level=info msg="Memory available for map entries (0.003% of 67421634560B): 168554086B" subsys=config level=info msg="option bpf-ct-global-tcp-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-ct-global-any-max set by dynamic sizing to 295708" subsys=config level=info msg="option bpf-nat-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-neigh-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-sock-rev-map-max set by dynamic sizing to 295708" subsys=config level=info msg=" --agent-health-port='9879'" subsys=daemon level=info msg=" --agent-labels=''" subsys=daemon level=info msg=" --agent-liveness-update-interval='1s'" subsys=daemon level=info msg=" --agent-not-ready-taint-key='node.cilium.io/agent-not-ready'" subsys=daemon level=info msg=" --allocator-list-timeout='3m0s'" subsys=daemon level=info msg=" --allow-icmp-frag-needed='true'" subsys=daemon level=info msg=" --allow-localhost='auto'" subsys=daemon level=info msg=" --annotate-k8s-node='false'" subsys=daemon level=info msg=" --api-rate-limit=''" subsys=daemon level=info msg=" --arping-refresh-period='30s'" subsys=daemon level=info msg=" --auto-create-cilium-node-resource='true'" subsys=daemon level=info msg=" --auto-direct-node-routes='false'" subsys=daemon level=info msg=" --bgp-announce-lb-ip='false'" subsys=daemon level=info msg=" --bgp-announce-pod-cidr='false'" subsys=daemon level=info msg=" --bgp-config-path='/var/lib/cilium/bgp/config.yaml'" subsys=daemon level=info msg=" --bpf-auth-map-max='524288'" subsys=daemon level=info msg=" --bpf-ct-global-any-max='262144'" subsys=daemon level=info msg=" --bpf-ct-global-tcp-max='524288'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-fin='10s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-syn='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp-grace='1m0s'" subsys=daemon level=info msg=" --bpf-filter-priority='1'" subsys=daemon level=info msg=" --bpf-fragments-map-max='8192'" subsys=daemon level=info msg=" --bpf-lb-acceleration='disabled'" subsys=daemon level=info msg=" --bpf-lb-affinity-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-algorithm='random'" subsys=daemon level=info msg=" --bpf-lb-dev-ip-addr-inherit=''" subsys=daemon level=info msg=" --bpf-lb-dsr-dispatch='opt'" subsys=daemon level=info msg=" --bpf-lb-dsr-l4-xlate='frontend'" subsys=daemon level=info msg=" --bpf-lb-external-clusterip='false'" subsys=daemon level=info msg=" --bpf-lb-maglev-hash-seed='JLfvgnHc2kaSUFaI'" subsys=daemon level=info msg=" --bpf-lb-maglev-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-maglev-table-size='16381'" subsys=daemon level=info msg=" --bpf-lb-map-max='65536'" subsys=daemon level=info msg=" --bpf-lb-mode='snat'" subsys=daemon level=info msg=" --bpf-lb-rev-nat-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-rss-ipv4-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-rss-ipv6-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-service-backend-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-service-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-sock='false'" subsys=daemon level=info msg=" --bpf-lb-sock-hostns-only='false'" subsys=daemon level=info msg=" --bpf-lb-source-range-map-max='0'" subsys=daemon level=info msg=" --bpf-map-dynamic-size-ratio='0.0025'" subsys=daemon level=info msg=" --bpf-map-event-buffers=''" subsys=daemon level=info msg=" --bpf-nat-global-max='524288'" subsys=daemon level=info msg=" --bpf-neigh-global-max='524288'" subsys=daemon level=info msg=" --bpf-policy-map-full-reconciliation-interval='15m0s'" subsys=daemon level=info msg=" --bpf-policy-map-max='16384'" subsys=daemon level=info msg=" --bpf-root='/sys/fs/bpf'" subsys=daemon level=info msg=" --bpf-sock-rev-map-max='262144'" subsys=daemon level=info msg=" --bypass-ip-availability-upon-restore='false'" subsys=daemon level=info msg=" --certificates-directory='/var/run/cilium/certs'" subsys=daemon level=info msg=" --cflags=''" subsys=daemon level=info msg=" --cgroup-root='/run/cilium/cgroupv2'" subsys=daemon level=info msg=" --cilium-endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --cluster-health-port='4240'" subsys=daemon level=info msg=" --cluster-id='0'" subsys=daemon level=info msg=" --cluster-name='default'" subsys=daemon level=info msg=" --cluster-pool-ipv4-cidr='10.0.0.0/8'" subsys=daemon level=info msg=" --cluster-pool-ipv4-mask-size='24'" subsys=daemon level=info msg=" --clustermesh-config='/var/lib/cilium/clustermesh/'" subsys=daemon level=info msg=" --clustermesh-ip-identities-sync-timeout='1m0s'" subsys=daemon level=info msg=" --cmdref=''" subsys=daemon level=info msg=" --cni-chaining-mode='none'" subsys=daemon level=info msg=" --cni-chaining-target=''" subsys=daemon level=info msg=" --cni-exclusive='true'" subsys=daemon level=info msg=" --cni-external-routing='false'" subsys=daemon level=info msg=" --cni-log-file='/var/run/cilium/cilium-cni.log'" subsys=daemon level=info msg=" --cnp-node-status-gc-interval='0s'" subsys=daemon level=info msg=" --config=''" subsys=daemon level=info msg=" --config-dir='/tmp/cilium/config-map'" subsys=daemon level=info msg=" --config-sources='config-map:kube-system/cilium-config'" subsys=daemon level=info msg=" --conntrack-gc-interval='0s'" subsys=daemon level=info msg=" --conntrack-gc-max-interval='0s'" subsys=daemon level=info msg=" --crd-wait-timeout='5m0s'" subsys=daemon level=info msg=" --custom-cni-conf='false'" subsys=daemon level=info msg=" --datapath-mode='veth'" subsys=daemon level=info msg=" --debug='false'" subsys=daemon level=info msg=" --debug-verbose=''" subsys=daemon level=info msg=" --derive-masquerade-ip-addr-from-device=''" subsys=daemon level=info msg=" --devices=''" subsys=daemon level=info msg=" --direct-routing-device=''" subsys=daemon level=info msg=" --disable-cnp-status-updates='true'" subsys=daemon level=info msg=" --disable-endpoint-crd='false'" subsys=daemon level=info msg=" --disable-envoy-version-check='false'" subsys=daemon level=info msg=" --disable-iptables-feeder-rules=''" subsys=daemon level=info msg=" --dns-max-ips-per-restored-rule='1000'" subsys=daemon level=info msg=" --dns-policy-unload-on-shutdown='false'" subsys=daemon level=info msg=" --dnsproxy-concurrency-limit='0'" subsys=daemon level=info msg=" --dnsproxy-concurrency-processing-grace-period='0s'" subsys=daemon level=info msg=" --dnsproxy-enable-transparent-mode='true'" subsys=daemon level=info msg=" --dnsproxy-lock-count='128'" subsys=daemon level=info msg=" --dnsproxy-lock-timeout='500ms'" subsys=daemon level=info msg=" --egress-gateway-policy-map-max='16384'" subsys=daemon level=info msg=" --egress-gateway-reconciliation-trigger-interval='1s'" subsys=daemon level=info msg=" --egress-masquerade-interfaces=''" subsys=daemon level=info msg=" --egress-multi-home-ip-rule-compat='false'" subsys=daemon level=info msg=" --enable-auto-protect-node-port-range='true'" subsys=daemon level=info msg=" --enable-bandwidth-manager='false'" subsys=daemon level=info msg=" --enable-bbr='false'" subsys=daemon level=info msg=" --enable-bgp-control-plane='false'" subsys=daemon level=info msg=" --enable-bpf-clock-probe='false'" subsys=daemon level=info msg=" --enable-bpf-masquerade='false'" subsys=daemon level=info msg=" --enable-bpf-tproxy='false'" subsys=daemon level=info msg=" --enable-cilium-api-server-access='*'" subsys=daemon level=info msg=" --enable-cilium-endpoint-slice='false'" subsys=daemon level=info msg=" --enable-cilium-health-api-server-access='*'" subsys=daemon level=info msg=" --enable-custom-calls='false'" subsys=daemon level=info msg=" --enable-endpoint-health-checking='true'" subsys=daemon level=info msg=" --enable-endpoint-routes='false'" subsys=daemon level=info msg=" --enable-envoy-config='false'" subsys=daemon level=info msg=" --enable-external-ips='false'" subsys=daemon level=info msg=" --enable-health-check-nodeport='true'" subsys=daemon level=info msg=" --enable-health-checking='true'" subsys=daemon level=info msg=" --enable-high-scale-ipcache='false'" subsys=daemon level=info msg=" --enable-host-firewall='false'" subsys=daemon level=info msg=" --enable-host-legacy-routing='false'" subsys=daemon level=info msg=" --enable-host-port='false'" subsys=daemon level=info msg=" --enable-hubble='false'" subsys=daemon level=info msg=" --enable-hubble-recorder-api='true'" subsys=daemon level=info msg=" --enable-icmp-rules='true'" subsys=daemon level=info msg=" --enable-identity-mark='true'" subsys=daemon level=info msg=" --enable-ip-masq-agent='false'" subsys=daemon level=info msg=" --enable-ipsec='false'" subsys=daemon level=info msg=" --enable-ipsec-key-watcher='true'" subsys=daemon level=info msg=" --enable-ipv4='true'" subsys=daemon level=info msg=" --enable-ipv4-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv4-egress-gateway='false'" subsys=daemon level=info msg=" --enable-ipv4-fragment-tracking='true'" subsys=daemon level=info msg=" --enable-ipv4-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6='false'" subsys=daemon level=info msg=" --enable-ipv6-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv6-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6-ndp='false'" subsys=daemon level=info msg=" --enable-k8s='true'" subsys=daemon level=info msg=" --enable-k8s-api-discovery='false'" subsys=daemon level=info msg=" --enable-k8s-endpoint-slice='true'" subsys=daemon level=info msg=" --enable-k8s-event-handover='false'" subsys=daemon level=info msg=" --enable-k8s-networkpolicy='true'" subsys=daemon level=info msg=" --enable-k8s-terminating-endpoint='true'" subsys=daemon level=info msg=" --enable-l2-announcements='false'" subsys=daemon level=info msg=" --enable-l2-neigh-discovery='true'" subsys=daemon level=info msg=" --enable-l2-pod-announcements='false'" subsys=daemon level=info msg=" --enable-l7-proxy='true'" subsys=daemon level=info msg=" --enable-local-node-route='true'" subsys=daemon level=info msg=" --enable-local-redirect-policy='false'" subsys=daemon level=info msg=" --enable-mke='false'" subsys=daemon level=info msg=" --enable-monitor='true'" subsys=daemon level=info msg=" --enable-nat46x64-gateway='false'" subsys=daemon level=info msg=" --enable-node-port='false'" subsys=daemon level=info msg=" --enable-pmtu-discovery='false'" subsys=daemon level=info msg=" --enable-policy='default'" subsys=daemon level=info msg=" --enable-recorder='false'" subsys=daemon level=info msg=" --enable-remote-node-identity='true'" subsys=daemon level=info msg=" --enable-runtime-device-detection='false'" subsys=daemon level=info msg=" --enable-sctp='false'" subsys=daemon level=info msg=" --enable-service-topology='false'" subsys=daemon level=info msg=" --enable-session-affinity='false'" subsys=daemon level=info msg=" --enable-srv6='false'" subsys=daemon level=info msg=" --enable-stale-cilium-endpoint-cleanup='true'" subsys=daemon level=info msg=" --enable-svc-source-range-check='true'" subsys=daemon level=info msg=" --enable-tracing='false'" subsys=daemon level=info msg=" --enable-unreachable-routes='false'" subsys=daemon level=info msg=" --enable-vtep='false'" subsys=daemon level=info msg=" --enable-well-known-identities='false'" subsys=daemon level=info msg=" --enable-wireguard='false'" subsys=daemon level=info msg=" --enable-wireguard-userspace-fallback='false'" subsys=daemon level=info msg=" --enable-xdp-prefilter='false'" subsys=daemon level=info msg=" --enable-xt-socket-fallback='true'" subsys=daemon level=info msg=" --encrypt-interface=''" subsys=daemon level=info msg=" --encrypt-node='false'" subsys=daemon level=info msg=" --endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --endpoint-queue-size='25'" subsys=daemon level=info msg=" --endpoint-status=''" subsys=daemon level=info msg=" --envoy-config-timeout='2m0s'" subsys=daemon level=info msg=" --envoy-log=''" subsys=daemon level=info msg=" --exclude-local-address=''" subsys=daemon level=info msg=" --external-envoy-proxy='false'" subsys=daemon level=info msg=" --fixed-identity-mapping=''" subsys=daemon level=info msg=" --fqdn-regex-compile-lru-size='1024'" subsys=daemon level=info msg=" --gops-port='9890'" subsys=daemon level=info msg=" --http-403-msg=''" subsys=daemon level=info msg=" --http-idle-timeout='0'" subsys=daemon level=info msg=" --http-max-grpc-timeout='0'" subsys=daemon level=info msg=" --http-normalize-path='true'" subsys=daemon level=info msg=" --http-request-timeout='3600'" subsys=daemon level=info msg=" --http-retry-count='3'" subsys=daemon level=info msg=" --http-retry-timeout='0'" subsys=daemon level=info msg=" --hubble-disable-tls='false'" subsys=daemon level=info msg=" --hubble-event-buffer-capacity='4095'" subsys=daemon level=info msg=" --hubble-event-queue-size='0'" subsys=daemon level=info msg=" --hubble-export-file-compress='false'" subsys=daemon level=info msg=" --hubble-export-file-max-backups='5'" subsys=daemon level=info msg=" --hubble-export-file-max-size-mb='10'" subsys=daemon level=info msg=" --hubble-export-file-path=''" subsys=daemon level=info msg=" --hubble-listen-address=''" subsys=daemon level=info msg=" --hubble-metrics=''" subsys=daemon level=info msg=" --hubble-metrics-server=''" subsys=daemon level=info msg=" --hubble-monitor-events=''" subsys=daemon level=info msg=" --hubble-prefer-ipv6='false'" subsys=daemon level=info msg=" --hubble-recorder-sink-queue-size='1024'" subsys=daemon level=info msg=" --hubble-recorder-storage-path='/var/run/cilium/pcaps'" subsys=daemon level=info msg=" --hubble-skip-unknown-cgroup-ids='true'" subsys=daemon level=info msg=" --hubble-socket-path='/var/run/cilium/hubble.sock'" subsys=daemon level=info msg=" --hubble-tls-cert-file=''" subsys=daemon level=info msg=" --hubble-tls-client-ca-files=''" subsys=daemon level=info msg=" --hubble-tls-key-file=''" subsys=daemon level=info msg=" --identity-allocation-mode='crd'" subsys=daemon level=info msg=" --identity-change-grace-period='5s'" subsys=daemon level=info msg=" --identity-gc-interval='15m0s'" subsys=daemon level=info msg=" --identity-heartbeat-timeout='30m0s'" subsys=daemon level=info msg=" --identity-restore-grace-period='10m0s'" subsys=daemon level=info msg=" --install-egress-gateway-routes='false'" subsys=daemon level=info msg=" --install-iptables-rules='true'" subsys=daemon level=info msg=" --install-no-conntrack-iptables-rules='false'" subsys=daemon level=info msg=" --ip-allocation-timeout='2m0s'" subsys=daemon level=info msg=" --ip-masq-agent-config-path='/etc/config/ip-masq-agent'" subsys=daemon level=info msg=" --ipam='cluster-pool'" subsys=daemon level=info msg=" --ipam-cilium-node-update-rate='15s'" subsys=daemon level=info msg=" --ipam-multi-pool-pre-allocation='default=8'" subsys=daemon level=info msg=" --ipsec-key-file=''" subsys=daemon level=info msg=" --ipsec-key-rotation-duration='5m0s'" subsys=daemon level=info msg=" --iptables-lock-timeout='5s'" subsys=daemon level=info msg=" --iptables-random-fully='false'" subsys=daemon level=info msg=" --ipv4-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv4-node='auto'" subsys=daemon level=info msg=" --ipv4-pod-subnets=''" subsys=daemon level=info msg=" --ipv4-range='auto'" subsys=daemon level=info msg=" --ipv4-service-loopback-address='169.254.42.1'" subsys=daemon level=info msg=" --ipv4-service-range='auto'" subsys=daemon level=info msg=" --ipv6-cluster-alloc-cidr='f00d::/64'" subsys=daemon level=info msg=" --ipv6-mcast-device=''" subsys=daemon level=info msg=" --ipv6-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv6-node='auto'" subsys=daemon level=info msg=" --ipv6-pod-subnets=''" subsys=daemon level=info msg=" --ipv6-range='auto'" subsys=daemon level=info msg=" --ipv6-service-range='auto'" subsys=daemon level=info msg=" --join-cluster='false'" subsys=daemon level=info msg=" --k8s-api-server=''" subsys=daemon level=info msg=" --k8s-client-burst='10'" subsys=daemon level=info msg=" --k8s-client-qps='5'" subsys=daemon level=info msg=" --k8s-heartbeat-timeout='30s'" subsys=daemon level=info msg=" --k8s-kubeconfig-path=''" subsys=daemon level=info msg=" --k8s-namespace='kube-system'" subsys=daemon level=info msg=" --k8s-require-ipv4-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-require-ipv6-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-service-cache-size='128'" subsys=daemon level=info msg=" --k8s-service-proxy-name=''" subsys=daemon level=info msg=" --k8s-sync-timeout='3m0s'" subsys=daemon level=info msg=" --k8s-watcher-endpoint-selector='metadata.name!=kube-scheduler,metadata.name!=kube-controller-manager,metadata.name!=etcd-operator,metadata.name!=gcp-controller-manager'" subsys=daemon level=info msg=" --keep-config='false'" subsys=daemon level=info msg=" --kube-proxy-replacement='disabled'" subsys=daemon level=info msg=" --kube-proxy-replacement-healthz-bind-address=''" subsys=daemon level=info msg=" --kvstore=''" subsys=daemon level=info msg=" --kvstore-connectivity-timeout='2m0s'" subsys=daemon level=info msg=" --kvstore-lease-ttl='15m0s'" subsys=daemon level=info msg=" --kvstore-max-consecutive-quorum-errors='2'" subsys=daemon level=info msg=" --kvstore-opt=''" subsys=daemon level=info msg=" --kvstore-periodic-sync='5m0s'" subsys=daemon level=info msg=" --l2-announcements-lease-duration='15s'" subsys=daemon level=info msg=" --l2-announcements-renew-deadline='5s'" subsys=daemon level=info msg=" --l2-announcements-retry-period='2s'" subsys=daemon level=info msg=" --l2-pod-announcements-interface=''" subsys=daemon level=info msg=" --label-prefix-file=''" subsys=daemon level=info msg=" --labels=''" subsys=daemon level=info msg=" --lib-dir='/var/lib/cilium'" subsys=daemon level=info msg=" --local-max-addr-scope='252'" subsys=daemon level=info msg=" --local-router-ipv4=''" subsys=daemon level=info msg=" --local-router-ipv6=''" subsys=daemon level=info msg=" --log-driver=''" subsys=daemon level=info msg=" --log-opt=''" subsys=daemon level=info msg=" --log-system-load='false'" subsys=daemon level=info msg=" --max-controller-interval='0'" subsys=daemon level=info msg=" --mesh-auth-enabled='true'" subsys=daemon level=info msg=" --mesh-auth-gc-interval='5m0s'" subsys=daemon level=info msg=" --mesh-auth-mutual-listener-port='0'" subsys=daemon level=info msg=" --mesh-auth-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-rotated-identities-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-signal-backoff-duration='1s'" subsys=daemon level=info msg=" --mesh-auth-spiffe-trust-domain='spiffe.cilium'" subsys=daemon level=info msg=" --mesh-auth-spire-admin-socket=''" subsys=daemon level=info msg=" --metrics=''" subsys=daemon level=info msg=" --mke-cgroup-mount=''" subsys=daemon level=info msg=" --monitor-aggregation='medium'" subsys=daemon level=info msg=" --monitor-aggregation-flags='all'" subsys=daemon level=info msg=" --monitor-aggregation-interval='5s'" subsys=daemon level=info msg=" --monitor-queue-size='0'" subsys=daemon level=info msg=" --mtu='0'" subsys=daemon level=info msg=" --node-encryption-opt-out-labels='node-role.kubernetes.io/control-plane'" subsys=daemon level=info msg=" --node-port-acceleration='disabled'" subsys=daemon level=info msg=" --node-port-algorithm='random'" subsys=daemon level=info msg=" --node-port-bind-protection='true'" subsys=daemon level=info msg=" --node-port-mode='snat'" subsys=daemon level=info msg=" --node-port-range='30000,32767'" subsys=daemon level=info msg=" --nodes-gc-interval='5m0s'" subsys=daemon level=info msg=" --operator-api-serve-addr='127.0.0.1:9234'" subsys=daemon level=info msg=" --policy-audit-mode='false'" subsys=daemon level=info msg=" --policy-queue-size='100'" subsys=daemon level=info msg=" --policy-trigger-interval='1s'" subsys=daemon level=info msg=" --pprof='false'" subsys=daemon level=info msg=" --pprof-address='localhost'" subsys=daemon level=info msg=" --pprof-port='6060'" subsys=daemon level=info msg=" --preallocate-bpf-maps='false'" subsys=daemon level=info msg=" --prepend-iptables-chains='true'" subsys=daemon level=info msg=" --procfs='/host/proc'" subsys=daemon level=info msg=" --prometheus-serve-addr=':9962'" subsys=daemon level=info msg=" --proxy-connect-timeout='2'" subsys=daemon level=info msg=" --proxy-gid='1337'" subsys=daemon level=info msg=" --proxy-idle-timeout-seconds='60'" subsys=daemon level=info msg=" --proxy-max-connection-duration-seconds='0'" subsys=daemon level=info msg=" --proxy-max-requests-per-connection='0'" subsys=daemon level=info msg=" --proxy-prometheus-port='9964'" subsys=daemon level=info msg=" --read-cni-conf=''" subsys=daemon level=info msg=" --remove-cilium-node-taints='true'" subsys=daemon level=info msg=" --restore='true'" subsys=daemon level=info msg=" --route-metric='0'" subsys=daemon level=info msg=" --routing-mode='tunnel'" subsys=daemon level=info msg=" --set-cilium-is-up-condition='true'" subsys=daemon level=info msg=" --set-cilium-node-taints='true'" subsys=daemon level=info msg=" --sidecar-istio-proxy-image='cilium/istio_proxy'" subsys=daemon level=info msg=" --single-cluster-route='false'" subsys=daemon level=info msg=" --skip-cnp-status-startup-clean='false'" subsys=daemon level=info msg=" --socket-path='/var/run/cilium/cilium.sock'" subsys=daemon level=info msg=" --srv6-encap-mode='reduced'" subsys=daemon level=info msg=" --state-dir='/var/run/cilium'" subsys=daemon level=info msg=" --synchronize-k8s-nodes='true'" subsys=daemon level=info msg=" --tofqdns-dns-reject-response-code='refused'" subsys=daemon level=info msg=" --tofqdns-enable-dns-compression='true'" subsys=daemon level=info msg=" --tofqdns-endpoint-max-ip-per-hostname='50'" subsys=daemon level=info msg=" --tofqdns-idle-connection-grace-period='0s'" subsys=daemon level=info msg=" --tofqdns-max-deferred-connection-deletes='10000'" subsys=daemon level=info msg=" --tofqdns-min-ttl='0'" subsys=daemon level=info msg=" --tofqdns-pre-cache=''" subsys=daemon level=info msg=" --tofqdns-proxy-port='0'" subsys=daemon level=info msg=" --tofqdns-proxy-response-max-delay='100ms'" subsys=daemon level=info msg=" --trace-payloadlen='128'" subsys=daemon level=info msg=" --trace-sock='true'" subsys=daemon level=info msg=" --tunnel=''" subsys=daemon level=info msg=" --tunnel-port='6082'" subsys=daemon level=info msg=" --tunnel-protocol='geneve'" subsys=daemon level=info msg=" --unmanaged-pod-watcher-interval='15'" subsys=daemon level=info msg=" --use-cilium-internal-ip-for-ipsec='false'" subsys=daemon level=info msg=" --version='false'" subsys=daemon level=info msg=" --vlan-bpf-bypass=''" subsys=daemon level=info msg=" --vtep-cidr=''" subsys=daemon level=info msg=" --vtep-endpoint=''" subsys=daemon level=info msg=" --vtep-mac=''" subsys=daemon level=info msg=" --vtep-mask=''" subsys=daemon level=info msg=" --wireguard-encapsulate='false'" subsys=daemon level=info msg=" --write-cni-conf-when-ready='/host/etc/cni/net.d/05-cilium.conflist'" subsys=daemon level=info msg=" _ _ _" subsys=daemon level=info msg=" ___|_| |_|_ _ _____" subsys=daemon level=info msg="| _| | | | | | |" subsys=daemon level=info msg="|___|_|_|_|___|_|_|_|" subsys=daemon level=info msg="Cilium 1.14.8 cf6e022e 2024-03-13T12:23:35-04:00 go version go1.21.8 linux/amd64" subsys=daemon level=info msg="clang (10.0.0) and kernel (5.15.0) versions: OK!" subsys=linux-datapath level=info msg="linking environment: OK!" subsys=linux-datapath level=info msg="Kernel config file not found: if the agent fails to start, check the system requirements at https://docs.cilium.io/en/stable/operations/system_requirements" subsys=probes level=info msg="Detected mounted BPF filesystem at /sys/fs/bpf" subsys=bpf level=info msg="Mounted cgroupv2 filesystem at /run/cilium/cgroupv2" subsys=cgroups level=info msg="Parsing base label prefixes from default label list" subsys=labels-filter level=info msg="Parsing additional label prefixes from user inputs: []" subsys=labels-filter level=info msg="Final label prefixes to be used for identity evaluation:" subsys=labels-filter level=info msg=" - reserved:.*" subsys=labels-filter level=info msg=" - :io\\.kubernetes\\.pod\\.namespace" subsys=labels-filter level=info msg=" - :io\\.cilium\\.k8s\\.namespace\\.labels" subsys=labels-filter level=info msg=" - :app\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:io\\.kubernetes" subsys=labels-filter level=info msg=" - !:kubernetes\\.io" subsys=labels-filter level=info msg=" - !:.*beta\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:k8s\\.io" subsys=labels-filter level=info msg=" - !:pod-template-generation" subsys=labels-filter level=info msg=" - !:pod-template-hash" subsys=labels-filter level=info msg=" - !:controller-revision-hash" subsys=labels-filter level=info msg=" - !:annotation.*" subsys=labels-filter level=info msg=" - !:etcd_node" subsys=labels-filter level=info msg=Invoked duration=1.006679ms function="pprof.glob..func1 (cell.go:50)" subsys=hive level=info msg=Invoked duration="74.882µs" function="gops.registerGopsHooks (cell.go:38)" subsys=hive level=info msg=Invoked duration=1.10321ms function="metrics.NewRegistry (registry.go:65)" subsys=hive level=info msg=Invoked duration="12.33µs" function="metrics.glob..func1 (cell.go:12)" subsys=hive level=info msg="Spire Delegate API Client is disabled as no socket path is configured" subsys=spire-delegate level=info msg="Mutual authentication handler is disabled as no port is configured" subsys=auth level=info msg=Invoked duration=99.436069ms function="cmd.glob..func4 (daemon_main.go:1607)" subsys=hive level=info msg=Invoked duration="23.551µs" function="gc.registerSignalHandler (cell.go:47)" subsys=hive level=info msg=Invoked duration="30.411µs" function="utime.initUtimeSync (cell.go:29)" subsys=hive level=info msg=Invoked duration="98.512µs" function="agentliveness.newAgentLivenessUpdater (agent_liveness.go:43)" subsys=hive level=info msg=Invoked duration="97.803µs" function="l2responder.NewL2ResponderReconciler (l2responder.go:63)" subsys=hive level=info msg=Invoked duration="116.394µs" function="garp.newGARPProcessor (processor.go:27)" subsys=hive level=info msg=Starting subsys=hive level=info msg="Started gops server" address="127.0.0.1:9890" subsys=gops level=info msg="Start hook executed" duration="666.628µs" function="gops.registerGopsHooks.func1 (cell.go:43)" subsys=hive level=info msg="Start hook executed" duration="2.85µs" function="metrics.NewRegistry.func1 (registry.go:86)" subsys=hive level=info msg="Establishing connection to apiserver" host="https://10.96.0.1:443" subsys=k8s-client level=info msg="Serving prometheus metrics on :9962" subsys=metrics level=info msg="Connected to apiserver" subsys=k8s-client level=info msg="Start hook executed" duration=13.858956ms function="client.(*compositeClientset).onStart" subsys=hive level=info msg="Start hook executed" duration=9.315679ms function="authmap.newAuthMap.func1 (cell.go:27)" subsys=hive level=info msg="Start hook executed" duration="37.871µs" function="configmap.newMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="45.512µs" function="signalmap.newMap.func1 (cell.go:44)" subsys=hive level=info msg="Start hook executed" duration="262.818µs" function="nodemap.newNodeMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="92.983µs" function="eventsmap.newEventsMap.func1 (cell.go:35)" subsys=hive level=info msg="Start hook executed" duration="77.633µs" function="*cni.cniConfigManager.Start" subsys=hive level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Wrote CNI configuration file to /host/etc/cni/net.d/05-cilium.conflist" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Start hook executed" duration=47.464122ms function="datapath.newDatapath.func1 (cells.go:113)" subsys=hive level=info msg="Restored 0 node IDs from the BPF map" subsys=linux-datapath level=info msg="Start hook executed" duration="162.044µs" function="datapath.newDatapath.func2 (cells.go:126)" subsys=hive level=info msg="Start hook executed" duration="11.04µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Node].Start" subsys=hive level=info msg="Start hook executed" duration="3.501µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNode].Start" subsys=hive level=info msg="Using autogenerated IPv4 allocation range" subsys=node v4Prefix=10.233.0.0/16 level=info msg="no local ciliumnode found, will not restore cilium internal ips from k8s" subsys=daemon level=info msg="Start hook executed" duration=103.834072ms function="node.NewLocalNodeStore.func1 (local_node_store.go:76)" subsys=hive level=info msg="Start hook executed" duration="9.26µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration=200.673069ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration="10.95µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Using discoveryv1.EndpointSlice" subsys=k8s level=info msg="Start hook executed" duration=100.263643ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Start hook executed" duration="52.242µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Pod].Start" subsys=hive level=info msg="Start hook executed" duration="2.25µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Namespace].Start" subsys=hive level=info msg="Start hook executed" duration="4.83µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="1.69µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumClusterwideNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="2.19µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumCIDRGroup].Start" subsys=hive level=info msg="Start hook executed" duration="25.321µs" function="endpointmanager.newDefaultEndpointManager.func1 (cell.go:203)" subsys=hive level=info msg="Start hook executed" duration="21.11µs" function="cmd.newPolicyTrifecta.func1 (policy.go:135)" subsys=hive level=info msg="Start hook executed" duration="43.601µs" function="*manager.manager.Start" subsys=hive level=info msg="Serving cilium node monitor v1.2 API at unix:///var/run/cilium/monitor1_2.sock" subsys=monitor-agent level=info msg="Start hook executed" duration="393.741µs" function="agent.newMonitorAgent.func1 (cell.go:61)" subsys=hive level=info msg="Start hook executed" duration="2.94µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumL2AnnouncementPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="9.61µs" function="*job.group.Start" subsys=hive level=info msg="Start hook executed" duration="246.017µs" function="proxy.newProxy.func1 (cell.go:55)" subsys=hive level=info msg="Envoy: Starting xDS gRPC server listening on /var/run/cilium/envoy/sockets/xds.sock" subsys=envoy-manager level=info msg="Start hook executed" duration="789.182µs" function="signal.provideSignalManager.func1 (cell.go:25)" subsys=hive level=info msg="Datapath signal listener running" subsys=signal level=info msg="Start hook executed" duration=1.861402ms function="auth.registerAuthManager.func1 (cell.go:109)" subsys=hive level=info msg="Start hook executed" duration="7.501µs" function="auth.registerGCJobs.func1 (cell.go:158)" subsys=hive level=info msg="Start hook executed" duration="28.441µs" function="*job.group.Start" subsys=hive level=warning msg="Deprecated value for --kube-proxy-replacement: disabled (use either \"true\", or \"false\")" subsys=daemon level=info msg="Auto-disabling \"enable-node-port\", \"enable-external-ips\", \"bpf-lb-sock\", \"enable-host-port\" features and falling back to \"enable-host-legacy-routing\"" subsys=daemon level=info msg="Inheriting MTU from external network interface" device=ens3 ipAddr=199.204.45.233 mtu=1500 subsys=mtu level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_ipcache, recreating and re-pinning map cilium_ipcache" file-path=/sys/fs/bpf/tc/globals/cilium_ipcache name=cilium_ipcache subsys=bpf level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_tunnel_map, recreating and re-pinning map cilium_tunnel_map" file-path=/sys/fs/bpf/tc/globals/cilium_tunnel_map name=cilium_tunnel_map subsys=bpf level=info msg="Restored services from maps" failedServices=0 restoredServices=0 subsys=service level=info msg="Restored backends from maps" failedBackends=0 restoredBackends=0 skippedBackends=0 subsys=service level=info msg="Reading old endpoints..." subsys=daemon level=info msg="No old endpoints found." subsys=daemon level=info msg="Waiting until all Cilium CRDs are available" subsys=k8s level=info msg="All Cilium CRDs have been found and are available" subsys=k8s level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=info msg="Successfully created CiliumNode resource" subsys=nodediscovery level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=warning msg="Waiting for k8s node information" error="required IPv4 PodCIDR not available" subsys=k8s level=warning msg="Unable to create CiliumNode resource, will retry" error="ciliumnodes.cilium.io \"instance\" already exists" subsys=nodediscovery level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=info msg="Received own node information from API server" ipAddr.ipv4=199.204.45.233 ipAddr.ipv6="" k8sNodeIP=199.204.45.233 labels="map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:]" nodeName=instance subsys=k8s v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="k8s mode: Allowing localhost to reach local endpoints" subsys=daemon level=info msg="Detected devices" devices="[]" subsys=linux-datapath level=info msg="Enabling k8s event listener" subsys=k8s-watcher level=info msg="Removing stale endpoint interfaces" subsys=daemon level=info msg="Skipping kvstore configuration" subsys=daemon level=info msg="Waiting until local node addressing before starting watchers depending on it" subsys=k8s-watcher level=info msg="Initializing node addressing" subsys=daemon level=info msg="Initializing cluster-pool IPAM" subsys=ipam v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="Restoring endpoints..." subsys=daemon level=info msg="Endpoints restored" failed=0 restored=0 subsys=daemon level=info msg="Addressing information:" subsys=daemon level=info msg=" Cluster-Name: default" subsys=daemon level=info msg=" Cluster-ID: 0" subsys=daemon level=info msg=" Local node-name: instance" subsys=daemon level=info msg=" Node-IPv6: " subsys=daemon level=info msg=" External-Node IPv4: 199.204.45.233" subsys=daemon level=info msg=" Internal-Node IPv4: 10.0.0.174" subsys=daemon level=info msg=" IPv4 allocation prefix: 10.0.0.0/24" subsys=daemon level=info msg=" Loopback IPv4: 169.254.42.1" subsys=daemon level=info msg=" Local IPv4 addresses:" subsys=daemon level=info msg=" - 199.204.45.233" subsys=daemon level=info msg=" - 172.17.0.100" subsys=daemon level=info msg=" - 10.96.240.200" subsys=daemon level=info msg="Node updated" clusterName=default nodeName=instance subsys=nodemanager level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Adding local node to cluster" node="{instance default [{InternalIP 199.204.45.233} {CiliumInternalIP 10.0.0.174}] 10.0.0.0/24 [] [] 10.0.0.78 0 local 0 map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:] map[] 1 }" subsys=nodediscovery level=info msg="Waiting until all pre-existing resources have been received" subsys=k8s-watcher level=info msg="Initializing identity allocator" subsys=identity-cache level=info msg="Allocating identities between range" cluster-id=0 max=65535 min=256 subsys=identity-cache level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.core.bpf_jit_enable sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.all.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.fib_multipath_use_neigh sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.unprivileged_bpf_disabled sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.timer_migration sysParamValue=0 level=info msg="Setting up BPF datapath" bpfClockSource=ktime bpfInsnSet="" subsys=datapath-loader level=info msg="Iptables rules installed" subsys=iptables level=info msg="Adding new proxy port rules for cilium-dns-egress:37801" id=cilium-dns-egress subsys=proxy level=info msg="Iptables proxy rules installed" subsys=iptables level=info msg="Start hook executed" duration=2.474176097s function="cmd.newDaemonPromise.func1 (daemon_main.go:1663)" subsys=hive level=info msg="Starting IP identity watcher" subsys=ipcache level=info msg="Start hook executed" duration="41.471µs" function="utime.initUtimeSync.func1 (cell.go:33)" subsys=hive level=info msg="Start hook executed" duration="21.941µs" function="*job.group.Start" subsys=hive level=info msg="Initializing daemon" subsys=daemon level=info msg="Validating configured node address ranges" subsys=daemon level=info msg="Start hook executed" duration="50.912µs" function="l2respondermap.newMap.func1 (l2_responder_map4.go:44)" subsys=hive level=info msg="Start hook executed" duration="16.791µs" function="*job.group.Start" subsys=hive level=info msg="Starting connection tracking garbage collector" subsys=daemon level=info msg="Initial scan of connection tracking completed" subsys=ct-gc level=info msg="Regenerating restored endpoints" numRestored=0 subsys=daemon level=info msg="Creating host endpoint" subsys=daemon level=info msg="Finished regenerating restored endpoints" regenerated=0 subsys=daemon total=0 level=info msg="Deleted orphan backends" orphanBackends=0 subsys=service level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=494 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=494 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=494 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Launching Cilium health daemon" subsys=daemon level=info msg="Launching Cilium health endpoint" subsys=daemon level=info msg="Started healthz status API server" address="127.0.0.1:9879" subsys=daemon level=info msg="Processing queued endpoint deletion requests from /var/run/cilium/deleteQueue" subsys=daemon level=info msg="processing 0 queued deletion requests" subsys=daemon level=info msg="Initializing Cilium API" subsys=daemon level=info msg="Daemon initialization completed" bootstrapTime=3.544543462s subsys=daemon level=info msg="Hubble server is disabled" subsys=hubble level=info msg="Serving cilium API at unix:///var/run/cilium/cilium.sock" subsys=daemon level=info msg="Compiled new BPF template" BPFCompilationTime=302.775563ms file-path=/var/run/cilium/state/templates/ce43093c955c9855aa636d6a23810af162ddb4523e0604ec28f8a1fec7e0d2d9/bpf_host.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=494 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.68 2409b2ac-4e56-486e-82fb-354f379b3e6b default }" containerID=7626df0d8307bcc97a4257b34d1467f43571dace32ed6580b533ca100b4c36f5 datapathConfiguration="&{false false false false false }" interface=lxc3f830122232b k8sPodName=kube-system/coredns-7c96b6546b-tzbtd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7626df0d83 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=219 ipv4=10.0.0.68 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-tzbtd subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.150 4c1c0089-a7c9-457c-a456-108da061b238 default }" containerID=d11e755fca0cbbfaca8340ff2fd5808afb4928b1c0a7f8b7f9a0176e8266affe datapathConfiguration="&{false false false false false }" interface=lxcceb70bb53d72 k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-t7rdg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d11e755fca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1217 ipv4=10.0.0.150 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-t7rdg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7626df0d83 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=219 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.68 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-tzbtd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:kube-system]" subsys=crd-allocator level=info msg="Resolving identity labels (blocking)" containerID=d11e755fca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1217 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=2096b85e-ebba-458a-b5e3-cc9581bc18ee,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=2096b85e-ebba-458a-b5e3-cc9581bc18ee,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.150 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-t7rdg subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=d11e755fca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1217 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.150 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-t7rdg line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=coredns;k8s:io.kubernetes.pod.namespace=kube-system;k8s:k8s-app=kube-dns;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7626df0d83 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=219 identity=16191 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.68 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-tzbtd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7626df0d83 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=219 identity=16191 ipv4=10.0.0.68 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-tzbtd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=certgen;k8s:batch.kubernetes.io/controller-uid=2096b85e-ebba-458a-b5e3-cc9581bc18ee;k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen;k8s:controller-uid=2096b85e-ebba-458a-b5e3-cc9581bc18ee;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;k8s:job-name=envoy-gateway-gateway-helm-certgen;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d11e755fca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1217 identity=55862 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=2096b85e-ebba-458a-b5e3-cc9581bc18ee,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=2096b85e-ebba-458a-b5e3-cc9581bc18ee,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.150 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-t7rdg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d11e755fca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1217 identity=55862 ipv4=10.0.0.150 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-t7rdg subsys=endpoint level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=668 ipv4=10.0.0.78 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=668 identityLabels="reserved:health" ipv4=10.0.0.78 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=668 identity=4 identityLabels="reserved:health" ipv4=10.0.0.78 ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Compiled new BPF template" BPFCompilationTime=1.056229992s file-path=/var/run/cilium/state/templates/96af220df22fae6cfe4b390d9b345561a4306ecbad0e7281730f7a8cf79dc556/bpf_lxc.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=668 identity=4 ipv4=10.0.0.78 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d11e755fca datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1217 identity=55862 ipv4=10.0.0.150 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-t7rdg subsys=endpoint level=info msg="Successful endpoint creation" containerID=d11e755fca datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1217 identity=55862 ipv4=10.0.0.150 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-t7rdg subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=7626df0d83 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=219 identity=16191 ipv4=10.0.0.68 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-tzbtd subsys=endpoint level=info msg="Successful endpoint creation" containerID=7626df0d83 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=219 identity=16191 ipv4=10.0.0.68 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-tzbtd subsys=daemon level=info msg="Serving cilium health API at unix:///var/run/cilium/health.sock" subsys=health-server level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=d11e755fca endpointID=1217 k8sNamespace=envoy-gateway-system k8sPodName=envoy-gateway-gateway-helm-certgen-t7rdg subsys=daemon level=info msg="Releasing key" key="[k8s:app=certgen k8s:batch.kubernetes.io/controller-uid=2096b85e-ebba-458a-b5e3-cc9581bc18ee k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen k8s:controller-uid=2096b85e-ebba-458a-b5e3-cc9581bc18ee k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen k8s:io.kubernetes.pod.namespace=envoy-gateway-system k8s:job-name=envoy-gateway-gateway-helm-certgen]" subsys=allocator level=info msg="Removed endpoint" containerID=d11e755fca datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1217 identity=55862 ipv4=10.0.0.150 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-t7rdg subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.253 5e8c0f55-d4a0-4025-8bb3-3895c4beafe1 default }" containerID=319c657798fc372db4115fb7228c387e79b2c2673620be6f4793b23cba863ace datapathConfiguration="&{false false false false false }" interface=lxc3f681cef06f1 k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-d6d5p labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=319c657798 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=763 ipv4=10.0.0.253 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-d6d5p subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=319c657798 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=763 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.253 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-d6d5p subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=319c657798 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=763 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.253 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-d6d5p line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=envoy-gateway;k8s:app.kubernetes.io/name=gateway-helm;k8s:control-plane=envoy-gateway;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=319c657798 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=763 identity=14600 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.253 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-d6d5p oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=319c657798 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=763 identity=14600 ipv4=10.0.0.253 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-d6d5p subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=319c657798 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=763 identity=14600 ipv4=10.0.0.253 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-d6d5p subsys=endpoint level=info msg="Successful endpoint creation" containerID=319c657798 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=763 identity=14600 ipv4=10.0.0.253 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-d6d5p subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=494 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_00494 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_00494 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_00494 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_00494:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=494 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.161 75d7d375-77e1-4b05-a9f7-2b89eea22ebb default }" containerID=27075130c059414b3b048d890f16212bcc7899ae2f0b64636d940344234d305b datapathConfiguration="&{false false false false false }" interface=lxc3bb9ae9b8d28 k8sPodName=kube-system/coredns-67659f764b-6b94n labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=27075130c0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1264 ipv4=10.0.0.161 ipv6= k8sPodName=kube-system/coredns-67659f764b-6b94n subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=27075130c0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1264 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.161 ipv6= k8sPodName=kube-system/coredns-67659f764b-6b94n subsys=endpoint level=info msg="Identity of endpoint changed" containerID=27075130c0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1264 identity=16191 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.161 ipv6= k8sPodName=kube-system/coredns-67659f764b-6b94n oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=27075130c0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1264 identity=16191 ipv4=10.0.0.161 ipv6= k8sPodName=kube-system/coredns-67659f764b-6b94n subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.172 55e99050-8d54-49d5-8902-c4d5b8d1a23d default }" containerID=747f7d7bdcd40907076e11b3239a3ee86a0d1793d134c4a35a0a9bf5b0d1b048 datapathConfiguration="&{false false false false false }" interface=lxc6ecf75232407 k8sPodName=kube-system/coredns-67659f764b-wrlhv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=747f7d7bdc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=878 ipv4=10.0.0.172 ipv6= k8sPodName=kube-system/coredns-67659f764b-wrlhv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=747f7d7bdc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=878 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.172 ipv6= k8sPodName=kube-system/coredns-67659f764b-wrlhv subsys=endpoint level=info msg="Identity of endpoint changed" containerID=747f7d7bdc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=878 identity=16191 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.172 ipv6= k8sPodName=kube-system/coredns-67659f764b-wrlhv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=747f7d7bdc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=878 identity=16191 ipv4=10.0.0.172 ipv6= k8sPodName=kube-system/coredns-67659f764b-wrlhv subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=27075130c0 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1264 identity=16191 ipv4=10.0.0.161 ipv6= k8sPodName=kube-system/coredns-67659f764b-6b94n subsys=endpoint level=info msg="Successful endpoint creation" containerID=27075130c0 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1264 identity=16191 ipv4=10.0.0.161 ipv6= k8sPodName=kube-system/coredns-67659f764b-6b94n subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=747f7d7bdc datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=878 identity=16191 ipv4=10.0.0.172 ipv6= k8sPodName=kube-system/coredns-67659f764b-wrlhv subsys=endpoint level=info msg="Successful endpoint creation" containerID=747f7d7bdc datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=878 identity=16191 ipv4=10.0.0.172 ipv6= k8sPodName=kube-system/coredns-67659f764b-wrlhv subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.145 9d085f55-543a-4147-99d6-a55313d4d763 default }" containerID=2953ca7e827bce880ba0b662bd0b8683b647fa6c0afee5d274273fc01c6bd1b0 datapathConfiguration="&{false false false false false }" interface=lxc8b2cf1e15460 k8sPodName=local-path-storage/local-path-provisioner-679c578f5-lthmr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2953ca7e82 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2604 ipv4=10.0.0.145 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-lthmr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2953ca7e82 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2604 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.145 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-lthmr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=2953ca7e82 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2604 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.145 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-lthmr line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=local-path-provisioner;k8s:app.kubernetes.io/name=local-path-provisioner;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2953ca7e82 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2604 identity=47278 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.145 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-lthmr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2953ca7e82 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2604 identity=47278 ipv4=10.0.0.145 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-lthmr subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2953ca7e82 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2604 identity=47278 ipv4=10.0.0.145 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-lthmr subsys=endpoint level=info msg="Successful endpoint creation" containerID=2953ca7e82 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2604 identity=47278 ipv4=10.0.0.145 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-lthmr subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=7626df0d83 endpointID=219 k8sNamespace=kube-system k8sPodName=coredns-7c96b6546b-tzbtd subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=coredns k8s:io.kubernetes.pod.namespace=kube-system k8s:k8s-app=kube-dns]" subsys=allocator level=info msg="Removed endpoint" containerID=7626df0d83 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=219 identity=16191 ipv4=10.0.0.68 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-tzbtd subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.89 34f7f42f-13f5-46ec-8873-3a05313d1bfe default }" containerID=ea6a3dbd350d280637fd62c970d0e3a93fe19e0c9ae31eb6a05b3165a657cbbd datapathConfiguration="&{false false false false false }" interface=lxc25525bb23c93 k8sPodName=cert-manager/cert-manager-webhook-548949fc64-cg7kd labels="[]" subsys=daemon sync-build=true level=info msg="Create endpoint request" addressing="&{10.0.0.136 93c980a0-e6ca-45be-94ed-b2b217ed8dc5 default }" containerID=47b5c74687f26ef48bdac322526cdaef60881f2edda90a3c4ce59d3a6a07ebb4 datapathConfiguration="&{false false false false false }" interface=lxc49bb698958db k8sPodName=cert-manager/cert-manager-75c4c745bc-bjrhp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=47b5c74687 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=256 ipv4=10.0.0.136 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-bjrhp subsys=endpoint level=info msg="New endpoint" containerID=ea6a3dbd35 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2799 ipv4=10.0.0.89 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-cg7kd subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.13 bc08036c-9973-4bdf-b04e-a0bad137f1fe default }" containerID=ff11820fa82f28bae7a1e4cc4535611d0e6d61f3b1f2b85441e44cfb4d12010d datapathConfiguration="&{false false false false false }" interface=lxc2113616fd094 k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-6wxrv labels="[]" subsys=daemon sync-build=true level=info msg="Resolving identity labels (blocking)" containerID=47b5c74687 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=256 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.136 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-bjrhp subsys=endpoint level=info msg="New endpoint" containerID=ff11820fa8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1108 ipv4=10.0.0.13 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-6wxrv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Resolving identity labels (blocking)" containerID=ea6a3dbd35 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2799 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.89 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-cg7kd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ff11820fa8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1108 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.13 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-6wxrv subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=47b5c74687 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=256 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.136 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-bjrhp line=611 subsys=endpoint level=info msg="Invalid state transition skipped" containerID=ff11820fa8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1108 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.13 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-6wxrv line=611 subsys=endpoint level=info msg="Invalid state transition skipped" containerID=ea6a3dbd35 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2799 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.89 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-cg7kd line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=cert-manager;k8s:app.kubernetes.io/component=controller;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cert-manager;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Identity of endpoint changed" containerID=47b5c74687 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=256 identity=19600 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.136 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-bjrhp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=47b5c74687 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=256 identity=19600 ipv4=10.0.0.136 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-bjrhp subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=cainjector;k8s:app.kubernetes.io/component=cainjector;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cainjector;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ff11820fa8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1108 identity=14393 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.13 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-6wxrv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ff11820fa8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1108 identity=14393 ipv4=10.0.0.13 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-6wxrv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=webhook;k8s:app.kubernetes.io/component=webhook;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=webhook;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ea6a3dbd35 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2799 identity=43761 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.89 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-cg7kd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ea6a3dbd35 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2799 identity=43761 ipv4=10.0.0.89 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-cg7kd subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=47b5c74687 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=256 identity=19600 ipv4=10.0.0.136 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-bjrhp subsys=endpoint level=info msg="Successful endpoint creation" containerID=47b5c74687 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=256 identity=19600 ipv4=10.0.0.136 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-bjrhp subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=ea6a3dbd35 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2799 identity=43761 ipv4=10.0.0.89 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-cg7kd subsys=endpoint level=info msg="Successful endpoint creation" containerID=ea6a3dbd35 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2799 identity=43761 ipv4=10.0.0.89 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-cg7kd subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=ff11820fa8 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1108 identity=14393 ipv4=10.0.0.13 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-6wxrv subsys=endpoint level=info msg="Successful endpoint creation" containerID=ff11820fa8 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1108 identity=14393 ipv4=10.0.0.13 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-6wxrv subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.194 2d1ebc36-65a8-420f-a952-ed565a5ed645 default }" containerID=f51428c2a64027d0acda932330e0c7abfb74422fd939e8b6df2ed237e7fb09d6 datapathConfiguration="&{false false false false false }" interface=lxcdeb2665b7d27 k8sPodName=cert-manager/cert-manager-startupapicheck-42pk7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f51428c2a6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1688 ipv4=10.0.0.194 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-42pk7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f51428c2a6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1688 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=87600ec7-da5e-4550-ad37-3efcd19a76ef,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=87600ec7-da5e-4550-ad37-3efcd19a76ef,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.194 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-42pk7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=startupapicheck;k8s:app.kubernetes.io/component=startupapicheck;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=startupapicheck;k8s:app.kubernetes.io/version=v1.11.5;k8s:batch.kubernetes.io/controller-uid=87600ec7-da5e-4550-ad37-3efcd19a76ef;k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck;k8s:controller-uid=87600ec7-da5e-4550-ad37-3efcd19a76ef;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck;k8s:io.kubernetes.pod.namespace=cert-manager;k8s:job-name=cert-manager-startupapicheck;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f51428c2a6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1688 identity=15224 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=87600ec7-da5e-4550-ad37-3efcd19a76ef,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=87600ec7-da5e-4550-ad37-3efcd19a76ef,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.194 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-42pk7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f51428c2a6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1688 identity=15224 ipv4=10.0.0.194 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-42pk7 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f51428c2a6 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1688 identity=15224 ipv4=10.0.0.194 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-42pk7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f51428c2a6 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1688 identity=15224 ipv4=10.0.0.194 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-42pk7 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=f51428c2a6 endpointID=1688 k8sNamespace=cert-manager k8sPodName=cert-manager-startupapicheck-42pk7 subsys=daemon level=info msg="Releasing key" key="[k8s:app=startupapicheck k8s:app.kubernetes.io/component=startupapicheck k8s:app.kubernetes.io/instance=cert-manager k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=startupapicheck k8s:app.kubernetes.io/version=v1.11.5 k8s:batch.kubernetes.io/controller-uid=87600ec7-da5e-4550-ad37-3efcd19a76ef k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck k8s:controller-uid=87600ec7-da5e-4550-ad37-3efcd19a76ef k8s:helm.sh/chart=cert-manager-v1.11.5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager k8s:io.cilium.k8s.namespace.labels.name=cert-manager k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck k8s:io.kubernetes.pod.namespace=cert-manager k8s:job-name=cert-manager-startupapicheck]" subsys=allocator level=info msg="Removed endpoint" containerID=f51428c2a6 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1688 identity=15224 ipv4=10.0.0.194 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-42pk7 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.107 9e7fb13b-1486-4b9d-8ffc-bdd092b7f6c7 default }" containerID=dac15c5e80694f6dcf0d5af04064c15c6e24785b9c07557cc35f91a39026f89a datapathConfiguration="&{false false false false false }" interface=lxce27b8be702d2 k8sPodName=ingress-nginx/ingress-nginx-admission-create-7z9fp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=dac15c5e80 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=91 ipv4=10.0.0.107 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-7z9fp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=dac15c5e80 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=91 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=958c222d-442e-4fb8-bc4b-b0c6c8eb3934,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=958c222d-442e-4fb8-bc4b-b0c6c8eb3934,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.107 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-7z9fp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=dac15c5e80 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=91 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.107 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-7z9fp line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=958c222d-442e-4fb8-bc4b-b0c6c8eb3934;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create;k8s:controller-uid=958c222d-442e-4fb8-bc4b-b0c6c8eb3934;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-create;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=dac15c5e80 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=91 identity=3467 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=958c222d-442e-4fb8-bc4b-b0c6c8eb3934,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=958c222d-442e-4fb8-bc4b-b0c6c8eb3934,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.107 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-7z9fp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=dac15c5e80 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=91 identity=3467 ipv4=10.0.0.107 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-7z9fp subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=dac15c5e80 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=91 identity=3467 ipv4=10.0.0.107 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-7z9fp subsys=endpoint level=info msg="Successful endpoint creation" containerID=dac15c5e80 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=91 identity=3467 ipv4=10.0.0.107 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-7z9fp subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=dac15c5e80 endpointID=91 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-create-7z9fp subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=958c222d-442e-4fb8-bc4b-b0c6c8eb3934 k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create k8s:controller-uid=958c222d-442e-4fb8-bc4b-b0c6c8eb3934 k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-create]" subsys=allocator level=info msg="Removed endpoint" containerID=dac15c5e80 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=91 identity=3467 ipv4=10.0.0.107 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-7z9fp subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.183 eddf761a-5e42-4dc3-95a6-2a8e409d54a9 default }" containerID=3258364197d90c6356d7fbba506f4422335501fd1dd7c9d3efc282b71eb9515c datapathConfiguration="&{false false false false false }" interface=lxcdd3ad4ee1ee7 k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-n8qb7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3258364197 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4070 ipv4=10.0.0.183 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-n8qb7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3258364197 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4070 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.183 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-n8qb7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=3258364197 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4070 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.183 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-n8qb7 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=default-backend;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend;k8s:io.kubernetes.pod.namespace=ingress-nginx;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3258364197 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4070 identity=59985 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.183 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-n8qb7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3258364197 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4070 identity=59985 ipv4=10.0.0.183 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-n8qb7 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3258364197 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=4070 identity=59985 ipv4=10.0.0.183 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-n8qb7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=3258364197 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=4070 identity=59985 ipv4=10.0.0.183 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-n8qb7 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.96 271161e7-8bbf-472a-bc2a-9865a420c6b6 default }" containerID=9bd1d4771ab2309560f88f65a3a354ebff178e7ea270b11b933ee7021105debd datapathConfiguration="&{false false false false false }" interface=lxc9348e2af03e5 k8sPodName=ingress-nginx/ingress-nginx-admission-patch-vd62b labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9bd1d4771a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1944 ipv4=10.0.0.96 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-vd62b subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9bd1d4771a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1944 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=1ae12b5a-3d81-4478-899f-9e465d6ff3cd,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=1ae12b5a-3d81-4478-899f-9e465d6ff3cd,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.96 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-vd62b subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=1ae12b5a-3d81-4478-899f-9e465d6ff3cd;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch;k8s:controller-uid=1ae12b5a-3d81-4478-899f-9e465d6ff3cd;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-patch;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9bd1d4771a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1944 identity=4660 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=1ae12b5a-3d81-4478-899f-9e465d6ff3cd,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=1ae12b5a-3d81-4478-899f-9e465d6ff3cd,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.96 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-vd62b oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9bd1d4771a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1944 identity=4660 ipv4=10.0.0.96 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-vd62b subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9bd1d4771a datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1944 identity=4660 ipv4=10.0.0.96 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-vd62b subsys=endpoint level=info msg="Successful endpoint creation" containerID=9bd1d4771a datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1944 identity=4660 ipv4=10.0.0.96 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-vd62b subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=9bd1d4771a endpointID=1944 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-patch-vd62b subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=1ae12b5a-3d81-4478-899f-9e465d6ff3cd k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch k8s:controller-uid=1ae12b5a-3d81-4478-899f-9e465d6ff3cd k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-patch]" subsys=allocator level=info msg="Removed endpoint" containerID=9bd1d4771a datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1944 identity=4660 ipv4=10.0.0.96 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-vd62b subsys=endpoint level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"rabbitmq-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-cluster-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=43fcb806-208b-42d3-9c07-4c07360d2af7] Description:}]" policyAddRequest=9db3a099-6e0c-408e-b7e8-1e7d9a51f043 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=9db3a099-6e0c-408e-b7e8-1e7d9a51f043 policyRevision=2 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-cluster-operator subsys=k8s-watcher level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"messaging-topology-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9443 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-messaging-topology-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=ceea4740-0e9e-42ba-bd22-fb7771b65740] Description:}]" policyAddRequest=35b1bbfe-dae9-43ec-85c3-7114bff95254 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=35b1bbfe-dae9-43ec-85c3-7114bff95254 policyRevision=3 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-messaging-topology-operator subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.94 14ab811a-4f02-4925-83be-c19abe2b80e1 default }" containerID=3c682747d4508d2fd89d2b33dd6a1932bca93f12b36daf9711fbc494578c2f8c datapathConfiguration="&{false false false false false }" interface=lxce57cdb510f9e k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-nlwst labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3c682747d4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=525 ipv4=10.0.0.94 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-nlwst subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3c682747d4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=525 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.9.0,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.94 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-nlwst subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=2.9.0;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=3c682747d4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=525 identity=27692 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.9.0,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.94 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-nlwst oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3c682747d4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=525 identity=27692 ipv4=10.0.0.94 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-nlwst subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3c682747d4 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=525 identity=27692 ipv4=10.0.0.94 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-nlwst subsys=endpoint level=info msg="Successful endpoint creation" containerID=3c682747d4 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=525 identity=27692 ipv4=10.0.0.94 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-nlwst subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.212 b4de50f5-84a7-4e1d-9bd8-ce3e83b7d30c default }" containerID=f39aec47e0c2c28a9932dc11f704e4725b5d9449840b9d0ccc218db57eaffd27 datapathConfiguration="&{false false false false false }" interface=lxc4b271d5bdc6d k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-78kgh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f39aec47e0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=561 ipv4=10.0.0.212 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-78kgh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f39aec47e0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=561 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.14.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.212 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-78kgh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=messaging-topology-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=1.14.1;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f39aec47e0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=561 identity=27021 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.14.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.212 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-78kgh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f39aec47e0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=561 identity=27021 ipv4=10.0.0.212 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-78kgh subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f39aec47e0 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=561 identity=27021 ipv4=10.0.0.212 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-78kgh subsys=endpoint level=info msg="Successful endpoint creation" containerID=f39aec47e0 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=561 identity=27021 ipv4=10.0.0.212 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-78kgh subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.109 56288953-f9d2-449d-b2ed-f61edd32bf7b default }" containerID=8f2ba8e66f8f77e64ac673242a661633a9edabf79aaad1b79359fb5fe75a22f0 datapathConfiguration="&{false false false false false }" interface=lxcc8ee0b5a97ec k8sPodName=openstack/pxc-operator-7cff949c8b-8xqxc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8f2ba8e66f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2862 ipv4=10.0.0.109 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-8xqxc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8f2ba8e66f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2862 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.109 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-8xqxc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=8f2ba8e66f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2862 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.109 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-8xqxc line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=operator;k8s:app.kubernetes.io/instance=pxc-operator;k8s:app.kubernetes.io/name=pxc-operator;k8s:app.kubernetes.io/part-of=pxc-operator;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8f2ba8e66f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2862 identity=37333 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.109 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-8xqxc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8f2ba8e66f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2862 identity=37333 ipv4=10.0.0.109 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-8xqxc subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8f2ba8e66f datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=2862 identity=37333 ipv4=10.0.0.109 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-8xqxc subsys=endpoint level=info msg="Successful endpoint creation" containerID=8f2ba8e66f datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=2862 identity=37333 ipv4=10.0.0.109 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-8xqxc subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.86 4a0abf2f-010c-4e57-a9eb-c6c2ca02dcf7 default }" containerID=9cf7198d3040d0d718f2dd2c88fe49fb3ba192ba458612471a946bd3e35b47a7 datapathConfiguration="&{false false false false false }" interface=lxcb19424f737ca k8sPodName=openstack/percona-xtradb-haproxy-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9cf7198d30 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1797 ipv4=10.0.0.86 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9cf7198d30 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1797 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.86 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=9cf7198d30 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1797 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.86 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=haproxy;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9cf7198d30 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1797 identity=19875 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.86 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9cf7198d30 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1797 identity=19875 ipv4=10.0.0.86 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9cf7198d30 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1797 identity=19875 ipv4=10.0.0.86 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=9cf7198d30 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1797 identity=19875 ipv4=10.0.0.86 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.31 4f2611bb-f487-4462-8ed0-631e07790ec8 default }" containerID=5ded261e989e1468088a1b4a2d6a78578ae09ba2646fd757009df739346e5c96 datapathConfiguration="&{false false false false false }" interface=lxcf9c1df4805c9 k8sPodName=local-path-storage/helper-pod-create-pvc-4b17c416-260f-4b93-844c-f9394c509071 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5ded261e98 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1380 ipv4=10.0.0.31 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4b17c416-260f-4b93-844c-f9394c509071 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5ded261e98 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1380 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.31 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4b17c416-260f-4b93-844c-f9394c509071 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5ded261e98 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1380 identity=4628 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.31 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4b17c416-260f-4b93-844c-f9394c509071 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5ded261e98 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1380 identity=4628 ipv4=10.0.0.31 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4b17c416-260f-4b93-844c-f9394c509071 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5ded261e98 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1380 identity=4628 ipv4=10.0.0.31 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4b17c416-260f-4b93-844c-f9394c509071 subsys=endpoint level=info msg="Successful endpoint creation" containerID=5ded261e98 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1380 identity=4628 ipv4=10.0.0.31 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4b17c416-260f-4b93-844c-f9394c509071 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=5ded261e98 endpointID=1380 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-4b17c416-260f-4b93-844c-f9394c509071 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=5ded261e98 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1380 identity=4628 ipv4=10.0.0.31 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4b17c416-260f-4b93-844c-f9394c509071 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.219 6170a4af-afa9-42a6-add8-23c0fe0c13bf default }" containerID=e883a9ba4bd0cdd6d500b1536cbea704a17389d22be03a693c730cc0c819d97f datapathConfiguration="&{false false false false false }" interface=lxc402b61903be1 k8sPodName=openstack/percona-xtradb-pxc-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e883a9ba4b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1863 ipv4=10.0.0.219 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e883a9ba4b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1863 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.219 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=pxc;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=e883a9ba4b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1863 identity=37189 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.219 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e883a9ba4b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1863 identity=37189 ipv4=10.0.0.219 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e883a9ba4b datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1863 identity=37189 ipv4=10.0.0.219 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=e883a9ba4b datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1863 identity=37189 ipv4=10.0.0.219 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/instance\":\"valkey\",\"k8s:app.kubernetes.io/name\":\"valkey\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:6379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:26379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:} {IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9121 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=valkey k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=379fad2d-7720-4056-9131-179962e497ad] Description:}]" policyAddRequest=ea8539ed-57f0-48fc-a163-2b7224fe07de subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=ea8539ed-57f0-48fc-a163-2b7224fe07de policyRevision=4 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=valkey subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.188 ddb7aad4-9fca-4dbb-b18e-3e91d48b8964 default }" containerID=26ca9d92383aa1de30ee43e3edc6157fca5a678b0b1d3d8e7e9a9ab4c6facaa4 datapathConfiguration="&{false false false false false }" interface=lxc47a95138b482 k8sPodName=local-path-storage/helper-pod-create-pvc-3d2813d4-a74b-48f0-a59e-ad851d2cc238 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=26ca9d9238 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1041 ipv4=10.0.0.188 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3d2813d4-a74b-48f0-a59e-ad851d2cc238 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=26ca9d9238 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1041 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.188 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3d2813d4-a74b-48f0-a59e-ad851d2cc238 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=26ca9d9238 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1041 identity=4628 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.188 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3d2813d4-a74b-48f0-a59e-ad851d2cc238 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=26ca9d9238 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1041 identity=4628 ipv4=10.0.0.188 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3d2813d4-a74b-48f0-a59e-ad851d2cc238 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=26ca9d9238 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1041 identity=4628 ipv4=10.0.0.188 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3d2813d4-a74b-48f0-a59e-ad851d2cc238 subsys=endpoint level=info msg="Successful endpoint creation" containerID=26ca9d9238 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1041 identity=4628 ipv4=10.0.0.188 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3d2813d4-a74b-48f0-a59e-ad851d2cc238 subsys=daemon level=info msg="Delete endpoint request" containerID=26ca9d9238 endpointID=1041 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-3d2813d4-a74b-48f0-a59e-ad851d2cc238 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=26ca9d9238 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1041 identity=4628 ipv4=10.0.0.188 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3d2813d4-a74b-48f0-a59e-ad851d2cc238 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.144 273cc461-41d5-4524-9d03-cbfa894be7e2 default }" containerID=9258f76e29d866e09c02bb79dadf9487c44ee73acab46c5d61b887e50ed60a4a datapathConfiguration="&{false false false false false }" interface=lxce0ade9ac1979 k8sPodName=openstack/valkey-node-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9258f76e29 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3220 ipv4=10.0.0.144 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9258f76e29 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3220 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.144 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=9258f76e29 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3220 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.144 ipv6= k8sPodName=openstack/valkey-node-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=node;k8s:app.kubernetes.io/instance=valkey;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=valkey;k8s:app.kubernetes.io/version=8.0.2;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=valkey-2.4.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=valkey;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=valkey-node-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9258f76e29 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3220 identity=60297 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.144 ipv6= k8sPodName=openstack/valkey-node-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9258f76e29 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3220 identity=60297 ipv4=10.0.0.144 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9258f76e29 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3220 identity=60297 ipv4=10.0.0.144 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=9258f76e29 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3220 identity=60297 ipv4=10.0.0.144 ipv6= k8sPodName=openstack/valkey-node-0 subsys=daemon level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"keycloak\",\"k8s:app.kubernetes.io/instance\":\"keycloak\",\"k8s:app.kubernetes.io/name\":\"keycloak\",\"k8s:io.kubernetes.pod.namespace\":\"auth-system\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:7800 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:8080 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=keycloak k8s:io.cilium.k8s.policy.namespace=auth-system k8s:io.cilium.k8s.policy.uid=0f47156e-b02b-4228-b627-67246134d290] Description:}]" policyAddRequest=411a3d41-4a08-4a62-8e1b-fcea74ce9971 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=keycloak subsys=k8s-watcher level=info msg="Policy imported via API, recalculating..." policyAddRequest=411a3d41-4a08-4a62-8e1b-fcea74ce9971 policyRevision=5 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.2 e40966a0-a497-4f6c-9ad6-b95fe3f02c13 default }" containerID=1e0b7a99f62d3275c5b4b273403f26c170b106bf51465fb608219e1c39f8121d datapathConfiguration="&{false false false false false }" interface=lxc1963ea203c3d k8sPodName=auth-system/keycloak-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1e0b7a99f6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=220 ipv4=10.0.0.2 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1e0b7a99f6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=220 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.2 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:auth-system k8s:io.cilium.k8s.namespace.labels.name:auth-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=keycloak;k8s:app.kubernetes.io/instance=keycloak;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=keycloak;k8s:app.kubernetes.io/version=24.0.5;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=keycloak-21.4.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system;k8s:io.cilium.k8s.namespace.labels.name=auth-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keycloak;k8s:io.kubernetes.pod.namespace=auth-system;k8s:statefulset.kubernetes.io/pod-name=keycloak-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1e0b7a99f6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=220 identity=29191 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.2 ipv6= k8sPodName=auth-system/keycloak-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1e0b7a99f6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=220 identity=29191 ipv4=10.0.0.2 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1e0b7a99f6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=220 identity=29191 ipv4=10.0.0.2 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=1e0b7a99f6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=220 identity=29191 ipv4=10.0.0.2 ipv6= k8sPodName=auth-system/keycloak-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.010178960325726731 newInterval=7m30s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.197 77a25bf0-bb2b-49b5-9ab6-80660fb0e7be default }" containerID=49bd7aa9352d48a5195ccb5bbbeceee4014ed48ab5f5d0107bd2f573d0f6b0ab datapathConfiguration="&{false false false false false }" interface=lxc2ea1be629b47 k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-dm8vs labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=49bd7aa935 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=351 ipv4=10.0.0.197 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-dm8vs subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.213 c3112a03-85be-4e59-83a3-168c7093db09 default }" containerID=e373f57502b1219f92255dca5f9ff781aef9860af61515166be58bf5c41a6f8e datapathConfiguration="&{false false false false false }" interface=lxcea4c3403a310 k8sPodName=monitoring/node-feature-discovery-worker-8x6h5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e373f57502 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1080 ipv4=10.0.0.213 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-8x6h5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=49bd7aa935 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=351 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.197 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-dm8vs subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Resolving identity labels (blocking)" containerID=e373f57502 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1080 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.213 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-8x6h5 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=gc;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=49bd7aa935 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=351 identity=27799 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.197 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-dm8vs oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=49bd7aa935 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=351 identity=27799 ipv4=10.0.0.197 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-dm8vs subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=e373f57502 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1080 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.213 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-8x6h5 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=worker;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e373f57502 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1080 identity=2012 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.213 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-8x6h5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e373f57502 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1080 identity=2012 ipv4=10.0.0.213 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-8x6h5 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.103 62187624-e44d-445d-9b2f-aec2ce2b928c default }" containerID=f6a621c95861c1a2355eca1090662d7e5bc6b7d32d4c4b5ac7b3728119a07ebc datapathConfiguration="&{false false false false false }" interface=lxcc0a630fa23b6 k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-xbw4b labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f6a621c958 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2546 ipv4=10.0.0.103 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-xbw4b subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f6a621c958 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2546 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.103 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-xbw4b subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=master;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f6a621c958 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2546 identity=31054 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.103 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-xbw4b oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f6a621c958 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2546 identity=31054 ipv4=10.0.0.103 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-xbw4b subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=49bd7aa935 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=351 identity=27799 ipv4=10.0.0.197 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-dm8vs subsys=endpoint level=info msg="Successful endpoint creation" containerID=49bd7aa935 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=351 identity=27799 ipv4=10.0.0.197 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-dm8vs subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=e373f57502 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1080 identity=2012 ipv4=10.0.0.213 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-8x6h5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=e373f57502 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1080 identity=2012 ipv4=10.0.0.213 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-8x6h5 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=f6a621c958 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2546 identity=31054 ipv4=10.0.0.103 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-xbw4b subsys=endpoint level=info msg="Successful endpoint creation" containerID=f6a621c958 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2546 identity=31054 ipv4=10.0.0.103 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-xbw4b subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.74 a124c50c-69bd-4104-922c-58de7f48615e default }" containerID=2ce71b96134dafb5be9a8255daf85dd8680cb54a894bfdaaa3fa411b3f9c459d datapathConfiguration="&{false false false false false }" interface=lxc2a0a25e3ba30 k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-smwfh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2ce71b9613 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2417 ipv4=10.0.0.74 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-smwfh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2ce71b9613 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2417 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.74 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-smwfh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:secretgen-controller]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=secretgen-controller;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa;k8s:io.kubernetes.pod.namespace=secretgen-controller;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2ce71b9613 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2417 identity=53917 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.74 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-smwfh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2ce71b9613 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2417 identity=53917 ipv4=10.0.0.74 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-smwfh subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2ce71b9613 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2417 identity=53917 ipv4=10.0.0.74 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-smwfh subsys=endpoint level=info msg="Successful endpoint creation" containerID=2ce71b9613 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2417 identity=53917 ipv4=10.0.0.74 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-smwfh subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=494 identity=1 identityLabels="k8s:feature.node.kubernetes.io/cpu-cpuid.ADX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AESNI=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX2=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CLZERO=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CMPXCHG8=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FMA3=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSROPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.HYPERVISOR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IA32_ARCH_CAP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBPB=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBRS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.LAHF=true,k8s:feature.node.kubernetes.io/cpu-cpuid.MOVBE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.NRIPS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.OSXSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SHA=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SPEC_CTRL_SSBD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SSE4A=true,k8s:feature.node.kubernetes.io/cpu-cpuid.STIBP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVM=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVMNP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSCALL=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSEE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.TOPEXT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.WBNOINVD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.X87=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XGETBV1=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEC=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEOPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVES=true,k8s:feature.node.kubernetes.io/cpu-hardware_multithreading=false,k8s:feature.node.kubernetes.io/cpu-model.family=23,k8s:feature.node.kubernetes.io/cpu-model.id=49,k8s:feature.node.kubernetes.io/cpu-model.vendor_id=AMD,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ=true,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ_IDLE=true,k8s:feature.node.kubernetes.io/kernel-version.full=5.15.0-174-generic,k8s:feature.node.kubernetes.io/kernel-version.major=5,k8s:feature.node.kubernetes.io/kernel-version.minor=15,k8s:feature.node.kubernetes.io/kernel-version.revision=0,k8s:feature.node.kubernetes.io/pci-0300_1af4.present=true,k8s:feature.node.kubernetes.io/system-os_release.ID=ubuntu,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.major=22,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.minor=04,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID=22.04,k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_00494 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_00494 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_00494 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_00494:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=494 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.105 7d5b28a2-3568-428d-80f6-f868252cc57f default }" containerID=1add123b1a7da95909d067cc2d43975355e08153c05da1a518734ae447b1449b datapathConfiguration="&{false false false false false }" interface=lxcc87340dfbff3 k8sPodName=monitoring/kube-prometheus-stack-admission-create-qq7lw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1add123b1a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1183 ipv4=10.0.0.105 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-qq7lw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1add123b1a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1183 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=1b86d373-e5e3-4564-bbbb-b4e98011437c,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=1b86d373-e5e3-4564-bbbb-b4e98011437c,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.105 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-qq7lw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-create;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=1b86d373-e5e3-4564-bbbb-b4e98011437c;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=1b86d373-e5e3-4564-bbbb-b4e98011437c;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-create;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1add123b1a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1183 identity=52096 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=1b86d373-e5e3-4564-bbbb-b4e98011437c,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=1b86d373-e5e3-4564-bbbb-b4e98011437c,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.105 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-qq7lw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1add123b1a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1183 identity=52096 ipv4=10.0.0.105 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-qq7lw subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1add123b1a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1183 identity=52096 ipv4=10.0.0.105 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-qq7lw subsys=endpoint level=info msg="Successful endpoint creation" containerID=1add123b1a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1183 identity=52096 ipv4=10.0.0.105 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-qq7lw subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=1add123b1a endpointID=1183 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-create-qq7lw subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-create k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=1b86d373-e5e3-4564-bbbb-b4e98011437c k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=1b86d373-e5e3-4564-bbbb-b4e98011437c k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-create k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=1add123b1a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1183 identity=52096 ipv4=10.0.0.105 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-qq7lw subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.63 7ded8ec2-bb48-42c6-84cd-f72774b4e5ad default }" containerID=027934d3e39e444107ab4dd597bab8a4b28170804efdbe3d5ac515d031f44453 datapathConfiguration="&{false false false false false }" interface=lxcd5527adf8beb k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-k2wth labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=027934d3e3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3074 ipv4=10.0.0.63 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-k2wth subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.173 10d7591d-b2c0-4e75-8d04-983ac768cb22 default }" containerID=c27a39defa715588a6f6320cabd6e0399a76d5e8b7f1d370f190aa67c1643caa datapathConfiguration="&{false false false false false }" interface=lxc74bab783012e k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-cxqsz labels="[]" subsys=daemon sync-build=true level=info msg="Resolving identity labels (blocking)" containerID=027934d3e3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3074 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.63 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-k2wth subsys=endpoint level=info msg="New endpoint" containerID=c27a39defa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3478 ipv4=10.0.0.173 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-cxqsz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Resolving identity labels (blocking)" containerID=c27a39defa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3478 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.173 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-cxqsz subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=metrics;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-state-metrics;k8s:app.kubernetes.io/part-of=kube-state-metrics;k8s:app.kubernetes.io/version=2.12.0;k8s:helm.sh/chart=kube-state-metrics-5.20.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=027934d3e3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3074 identity=8140 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.63 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-k2wth oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=027934d3e3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3074 identity=8140 ipv4=10.0.0.63 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-k2wth subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=c27a39defa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3478 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.173 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-cxqsz line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-operator;k8s:app.kubernetes.io/component=prometheus-operator;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:chart=kube-prometheus-stack-60.2.0;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c27a39defa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3478 identity=8204 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.173 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-cxqsz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c27a39defa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3478 identity=8204 ipv4=10.0.0.173 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-cxqsz subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.82 851faef1-7f2c-4ca1-aac4-683da58ad847 default }" containerID=2cabebc40c7d8be210d16f58e47f2945bef55b845d6147df6c32f2e1ffcd16e4 datapathConfiguration="&{false false false false false }" interface=lxca122407ac34b k8sPodName=monitoring/kube-prometheus-stack-grafana-8584d58848-84svc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2cabebc40c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1221 ipv4=10.0.0.82 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-8584d58848-84svc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2cabebc40c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1221 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.82 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-8584d58848-84svc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/name=grafana;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2cabebc40c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1221 identity=8768 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.82 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-8584d58848-84svc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2cabebc40c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1221 identity=8768 ipv4=10.0.0.82 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-8584d58848-84svc subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=027934d3e3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3074 identity=8140 ipv4=10.0.0.63 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-k2wth subsys=endpoint level=info msg="Successful endpoint creation" containerID=027934d3e3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3074 identity=8140 ipv4=10.0.0.63 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-k2wth subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=c27a39defa datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3478 identity=8204 ipv4=10.0.0.173 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-cxqsz subsys=endpoint level=info msg="Successful endpoint creation" containerID=c27a39defa datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3478 identity=8204 ipv4=10.0.0.173 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-cxqsz subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=2cabebc40c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1221 identity=8768 ipv4=10.0.0.82 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-8584d58848-84svc subsys=endpoint level=info msg="Successful endpoint creation" containerID=2cabebc40c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1221 identity=8768 ipv4=10.0.0.82 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-8584d58848-84svc subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.239 74a3687b-a688-49b9-bd1c-65149bad4357 default }" containerID=d137d5b5e99dbca002e1e94ababa647b6b674a94509f8d7676b83dcf2919f1de datapathConfiguration="&{false false false false false }" interface=lxcdab110859e38 k8sPodName=monitoring/kube-prometheus-stack-admission-patch-xc2wg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d137d5b5e9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2952 ipv4=10.0.0.239 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-xc2wg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d137d5b5e9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2952 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=cfa72201-b057-49e8-bf1b-4661b6a3c900,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=cfa72201-b057-49e8-bf1b-4661b6a3c900,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.239 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-xc2wg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-patch;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=cfa72201-b057-49e8-bf1b-4661b6a3c900;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=cfa72201-b057-49e8-bf1b-4661b6a3c900;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-patch;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d137d5b5e9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2952 identity=42200 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=cfa72201-b057-49e8-bf1b-4661b6a3c900,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=cfa72201-b057-49e8-bf1b-4661b6a3c900,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.239 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-xc2wg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d137d5b5e9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2952 identity=42200 ipv4=10.0.0.239 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-xc2wg subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d137d5b5e9 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2952 identity=42200 ipv4=10.0.0.239 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-xc2wg subsys=endpoint level=info msg="Successful endpoint creation" containerID=d137d5b5e9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2952 identity=42200 ipv4=10.0.0.239 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-xc2wg subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=d137d5b5e9 endpointID=2952 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-patch-xc2wg subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-patch k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=cfa72201-b057-49e8-bf1b-4661b6a3c900 k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=cfa72201-b057-49e8-bf1b-4661b6a3c900 k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-patch k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=d137d5b5e9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2952 identity=42200 ipv4=10.0.0.239 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-xc2wg subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.35 9cc0ce4d-71ac-4fd6-8c4d-0e3115e8d5c2 default }" containerID=dec2b34963a54425f8ea759ef57a769cfe7622ce3b1552148cbe8bf7982bfeee datapathConfiguration="&{false false false false false }" interface=lxc3dedde855b74 k8sPodName=local-path-storage/helper-pod-create-pvc-f9dc4a07-d3d8-48db-8116-1e6e24c70e2d labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=dec2b34963 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3296 ipv4=10.0.0.35 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f9dc4a07-d3d8-48db-8116-1e6e24c70e2d subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=dec2b34963 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3296 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.35 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f9dc4a07-d3d8-48db-8116-1e6e24c70e2d subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=dec2b34963 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3296 identity=4628 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.35 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f9dc4a07-d3d8-48db-8116-1e6e24c70e2d oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=dec2b34963 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3296 identity=4628 ipv4=10.0.0.35 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f9dc4a07-d3d8-48db-8116-1e6e24c70e2d subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=dec2b34963 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3296 identity=4628 ipv4=10.0.0.35 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f9dc4a07-d3d8-48db-8116-1e6e24c70e2d subsys=endpoint level=info msg="Successful endpoint creation" containerID=dec2b34963 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3296 identity=4628 ipv4=10.0.0.35 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f9dc4a07-d3d8-48db-8116-1e6e24c70e2d subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.122 e97488ef-2187-4b9b-be25-2ac36ddeb1c9 default }" containerID=fde65d349170308780efcb1bb757633d1ac96d63516c1ee07bed2ea0484b4070 datapathConfiguration="&{false false false false false }" interface=lxccdb3074ea2a3 k8sPodName=local-path-storage/helper-pod-create-pvc-f9fd226c-3cfc-40dc-9d8e-180222541595 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fde65d3491 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1394 ipv4=10.0.0.122 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f9fd226c-3cfc-40dc-9d8e-180222541595 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fde65d3491 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1394 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.122 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f9fd226c-3cfc-40dc-9d8e-180222541595 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=fde65d3491 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1394 identity=4628 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.122 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f9fd226c-3cfc-40dc-9d8e-180222541595 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fde65d3491 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1394 identity=4628 ipv4=10.0.0.122 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f9fd226c-3cfc-40dc-9d8e-180222541595 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=fde65d3491 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1394 identity=4628 ipv4=10.0.0.122 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f9fd226c-3cfc-40dc-9d8e-180222541595 subsys=endpoint level=info msg="Successful endpoint creation" containerID=fde65d3491 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1394 identity=4628 ipv4=10.0.0.122 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f9fd226c-3cfc-40dc-9d8e-180222541595 subsys=daemon level=info msg="Delete endpoint request" containerID=fde65d3491 endpointID=1394 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-f9fd226c-3cfc-40dc-9d8e-180222541595 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Delete endpoint request" containerID=dec2b34963 endpointID=3296 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-f9dc4a07-d3d8-48db-8116-1e6e24c70e2d subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=fde65d3491 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1394 identity=4628 ipv4=10.0.0.122 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f9fd226c-3cfc-40dc-9d8e-180222541595 subsys=endpoint level=info msg="Removed endpoint" containerID=dec2b34963 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3296 identity=4628 ipv4=10.0.0.35 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f9dc4a07-d3d8-48db-8116-1e6e24c70e2d subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.6 fc5df136-3e0d-48fa-8622-fb111b8c2bb4 default }" containerID=e1eb05f8dd8df000dbc9b9c537fd1292b40219ef51940ab5ccaa9605804b9d36 datapathConfiguration="&{false false false false false }" interface=lxce6d03011bbc9 k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e1eb05f8dd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1147 ipv4=10.0.0.6 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e1eb05f8dd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1147 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.6 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:alertmanager=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=alertmanager;k8s:app.kubernetes.io/version=0.27.0;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e1eb05f8dd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1147 identity=12131 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.6 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e1eb05f8dd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1147 identity=12131 ipv4=10.0.0.6 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.24 f2184e5a-f7cd-4dc9-90cd-3e5a70aae1fd default }" containerID=163f972dc676b7cb34d1e747dc6614b035bb28849525367fd0453a3773d57bef datapathConfiguration="&{false false false false false }" interface=lxc1240eecd9468 k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=163f972dc6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3910 ipv4=10.0.0.24 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=163f972dc6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3910 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.24 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=prometheus;k8s:app.kubernetes.io/version=2.51.2;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus;k8s:io.kubernetes.pod.namespace=monitoring;k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus;k8s:operator.prometheus.io/shard=0;k8s:prometheus=kube-prometheus-stack-prometheus;k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=163f972dc6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3910 identity=15890 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.24 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=163f972dc6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3910 identity=15890 ipv4=10.0.0.24 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e1eb05f8dd datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1147 identity=12131 ipv4=10.0.0.6 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=e1eb05f8dd datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1147 identity=12131 ipv4=10.0.0.6 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=163f972dc6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3910 identity=15890 ipv4=10.0.0.24 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=163f972dc6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3910 identity=15890 ipv4=10.0.0.24 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.209 5ba3e521-5c4d-4a89-bfa5-2f47ef7a2d34 default }" containerID=10adce493b7519826dad92e87937a45415aa542534fc1b61c35dd1f7f3d1ed94 datapathConfiguration="&{false false false false false }" interface=lxca9054b7e6523 k8sPodName=monitoring/loki-gateway-cf54cb88c-fnwrk labels="[]" subsys=daemon sync-build=true level=info msg="Create endpoint request" addressing="&{10.0.0.217 d8553464-fefa-434a-a126-623c0a95a8ab default }" containerID=2b1327d9a6c53633e6f01650ecf8ee14ddd402d83de6e24cb1fba7f9bdc91e66 datapathConfiguration="&{false false false false false }" interface=lxc001ed67e028a k8sPodName=monitoring/loki-chunks-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=10adce493b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=886 ipv4=10.0.0.209 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-fnwrk subsys=endpoint level=info msg="New endpoint" containerID=2b1327d9a6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3849 ipv4=10.0.0.217 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=10adce493b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=886 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.209 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-fnwrk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Resolving identity labels (blocking)" containerID=2b1327d9a6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3849 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.217 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.251 cb80d4cf-c771-4c88-bc74-6245e6898a6d default }" containerID=d45c8335109f8671c1ab23ddbb17963e0f5056e9fa88fd44b627280b19b73e93 datapathConfiguration="&{false false false false false }" interface=lxc29bede080ab5 k8sPodName=monitoring/loki-results-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d45c833510 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1483 ipv4=10.0.0.251 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d45c833510 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1483 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.251 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=gateway;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=10adce493b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=886 identity=50681 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.209 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-fnwrk oldIdentity="no identity" subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Waiting for endpoint to be generated" containerID=10adce493b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=886 identity=50681 ipv4=10.0.0.209 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-fnwrk subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-chunks-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-chunks-cache;k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2b1327d9a6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3849 identity=13883 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.217 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2b1327d9a6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3849 identity=13883 ipv4=10.0.0.217 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-results-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-results-cache;k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d45c833510 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1483 identity=1377 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.251 ipv6= k8sPodName=monitoring/loki-results-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d45c833510 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1483 identity=1377 ipv4=10.0.0.251 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2b1327d9a6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3849 identity=13883 ipv4=10.0.0.217 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=2b1327d9a6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3849 identity=13883 ipv4=10.0.0.217 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=10adce493b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=886 identity=50681 ipv4=10.0.0.209 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-fnwrk subsys=endpoint level=info msg="Successful endpoint creation" containerID=10adce493b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=886 identity=50681 ipv4=10.0.0.209 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-fnwrk subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=d45c833510 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1483 identity=1377 ipv4=10.0.0.251 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=d45c833510 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1483 identity=1377 ipv4=10.0.0.251 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.7 d21adddd-555e-4c60-9747-693a059b201b default }" containerID=3333438e4db13925ecc1a03eff2f43cd3137cd4c8a05d61cc04b64dc4317e920 datapathConfiguration="&{false false false false false }" interface=lxc3919ee86ec6f k8sPodName=local-path-storage/helper-pod-create-pvc-197739d8-0370-4461-bf84-92e3cf7930a4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3333438e4d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1906 ipv4=10.0.0.7 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-197739d8-0370-4461-bf84-92e3cf7930a4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3333438e4d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1906 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.7 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-197739d8-0370-4461-bf84-92e3cf7930a4 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3333438e4d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1906 identity=4628 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.7 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-197739d8-0370-4461-bf84-92e3cf7930a4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3333438e4d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1906 identity=4628 ipv4=10.0.0.7 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-197739d8-0370-4461-bf84-92e3cf7930a4 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3333438e4d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1906 identity=4628 ipv4=10.0.0.7 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-197739d8-0370-4461-bf84-92e3cf7930a4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=3333438e4d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1906 identity=4628 ipv4=10.0.0.7 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-197739d8-0370-4461-bf84-92e3cf7930a4 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.60 abaf62c5-8995-4bc3-94f3-110aa89a4f37 default }" containerID=549550613ad167275f8cb452e572f87dc031bdba3d02dc411984c0aef414ad7f datapathConfiguration="&{false false false false false }" interface=lxca9ee1924b662 k8sPodName=monitoring/vector-52cpk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=549550613a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=658 ipv4=10.0.0.60 ipv6= k8sPodName=monitoring/vector-52cpk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=549550613a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=658 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.60 ipv6= k8sPodName=monitoring/vector-52cpk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=Agent;k8s:app.kubernetes.io/instance=vector;k8s:app.kubernetes.io/name=vector;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=vector;k8s:io.kubernetes.pod.namespace=monitoring;k8s:vector.dev/exclude=true;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=549550613a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=658 identity=16751 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.60 ipv6= k8sPodName=monitoring/vector-52cpk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=549550613a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=658 identity=16751 ipv4=10.0.0.60 ipv6= k8sPodName=monitoring/vector-52cpk subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=549550613a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=658 identity=16751 ipv4=10.0.0.60 ipv6= k8sPodName=monitoring/vector-52cpk subsys=endpoint level=info msg="Successful endpoint creation" containerID=549550613a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=658 identity=16751 ipv4=10.0.0.60 ipv6= k8sPodName=monitoring/vector-52cpk subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=3333438e4d endpointID=1906 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-197739d8-0370-4461-bf84-92e3cf7930a4 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=3333438e4d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1906 identity=4628 ipv4=10.0.0.7 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-197739d8-0370-4461-bf84-92e3cf7930a4 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.108 b8c0df02-6b8b-4e74-96bb-527a39e3173c default }" containerID=b5cb2e5d1177570b64b52bc50ecf9b98ff23d172dd0a529ebf701a68fedfa562 datapathConfiguration="&{false false false false false }" interface=lxc42aa8ada7fd9 k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-vgrxv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b5cb2e5d11 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=606 ipv4=10.0.0.108 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-vgrxv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b5cb2e5d11 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=606 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.108 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-vgrxv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=prometheus-pushgateway;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=prometheus-pushgateway;k8s:app.kubernetes.io/version=v1.8.0;k8s:helm.sh/chart=prometheus-pushgateway-2.13.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b5cb2e5d11 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=606 identity=2324 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.108 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-vgrxv oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=b5cb2e5d11 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=606 identity=2324 ipv4=10.0.0.108 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-vgrxv subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b5cb2e5d11 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=606 identity=2324 ipv4=10.0.0.108 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-vgrxv subsys=endpoint level=info msg="Successful endpoint creation" containerID=b5cb2e5d11 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=606 identity=2324 ipv4=10.0.0.108 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-vgrxv subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.146 e1242831-f3e9-40a1-994f-e79cd10c2c2a default }" containerID=deb6427e548e10db003b84cf8d7eb2d92c388b51e967fdb02f696c8de13d3550 datapathConfiguration="&{false false false false false }" interface=lxc8af7ba4701a0 k8sPodName=monitoring/loki-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=deb6427e54 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1104 ipv4=10.0.0.146 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=deb6427e54 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1104 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.146 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=single-binary;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:app.kubernetes.io/part-of=memberlist;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=loki-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=deb6427e54 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1104 identity=2105 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.146 ipv6= k8sPodName=monitoring/loki-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=deb6427e54 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1104 identity=2105 ipv4=10.0.0.146 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=deb6427e54 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1104 identity=2105 ipv4=10.0.0.146 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=deb6427e54 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1104 identity=2105 ipv4=10.0.0.146 ipv6= k8sPodName=monitoring/loki-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.68 a185df4c-d718-4580-bc18-c8ca4fa60adf default }" containerID=8a3c93bab8643b3175a2429681110478004c96931f34cb8acf1424146136071b datapathConfiguration="&{false false false false false }" interface=lxcdc8f301ce7d6 k8sPodName=openstack/memcached-memcached-6479589586-qdvdt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8a3c93bab8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2925 ipv4=10.0.0.68 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-qdvdt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8a3c93bab8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2925 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.68 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-qdvdt subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=memcached;k8s:component=server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=memcached;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=8a3c93bab8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2925 identity=49609 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.68 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-qdvdt oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8a3c93bab8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2925 identity=49609 ipv4=10.0.0.68 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-qdvdt subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8a3c93bab8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2925 identity=49609 ipv4=10.0.0.68 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-qdvdt subsys=endpoint level=info msg="Successful endpoint creation" containerID=8a3c93bab8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2925 identity=49609 ipv4=10.0.0.68 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-qdvdt subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.246 9d1f0452-3212-4d66-b733-9f5fe0dc71b5 default }" containerID=87e653f8df95deb84b4c033ce16816ffab9944470bf8624f0f0be138fbc0cb90 datapathConfiguration="&{false false false false false }" interface=lxc4a3ebbee5b39 k8sPodName=local-path-storage/helper-pod-create-pvc-ec0ffc42-bfa7-4971-8406-9ba79b8d8a4b labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=87e653f8df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1509 ipv4=10.0.0.246 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ec0ffc42-bfa7-4971-8406-9ba79b8d8a4b subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=87e653f8df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1509 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.246 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ec0ffc42-bfa7-4971-8406-9ba79b8d8a4b subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=87e653f8df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1509 identity=4628 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.246 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ec0ffc42-bfa7-4971-8406-9ba79b8d8a4b oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=87e653f8df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1509 identity=4628 ipv4=10.0.0.246 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ec0ffc42-bfa7-4971-8406-9ba79b8d8a4b subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=87e653f8df datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1509 identity=4628 ipv4=10.0.0.246 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ec0ffc42-bfa7-4971-8406-9ba79b8d8a4b subsys=endpoint level=info msg="Successful endpoint creation" containerID=87e653f8df datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1509 identity=4628 ipv4=10.0.0.246 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ec0ffc42-bfa7-4971-8406-9ba79b8d8a4b subsys=daemon level=info msg="Delete endpoint request" containerID=87e653f8df endpointID=1509 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-ec0ffc42-bfa7-4971-8406-9ba79b8d8a4b subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=87e653f8df datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1509 identity=4628 ipv4=10.0.0.246 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ec0ffc42-bfa7-4971-8406-9ba79b8d8a4b subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.178 4ac8992d-ed01-4e0b-8993-f587637400b1 default }" containerID=11e64202764dcdf6ca998315dfcdacb826f38be80896520ed9866db895e5e4f6 datapathConfiguration="&{false false false false false }" interface=lxc43f3995297a4 k8sPodName=openstack/rabbitmq-keystone-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=11e6420276 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1287 ipv4=10.0.0.178 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=11e6420276 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1287 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.178 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-keystone;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=11e6420276 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1287 identity=62910 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.178 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=11e6420276 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1287 identity=62910 ipv4=10.0.0.178 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=11e6420276 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1287 identity=62910 ipv4=10.0.0.178 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=11e6420276 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1287 identity=62910 ipv4=10.0.0.178 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.79 9ff943a8-6965-4162-8ffe-739e71416e57 default }" containerID=05d7f3c73ea422b9a4d0dd3ff23061c9eacf53a37177bd59c2711a1303e55537 datapathConfiguration="&{false false false false false }" interface=lxc2de21cc02369 k8sPodName=openstack/keystone-api-6b6497874c-h9gf7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=05d7f3c73e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=786 ipv4=10.0.0.79 ipv6= k8sPodName=openstack/keystone-api-6b6497874c-h9gf7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=05d7f3c73e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=786 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.79 ipv6= k8sPodName=openstack/keystone-api-6b6497874c-h9gf7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=05d7f3c73e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=786 identity=32821 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.79 ipv6= k8sPodName=openstack/keystone-api-6b6497874c-h9gf7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=05d7f3c73e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=786 identity=32821 ipv4=10.0.0.79 ipv6= k8sPodName=openstack/keystone-api-6b6497874c-h9gf7 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.166 bbde3fd6-7752-47ac-b340-63149f512eb8 default }" containerID=d3138904109dc83467d052d5c09067df99f54461e6009712e6ae72b5f8ad0312 datapathConfiguration="&{false false false false false }" interface=lxc7235568ace34 k8sPodName=openstack/keystone-credential-setup-42cmn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d313890410 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=805 ipv4=10.0.0.166 ipv6= k8sPodName=openstack/keystone-credential-setup-42cmn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d313890410 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=805 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=8288cf71-8ea8-4c17-b320-4d8f3b739312,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=8288cf71-8ea8-4c17-b320-4d8f3b739312,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.166 ipv6= k8sPodName=openstack/keystone-credential-setup-42cmn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=8288cf71-8ea8-4c17-b320-4d8f3b739312;k8s:batch.kubernetes.io/job-name=keystone-credential-setup;k8s:component=credential-setup;k8s:controller-uid=8288cf71-8ea8-4c17-b320-4d8f3b739312;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-credential-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d313890410 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=805 identity=11732 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=8288cf71-8ea8-4c17-b320-4d8f3b739312,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=8288cf71-8ea8-4c17-b320-4d8f3b739312,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.166 ipv6= k8sPodName=openstack/keystone-credential-setup-42cmn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d313890410 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=805 identity=11732 ipv4=10.0.0.166 ipv6= k8sPodName=openstack/keystone-credential-setup-42cmn subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=05d7f3c73e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=786 identity=32821 ipv4=10.0.0.79 ipv6= k8sPodName=openstack/keystone-api-6b6497874c-h9gf7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=05d7f3c73e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=786 identity=32821 ipv4=10.0.0.79 ipv6= k8sPodName=openstack/keystone-api-6b6497874c-h9gf7 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=d313890410 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=805 identity=11732 ipv4=10.0.0.166 ipv6= k8sPodName=openstack/keystone-credential-setup-42cmn subsys=endpoint level=info msg="Successful endpoint creation" containerID=d313890410 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=805 identity=11732 ipv4=10.0.0.166 ipv6= k8sPodName=openstack/keystone-credential-setup-42cmn subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=d313890410 endpointID=805 k8sNamespace=openstack k8sPodName=keystone-credential-setup-42cmn subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=8288cf71-8ea8-4c17-b320-4d8f3b739312 k8s:batch.kubernetes.io/job-name=keystone-credential-setup k8s:component=credential-setup k8s:controller-uid=8288cf71-8ea8-4c17-b320-4d8f3b739312 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-credential-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=d313890410 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=805 identity=11732 ipv4=10.0.0.166 ipv6= k8sPodName=openstack/keystone-credential-setup-42cmn subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.225 8cc06c8c-d28c-4fbd-880b-8d2e6666f076 default }" containerID=54f961acda677341ebab0d7cedaf52e0a5a3e3cf307dce0e87b07ec06c53e6fe datapathConfiguration="&{false false false false false }" interface=lxc2283997099e6 k8sPodName=openstack/keystone-db-init-pzhl5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=54f961acda datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1140 ipv4=10.0.0.225 ipv6= k8sPodName=openstack/keystone-db-init-pzhl5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=54f961acda datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1140 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=c15cd9c0-6a74-456f-ab31-84c4106f3ed2,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=c15cd9c0-6a74-456f-ab31-84c4106f3ed2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.225 ipv6= k8sPodName=openstack/keystone-db-init-pzhl5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=c15cd9c0-6a74-456f-ab31-84c4106f3ed2;k8s:batch.kubernetes.io/job-name=keystone-db-init;k8s:component=db-init;k8s:controller-uid=c15cd9c0-6a74-456f-ab31-84c4106f3ed2;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=54f961acda datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1140 identity=56696 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=c15cd9c0-6a74-456f-ab31-84c4106f3ed2,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=c15cd9c0-6a74-456f-ab31-84c4106f3ed2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.225 ipv6= k8sPodName=openstack/keystone-db-init-pzhl5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=54f961acda datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1140 identity=56696 ipv4=10.0.0.225 ipv6= k8sPodName=openstack/keystone-db-init-pzhl5 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=54f961acda datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1140 identity=56696 ipv4=10.0.0.225 ipv6= k8sPodName=openstack/keystone-db-init-pzhl5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=54f961acda datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1140 identity=56696 ipv4=10.0.0.225 ipv6= k8sPodName=openstack/keystone-db-init-pzhl5 subsys=daemon level=info msg="Delete endpoint request" containerID=54f961acda endpointID=1140 k8sNamespace=openstack k8sPodName=keystone-db-init-pzhl5 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=c15cd9c0-6a74-456f-ab31-84c4106f3ed2 k8s:batch.kubernetes.io/job-name=keystone-db-init k8s:component=db-init k8s:controller-uid=c15cd9c0-6a74-456f-ab31-84c4106f3ed2 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=54f961acda datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1140 identity=56696 ipv4=10.0.0.225 ipv6= k8sPodName=openstack/keystone-db-init-pzhl5 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.40 8613dd0c-3791-40b5-8820-1d75a0693202 default }" containerID=44039e3d776dea23f81d101670202151501f9961a8a997911738781814f6626c datapathConfiguration="&{false false false false false }" interface=lxc3a06638670e1 k8sPodName=openstack/keystone-fernet-setup-lzt2j labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=44039e3d77 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1510 ipv4=10.0.0.40 ipv6= k8sPodName=openstack/keystone-fernet-setup-lzt2j subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=44039e3d77 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1510 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=acfca279-5d40-4dd8-b6a0-b5f5df6a8aef,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=acfca279-5d40-4dd8-b6a0-b5f5df6a8aef,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.40 ipv6= k8sPodName=openstack/keystone-fernet-setup-lzt2j subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=44039e3d77 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1510 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.40 ipv6= k8sPodName=openstack/keystone-fernet-setup-lzt2j line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=acfca279-5d40-4dd8-b6a0-b5f5df6a8aef;k8s:batch.kubernetes.io/job-name=keystone-fernet-setup;k8s:component=fernet-setup;k8s:controller-uid=acfca279-5d40-4dd8-b6a0-b5f5df6a8aef;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-fernet-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=44039e3d77 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1510 identity=32928 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=acfca279-5d40-4dd8-b6a0-b5f5df6a8aef,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=acfca279-5d40-4dd8-b6a0-b5f5df6a8aef,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.40 ipv6= k8sPodName=openstack/keystone-fernet-setup-lzt2j oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=44039e3d77 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1510 identity=32928 ipv4=10.0.0.40 ipv6= k8sPodName=openstack/keystone-fernet-setup-lzt2j subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=44039e3d77 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1510 identity=32928 ipv4=10.0.0.40 ipv6= k8sPodName=openstack/keystone-fernet-setup-lzt2j subsys=endpoint level=info msg="Successful endpoint creation" containerID=44039e3d77 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1510 identity=32928 ipv4=10.0.0.40 ipv6= k8sPodName=openstack/keystone-fernet-setup-lzt2j subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=44039e3d77 endpointID=1510 k8sNamespace=openstack k8sPodName=keystone-fernet-setup-lzt2j subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=acfca279-5d40-4dd8-b6a0-b5f5df6a8aef k8s:batch.kubernetes.io/job-name=keystone-fernet-setup k8s:component=fernet-setup k8s:controller-uid=acfca279-5d40-4dd8-b6a0-b5f5df6a8aef k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-fernet-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=44039e3d77 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1510 identity=32928 ipv4=10.0.0.40 ipv6= k8sPodName=openstack/keystone-fernet-setup-lzt2j subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.205 0fba4a78-643f-4c36-aec3-248cafed0171 default }" containerID=9bd179db1ebdd44206d578dab0baf394b78f75de3fca8f7c7528cc6a21cb1c07 datapathConfiguration="&{false false false false false }" interface=lxc2b4a94a4dd4a k8sPodName=openstack/keystone-db-sync-qb7lg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9bd179db1e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3797 ipv4=10.0.0.205 ipv6= k8sPodName=openstack/keystone-db-sync-qb7lg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9bd179db1e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3797 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=8b9ad399-664b-4741-8bef-08bed5dae429,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=8b9ad399-664b-4741-8bef-08bed5dae429,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.205 ipv6= k8sPodName=openstack/keystone-db-sync-qb7lg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=8b9ad399-664b-4741-8bef-08bed5dae429;k8s:batch.kubernetes.io/job-name=keystone-db-sync;k8s:component=db-sync;k8s:controller-uid=8b9ad399-664b-4741-8bef-08bed5dae429;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-sync;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9bd179db1e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3797 identity=40301 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=8b9ad399-664b-4741-8bef-08bed5dae429,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=8b9ad399-664b-4741-8bef-08bed5dae429,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.205 ipv6= k8sPodName=openstack/keystone-db-sync-qb7lg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9bd179db1e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3797 identity=40301 ipv4=10.0.0.205 ipv6= k8sPodName=openstack/keystone-db-sync-qb7lg subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=9bd179db1e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3797 identity=40301 ipv4=10.0.0.205 ipv6= k8sPodName=openstack/keystone-db-sync-qb7lg subsys=endpoint level=info msg="Successful endpoint creation" containerID=9bd179db1e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3797 identity=40301 ipv4=10.0.0.205 ipv6= k8sPodName=openstack/keystone-db-sync-qb7lg subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=9bd179db1e endpointID=3797 k8sNamespace=openstack k8sPodName=keystone-db-sync-qb7lg subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=8b9ad399-664b-4741-8bef-08bed5dae429 k8s:batch.kubernetes.io/job-name=keystone-db-sync k8s:component=db-sync k8s:controller-uid=8b9ad399-664b-4741-8bef-08bed5dae429 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-sync k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=9bd179db1e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3797 identity=40301 ipv4=10.0.0.205 ipv6= k8sPodName=openstack/keystone-db-sync-qb7lg subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.81 4a9b5a14-65e3-4b7a-8eb7-fb3bab8f9dcf default }" containerID=317d58b10a2d05b3c1f214cd4cddd62f4e4847779b299bc541bd057b7d4afe41 datapathConfiguration="&{false false false false false }" interface=lxc45a1fa657d7d k8sPodName=openstack/keystone-rabbit-init-tbhs5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=317d58b10a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2410 ipv4=10.0.0.81 ipv6= k8sPodName=openstack/keystone-rabbit-init-tbhs5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=317d58b10a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2410 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=39f84ccb-45cc-4211-a853-f291044278f7,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=39f84ccb-45cc-4211-a853-f291044278f7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.81 ipv6= k8sPodName=openstack/keystone-rabbit-init-tbhs5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=317d58b10a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2410 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.81 ipv6= k8sPodName=openstack/keystone-rabbit-init-tbhs5 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=39f84ccb-45cc-4211-a853-f291044278f7;k8s:batch.kubernetes.io/job-name=keystone-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=39f84ccb-45cc-4211-a853-f291044278f7;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-rabbit-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=317d58b10a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2410 identity=14124 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=39f84ccb-45cc-4211-a853-f291044278f7,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=39f84ccb-45cc-4211-a853-f291044278f7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.81 ipv6= k8sPodName=openstack/keystone-rabbit-init-tbhs5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=317d58b10a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2410 identity=14124 ipv4=10.0.0.81 ipv6= k8sPodName=openstack/keystone-rabbit-init-tbhs5 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=317d58b10a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2410 identity=14124 ipv4=10.0.0.81 ipv6= k8sPodName=openstack/keystone-rabbit-init-tbhs5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=317d58b10a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2410 identity=14124 ipv4=10.0.0.81 ipv6= k8sPodName=openstack/keystone-rabbit-init-tbhs5 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=317d58b10a endpointID=2410 k8sNamespace=openstack k8sPodName=keystone-rabbit-init-tbhs5 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=39f84ccb-45cc-4211-a853-f291044278f7 k8s:batch.kubernetes.io/job-name=keystone-rabbit-init k8s:component=rabbit-init k8s:controller-uid=39f84ccb-45cc-4211-a853-f291044278f7 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-rabbit-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=317d58b10a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2410 identity=14124 ipv4=10.0.0.81 ipv6= k8sPodName=openstack/keystone-rabbit-init-tbhs5 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.59 bc76b3fb-fbea-4ab3-a3f9-9fe318a6cb30 default }" containerID=03aefef2c1f13b30d6c2961215d71405ef747dbd1c2e1f8da6116c2f5526e4c3 datapathConfiguration="&{false false false false false }" interface=lxc47433672d6e0 k8sPodName=openstack/keystone-domain-manage-9j772 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=03aefef2c1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3133 ipv4=10.0.0.59 ipv6= k8sPodName=openstack/keystone-domain-manage-9j772 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=03aefef2c1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3133 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=acbbb497-74d7-43a1-8c54-e28c7f9ca256,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=acbbb497-74d7-43a1-8c54-e28c7f9ca256,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.59 ipv6= k8sPodName=openstack/keystone-domain-manage-9j772 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=acbbb497-74d7-43a1-8c54-e28c7f9ca256;k8s:batch.kubernetes.io/job-name=keystone-domain-manage;k8s:component=domain-manage;k8s:controller-uid=acbbb497-74d7-43a1-8c54-e28c7f9ca256;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-domain-manage;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=03aefef2c1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3133 identity=46020 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=acbbb497-74d7-43a1-8c54-e28c7f9ca256,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=acbbb497-74d7-43a1-8c54-e28c7f9ca256,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.59 ipv6= k8sPodName=openstack/keystone-domain-manage-9j772 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=03aefef2c1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3133 identity=46020 ipv4=10.0.0.59 ipv6= k8sPodName=openstack/keystone-domain-manage-9j772 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=03aefef2c1 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3133 identity=46020 ipv4=10.0.0.59 ipv6= k8sPodName=openstack/keystone-domain-manage-9j772 subsys=endpoint level=info msg="Successful endpoint creation" containerID=03aefef2c1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3133 identity=46020 ipv4=10.0.0.59 ipv6= k8sPodName=openstack/keystone-domain-manage-9j772 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=03aefef2c1 endpointID=3133 k8sNamespace=openstack k8sPodName=keystone-domain-manage-9j772 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=acbbb497-74d7-43a1-8c54-e28c7f9ca256 k8s:batch.kubernetes.io/job-name=keystone-domain-manage k8s:component=domain-manage k8s:controller-uid=acbbb497-74d7-43a1-8c54-e28c7f9ca256 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-domain-manage k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=03aefef2c1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3133 identity=46020 ipv4=10.0.0.59 ipv6= k8sPodName=openstack/keystone-domain-manage-9j772 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.90 dc6319c9-ea00-48e5-b7af-e3801a050a6a default }" containerID=7e862dee157128dbd87d8c285199e98ae5f4fd02757353efeb9918a3f59a8e87 datapathConfiguration="&{false false false false false }" interface=lxcb8004e99a1c8 k8sPodName=openstack/keystone-bootstrap-pm59m labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7e862dee15 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1046 ipv4=10.0.0.90 ipv6= k8sPodName=openstack/keystone-bootstrap-pm59m subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7e862dee15 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1046 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=22378fc2-9d2b-4eac-9b99-d02cbb74d22e,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=22378fc2-9d2b-4eac-9b99-d02cbb74d22e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.90 ipv6= k8sPodName=openstack/keystone-bootstrap-pm59m subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=7e862dee15 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1046 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.90 ipv6= k8sPodName=openstack/keystone-bootstrap-pm59m line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=22378fc2-9d2b-4eac-9b99-d02cbb74d22e;k8s:batch.kubernetes.io/job-name=keystone-bootstrap;k8s:component=bootstrap;k8s:controller-uid=22378fc2-9d2b-4eac-9b99-d02cbb74d22e;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-bootstrap;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7e862dee15 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1046 identity=8030 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=22378fc2-9d2b-4eac-9b99-d02cbb74d22e,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=22378fc2-9d2b-4eac-9b99-d02cbb74d22e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.90 ipv6= k8sPodName=openstack/keystone-bootstrap-pm59m oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7e862dee15 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1046 identity=8030 ipv4=10.0.0.90 ipv6= k8sPodName=openstack/keystone-bootstrap-pm59m subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7e862dee15 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1046 identity=8030 ipv4=10.0.0.90 ipv6= k8sPodName=openstack/keystone-bootstrap-pm59m subsys=endpoint level=info msg="Successful endpoint creation" containerID=7e862dee15 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1046 identity=8030 ipv4=10.0.0.90 ipv6= k8sPodName=openstack/keystone-bootstrap-pm59m subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=7e862dee15 endpointID=1046 k8sNamespace=openstack k8sPodName=keystone-bootstrap-pm59m subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=22378fc2-9d2b-4eac-9b99-d02cbb74d22e k8s:batch.kubernetes.io/job-name=keystone-bootstrap k8s:component=bootstrap k8s:controller-uid=22378fc2-9d2b-4eac-9b99-d02cbb74d22e k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-bootstrap k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=7e862dee15 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1046 identity=8030 ipv4=10.0.0.90 ipv6= k8sPodName=openstack/keystone-bootstrap-pm59m subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.58 c728d853-053a-477f-8604-7be3d9f3af79 default }" containerID=687d58f41e428fae7327c1c5c5a1f2c027fc6f34aafca14d827efc30243cccd7 datapathConfiguration="&{false false false false false }" interface=lxc10d8ad39853b k8sPodName=local-path-storage/helper-pod-create-pvc-36ad3ccb-12c4-4282-a362-7c2bc75012db labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=687d58f41e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3844 ipv4=10.0.0.58 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-36ad3ccb-12c4-4282-a362-7c2bc75012db subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=687d58f41e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3844 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.58 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-36ad3ccb-12c4-4282-a362-7c2bc75012db subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=687d58f41e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3844 identity=4628 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.58 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-36ad3ccb-12c4-4282-a362-7c2bc75012db oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=687d58f41e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3844 identity=4628 ipv4=10.0.0.58 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-36ad3ccb-12c4-4282-a362-7c2bc75012db subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=687d58f41e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3844 identity=4628 ipv4=10.0.0.58 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-36ad3ccb-12c4-4282-a362-7c2bc75012db subsys=endpoint level=info msg="Successful endpoint creation" containerID=687d58f41e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3844 identity=4628 ipv4=10.0.0.58 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-36ad3ccb-12c4-4282-a362-7c2bc75012db subsys=daemon level=info msg="Delete endpoint request" containerID=687d58f41e endpointID=3844 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-36ad3ccb-12c4-4282-a362-7c2bc75012db subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=687d58f41e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3844 identity=4628 ipv4=10.0.0.58 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-36ad3ccb-12c4-4282-a362-7c2bc75012db subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.129 9aef8b25-4dd8-4d17-b334-821e0e62abff default }" containerID=dceb28bfa3dc3ea93f8a4eb7132bc61b19e9ce065f9d0db1ff249b614e522417 datapathConfiguration="&{false false false false false }" interface=lxce4d1cd8049c9 k8sPodName=openstack/rabbitmq-barbican-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=dceb28bfa3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1398 ipv4=10.0.0.129 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=dceb28bfa3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1398 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.129 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-barbican;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=dceb28bfa3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1398 identity=32294 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.129 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=dceb28bfa3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1398 identity=32294 ipv4=10.0.0.129 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=dceb28bfa3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1398 identity=32294 ipv4=10.0.0.129 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=dceb28bfa3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1398 identity=32294 ipv4=10.0.0.129 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.1 7e889d38-a14b-41f4-bff5-94ea985bcaa4 default }" containerID=035c4314e2f71ef3cd0b8138dade426931023012a5cf8f74a44fbbeee2c9f4fe datapathConfiguration="&{false false false false false }" interface=lxc2f0fb925fc88 k8sPodName=openstack/barbican-api-555c98689d-qtrft labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=035c4314e2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1773 ipv4=10.0.0.1 ipv6= k8sPodName=openstack/barbican-api-555c98689d-qtrft subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=035c4314e2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1773 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.1 ipv6= k8sPodName=openstack/barbican-api-555c98689d-qtrft subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=035c4314e2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1773 identity=18804 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.1 ipv6= k8sPodName=openstack/barbican-api-555c98689d-qtrft oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=035c4314e2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1773 identity=18804 ipv4=10.0.0.1 ipv6= k8sPodName=openstack/barbican-api-555c98689d-qtrft subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.3 4686d9ad-d75b-4fff-aad3-d53ea30cf03f default }" containerID=9d0329471d1f60597b2e5abe1d6f2a1a4d8fa96dbf70aeb345d3ac74c0476f4b datapathConfiguration="&{false false false false false }" interface=lxced5c0a499ccf k8sPodName=openstack/barbican-db-init-8mt2v labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9d0329471d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1925 ipv4=10.0.0.3 ipv6= k8sPodName=openstack/barbican-db-init-8mt2v subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9d0329471d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1925 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=45002ea2-38ac-42c5-b7b2-f0beb15425b7,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=45002ea2-38ac-42c5-b7b2-f0beb15425b7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.3 ipv6= k8sPodName=openstack/barbican-db-init-8mt2v subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=45002ea2-38ac-42c5-b7b2-f0beb15425b7;k8s:batch.kubernetes.io/job-name=barbican-db-init;k8s:component=db-init;k8s:controller-uid=45002ea2-38ac-42c5-b7b2-f0beb15425b7;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9d0329471d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1925 identity=47825 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=45002ea2-38ac-42c5-b7b2-f0beb15425b7,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=45002ea2-38ac-42c5-b7b2-f0beb15425b7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.3 ipv6= k8sPodName=openstack/barbican-db-init-8mt2v oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9d0329471d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1925 identity=47825 ipv4=10.0.0.3 ipv6= k8sPodName=openstack/barbican-db-init-8mt2v subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=035c4314e2 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1773 identity=18804 ipv4=10.0.0.1 ipv6= k8sPodName=openstack/barbican-api-555c98689d-qtrft subsys=endpoint level=info msg="Successful endpoint creation" containerID=035c4314e2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1773 identity=18804 ipv4=10.0.0.1 ipv6= k8sPodName=openstack/barbican-api-555c98689d-qtrft subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=9d0329471d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1925 identity=47825 ipv4=10.0.0.3 ipv6= k8sPodName=openstack/barbican-db-init-8mt2v subsys=endpoint level=info msg="Successful endpoint creation" containerID=9d0329471d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1925 identity=47825 ipv4=10.0.0.3 ipv6= k8sPodName=openstack/barbican-db-init-8mt2v subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=9d0329471d endpointID=1925 k8sNamespace=openstack k8sPodName=barbican-db-init-8mt2v subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=45002ea2-38ac-42c5-b7b2-f0beb15425b7 k8s:batch.kubernetes.io/job-name=barbican-db-init k8s:component=db-init k8s:controller-uid=45002ea2-38ac-42c5-b7b2-f0beb15425b7 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=9d0329471d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1925 identity=47825 ipv4=10.0.0.3 ipv6= k8sPodName=openstack/barbican-db-init-8mt2v subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.21 f5c4a66c-7364-4ea9-bf59-3c513281555e default }" containerID=40a48a0c716e05a41e51e472c5abb7486fe24c4eb592ddffeae21589375ac6e1 datapathConfiguration="&{false false false false false }" interface=lxc682867d84bbd k8sPodName=openstack/barbican-db-sync-w9p4n labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=40a48a0c71 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=116 ipv4=10.0.0.21 ipv6= k8sPodName=openstack/barbican-db-sync-w9p4n subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=40a48a0c71 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=116 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=b444208e-937a-416d-9eb5-03631b516980,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=b444208e-937a-416d-9eb5-03631b516980,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.21 ipv6= k8sPodName=openstack/barbican-db-sync-w9p4n subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=b444208e-937a-416d-9eb5-03631b516980;k8s:batch.kubernetes.io/job-name=barbican-db-sync;k8s:component=db-sync;k8s:controller-uid=b444208e-937a-416d-9eb5-03631b516980;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-sync;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=40a48a0c71 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=116 identity=25007 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=b444208e-937a-416d-9eb5-03631b516980,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=b444208e-937a-416d-9eb5-03631b516980,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.21 ipv6= k8sPodName=openstack/barbican-db-sync-w9p4n oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=40a48a0c71 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=116 identity=25007 ipv4=10.0.0.21 ipv6= k8sPodName=openstack/barbican-db-sync-w9p4n subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=40a48a0c71 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=116 identity=25007 ipv4=10.0.0.21 ipv6= k8sPodName=openstack/barbican-db-sync-w9p4n subsys=endpoint level=info msg="Successful endpoint creation" containerID=40a48a0c71 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=116 identity=25007 ipv4=10.0.0.21 ipv6= k8sPodName=openstack/barbican-db-sync-w9p4n subsys=daemon level=info msg="Delete endpoint request" containerID=40a48a0c71 endpointID=116 k8sNamespace=openstack k8sPodName=barbican-db-sync-w9p4n subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=b444208e-937a-416d-9eb5-03631b516980 k8s:batch.kubernetes.io/job-name=barbican-db-sync k8s:component=db-sync k8s:controller-uid=b444208e-937a-416d-9eb5-03631b516980 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-sync k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=40a48a0c71 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=116 identity=25007 ipv4=10.0.0.21 ipv6= k8sPodName=openstack/barbican-db-sync-w9p4n subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.3 9492ed55-73a1-4bf2-897c-cba47e01fd84 default }" containerID=59ee26074c40d1e930546362d9d1962ee1278469e128d316cd21149e57d23a07 datapathConfiguration="&{false false false false false }" interface=lxcd087459b2bd7 k8sPodName=openstack/barbican-rabbit-init-gglpm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=59ee26074c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=984 ipv4=10.0.0.3 ipv6= k8sPodName=openstack/barbican-rabbit-init-gglpm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=59ee26074c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=984 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=a70822a6-c15a-46dd-be8a-8b67b6d3c93f,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=a70822a6-c15a-46dd-be8a-8b67b6d3c93f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.3 ipv6= k8sPodName=openstack/barbican-rabbit-init-gglpm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=a70822a6-c15a-46dd-be8a-8b67b6d3c93f;k8s:batch.kubernetes.io/job-name=barbican-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=a70822a6-c15a-46dd-be8a-8b67b6d3c93f;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-rabbit-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=59ee26074c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=984 identity=8510 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=a70822a6-c15a-46dd-be8a-8b67b6d3c93f,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=a70822a6-c15a-46dd-be8a-8b67b6d3c93f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.3 ipv6= k8sPodName=openstack/barbican-rabbit-init-gglpm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=59ee26074c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=984 identity=8510 ipv4=10.0.0.3 ipv6= k8sPodName=openstack/barbican-rabbit-init-gglpm subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=59ee26074c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=984 identity=8510 ipv4=10.0.0.3 ipv6= k8sPodName=openstack/barbican-rabbit-init-gglpm subsys=endpoint level=info msg="Successful endpoint creation" containerID=59ee26074c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=984 identity=8510 ipv4=10.0.0.3 ipv6= k8sPodName=openstack/barbican-rabbit-init-gglpm subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.03605583886807256 newInterval=11m15s subsys=map-ct level=info msg="Delete endpoint request" containerID=59ee26074c endpointID=984 k8sNamespace=openstack k8sPodName=barbican-rabbit-init-gglpm subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=a70822a6-c15a-46dd-be8a-8b67b6d3c93f k8s:batch.kubernetes.io/job-name=barbican-rabbit-init k8s:component=rabbit-init k8s:controller-uid=a70822a6-c15a-46dd-be8a-8b67b6d3c93f k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-rabbit-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=59ee26074c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=984 identity=8510 ipv4=10.0.0.3 ipv6= k8sPodName=openstack/barbican-rabbit-init-gglpm subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.216 13d31b16-e263-4c64-a326-225b18b68207 default }" containerID=d51e1274092e8e9870196b7f9dee650eed4a6865d0125280de2ce5a0ffc57f8b datapathConfiguration="&{false false false false false }" interface=lxcedaef7a7b3dc k8sPodName=openstack/barbican-ks-service-2wl5z labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d51e127409 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1536 ipv4=10.0.0.216 ipv6= k8sPodName=openstack/barbican-ks-service-2wl5z subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d51e127409 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1536 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=4577d3a4-db27-4e38-b896-bba4d245619c,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=4577d3a4-db27-4e38-b896-bba4d245619c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.216 ipv6= k8sPodName=openstack/barbican-ks-service-2wl5z subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=d51e127409 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1536 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.216 ipv6= k8sPodName=openstack/barbican-ks-service-2wl5z line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=4577d3a4-db27-4e38-b896-bba4d245619c;k8s:batch.kubernetes.io/job-name=barbican-ks-service;k8s:component=ks-service;k8s:controller-uid=4577d3a4-db27-4e38-b896-bba4d245619c;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-service;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d51e127409 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1536 identity=4782 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=4577d3a4-db27-4e38-b896-bba4d245619c,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=4577d3a4-db27-4e38-b896-bba4d245619c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.216 ipv6= k8sPodName=openstack/barbican-ks-service-2wl5z oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d51e127409 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1536 identity=4782 ipv4=10.0.0.216 ipv6= k8sPodName=openstack/barbican-ks-service-2wl5z subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d51e127409 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1536 identity=4782 ipv4=10.0.0.216 ipv6= k8sPodName=openstack/barbican-ks-service-2wl5z subsys=endpoint level=info msg="Successful endpoint creation" containerID=d51e127409 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1536 identity=4782 ipv4=10.0.0.216 ipv6= k8sPodName=openstack/barbican-ks-service-2wl5z subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=d51e127409 endpointID=1536 k8sNamespace=openstack k8sPodName=barbican-ks-service-2wl5z subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=4577d3a4-db27-4e38-b896-bba4d245619c k8s:batch.kubernetes.io/job-name=barbican-ks-service k8s:component=ks-service k8s:controller-uid=4577d3a4-db27-4e38-b896-bba4d245619c k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-service k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=d51e127409 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1536 identity=4782 ipv4=10.0.0.216 ipv6= k8sPodName=openstack/barbican-ks-service-2wl5z subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.152 a943010b-21a6-4d98-b082-cab8fa518d48 default }" containerID=7277cd1f869eef81c2b2d2252075b79dc77298b4463adf3e09dd93a34ee8f703 datapathConfiguration="&{false false false false false }" interface=lxccefdee1f02dd k8sPodName=openstack/barbican-ks-endpoints-w6xxg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7277cd1f86 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=710 ipv4=10.0.0.152 ipv6= k8sPodName=openstack/barbican-ks-endpoints-w6xxg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7277cd1f86 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=710 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=e1d2676e-7f09-4885-a20d-3e8b3b161d94,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=e1d2676e-7f09-4885-a20d-3e8b3b161d94,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.152 ipv6= k8sPodName=openstack/barbican-ks-endpoints-w6xxg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=e1d2676e-7f09-4885-a20d-3e8b3b161d94;k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=e1d2676e-7f09-4885-a20d-3e8b3b161d94;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-endpoints;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7277cd1f86 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=710 identity=55244 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=e1d2676e-7f09-4885-a20d-3e8b3b161d94,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=e1d2676e-7f09-4885-a20d-3e8b3b161d94,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.152 ipv6= k8sPodName=openstack/barbican-ks-endpoints-w6xxg oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=7277cd1f86 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=710 identity=55244 ipv4=10.0.0.152 ipv6= k8sPodName=openstack/barbican-ks-endpoints-w6xxg subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7277cd1f86 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=710 identity=55244 ipv4=10.0.0.152 ipv6= k8sPodName=openstack/barbican-ks-endpoints-w6xxg subsys=endpoint level=info msg="Successful endpoint creation" containerID=7277cd1f86 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=710 identity=55244 ipv4=10.0.0.152 ipv6= k8sPodName=openstack/barbican-ks-endpoints-w6xxg subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=7277cd1f86 endpointID=710 k8sNamespace=openstack k8sPodName=barbican-ks-endpoints-w6xxg subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=e1d2676e-7f09-4885-a20d-3e8b3b161d94 k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=e1d2676e-7f09-4885-a20d-3e8b3b161d94 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-endpoints k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=7277cd1f86 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=710 identity=55244 ipv4=10.0.0.152 ipv6= k8sPodName=openstack/barbican-ks-endpoints-w6xxg subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.57 ae2cb7e2-3fe3-4016-ba14-ad4a4923060f default }" containerID=726e77869d56e850be7a2cbe6dbbecf811339c868db0a282e31dbfe823e30755 datapathConfiguration="&{false false false false false }" interface=lxc65a3eee9dd81 k8sPodName=openstack/barbican-ks-user-ddhtt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=726e77869d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3516 ipv4=10.0.0.57 ipv6= k8sPodName=openstack/barbican-ks-user-ddhtt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=726e77869d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3516 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=d5123dbd-e91a-42f5-9798-1bc42e89893f,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=d5123dbd-e91a-42f5-9798-1bc42e89893f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.57 ipv6= k8sPodName=openstack/barbican-ks-user-ddhtt subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=d5123dbd-e91a-42f5-9798-1bc42e89893f;k8s:batch.kubernetes.io/job-name=barbican-ks-user;k8s:component=ks-user;k8s:controller-uid=d5123dbd-e91a-42f5-9798-1bc42e89893f;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-user;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=726e77869d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3516 identity=15938 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=d5123dbd-e91a-42f5-9798-1bc42e89893f,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=d5123dbd-e91a-42f5-9798-1bc42e89893f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.57 ipv6= k8sPodName=openstack/barbican-ks-user-ddhtt oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=726e77869d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3516 identity=15938 ipv4=10.0.0.57 ipv6= k8sPodName=openstack/barbican-ks-user-ddhtt subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=726e77869d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3516 identity=15938 ipv4=10.0.0.57 ipv6= k8sPodName=openstack/barbican-ks-user-ddhtt subsys=endpoint level=info msg="Successful endpoint creation" containerID=726e77869d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3516 identity=15938 ipv4=10.0.0.57 ipv6= k8sPodName=openstack/barbican-ks-user-ddhtt subsys=daemon level=info msg="Delete endpoint request" containerID=726e77869d endpointID=3516 k8sNamespace=openstack k8sPodName=barbican-ks-user-ddhtt subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=d5123dbd-e91a-42f5-9798-1bc42e89893f k8s:batch.kubernetes.io/job-name=barbican-ks-user k8s:component=ks-user k8s:controller-uid=d5123dbd-e91a-42f5-9798-1bc42e89893f k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-user k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=726e77869d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3516 identity=15938 ipv4=10.0.0.57 ipv6= k8sPodName=openstack/barbican-ks-user-ddhtt subsys=endpoint level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Create endpoint request" addressing="&{10.0.0.227 82bbd856-d5fd-46d4-99c4-e523938a3bcf default }" containerID=78dade76cf62d95460952447648fbe9c8e8af26f9a6173a31face5495207c1ae datapathConfiguration="&{false false false false false }" interface=lxc0a59285fef7a k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-c9vgd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=78dade76cf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2323 ipv4=10.0.0.227 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-c9vgd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=78dade76cf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2323 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.15.9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.227 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-c9vgd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:rook-ceph k8s:io.cilium.k8s.namespace.labels.name:rook-ceph]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-operator;k8s:helm.sh/chart=rook-ceph-v1.15.9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph;k8s:io.cilium.k8s.namespace.labels.name=rook-ceph;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system;k8s:io.kubernetes.pod.namespace=rook-ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=78dade76cf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2323 identity=15251 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.15.9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.227 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-c9vgd oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=78dade76cf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2323 identity=15251 ipv4=10.0.0.227 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-c9vgd subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=78dade76cf datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2323 identity=15251 ipv4=10.0.0.227 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-c9vgd subsys=endpoint level=info msg="Successful endpoint creation" containerID=78dade76cf datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2323 identity=15251 ipv4=10.0.0.227 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-c9vgd subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.35 ea1d3b2b-a612-4f5e-98a6-c8edd04f006c default }" containerID=aa0ba2af6753985e4dba88b058a1b80476b2be63a204c4496c2c3fbadc44a5ec datapathConfiguration="&{false false false false false }" interface=lxcf4bccbc1b5f7 k8sPodName=openstack/rook-ceph-detect-version-n2vk6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=aa0ba2af67 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1321 ipv4=10.0.0.35 ipv6= k8sPodName=openstack/rook-ceph-detect-version-n2vk6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=aa0ba2af67 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1321 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=4a7297ec-ef26-4b60-b6c8-fdc462d21830,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=4a7297ec-ef26-4b60-b6c8-fdc462d21830,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.35 ipv6= k8sPodName=openstack/rook-ceph-detect-version-n2vk6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-detect-version;k8s:batch.kubernetes.io/controller-uid=4a7297ec-ef26-4b60-b6c8-fdc462d21830;k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version;k8s:controller-uid=4a7297ec-ef26-4b60-b6c8-fdc462d21830;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=rook-ceph-detect-version;k8s:rook-version=v1.15.9;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=aa0ba2af67 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1321 identity=65415 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=4a7297ec-ef26-4b60-b6c8-fdc462d21830,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=4a7297ec-ef26-4b60-b6c8-fdc462d21830,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.35 ipv6= k8sPodName=openstack/rook-ceph-detect-version-n2vk6 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=aa0ba2af67 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1321 identity=65415 ipv4=10.0.0.35 ipv6= k8sPodName=openstack/rook-ceph-detect-version-n2vk6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=aa0ba2af67 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1321 identity=65415 ipv4=10.0.0.35 ipv6= k8sPodName=openstack/rook-ceph-detect-version-n2vk6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=aa0ba2af67 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1321 identity=65415 ipv4=10.0.0.35 ipv6= k8sPodName=openstack/rook-ceph-detect-version-n2vk6 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=aa0ba2af67 endpointID=1321 k8sNamespace=openstack k8sPodName=rook-ceph-detect-version-n2vk6 subsys=daemon level=info msg="Releasing key" key="[k8s:app=rook-ceph-detect-version k8s:batch.kubernetes.io/controller-uid=4a7297ec-ef26-4b60-b6c8-fdc462d21830 k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version k8s:controller-uid=4a7297ec-ef26-4b60-b6c8-fdc462d21830 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=rook-ceph-detect-version k8s:rook-version=v1.15.9]" subsys=allocator level=info msg="Removed endpoint" containerID=aa0ba2af67 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1321 identity=65415 ipv4=10.0.0.35 ipv6= k8sPodName=openstack/rook-ceph-detect-version-n2vk6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.175 4f17615d-0a8c-4b93-a318-3da41cc0706a default }" containerID=4f2e32773e79dd408367943287ce2a78a7a53124abd8ed15b458232b523d407d datapathConfiguration="&{false false false false false }" interface=lxce9d1356de325 k8sPodName=openstack/ceph-object-controller-detect-version-m8mgd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4f2e32773e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3755 ipv4=10.0.0.175 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-m8mgd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4f2e32773e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3755 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=b1533eac-0f0d-423f-825f-9d406a5c129e,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=b1533eac-0f0d-423f-825f-9d406a5c129e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.175 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-m8mgd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app=ceph-object-controller-detect-version;k8s:batch.kubernetes.io/controller-uid=b1533eac-0f0d-423f-825f-9d406a5c129e;k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version;k8s:controller-uid=b1533eac-0f0d-423f-825f-9d406a5c129e;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=ceph-object-controller-detect-version;k8s:rook-version=v1.15.9;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=4f2e32773e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3755 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.175 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-m8mgd line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=4f2e32773e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3755 identity=17666 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=b1533eac-0f0d-423f-825f-9d406a5c129e,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=b1533eac-0f0d-423f-825f-9d406a5c129e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.175 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-m8mgd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4f2e32773e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3755 identity=17666 ipv4=10.0.0.175 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-m8mgd subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4f2e32773e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3755 identity=17666 ipv4=10.0.0.175 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-m8mgd subsys=endpoint level=info msg="Successful endpoint creation" containerID=4f2e32773e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3755 identity=17666 ipv4=10.0.0.175 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-m8mgd subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.97 6c0a77b3-bf5a-4913-960a-11688e66f693 default }" containerID=881167f2fd7db48e5323931faf4355b77dc47fafd8c8c1cb158479370197fbdf datapathConfiguration="&{false false false false false }" interface=lxc6c568f6aa4dd k8sPodName=local-path-storage/helper-pod-create-pvc-a21c5e6a-69dc-43e9-b40d-2e3235302de2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=881167f2fd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2552 ipv4=10.0.0.97 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a21c5e6a-69dc-43e9-b40d-2e3235302de2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=881167f2fd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2552 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.97 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a21c5e6a-69dc-43e9-b40d-2e3235302de2 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=881167f2fd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2552 identity=4628 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.97 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a21c5e6a-69dc-43e9-b40d-2e3235302de2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=881167f2fd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2552 identity=4628 ipv4=10.0.0.97 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a21c5e6a-69dc-43e9-b40d-2e3235302de2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=881167f2fd datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2552 identity=4628 ipv4=10.0.0.97 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a21c5e6a-69dc-43e9-b40d-2e3235302de2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=881167f2fd datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2552 identity=4628 ipv4=10.0.0.97 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a21c5e6a-69dc-43e9-b40d-2e3235302de2 subsys=daemon level=info msg="Delete endpoint request" containerID=4f2e32773e endpointID=3755 k8sNamespace=openstack k8sPodName=ceph-object-controller-detect-version-m8mgd subsys=daemon level=info msg="Releasing key" key="[k8s:app=ceph-object-controller-detect-version k8s:batch.kubernetes.io/controller-uid=b1533eac-0f0d-423f-825f-9d406a5c129e k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version k8s:controller-uid=b1533eac-0f0d-423f-825f-9d406a5c129e k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=ceph-object-controller-detect-version k8s:rook-version=v1.15.9]" subsys=allocator level=info msg="Removed endpoint" containerID=4f2e32773e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3755 identity=17666 ipv4=10.0.0.175 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-m8mgd subsys=endpoint level=info msg="Delete endpoint request" containerID=881167f2fd endpointID=2552 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-a21c5e6a-69dc-43e9-b40d-2e3235302de2 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=881167f2fd datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2552 identity=4628 ipv4=10.0.0.97 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a21c5e6a-69dc-43e9-b40d-2e3235302de2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.9 2e2ac952-d52e-44a0-bfce-cfda697e4fc3 default }" containerID=7a8d92f72d15841835d1ea5610c39ccf2a945faca1540c88ff1dbd767d79e3f5 datapathConfiguration="&{false false false false false }" interface=lxc831f003caf2b k8sPodName=openstack/rabbitmq-glance-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7a8d92f72d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=538 ipv4=10.0.0.9 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7a8d92f72d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=538 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.9 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-glance;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=7a8d92f72d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=538 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.9 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=7a8d92f72d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=538 identity=40038 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.9 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7a8d92f72d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=538 identity=40038 ipv4=10.0.0.9 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7a8d92f72d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=538 identity=40038 ipv4=10.0.0.9 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=7a8d92f72d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=538 identity=40038 ipv4=10.0.0.9 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.186 0b82a329-00e5-4fbc-b867-a75a66c7799b default }" containerID=527a1ddde28256bbddfdca6e485f8d07b01d8cce114837a77019f298ed4666d4 datapathConfiguration="&{false false false false false }" interface=lxc5a1993f29129 k8sPodName=openstack/glance-db-init-77qwl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=527a1ddde2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1638 ipv4=10.0.0.186 ipv6= k8sPodName=openstack/glance-db-init-77qwl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=527a1ddde2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1638 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=9ef42c8e-503f-4bbf-8119-0d406b21343e,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=9ef42c8e-503f-4bbf-8119-0d406b21343e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.186 ipv6= k8sPodName=openstack/glance-db-init-77qwl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=9ef42c8e-503f-4bbf-8119-0d406b21343e;k8s:batch.kubernetes.io/job-name=glance-db-init;k8s:component=db-init;k8s:controller-uid=9ef42c8e-503f-4bbf-8119-0d406b21343e;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=527a1ddde2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1638 identity=60698 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=9ef42c8e-503f-4bbf-8119-0d406b21343e,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=9ef42c8e-503f-4bbf-8119-0d406b21343e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.186 ipv6= k8sPodName=openstack/glance-db-init-77qwl oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=527a1ddde2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1638 identity=60698 ipv4=10.0.0.186 ipv6= k8sPodName=openstack/glance-db-init-77qwl subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=527a1ddde2 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1638 identity=60698 ipv4=10.0.0.186 ipv6= k8sPodName=openstack/glance-db-init-77qwl subsys=endpoint level=info msg="Successful endpoint creation" containerID=527a1ddde2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1638 identity=60698 ipv4=10.0.0.186 ipv6= k8sPodName=openstack/glance-db-init-77qwl subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=527a1ddde2 endpointID=1638 k8sNamespace=openstack k8sPodName=glance-db-init-77qwl subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=9ef42c8e-503f-4bbf-8119-0d406b21343e k8s:batch.kubernetes.io/job-name=glance-db-init k8s:component=db-init k8s:controller-uid=9ef42c8e-503f-4bbf-8119-0d406b21343e k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=527a1ddde2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1638 identity=60698 ipv4=10.0.0.186 ipv6= k8sPodName=openstack/glance-db-init-77qwl subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.107 d5c719f7-beea-495e-b3fa-ef2e9a263eff default }" containerID=a1dc95a51e1e8480a606ca368579f6a49255d17a672a3748a211d7e710c44930 datapathConfiguration="&{false false false false false }" interface=lxce79c8915c558 k8sPodName=openstack/glance-db-sync-x42lx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a1dc95a51e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3660 ipv4=10.0.0.107 ipv6= k8sPodName=openstack/glance-db-sync-x42lx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a1dc95a51e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3660 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=29431dc4-8c31-421f-810e-4c9d788dde4b,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=29431dc4-8c31-421f-810e-4c9d788dde4b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.107 ipv6= k8sPodName=openstack/glance-db-sync-x42lx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=a1dc95a51e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3660 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.107 ipv6= k8sPodName=openstack/glance-db-sync-x42lx line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=29431dc4-8c31-421f-810e-4c9d788dde4b;k8s:batch.kubernetes.io/job-name=glance-db-sync;k8s:component=db-sync;k8s:controller-uid=29431dc4-8c31-421f-810e-4c9d788dde4b;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-sync;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a1dc95a51e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3660 identity=35157 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=29431dc4-8c31-421f-810e-4c9d788dde4b,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=29431dc4-8c31-421f-810e-4c9d788dde4b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.107 ipv6= k8sPodName=openstack/glance-db-sync-x42lx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a1dc95a51e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3660 identity=35157 ipv4=10.0.0.107 ipv6= k8sPodName=openstack/glance-db-sync-x42lx subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a1dc95a51e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3660 identity=35157 ipv4=10.0.0.107 ipv6= k8sPodName=openstack/glance-db-sync-x42lx subsys=endpoint level=info msg="Successful endpoint creation" containerID=a1dc95a51e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3660 identity=35157 ipv4=10.0.0.107 ipv6= k8sPodName=openstack/glance-db-sync-x42lx subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.201 33b69f3e-2873-414e-963a-86d826eda086 default }" containerID=f920d271d4f6d0380f0da38c60eb053d6b52a0dfe37576e73b887d43a35ca552 datapathConfiguration="&{false false false false false }" interface=lxc0c8edb2d58a9 k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-j2dbm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f920d271d4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2758 ipv4=10.0.0.201 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-j2dbm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f920d271d4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2758 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.201 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-j2dbm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-rgw;k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io;k8s:app.kubernetes.io/created-by=rook-ceph-operator;k8s:app.kubernetes.io/instance=ceph;k8s:app.kubernetes.io/managed-by=rook-ceph-operator;k8s:app.kubernetes.io/name=ceph-rgw;k8s:app.kubernetes.io/part-of=ceph;k8s:ceph_daemon_id=ceph;k8s:ceph_daemon_type=rgw;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw;k8s:io.kubernetes.pod.namespace=openstack;k8s:rgw=ceph;k8s:rook.io/operator-namespace=rook-ceph;k8s:rook_cluster=openstack;k8s:rook_object_store=ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f920d271d4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2758 identity=29449 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.201 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-j2dbm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f920d271d4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2758 identity=29449 ipv4=10.0.0.201 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-j2dbm subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.228 63cfc39e-186c-4707-974f-28522c1fca15 default }" containerID=df3f893c2b2fcef7214096e4398f7c49bcfd33412de46c8af389981b6371f6c0 datapathConfiguration="&{false false false false false }" interface=lxcbd4877a10e05 k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-n5r8t labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=df3f893c2b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1297 ipv4=10.0.0.228 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-n5r8t subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=df3f893c2b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1297 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.228 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-n5r8t subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-crashcollector;k8s:ceph-version=18.2.7-0;k8s:ceph_daemon_id=crash;k8s:crashcollector=crash;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default;k8s:io.kubernetes.pod.namespace=openstack;k8s:node_name=instance;k8s:rook_cluster=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=df3f893c2b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1297 identity=9065 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.228 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-n5r8t oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=df3f893c2b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1297 identity=9065 ipv4=10.0.0.228 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-n5r8t subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f920d271d4 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2758 identity=29449 ipv4=10.0.0.201 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-j2dbm subsys=endpoint level=info msg="Successful endpoint creation" containerID=f920d271d4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2758 identity=29449 ipv4=10.0.0.201 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-j2dbm subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=df3f893c2b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1297 identity=9065 ipv4=10.0.0.228 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-n5r8t subsys=endpoint level=info msg="Successful endpoint creation" containerID=df3f893c2b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1297 identity=9065 ipv4=10.0.0.228 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-n5r8t subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=a1dc95a51e endpointID=3660 k8sNamespace=openstack k8sPodName=glance-db-sync-x42lx subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=29431dc4-8c31-421f-810e-4c9d788dde4b k8s:batch.kubernetes.io/job-name=glance-db-sync k8s:component=db-sync k8s:controller-uid=29431dc4-8c31-421f-810e-4c9d788dde4b k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-sync k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=a1dc95a51e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3660 identity=35157 ipv4=10.0.0.107 ipv6= k8sPodName=openstack/glance-db-sync-x42lx subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.244 717e2fd1-3a01-410f-803f-eacc79a682d5 default }" containerID=38fee8fb6afeb7202bb7c6571c5ccc86b2815f76b4bd6fae348722eadb32ca63 datapathConfiguration="&{false false false false false }" interface=lxc86c991ccf95e k8sPodName=openstack/glance-rabbit-init-9jh7t labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=38fee8fb6a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1637 ipv4=10.0.0.244 ipv6= k8sPodName=openstack/glance-rabbit-init-9jh7t subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=38fee8fb6a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1637 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=cbe3029e-9f2e-4e24-86eb-57c5c8201c03,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=cbe3029e-9f2e-4e24-86eb-57c5c8201c03,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.244 ipv6= k8sPodName=openstack/glance-rabbit-init-9jh7t subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=cbe3029e-9f2e-4e24-86eb-57c5c8201c03;k8s:batch.kubernetes.io/job-name=glance-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=cbe3029e-9f2e-4e24-86eb-57c5c8201c03;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-rabbit-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=38fee8fb6a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1637 identity=37447 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=cbe3029e-9f2e-4e24-86eb-57c5c8201c03,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=cbe3029e-9f2e-4e24-86eb-57c5c8201c03,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.244 ipv6= k8sPodName=openstack/glance-rabbit-init-9jh7t oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=38fee8fb6a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1637 identity=37447 ipv4=10.0.0.244 ipv6= k8sPodName=openstack/glance-rabbit-init-9jh7t subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=38fee8fb6a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1637 identity=37447 ipv4=10.0.0.244 ipv6= k8sPodName=openstack/glance-rabbit-init-9jh7t subsys=endpoint level=info msg="Successful endpoint creation" containerID=38fee8fb6a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1637 identity=37447 ipv4=10.0.0.244 ipv6= k8sPodName=openstack/glance-rabbit-init-9jh7t subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=38fee8fb6a endpointID=1637 k8sNamespace=openstack k8sPodName=glance-rabbit-init-9jh7t subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=cbe3029e-9f2e-4e24-86eb-57c5c8201c03 k8s:batch.kubernetes.io/job-name=glance-rabbit-init k8s:component=rabbit-init k8s:controller-uid=cbe3029e-9f2e-4e24-86eb-57c5c8201c03 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-rabbit-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=38fee8fb6a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1637 identity=37447 ipv4=10.0.0.244 ipv6= k8sPodName=openstack/glance-rabbit-init-9jh7t subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.110 0f63d402-b3ba-4af5-86d8-76651c357973 default }" containerID=251f4d0e36f7f82729dc7524d22a49271ff2d0c8dcaac55abea3374d9ce5ce70 datapathConfiguration="&{false false false false false }" interface=lxcb45c0290bd4a k8sPodName=openstack/glance-ks-service-s884n labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=251f4d0e36 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=460 ipv4=10.0.0.110 ipv6= k8sPodName=openstack/glance-ks-service-s884n subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=251f4d0e36 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=460 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=8b72adbd-ce6c-461a-8cc0-98b6dda851fc,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=8b72adbd-ce6c-461a-8cc0-98b6dda851fc,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.110 ipv6= k8sPodName=openstack/glance-ks-service-s884n subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=8b72adbd-ce6c-461a-8cc0-98b6dda851fc;k8s:batch.kubernetes.io/job-name=glance-ks-service;k8s:component=ks-service;k8s:controller-uid=8b72adbd-ce6c-461a-8cc0-98b6dda851fc;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-service;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=251f4d0e36 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=460 identity=17096 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=8b72adbd-ce6c-461a-8cc0-98b6dda851fc,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=8b72adbd-ce6c-461a-8cc0-98b6dda851fc,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.110 ipv6= k8sPodName=openstack/glance-ks-service-s884n oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=251f4d0e36 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=460 identity=17096 ipv4=10.0.0.110 ipv6= k8sPodName=openstack/glance-ks-service-s884n subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=251f4d0e36 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=460 identity=17096 ipv4=10.0.0.110 ipv6= k8sPodName=openstack/glance-ks-service-s884n subsys=endpoint level=info msg="Successful endpoint creation" containerID=251f4d0e36 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=460 identity=17096 ipv4=10.0.0.110 ipv6= k8sPodName=openstack/glance-ks-service-s884n subsys=daemon level=info msg="Delete endpoint request" containerID=251f4d0e36 endpointID=460 k8sNamespace=openstack k8sPodName=glance-ks-service-s884n subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=8b72adbd-ce6c-461a-8cc0-98b6dda851fc k8s:batch.kubernetes.io/job-name=glance-ks-service k8s:component=ks-service k8s:controller-uid=8b72adbd-ce6c-461a-8cc0-98b6dda851fc k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-service k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=251f4d0e36 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=460 identity=17096 ipv4=10.0.0.110 ipv6= k8sPodName=openstack/glance-ks-service-s884n subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.17 2a41f479-7e40-42be-adee-3d21f2133b90 default }" containerID=11bda72db0a9f5453a63a1854980e16a25138fd855fbbc96696256fed0e4b3d0 datapathConfiguration="&{false false false false false }" interface=lxcbdc469d004c3 k8sPodName=openstack/glance-ks-endpoints-kkjt7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=11bda72db0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1730 ipv4=10.0.0.17 ipv6= k8sPodName=openstack/glance-ks-endpoints-kkjt7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=11bda72db0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1730 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=a9a6802c-adc2-4a20-8527-f7a159742d1a,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=a9a6802c-adc2-4a20-8527-f7a159742d1a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.17 ipv6= k8sPodName=openstack/glance-ks-endpoints-kkjt7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=11bda72db0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1730 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.17 ipv6= k8sPodName=openstack/glance-ks-endpoints-kkjt7 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=a9a6802c-adc2-4a20-8527-f7a159742d1a;k8s:batch.kubernetes.io/job-name=glance-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=a9a6802c-adc2-4a20-8527-f7a159742d1a;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-endpoints;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=11bda72db0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1730 identity=1963 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=a9a6802c-adc2-4a20-8527-f7a159742d1a,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=a9a6802c-adc2-4a20-8527-f7a159742d1a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.17 ipv6= k8sPodName=openstack/glance-ks-endpoints-kkjt7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=11bda72db0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1730 identity=1963 ipv4=10.0.0.17 ipv6= k8sPodName=openstack/glance-ks-endpoints-kkjt7 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=11bda72db0 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1730 identity=1963 ipv4=10.0.0.17 ipv6= k8sPodName=openstack/glance-ks-endpoints-kkjt7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=11bda72db0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1730 identity=1963 ipv4=10.0.0.17 ipv6= k8sPodName=openstack/glance-ks-endpoints-kkjt7 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=11bda72db0 endpointID=1730 k8sNamespace=openstack k8sPodName=glance-ks-endpoints-kkjt7 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=a9a6802c-adc2-4a20-8527-f7a159742d1a k8s:batch.kubernetes.io/job-name=glance-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=a9a6802c-adc2-4a20-8527-f7a159742d1a k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-endpoints k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=11bda72db0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1730 identity=1963 ipv4=10.0.0.17 ipv6= k8sPodName=openstack/glance-ks-endpoints-kkjt7 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.99 3cdb04de-bf32-42d8-b7bd-17a64f2b0c6d default }" containerID=6d353403fd64f7f2a2fbf68c152e23af112071fc29e2adf0dc5a6678771ca478 datapathConfiguration="&{false false false false false }" interface=lxc360b3804149c k8sPodName=openstack/glance-ks-user-jcw2f labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6d353403fd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1379 ipv4=10.0.0.99 ipv6= k8sPodName=openstack/glance-ks-user-jcw2f subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6d353403fd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1379 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=30c21155-ddb2-4b8d-9b2f-10fc7e140104,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=30c21155-ddb2-4b8d-9b2f-10fc7e140104,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.99 ipv6= k8sPodName=openstack/glance-ks-user-jcw2f subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=30c21155-ddb2-4b8d-9b2f-10fc7e140104;k8s:batch.kubernetes.io/job-name=glance-ks-user;k8s:component=ks-user;k8s:controller-uid=30c21155-ddb2-4b8d-9b2f-10fc7e140104;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-user;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6d353403fd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1379 identity=27973 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=30c21155-ddb2-4b8d-9b2f-10fc7e140104,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=30c21155-ddb2-4b8d-9b2f-10fc7e140104,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.99 ipv6= k8sPodName=openstack/glance-ks-user-jcw2f oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=6d353403fd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1379 identity=27973 ipv4=10.0.0.99 ipv6= k8sPodName=openstack/glance-ks-user-jcw2f subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6d353403fd datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1379 identity=27973 ipv4=10.0.0.99 ipv6= k8sPodName=openstack/glance-ks-user-jcw2f subsys=endpoint level=info msg="Successful endpoint creation" containerID=6d353403fd datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1379 identity=27973 ipv4=10.0.0.99 ipv6= k8sPodName=openstack/glance-ks-user-jcw2f subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=6d353403fd endpointID=1379 k8sNamespace=openstack k8sPodName=glance-ks-user-jcw2f subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=30c21155-ddb2-4b8d-9b2f-10fc7e140104 k8s:batch.kubernetes.io/job-name=glance-ks-user k8s:component=ks-user k8s:controller-uid=30c21155-ddb2-4b8d-9b2f-10fc7e140104 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-user k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=6d353403fd datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1379 identity=27973 ipv4=10.0.0.99 ipv6= k8sPodName=openstack/glance-ks-user-jcw2f subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.99 85e7ea0b-5a65-4ce9-a3b2-0b208278385e default }" containerID=b877756cf09a21bbf0720be9a50895eab9c55df22883c0345c7767e3ca851e80 datapathConfiguration="&{false false false false false }" interface=lxcb22901b1ee5c k8sPodName=openstack/glance-metadefs-load-zttj4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b877756cf0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3376 ipv4=10.0.0.99 ipv6= k8sPodName=openstack/glance-metadefs-load-zttj4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b877756cf0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3376 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=16881844-5a9e-47ad-9e8c-89e806044201,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=16881844-5a9e-47ad-9e8c-89e806044201,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.99 ipv6= k8sPodName=openstack/glance-metadefs-load-zttj4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=16881844-5a9e-47ad-9e8c-89e806044201;k8s:batch.kubernetes.io/job-name=glance-metadefs-load;k8s:component=metadefs_load;k8s:controller-uid=16881844-5a9e-47ad-9e8c-89e806044201;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-metadefs-load;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b877756cf0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3376 identity=35254 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=16881844-5a9e-47ad-9e8c-89e806044201,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=16881844-5a9e-47ad-9e8c-89e806044201,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.99 ipv6= k8sPodName=openstack/glance-metadefs-load-zttj4 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=b877756cf0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3376 identity=35254 ipv4=10.0.0.99 ipv6= k8sPodName=openstack/glance-metadefs-load-zttj4 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b877756cf0 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3376 identity=35254 ipv4=10.0.0.99 ipv6= k8sPodName=openstack/glance-metadefs-load-zttj4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=b877756cf0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3376 identity=35254 ipv4=10.0.0.99 ipv6= k8sPodName=openstack/glance-metadefs-load-zttj4 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=b877756cf0 endpointID=3376 k8sNamespace=openstack k8sPodName=glance-metadefs-load-zttj4 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=16881844-5a9e-47ad-9e8c-89e806044201 k8s:batch.kubernetes.io/job-name=glance-metadefs-load k8s:component=metadefs_load k8s:controller-uid=16881844-5a9e-47ad-9e8c-89e806044201 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-metadefs-load k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=b877756cf0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3376 identity=35254 ipv4=10.0.0.99 ipv6= k8sPodName=openstack/glance-metadefs-load-zttj4 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.153 223d7163-d9d7-49c7-ac02-10862bed6292 default }" containerID=0bbf80763202898ede044327938d886969ae9243c590ee1fbf2549471058a56e datapathConfiguration="&{false false false false false }" interface=lxcca7e10d8438e k8sPodName=openstack/glance-storage-init-r6b4h labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0bbf807632 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=703 ipv4=10.0.0.153 ipv6= k8sPodName=openstack/glance-storage-init-r6b4h subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0bbf807632 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=703 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=2a392130-adc7-4a82-9be4-2b648bffe282,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=2a392130-adc7-4a82-9be4-2b648bffe282,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.153 ipv6= k8sPodName=openstack/glance-storage-init-r6b4h subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=2a392130-adc7-4a82-9be4-2b648bffe282;k8s:batch.kubernetes.io/job-name=glance-storage-init;k8s:component=storage-init;k8s:controller-uid=2a392130-adc7-4a82-9be4-2b648bffe282;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-storage-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0bbf807632 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=703 identity=28534 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=2a392130-adc7-4a82-9be4-2b648bffe282,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=2a392130-adc7-4a82-9be4-2b648bffe282,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.153 ipv6= k8sPodName=openstack/glance-storage-init-r6b4h oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0bbf807632 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=703 identity=28534 ipv4=10.0.0.153 ipv6= k8sPodName=openstack/glance-storage-init-r6b4h subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=0bbf807632 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=703 identity=28534 ipv4=10.0.0.153 ipv6= k8sPodName=openstack/glance-storage-init-r6b4h subsys=endpoint level=info msg="Successful endpoint creation" containerID=0bbf807632 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=703 identity=28534 ipv4=10.0.0.153 ipv6= k8sPodName=openstack/glance-storage-init-r6b4h subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=0bbf807632 endpointID=703 k8sNamespace=openstack k8sPodName=glance-storage-init-r6b4h subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=2a392130-adc7-4a82-9be4-2b648bffe282 k8s:batch.kubernetes.io/job-name=glance-storage-init k8s:component=storage-init k8s:controller-uid=2a392130-adc7-4a82-9be4-2b648bffe282 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-storage-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=0bbf807632 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=703 identity=28534 ipv4=10.0.0.153 ipv6= k8sPodName=openstack/glance-storage-init-r6b4h subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.64 f925522a-7f9a-429d-8279-cd0228aec2a2 default }" containerID=8c0638846a3b9a5f1231e8a7ddfa09e91d31165638a2b496a8ecc830178faba8 datapathConfiguration="&{false false false false false }" interface=lxc2076636c9fd4 k8sPodName=openstack/glance-api-7d87bddf44-tlg5l labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8c0638846a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3533 ipv4=10.0.0.64 ipv6= k8sPodName=openstack/glance-api-7d87bddf44-tlg5l subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8c0638846a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3533 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.64 ipv6= k8sPodName=openstack/glance-api-7d87bddf44-tlg5l subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=8c0638846a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3533 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.64 ipv6= k8sPodName=openstack/glance-api-7d87bddf44-tlg5l line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8c0638846a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3533 identity=1154 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.64 ipv6= k8sPodName=openstack/glance-api-7d87bddf44-tlg5l oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8c0638846a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3533 identity=1154 ipv4=10.0.0.64 ipv6= k8sPodName=openstack/glance-api-7d87bddf44-tlg5l subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8c0638846a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3533 identity=1154 ipv4=10.0.0.64 ipv6= k8sPodName=openstack/glance-api-7d87bddf44-tlg5l subsys=endpoint level=info msg="Successful endpoint creation" containerID=8c0638846a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3533 identity=1154 ipv4=10.0.0.64 ipv6= k8sPodName=openstack/glance-api-7d87bddf44-tlg5l subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.37 cc7e2736-876b-4b02-82b8-137a2d34999a default }" containerID=e894d64abfe37a0130e637e35d7fbc6fd9246880d0a7689fca4482b90ccc04c1 datapathConfiguration="&{false false false false false }" interface=lxc72398433a97e k8sPodName=openstack/staffeln-conductor-65c7f44696-6mc9p labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e894d64abf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2894 ipv4=10.0.0.37 ipv6= k8sPodName=openstack/staffeln-conductor-65c7f44696-6mc9p subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e894d64abf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2894 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.37 ipv6= k8sPodName=openstack/staffeln-conductor-65c7f44696-6mc9p subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=conductor;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e894d64abf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2894 identity=57984 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.37 ipv6= k8sPodName=openstack/staffeln-conductor-65c7f44696-6mc9p oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e894d64abf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2894 identity=57984 ipv4=10.0.0.37 ipv6= k8sPodName=openstack/staffeln-conductor-65c7f44696-6mc9p subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.147 d319565e-01d9-402f-be9b-9e0bdbd1ef58 default }" containerID=661960c5f8d3b0373f4329be467edcc4eb52a46aeb0f42503d9413e1b041f6ee datapathConfiguration="&{false false false false false }" interface=lxccbbfac83b8d0 k8sPodName=openstack/staffeln-db-init-8mj7n labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=661960c5f8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1809 ipv4=10.0.0.147 ipv6= k8sPodName=openstack/staffeln-db-init-8mj7n subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=661960c5f8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1809 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=b633e39c-462b-40c1-b62a-5aef0f5c37ea,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=b633e39c-462b-40c1-b62a-5aef0f5c37ea,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.147 ipv6= k8sPodName=openstack/staffeln-db-init-8mj7n subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=b633e39c-462b-40c1-b62a-5aef0f5c37ea;k8s:batch.kubernetes.io/job-name=staffeln-db-init;k8s:component=db-init;k8s:controller-uid=b633e39c-462b-40c1-b62a-5aef0f5c37ea;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-init;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=661960c5f8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1809 identity=418 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=b633e39c-462b-40c1-b62a-5aef0f5c37ea,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=b633e39c-462b-40c1-b62a-5aef0f5c37ea,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.147 ipv6= k8sPodName=openstack/staffeln-db-init-8mj7n oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=661960c5f8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1809 identity=418 ipv4=10.0.0.147 ipv6= k8sPodName=openstack/staffeln-db-init-8mj7n subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.69 409bc5a8-d0bf-4ef1-bde3-55bf4fda30b3 default }" containerID=9caccc11d6324ce998d6b0c769cab9bd6b5f08eee72ac0bb8ec84b0fbf8e2c74 datapathConfiguration="&{false false false false false }" interface=lxc1b7760ff2a4d k8sPodName=openstack/staffeln-api-7b5d9f995f-hq5zh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9caccc11d6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=517 ipv4=10.0.0.69 ipv6= k8sPodName=openstack/staffeln-api-7b5d9f995f-hq5zh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9caccc11d6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=517 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.69 ipv6= k8sPodName=openstack/staffeln-api-7b5d9f995f-hq5zh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9caccc11d6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=517 identity=10896 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.69 ipv6= k8sPodName=openstack/staffeln-api-7b5d9f995f-hq5zh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9caccc11d6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=517 identity=10896 ipv4=10.0.0.69 ipv6= k8sPodName=openstack/staffeln-api-7b5d9f995f-hq5zh subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e894d64abf datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2894 identity=57984 ipv4=10.0.0.37 ipv6= k8sPodName=openstack/staffeln-conductor-65c7f44696-6mc9p subsys=endpoint level=info msg="Successful endpoint creation" containerID=e894d64abf datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2894 identity=57984 ipv4=10.0.0.37 ipv6= k8sPodName=openstack/staffeln-conductor-65c7f44696-6mc9p subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=661960c5f8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1809 identity=418 ipv4=10.0.0.147 ipv6= k8sPodName=openstack/staffeln-db-init-8mj7n subsys=endpoint level=info msg="Successful endpoint creation" containerID=661960c5f8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1809 identity=418 ipv4=10.0.0.147 ipv6= k8sPodName=openstack/staffeln-db-init-8mj7n subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=9caccc11d6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=517 identity=10896 ipv4=10.0.0.69 ipv6= k8sPodName=openstack/staffeln-api-7b5d9f995f-hq5zh subsys=endpoint level=info msg="Successful endpoint creation" containerID=9caccc11d6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=517 identity=10896 ipv4=10.0.0.69 ipv6= k8sPodName=openstack/staffeln-api-7b5d9f995f-hq5zh subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=661960c5f8 endpointID=1809 k8sNamespace=openstack k8sPodName=staffeln-db-init-8mj7n subsys=daemon level=info msg="Releasing key" key="[k8s:application=staffeln k8s:batch.kubernetes.io/controller-uid=b633e39c-462b-40c1-b62a-5aef0f5c37ea k8s:batch.kubernetes.io/job-name=staffeln-db-init k8s:component=db-init k8s:controller-uid=b633e39c-462b-40c1-b62a-5aef0f5c37ea k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=staffeln-db-init k8s:release_group=staffeln]" subsys=allocator level=info msg="Removed endpoint" containerID=661960c5f8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1809 identity=418 ipv4=10.0.0.147 ipv6= k8sPodName=openstack/staffeln-db-init-8mj7n subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.190 9a4d4723-cba8-47d5-8682-360afff3335e default }" containerID=f5dd553318204fea0f7cd25a9f2cdcf25c77cec857c7817a9cbfc55c757cb990 datapathConfiguration="&{false false false false false }" interface=lxc4f448f83aa63 k8sPodName=openstack/staffeln-db-sync-2jtbx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f5dd553318 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=193 ipv4=10.0.0.190 ipv6= k8sPodName=openstack/staffeln-db-sync-2jtbx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f5dd553318 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=193 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=2c2894eb-45a8-4a4d-b6a5-c4c816aebeeb,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=2c2894eb-45a8-4a4d-b6a5-c4c816aebeeb,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.190 ipv6= k8sPodName=openstack/staffeln-db-sync-2jtbx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=2c2894eb-45a8-4a4d-b6a5-c4c816aebeeb;k8s:batch.kubernetes.io/job-name=staffeln-db-sync;k8s:component=db-sync;k8s:controller-uid=2c2894eb-45a8-4a4d-b6a5-c4c816aebeeb;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-sync;k8s:release_group=staffeln;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=f5dd553318 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=193 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.190 ipv6= k8sPodName=openstack/staffeln-db-sync-2jtbx line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=f5dd553318 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=193 identity=39640 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=2c2894eb-45a8-4a4d-b6a5-c4c816aebeeb,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=2c2894eb-45a8-4a4d-b6a5-c4c816aebeeb,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.190 ipv6= k8sPodName=openstack/staffeln-db-sync-2jtbx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f5dd553318 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=193 identity=39640 ipv4=10.0.0.190 ipv6= k8sPodName=openstack/staffeln-db-sync-2jtbx subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f5dd553318 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=193 identity=39640 ipv4=10.0.0.190 ipv6= k8sPodName=openstack/staffeln-db-sync-2jtbx subsys=endpoint level=info msg="Successful endpoint creation" containerID=f5dd553318 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=193 identity=39640 ipv4=10.0.0.190 ipv6= k8sPodName=openstack/staffeln-db-sync-2jtbx subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager