storage-init-t8bfm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b258a7666e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1474 ipv4=10.0.0.120 ipv6= k8sPodName=openstack/glance-storage-init-t8bfm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b258a7666e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1474 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=70735dbd-d44c-49fa-8636-95475459d7e5,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=70735dbd-d44c-49fa-8636-95475459d7e5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.120 ipv6= k8sPodName=openstack/glance-storage-init-t8bfm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=70735dbd-d44c-49fa-8636-95475459d7e5;k8s:batch.kubernetes.io/job-name=glance-storage-init;k8s:component=storage-init;k8s:controller-uid=70735dbd-d44c-49fa-8636-95475459d7e5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-storage-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b258a7666e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1474 identity=60136 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=70735dbd-d44c-49fa-8636-95475459d7e5,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=70735dbd-d44c-49fa-8636-95475459d7e5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.120 ipv6= k8sPodName=openstack/glance-storage-init-t8bfm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b258a7666e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1474 identity=60136 ipv4=10.0.0.120 ipv6= k8sPodName=openstack/glance-storage-init-t8bfm subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=b258a7666e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1474 identity=60136 ipv4=10.0.0.120 ipv6= k8sPodName=openstack/glance-storage-init-t8bfm subsys=endpoint level=info msg="Successful endpoint creation" containerID=b258a7666e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1474 identity=60136 ipv4=10.0.0.120 ipv6= k8sPodName=openstack/glance-storage-init-t8bfm subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=b258a7666e endpointID=1474 k8sNamespace=openstack k8sPodName=glance-storage-init-t8bfm subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=70735dbd-d44c-49fa-8636-95475459d7e5 k8s:batch.kubernetes.io/job-name=glance-storage-init k8s:component=storage-init k8s:controller-uid=70735dbd-d44c-49fa-8636-95475459d7e5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-storage-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=b258a7666e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1474 identity=60136 ipv4=10.0.0.120 ipv6= k8sPodName=openstack/glance-storage-init-t8bfm subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.200 442dc783-7c74-45a8-8f24-236e1ff6306b default }" containerID=1f49aff0be03e6a7ffa00814f72f2e72e780b82719a77c3fbbbdce4772b5ce52 datapathConfiguration="&{false false false false false }" interface=lxc7d3f04039167 k8sPodName=openstack/glance-api-64b4697d9-tvcck labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1f49aff0be datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=678 ipv4=10.0.0.200 ipv6= k8sPodName=openstack/glance-api-64b4697d9-tvcck subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1f49aff0be datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=678 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.200 ipv6= k8sPodName=openstack/glance-api-64b4697d9-tvcck subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1f49aff0be datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=678 identity=21956 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.200 ipv6= k8sPodName=openstack/glance-api-64b4697d9-tvcck oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1f49aff0be datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=678 identity=21956 ipv4=10.0.0.200 ipv6= k8sPodName=openstack/glance-api-64b4697d9-tvcck subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=1f49aff0be datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=678 identity=21956 ipv4=10.0.0.200 ipv6= k8sPodName=openstack/glance-api-64b4697d9-tvcck subsys=endpoint level=info msg="Successful endpoint creation" containerID=1f49aff0be datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=678 identity=21956 ipv4=10.0.0.200 ipv6= k8sPodName=openstack/glance-api-64b4697d9-tvcck subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.192 b9cb62fc-c797-4a40-adc9-185f5a61e80a default }" containerID=975cca58d10313a6da4c345b619d6ea1ec8c046f62130dedb4f966acd4e409d2 datapathConfiguration="&{false false false false false }" interface=lxc659fef878562 k8sPodName=openstack/staffeln-conductor-89f97b545-mvhp7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=975cca58d1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2014 ipv4=10.0.0.192 ipv6= k8sPodName=openstack/staffeln-conductor-89f97b545-mvhp7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=975cca58d1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2014 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.192 ipv6= k8sPodName=openstack/staffeln-conductor-89f97b545-mvhp7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=conductor;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=975cca58d1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2014 identity=1369 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.192 ipv6= k8sPodName=openstack/staffeln-conductor-89f97b545-mvhp7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=975cca58d1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2014 identity=1369 ipv4=10.0.0.192 ipv6= k8sPodName=openstack/staffeln-conductor-89f97b545-mvhp7 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.193 fb123a3e-901d-4a0d-be9a-7daa2bbcc91d default }" containerID=d4df240d8f3babe988851af833f3cb8b80f6b063796995a7ea7c4c526445a303 datapathConfiguration="&{false false false false false }" interface=lxc753bbb0bacfc k8sPodName=openstack/staffeln-api-847c4f84c4-t2995 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d4df240d8f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1212 ipv4=10.0.0.193 ipv6= k8sPodName=openstack/staffeln-api-847c4f84c4-t2995 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d4df240d8f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1212 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.193 ipv6= k8sPodName=openstack/staffeln-api-847c4f84c4-t2995 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d4df240d8f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1212 identity=56226 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.193 ipv6= k8sPodName=openstack/staffeln-api-847c4f84c4-t2995 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d4df240d8f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1212 identity=56226 ipv4=10.0.0.193 ipv6= k8sPodName=openstack/staffeln-api-847c4f84c4-t2995 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.90 4263811a-cd9a-4ac0-aaa4-b038c2ed51cb default }" containerID=44b110b24da01eecb4ff356d7b6351d5085c366d9044ac367127a61d6a6d461e datapathConfiguration="&{false false false false false }" interface=lxcc052dcbd2723 k8sPodName=openstack/staffeln-db-init-tv7fc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=44b110b24d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1856 ipv4=10.0.0.90 ipv6= k8sPodName=openstack/staffeln-db-init-tv7fc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=44b110b24d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1856 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=f8589c3c-65e3-475b-9919-cb41a7d97b91,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=f8589c3c-65e3-475b-9919-cb41a7d97b91,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.90 ipv6= k8sPodName=openstack/staffeln-db-init-tv7fc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=f8589c3c-65e3-475b-9919-cb41a7d97b91;k8s:batch.kubernetes.io/job-name=staffeln-db-init;k8s:component=db-init;k8s:controller-uid=f8589c3c-65e3-475b-9919-cb41a7d97b91;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-init;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=44b110b24d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1856 identity=17435 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=f8589c3c-65e3-475b-9919-cb41a7d97b91,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=f8589c3c-65e3-475b-9919-cb41a7d97b91,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.90 ipv6= k8sPodName=openstack/staffeln-db-init-tv7fc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=44b110b24d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1856 identity=17435 ipv4=10.0.0.90 ipv6= k8sPodName=openstack/staffeln-db-init-tv7fc subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=975cca58d1 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2014 identity=1369 ipv4=10.0.0.192 ipv6= k8sPodName=openstack/staffeln-conductor-89f97b545-mvhp7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=975cca58d1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2014 identity=1369 ipv4=10.0.0.192 ipv6= k8sPodName=openstack/staffeln-conductor-89f97b545-mvhp7 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=d4df240d8f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1212 identity=56226 ipv4=10.0.0.193 ipv6= k8sPodName=openstack/staffeln-api-847c4f84c4-t2995 subsys=endpoint level=info msg="Successful endpoint creation" containerID=d4df240d8f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1212 identity=56226 ipv4=10.0.0.193 ipv6= k8sPodName=openstack/staffeln-api-847c4f84c4-t2995 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=44b110b24d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1856 identity=17435 ipv4=10.0.0.90 ipv6= k8sPodName=openstack/staffeln-db-init-tv7fc subsys=endpoint level=info msg="Successful endpoint creation" containerID=44b110b24d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1856 identity=17435 ipv4=10.0.0.90 ipv6= k8sPodName=openstack/staffeln-db-init-tv7fc subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=44b110b24d endpointID=1856 k8sNamespace=openstack k8sPodName=staffeln-db-init-tv7fc subsys=daemon level=info msg="Releasing key" key="[k8s:application=staffeln k8s:batch.kubernetes.io/controller-uid=f8589c3c-65e3-475b-9919-cb41a7d97b91 k8s:batch.kubernetes.io/job-name=staffeln-db-init k8s:component=db-init k8s:controller-uid=f8589c3c-65e3-475b-9919-cb41a7d97b91 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=staffeln-db-init k8s:release_group=staffeln]" subsys=allocator level=info msg="Removed endpoint" containerID=44b110b24d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1856 identity=17435 ipv4=10.0.0.90 ipv6= k8sPodName=openstack/staffeln-db-init-tv7fc subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.107 27d40b9f-0902-474f-bece-9de45df1ac44 default }" containerID=523ac8415aa1ba587a36e6339ace0442f26390d7aa63c06d0564525f91a3b5b9 datapathConfiguration="&{false false false false false }" interface=lxc475831db0b89 k8sPodName=openstack/staffeln-db-sync-r94sg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=523ac8415a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2725 ipv4=10.0.0.107 ipv6= k8sPodName=openstack/staffeln-db-sync-r94sg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=523ac8415a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2725 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=893b2429-b1f8-4fd4-b334-b20d91b4f657,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=893b2429-b1f8-4fd4-b334-b20d91b4f657,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.107 ipv6= k8sPodName=openstack/staffeln-db-sync-r94sg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=523ac8415a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2725 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.107 ipv6= k8sPodName=openstack/staffeln-db-sync-r94sg line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=893b2429-b1f8-4fd4-b334-b20d91b4f657;k8s:batch.kubernetes.io/job-name=staffeln-db-sync;k8s:component=db-sync;k8s:controller-uid=893b2429-b1f8-4fd4-b334-b20d91b4f657;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-sync;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=523ac8415a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2725 identity=13650 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=893b2429-b1f8-4fd4-b334-b20d91b4f657,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=893b2429-b1f8-4fd4-b334-b20d91b4f657,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.107 ipv6= k8sPodName=openstack/staffeln-db-sync-r94sg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=523ac8415a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2725 identity=13650 ipv4=10.0.0.107 ipv6= k8sPodName=openstack/staffeln-db-sync-r94sg subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=523ac8415a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2725 identity=13650 ipv4=10.0.0.107 ipv6= k8sPodName=openstack/staffeln-db-sync-r94sg subsys=endpoint level=info msg="Successful endpoint creation" containerID=523ac8415a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2725 identity=13650 ipv4=10.0.0.107 ipv6= k8sPodName=openstack/staffeln-db-sync-r94sg subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager