level=info msg="Memory available for map entries (0.003% of 67421642752B): 168554106B" subsys=config level=info msg="option bpf-ct-global-tcp-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-ct-global-any-max set by dynamic sizing to 295708" subsys=config level=info msg="option bpf-nat-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-neigh-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-sock-rev-map-max set by dynamic sizing to 295708" subsys=config level=info msg=" --agent-health-port='9879'" subsys=daemon level=info msg=" --agent-labels=''" subsys=daemon level=info msg=" --agent-liveness-update-interval='1s'" subsys=daemon level=info msg=" --agent-not-ready-taint-key='node.cilium.io/agent-not-ready'" subsys=daemon level=info msg=" --allocator-list-timeout='3m0s'" subsys=daemon level=info msg=" --allow-icmp-frag-needed='true'" subsys=daemon level=info msg=" --allow-localhost='auto'" subsys=daemon level=info msg=" --annotate-k8s-node='false'" subsys=daemon level=info msg=" --api-rate-limit=''" subsys=daemon level=info msg=" --arping-refresh-period='30s'" subsys=daemon level=info msg=" --auto-create-cilium-node-resource='true'" subsys=daemon level=info msg=" --auto-direct-node-routes='false'" subsys=daemon level=info msg=" --bgp-announce-lb-ip='false'" subsys=daemon level=info msg=" --bgp-announce-pod-cidr='false'" subsys=daemon level=info msg=" --bgp-config-path='/var/lib/cilium/bgp/config.yaml'" subsys=daemon level=info msg=" --bpf-auth-map-max='524288'" subsys=daemon level=info msg=" --bpf-ct-global-any-max='262144'" subsys=daemon level=info msg=" --bpf-ct-global-tcp-max='524288'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-fin='10s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-syn='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp-grace='1m0s'" subsys=daemon level=info msg=" --bpf-filter-priority='1'" subsys=daemon level=info msg=" --bpf-fragments-map-max='8192'" subsys=daemon level=info msg=" --bpf-lb-acceleration='disabled'" subsys=daemon level=info msg=" --bpf-lb-affinity-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-algorithm='random'" subsys=daemon level=info msg=" --bpf-lb-dev-ip-addr-inherit=''" subsys=daemon level=info msg=" --bpf-lb-dsr-dispatch='opt'" subsys=daemon level=info msg=" --bpf-lb-dsr-l4-xlate='frontend'" subsys=daemon level=info msg=" --bpf-lb-external-clusterip='false'" subsys=daemon level=info msg=" --bpf-lb-maglev-hash-seed='JLfvgnHc2kaSUFaI'" subsys=daemon level=info msg=" --bpf-lb-maglev-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-maglev-table-size='16381'" subsys=daemon level=info msg=" --bpf-lb-map-max='65536'" subsys=daemon level=info msg=" --bpf-lb-mode='snat'" subsys=daemon level=info msg=" --bpf-lb-rev-nat-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-rss-ipv4-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-rss-ipv6-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-service-backend-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-service-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-sock='false'" subsys=daemon level=info msg=" --bpf-lb-sock-hostns-only='false'" subsys=daemon level=info msg=" --bpf-lb-source-range-map-max='0'" subsys=daemon level=info msg=" --bpf-map-dynamic-size-ratio='0.0025'" subsys=daemon level=info msg=" --bpf-map-event-buffers=''" subsys=daemon level=info msg=" --bpf-nat-global-max='524288'" subsys=daemon level=info msg=" --bpf-neigh-global-max='524288'" subsys=daemon level=info msg=" --bpf-policy-map-full-reconciliation-interval='15m0s'" subsys=daemon level=info msg=" --bpf-policy-map-max='16384'" subsys=daemon level=info msg=" --bpf-root='/sys/fs/bpf'" subsys=daemon level=info msg=" --bpf-sock-rev-map-max='262144'" subsys=daemon level=info msg=" --bypass-ip-availability-upon-restore='false'" subsys=daemon level=info msg=" --certificates-directory='/var/run/cilium/certs'" subsys=daemon level=info msg=" --cflags=''" subsys=daemon level=info msg=" --cgroup-root='/run/cilium/cgroupv2'" subsys=daemon level=info msg=" --cilium-endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --cluster-health-port='4240'" subsys=daemon level=info msg=" --cluster-id='0'" subsys=daemon level=info msg=" --cluster-name='default'" subsys=daemon level=info msg=" --cluster-pool-ipv4-cidr='10.0.0.0/8'" subsys=daemon level=info msg=" --cluster-pool-ipv4-mask-size='24'" subsys=daemon level=info msg=" --clustermesh-config='/var/lib/cilium/clustermesh/'" subsys=daemon level=info msg=" --clustermesh-ip-identities-sync-timeout='1m0s'" subsys=daemon level=info msg=" --cmdref=''" subsys=daemon level=info msg=" --cni-chaining-mode='none'" subsys=daemon level=info msg=" --cni-chaining-target=''" subsys=daemon level=info msg=" --cni-exclusive='true'" subsys=daemon level=info msg=" --cni-external-routing='false'" subsys=daemon level=info msg=" --cni-log-file='/var/run/cilium/cilium-cni.log'" subsys=daemon level=info msg=" --cnp-node-status-gc-interval='0s'" subsys=daemon level=info msg=" --config=''" subsys=daemon level=info msg=" --config-dir='/tmp/cilium/config-map'" subsys=daemon level=info msg=" --config-sources='config-map:kube-system/cilium-config'" subsys=daemon level=info msg=" --conntrack-gc-interval='0s'" subsys=daemon level=info msg=" --conntrack-gc-max-interval='0s'" subsys=daemon level=info msg=" --crd-wait-timeout='5m0s'" subsys=daemon level=info msg=" --custom-cni-conf='false'" subsys=daemon level=info msg=" --datapath-mode='veth'" subsys=daemon level=info msg=" --debug='false'" subsys=daemon level=info msg=" --debug-verbose=''" subsys=daemon level=info msg=" --derive-masquerade-ip-addr-from-device=''" subsys=daemon level=info msg=" --devices=''" subsys=daemon level=info msg=" --direct-routing-device=''" subsys=daemon level=info msg=" --disable-cnp-status-updates='true'" subsys=daemon level=info msg=" --disable-endpoint-crd='false'" subsys=daemon level=info msg=" --disable-envoy-version-check='false'" subsys=daemon level=info msg=" --disable-iptables-feeder-rules=''" subsys=daemon level=info msg=" --dns-max-ips-per-restored-rule='1000'" subsys=daemon level=info msg=" --dns-policy-unload-on-shutdown='false'" subsys=daemon level=info msg=" --dnsproxy-concurrency-limit='0'" subsys=daemon level=info msg=" --dnsproxy-concurrency-processing-grace-period='0s'" subsys=daemon level=info msg=" --dnsproxy-enable-transparent-mode='true'" subsys=daemon level=info msg=" --dnsproxy-lock-count='128'" subsys=daemon level=info msg=" --dnsproxy-lock-timeout='500ms'" subsys=daemon level=info msg=" --egress-gateway-policy-map-max='16384'" subsys=daemon level=info msg=" --egress-gateway-reconciliation-trigger-interval='1s'" subsys=daemon level=info msg=" --egress-masquerade-interfaces=''" subsys=daemon level=info msg=" --egress-multi-home-ip-rule-compat='false'" subsys=daemon level=info msg=" --enable-auto-protect-node-port-range='true'" subsys=daemon level=info msg=" --enable-bandwidth-manager='false'" subsys=daemon level=info msg=" --enable-bbr='false'" subsys=daemon level=info msg=" --enable-bgp-control-plane='false'" subsys=daemon level=info msg=" --enable-bpf-clock-probe='false'" subsys=daemon level=info msg=" --enable-bpf-masquerade='false'" subsys=daemon level=info msg=" --enable-bpf-tproxy='false'" subsys=daemon level=info msg=" --enable-cilium-api-server-access='*'" subsys=daemon level=info msg=" --enable-cilium-endpoint-slice='false'" subsys=daemon level=info msg=" --enable-cilium-health-api-server-access='*'" subsys=daemon level=info msg=" --enable-custom-calls='false'" subsys=daemon level=info msg=" --enable-endpoint-health-checking='true'" subsys=daemon level=info msg=" --enable-endpoint-routes='false'" subsys=daemon level=info msg=" --enable-envoy-config='false'" subsys=daemon level=info msg=" --enable-external-ips='false'" subsys=daemon level=info msg=" --enable-health-check-nodeport='true'" subsys=daemon level=info msg=" --enable-health-checking='true'" subsys=daemon level=info msg=" --enable-high-scale-ipcache='false'" subsys=daemon level=info msg=" --enable-host-firewall='false'" subsys=daemon level=info msg=" --enable-host-legacy-routing='false'" subsys=daemon level=info msg=" --enable-host-port='false'" subsys=daemon level=info msg=" --enable-hubble='false'" subsys=daemon level=info msg=" --enable-hubble-recorder-api='true'" subsys=daemon level=info msg=" --enable-icmp-rules='true'" subsys=daemon level=info msg=" --enable-identity-mark='true'" subsys=daemon level=info msg=" --enable-ip-masq-agent='false'" subsys=daemon level=info msg=" --enable-ipsec='false'" subsys=daemon level=info msg=" --enable-ipsec-key-watcher='true'" subsys=daemon level=info msg=" --enable-ipv4='true'" subsys=daemon level=info msg=" --enable-ipv4-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv4-egress-gateway='false'" subsys=daemon level=info msg=" --enable-ipv4-fragment-tracking='true'" subsys=daemon level=info msg=" --enable-ipv4-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6='false'" subsys=daemon level=info msg=" --enable-ipv6-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv6-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6-ndp='false'" subsys=daemon level=info msg=" --enable-k8s='true'" subsys=daemon level=info msg=" --enable-k8s-api-discovery='false'" subsys=daemon level=info msg=" --enable-k8s-endpoint-slice='true'" subsys=daemon level=info msg=" --enable-k8s-event-handover='false'" subsys=daemon level=info msg=" --enable-k8s-networkpolicy='true'" subsys=daemon level=info msg=" --enable-k8s-terminating-endpoint='true'" subsys=daemon level=info msg=" --enable-l2-announcements='false'" subsys=daemon level=info msg=" --enable-l2-neigh-discovery='true'" subsys=daemon level=info msg=" --enable-l2-pod-announcements='false'" subsys=daemon level=info msg=" --enable-l7-proxy='true'" subsys=daemon level=info msg=" --enable-local-node-route='true'" subsys=daemon level=info msg=" --enable-local-redirect-policy='false'" subsys=daemon level=info msg=" --enable-mke='false'" subsys=daemon level=info msg=" --enable-monitor='true'" subsys=daemon level=info msg=" --enable-nat46x64-gateway='false'" subsys=daemon level=info msg=" --enable-node-port='false'" subsys=daemon level=info msg=" --enable-pmtu-discovery='false'" subsys=daemon level=info msg=" --enable-policy='default'" subsys=daemon level=info msg=" --enable-recorder='false'" subsys=daemon level=info msg=" --enable-remote-node-identity='true'" subsys=daemon level=info msg=" --enable-runtime-device-detection='false'" subsys=daemon level=info msg=" --enable-sctp='false'" subsys=daemon level=info msg=" --enable-service-topology='false'" subsys=daemon level=info msg=" --enable-session-affinity='false'" subsys=daemon level=info msg=" --enable-srv6='false'" subsys=daemon level=info msg=" --enable-stale-cilium-endpoint-cleanup='true'" subsys=daemon level=info msg=" --enable-svc-source-range-check='true'" subsys=daemon level=info msg=" --enable-tracing='false'" subsys=daemon level=info msg=" --enable-unreachable-routes='false'" subsys=daemon level=info msg=" --enable-vtep='false'" subsys=daemon level=info msg=" --enable-well-known-identities='false'" subsys=daemon level=info msg=" --enable-wireguard='false'" subsys=daemon level=info msg=" --enable-wireguard-userspace-fallback='false'" subsys=daemon level=info msg=" --enable-xdp-prefilter='false'" subsys=daemon level=info msg=" --enable-xt-socket-fallback='true'" subsys=daemon level=info msg=" --encrypt-interface=''" subsys=daemon level=info msg=" --encrypt-node='false'" subsys=daemon level=info msg=" --endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --endpoint-queue-size='25'" subsys=daemon level=info msg=" --endpoint-status=''" subsys=daemon level=info msg=" --envoy-config-timeout='2m0s'" subsys=daemon level=info msg=" --envoy-log=''" subsys=daemon level=info msg=" --exclude-local-address=''" subsys=daemon level=info msg=" --external-envoy-proxy='false'" subsys=daemon level=info msg=" --fixed-identity-mapping=''" subsys=daemon level=info msg=" --fqdn-regex-compile-lru-size='1024'" subsys=daemon level=info msg=" --gops-port='9890'" subsys=daemon level=info msg=" --http-403-msg=''" subsys=daemon level=info msg=" --http-idle-timeout='0'" subsys=daemon level=info msg=" --http-max-grpc-timeout='0'" subsys=daemon level=info msg=" --http-normalize-path='true'" subsys=daemon level=info msg=" --http-request-timeout='3600'" subsys=daemon level=info msg=" --http-retry-count='3'" subsys=daemon level=info msg=" --http-retry-timeout='0'" subsys=daemon level=info msg=" --hubble-disable-tls='false'" subsys=daemon level=info msg=" --hubble-event-buffer-capacity='4095'" subsys=daemon level=info msg=" --hubble-event-queue-size='0'" subsys=daemon level=info msg=" --hubble-export-file-compress='false'" subsys=daemon level=info msg=" --hubble-export-file-max-backups='5'" subsys=daemon level=info msg=" --hubble-export-file-max-size-mb='10'" subsys=daemon level=info msg=" --hubble-export-file-path=''" subsys=daemon level=info msg=" --hubble-listen-address=''" subsys=daemon level=info msg=" --hubble-metrics=''" subsys=daemon level=info msg=" --hubble-metrics-server=''" subsys=daemon level=info msg=" --hubble-monitor-events=''" subsys=daemon level=info msg=" --hubble-prefer-ipv6='false'" subsys=daemon level=info msg=" --hubble-recorder-sink-queue-size='1024'" subsys=daemon level=info msg=" --hubble-recorder-storage-path='/var/run/cilium/pcaps'" subsys=daemon level=info msg=" --hubble-skip-unknown-cgroup-ids='true'" subsys=daemon level=info msg=" --hubble-socket-path='/var/run/cilium/hubble.sock'" subsys=daemon level=info msg=" --hubble-tls-cert-file=''" subsys=daemon level=info msg=" --hubble-tls-client-ca-files=''" subsys=daemon level=info msg=" --hubble-tls-key-file=''" subsys=daemon level=info msg=" --identity-allocation-mode='crd'" subsys=daemon level=info msg=" --identity-change-grace-period='5s'" subsys=daemon level=info msg=" --identity-gc-interval='15m0s'" subsys=daemon level=info msg=" --identity-heartbeat-timeout='30m0s'" subsys=daemon level=info msg=" --identity-restore-grace-period='10m0s'" subsys=daemon level=info msg=" --install-egress-gateway-routes='false'" subsys=daemon level=info msg=" --install-iptables-rules='true'" subsys=daemon level=info msg=" --install-no-conntrack-iptables-rules='false'" subsys=daemon level=info msg=" --ip-allocation-timeout='2m0s'" subsys=daemon level=info msg=" --ip-masq-agent-config-path='/etc/config/ip-masq-agent'" subsys=daemon level=info msg=" --ipam='cluster-pool'" subsys=daemon level=info msg=" --ipam-cilium-node-update-rate='15s'" subsys=daemon level=info msg=" --ipam-multi-pool-pre-allocation='default=8'" subsys=daemon level=info msg=" --ipsec-key-file=''" subsys=daemon level=info msg=" --ipsec-key-rotation-duration='5m0s'" subsys=daemon level=info msg=" --iptables-lock-timeout='5s'" subsys=daemon level=info msg=" --iptables-random-fully='false'" subsys=daemon level=info msg=" --ipv4-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv4-node='auto'" subsys=daemon level=info msg=" --ipv4-pod-subnets=''" subsys=daemon level=info msg=" --ipv4-range='auto'" subsys=daemon level=info msg=" --ipv4-service-loopback-address='169.254.42.1'" subsys=daemon level=info msg=" --ipv4-service-range='auto'" subsys=daemon level=info msg=" --ipv6-cluster-alloc-cidr='f00d::/64'" subsys=daemon level=info msg=" --ipv6-mcast-device=''" subsys=daemon level=info msg=" --ipv6-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv6-node='auto'" subsys=daemon level=info msg=" --ipv6-pod-subnets=''" subsys=daemon level=info msg=" --ipv6-range='auto'" subsys=daemon level=info msg=" --ipv6-service-range='auto'" subsys=daemon level=info msg=" --join-cluster='false'" subsys=daemon level=info msg=" --k8s-api-server=''" subsys=daemon level=info msg=" --k8s-client-burst='10'" subsys=daemon level=info msg=" --k8s-client-qps='5'" subsys=daemon level=info msg=" --k8s-heartbeat-timeout='30s'" subsys=daemon level=info msg=" --k8s-kubeconfig-path=''" subsys=daemon level=info msg=" --k8s-namespace='kube-system'" subsys=daemon level=info msg=" --k8s-require-ipv4-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-require-ipv6-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-service-cache-size='128'" subsys=daemon level=info msg=" --k8s-service-proxy-name=''" subsys=daemon level=info msg=" --k8s-sync-timeout='3m0s'" subsys=daemon level=info msg=" --k8s-watcher-endpoint-selector='metadata.name!=kube-scheduler,metadata.name!=kube-controller-manager,metadata.name!=etcd-operator,metadata.name!=gcp-controller-manager'" subsys=daemon level=info msg=" --keep-config='false'" subsys=daemon level=info msg=" --kube-proxy-replacement='disabled'" subsys=daemon level=info msg=" --kube-proxy-replacement-healthz-bind-address=''" subsys=daemon level=info msg=" --kvstore=''" subsys=daemon level=info msg=" --kvstore-connectivity-timeout='2m0s'" subsys=daemon level=info msg=" --kvstore-lease-ttl='15m0s'" subsys=daemon level=info msg=" --kvstore-max-consecutive-quorum-errors='2'" subsys=daemon level=info msg=" --kvstore-opt=''" subsys=daemon level=info msg=" --kvstore-periodic-sync='5m0s'" subsys=daemon level=info msg=" --l2-announcements-lease-duration='15s'" subsys=daemon level=info msg=" --l2-announcements-renew-deadline='5s'" subsys=daemon level=info msg=" --l2-announcements-retry-period='2s'" subsys=daemon level=info msg=" --l2-pod-announcements-interface=''" subsys=daemon level=info msg=" --label-prefix-file=''" subsys=daemon level=info msg=" --labels=''" subsys=daemon level=info msg=" --lib-dir='/var/lib/cilium'" subsys=daemon level=info msg=" --local-max-addr-scope='252'" subsys=daemon level=info msg=" --local-router-ipv4=''" subsys=daemon level=info msg=" --local-router-ipv6=''" subsys=daemon level=info msg=" --log-driver=''" subsys=daemon level=info msg=" --log-opt=''" subsys=daemon level=info msg=" --log-system-load='false'" subsys=daemon level=info msg=" --max-controller-interval='0'" subsys=daemon level=info msg=" --mesh-auth-enabled='true'" subsys=daemon level=info msg=" --mesh-auth-gc-interval='5m0s'" subsys=daemon level=info msg=" --mesh-auth-mutual-listener-port='0'" subsys=daemon level=info msg=" --mesh-auth-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-rotated-identities-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-signal-backoff-duration='1s'" subsys=daemon level=info msg=" --mesh-auth-spiffe-trust-domain='spiffe.cilium'" subsys=daemon level=info msg=" --mesh-auth-spire-admin-socket=''" subsys=daemon level=info msg=" --metrics=''" subsys=daemon level=info msg=" --mke-cgroup-mount=''" subsys=daemon level=info msg=" --monitor-aggregation='medium'" subsys=daemon level=info msg=" --monitor-aggregation-flags='all'" subsys=daemon level=info msg=" --monitor-aggregation-interval='5s'" subsys=daemon level=info msg=" --monitor-queue-size='0'" subsys=daemon level=info msg=" --mtu='0'" subsys=daemon level=info msg=" --node-encryption-opt-out-labels='node-role.kubernetes.io/control-plane'" subsys=daemon level=info msg=" --node-port-acceleration='disabled'" subsys=daemon level=info msg=" --node-port-algorithm='random'" subsys=daemon level=info msg=" --node-port-bind-protection='true'" subsys=daemon level=info msg=" --node-port-mode='snat'" subsys=daemon level=info msg=" --node-port-range='30000,32767'" subsys=daemon level=info msg=" --nodes-gc-interval='5m0s'" subsys=daemon level=info msg=" --operator-api-serve-addr='127.0.0.1:9234'" subsys=daemon level=info msg=" --policy-audit-mode='false'" subsys=daemon level=info msg=" --policy-queue-size='100'" subsys=daemon level=info msg=" --policy-trigger-interval='1s'" subsys=daemon level=info msg=" --pprof='false'" subsys=daemon level=info msg=" --pprof-address='localhost'" subsys=daemon level=info msg=" --pprof-port='6060'" subsys=daemon level=info msg=" --preallocate-bpf-maps='false'" subsys=daemon level=info msg=" --prepend-iptables-chains='true'" subsys=daemon level=info msg=" --procfs='/host/proc'" subsys=daemon level=info msg=" --prometheus-serve-addr=':9962'" subsys=daemon level=info msg=" --proxy-connect-timeout='2'" subsys=daemon level=info msg=" --proxy-gid='1337'" subsys=daemon level=info msg=" --proxy-idle-timeout-seconds='60'" subsys=daemon level=info msg=" --proxy-max-connection-duration-seconds='0'" subsys=daemon level=info msg=" --proxy-max-requests-per-connection='0'" subsys=daemon level=info msg=" --proxy-prometheus-port='9964'" subsys=daemon level=info msg=" --read-cni-conf=''" subsys=daemon level=info msg=" --remove-cilium-node-taints='true'" subsys=daemon level=info msg=" --restore='true'" subsys=daemon level=info msg=" --route-metric='0'" subsys=daemon level=info msg=" --routing-mode='tunnel'" subsys=daemon level=info msg=" --set-cilium-is-up-condition='true'" subsys=daemon level=info msg=" --set-cilium-node-taints='true'" subsys=daemon level=info msg=" --sidecar-istio-proxy-image='cilium/istio_proxy'" subsys=daemon level=info msg=" --single-cluster-route='false'" subsys=daemon level=info msg=" --skip-cnp-status-startup-clean='false'" subsys=daemon level=info msg=" --socket-path='/var/run/cilium/cilium.sock'" subsys=daemon level=info msg=" --srv6-encap-mode='reduced'" subsys=daemon level=info msg=" --state-dir='/var/run/cilium'" subsys=daemon level=info msg=" --synchronize-k8s-nodes='true'" subsys=daemon level=info msg=" --tofqdns-dns-reject-response-code='refused'" subsys=daemon level=info msg=" --tofqdns-enable-dns-compression='true'" subsys=daemon level=info msg=" --tofqdns-endpoint-max-ip-per-hostname='50'" subsys=daemon level=info msg=" --tofqdns-idle-connection-grace-period='0s'" subsys=daemon level=info msg=" --tofqdns-max-deferred-connection-deletes='10000'" subsys=daemon level=info msg=" --tofqdns-min-ttl='0'" subsys=daemon level=info msg=" --tofqdns-pre-cache=''" subsys=daemon level=info msg=" --tofqdns-proxy-port='0'" subsys=daemon level=info msg=" --tofqdns-proxy-response-max-delay='100ms'" subsys=daemon level=info msg=" --trace-payloadlen='128'" subsys=daemon level=info msg=" --trace-sock='true'" subsys=daemon level=info msg=" --tunnel=''" subsys=daemon level=info msg=" --tunnel-port='6082'" subsys=daemon level=info msg=" --tunnel-protocol='geneve'" subsys=daemon level=info msg=" --unmanaged-pod-watcher-interval='15'" subsys=daemon level=info msg=" --use-cilium-internal-ip-for-ipsec='false'" subsys=daemon level=info msg=" --version='false'" subsys=daemon level=info msg=" --vlan-bpf-bypass=''" subsys=daemon level=info msg=" --vtep-cidr=''" subsys=daemon level=info msg=" --vtep-endpoint=''" subsys=daemon level=info msg=" --vtep-mac=''" subsys=daemon level=info msg=" --vtep-mask=''" subsys=daemon level=info msg=" --wireguard-encapsulate='false'" subsys=daemon level=info msg=" --write-cni-conf-when-ready='/host/etc/cni/net.d/05-cilium.conflist'" subsys=daemon level=info msg=" _ _ _" subsys=daemon level=info msg=" ___|_| |_|_ _ _____" subsys=daemon level=info msg="| _| | | | | | |" subsys=daemon level=info msg="|___|_|_|_|___|_|_|_|" subsys=daemon level=info msg="Cilium 1.14.8 cf6e022e 2024-03-13T12:23:35-04:00 go version go1.21.8 linux/amd64" subsys=daemon level=info msg="clang (10.0.0) and kernel (5.15.0) versions: OK!" subsys=linux-datapath level=info msg="linking environment: OK!" subsys=linux-datapath level=info msg="Kernel config file not found: if the agent fails to start, check the system requirements at https://docs.cilium.io/en/stable/operations/system_requirements" subsys=probes level=info msg="Detected mounted BPF filesystem at /sys/fs/bpf" subsys=bpf level=info msg="Mounted cgroupv2 filesystem at /run/cilium/cgroupv2" subsys=cgroups level=info msg="Parsing base label prefixes from default label list" subsys=labels-filter level=info msg="Parsing additional label prefixes from user inputs: []" subsys=labels-filter level=info msg="Final label prefixes to be used for identity evaluation:" subsys=labels-filter level=info msg=" - reserved:.*" subsys=labels-filter level=info msg=" - :io\\.kubernetes\\.pod\\.namespace" subsys=labels-filter level=info msg=" - :io\\.cilium\\.k8s\\.namespace\\.labels" subsys=labels-filter level=info msg=" - :app\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:io\\.kubernetes" subsys=labels-filter level=info msg=" - !:kubernetes\\.io" subsys=labels-filter level=info msg=" - !:.*beta\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:k8s\\.io" subsys=labels-filter level=info msg=" - !:pod-template-generation" subsys=labels-filter level=info msg=" - !:pod-template-hash" subsys=labels-filter level=info msg=" - !:controller-revision-hash" subsys=labels-filter level=info msg=" - !:annotation.*" subsys=labels-filter level=info msg=" - !:etcd_node" subsys=labels-filter level=info msg=Invoked duration=1.016179ms function="pprof.glob..func1 (cell.go:50)" subsys=hive level=info msg=Invoked duration="56.791µs" function="gops.registerGopsHooks (cell.go:38)" subsys=hive level=info msg=Invoked duration=1.019131ms function="metrics.NewRegistry (registry.go:65)" subsys=hive level=info msg=Invoked duration="12.091µs" function="metrics.glob..func1 (cell.go:12)" subsys=hive level=info msg="Spire Delegate API Client is disabled as no socket path is configured" subsys=spire-delegate level=info msg="Mutual authentication handler is disabled as no port is configured" subsys=auth level=info msg=Invoked duration=94.178617ms function="cmd.glob..func4 (daemon_main.go:1607)" subsys=hive level=info msg=Invoked duration="12.97µs" function="gc.registerSignalHandler (cell.go:47)" subsys=hive level=info msg=Invoked duration="18.01µs" function="utime.initUtimeSync (cell.go:29)" subsys=hive level=info msg=Invoked duration="70.041µs" function="agentliveness.newAgentLivenessUpdater (agent_liveness.go:43)" subsys=hive level=info msg=Invoked duration="57.861µs" function="l2responder.NewL2ResponderReconciler (l2responder.go:63)" subsys=hive level=info msg=Invoked duration="67.521µs" function="garp.newGARPProcessor (processor.go:27)" subsys=hive level=info msg=Starting subsys=hive level=info msg="Started gops server" address="127.0.0.1:9890" subsys=gops level=info msg="Start hook executed" duration="387.838µs" function="gops.registerGopsHooks.func1 (cell.go:43)" subsys=hive level=info msg="Start hook executed" duration="1.8µs" function="metrics.NewRegistry.func1 (registry.go:86)" subsys=hive level=info msg="Establishing connection to apiserver" host="https://10.96.0.1:443" subsys=k8s-client level=info msg="Serving prometheus metrics on :9962" subsys=metrics level=info msg="Connected to apiserver" subsys=k8s-client level=info msg="Start hook executed" duration=11.485104ms function="client.(*compositeClientset).onStart" subsys=hive level=info msg="Start hook executed" duration=8.536567ms function="authmap.newAuthMap.func1 (cell.go:27)" subsys=hive level=info msg="Start hook executed" duration="31.51µs" function="configmap.newMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="61.601µs" function="signalmap.newMap.func1 (cell.go:44)" subsys=hive level=info msg="Start hook executed" duration="272.216µs" function="nodemap.newNodeMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="102.182µs" function="eventsmap.newEventsMap.func1 (cell.go:35)" subsys=hive level=info msg="Start hook executed" duration="78.352µs" function="*cni.cniConfigManager.Start" subsys=hive level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Wrote CNI configuration file to /host/etc/cni/net.d/05-cilium.conflist" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Start hook executed" duration=50.687439ms function="datapath.newDatapath.func1 (cells.go:113)" subsys=hive level=info msg="Restored 0 node IDs from the BPF map" subsys=linux-datapath level=info msg="Start hook executed" duration="89.792µs" function="datapath.newDatapath.func2 (cells.go:126)" subsys=hive level=info msg="Start hook executed" duration="11.88µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Node].Start" subsys=hive level=info msg="Start hook executed" duration="2.35µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNode].Start" subsys=hive level=info msg="Using autogenerated IPv4 allocation range" subsys=node v4Prefix=10.123.0.0/16 level=info msg="no local ciliumnode found, will not restore cilium internal ips from k8s" subsys=daemon level=info msg="Start hook executed" duration=104.846247ms function="node.NewLocalNodeStore.func1 (local_node_store.go:76)" subsys=hive level=info msg="Start hook executed" duration="16.111µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration=100.868249ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration="3.54µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Using discoveryv1.EndpointSlice" subsys=k8s level=info msg="Start hook executed" duration=100.216726ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Start hook executed" duration="5.11µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Pod].Start" subsys=hive level=info msg="Start hook executed" duration="3.5µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Namespace].Start" subsys=hive level=info msg="Start hook executed" duration="4.81µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="2.43µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumClusterwideNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="2.32µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumCIDRGroup].Start" subsys=hive level=info msg="Start hook executed" duration="34.47µs" function="endpointmanager.newDefaultEndpointManager.func1 (cell.go:203)" subsys=hive level=info msg="Start hook executed" duration="31.1µs" function="cmd.newPolicyTrifecta.func1 (policy.go:135)" subsys=hive level=info msg="Start hook executed" duration="65.631µs" function="*manager.manager.Start" subsys=hive level=info msg="Serving cilium node monitor v1.2 API at unix:///var/run/cilium/monitor1_2.sock" subsys=monitor-agent level=info msg="Start hook executed" duration="438.209µs" function="agent.newMonitorAgent.func1 (cell.go:61)" subsys=hive level=info msg="Start hook executed" duration="3.75µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumL2AnnouncementPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="10.34µs" function="*job.group.Start" subsys=hive level=info msg="Envoy: Starting xDS gRPC server listening on /var/run/cilium/envoy/sockets/xds.sock" subsys=envoy-manager level=info msg="Start hook executed" duration="296.195µs" function="proxy.newProxy.func1 (cell.go:55)" subsys=hive level=info msg="Start hook executed" duration="794.785µs" function="signal.provideSignalManager.func1 (cell.go:25)" subsys=hive level=info msg="Datapath signal listener running" subsys=signal level=info msg="Start hook executed" duration=1.241404ms function="auth.registerAuthManager.func1 (cell.go:109)" subsys=hive level=info msg="Start hook executed" duration="5.65µs" function="auth.registerGCJobs.func1 (cell.go:158)" subsys=hive level=info msg="Start hook executed" duration="23.29µs" function="*job.group.Start" subsys=hive level=warning msg="Deprecated value for --kube-proxy-replacement: disabled (use either \"true\", or \"false\")" subsys=daemon level=info msg="Auto-disabling \"enable-node-port\", \"enable-external-ips\", \"bpf-lb-sock\", \"enable-host-port\" features and falling back to \"enable-host-legacy-routing\"" subsys=daemon level=info msg="Inheriting MTU from external network interface" device=ens3 ipAddr=199.19.213.123 mtu=1500 subsys=mtu level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_ipcache, recreating and re-pinning map cilium_ipcache" file-path=/sys/fs/bpf/tc/globals/cilium_ipcache name=cilium_ipcache subsys=bpf level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_tunnel_map, recreating and re-pinning map cilium_tunnel_map" file-path=/sys/fs/bpf/tc/globals/cilium_tunnel_map name=cilium_tunnel_map subsys=bpf level=info msg="Restored services from maps" failedServices=0 restoredServices=0 subsys=service level=info msg="Restored backends from maps" failedBackends=0 restoredBackends=0 skippedBackends=0 subsys=service level=info msg="Reading old endpoints..." subsys=daemon level=info msg="No old endpoints found." subsys=daemon level=info msg="Waiting until all Cilium CRDs are available" subsys=k8s level=info msg="All Cilium CRDs have been found and are available" subsys=k8s level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=info msg="Successfully created CiliumNode resource" subsys=nodediscovery level=warning msg="Unable to create CiliumNode resource, will retry" error="ciliumnodes.cilium.io \"instance\" already exists" subsys=nodediscovery level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=warning msg="Waiting for k8s node information" error="required IPv4 PodCIDR not available" subsys=k8s level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=info msg="Received own node information from API server" ipAddr.ipv4=199.19.213.123 ipAddr.ipv6="" k8sNodeIP=199.19.213.123 labels="map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:]" nodeName=instance subsys=k8s v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="k8s mode: Allowing localhost to reach local endpoints" subsys=daemon level=info msg="Detected devices" devices="[]" subsys=linux-datapath level=info msg="Enabling k8s event listener" subsys=k8s-watcher level=info msg="Removing stale endpoint interfaces" subsys=daemon level=info msg="Waiting until local node addressing before starting watchers depending on it" subsys=k8s-watcher level=info msg="Skipping kvstore configuration" subsys=daemon level=info msg="Initializing node addressing" subsys=daemon level=info msg="Initializing cluster-pool IPAM" subsys=ipam v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="Restoring endpoints..." subsys=daemon level=info msg="Endpoints restored" failed=0 restored=0 subsys=daemon level=info msg="Addressing information:" subsys=daemon level=info msg=" Cluster-Name: default" subsys=daemon level=info msg=" Cluster-ID: 0" subsys=daemon level=info msg=" Local node-name: instance" subsys=daemon level=info msg=" Node-IPv6: " subsys=daemon level=info msg=" External-Node IPv4: 199.19.213.123" subsys=daemon level=info msg=" Internal-Node IPv4: 10.0.0.167" subsys=daemon level=info msg=" IPv4 allocation prefix: 10.0.0.0/24" subsys=daemon level=info msg=" Loopback IPv4: 169.254.42.1" subsys=daemon level=info msg=" Local IPv4 addresses:" subsys=daemon level=info msg=" - 199.19.213.123" subsys=daemon level=info msg=" - 172.17.0.100" subsys=daemon level=info msg=" - 10.96.240.200" subsys=daemon level=info msg="Node updated" clusterName=default nodeName=instance subsys=nodemanager level=info msg="Adding local node to cluster" node="{instance default [{InternalIP 199.19.213.123} {CiliumInternalIP 10.0.0.167}] 10.0.0.0/24 [] [] 10.0.0.133 0 local 0 map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:] map[] 1 }" subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Waiting until all pre-existing resources have been received" subsys=k8s-watcher level=info msg="Initializing identity allocator" subsys=identity-cache level=info msg="Allocating identities between range" cluster-id=0 max=65535 min=256 subsys=identity-cache level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.core.bpf_jit_enable sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.all.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.fib_multipath_use_neigh sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.unprivileged_bpf_disabled sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.timer_migration sysParamValue=0 level=info msg="Setting up BPF datapath" bpfClockSource=ktime bpfInsnSet="" subsys=datapath-loader level=info msg="Iptables rules installed" subsys=iptables level=info msg="Adding new proxy port rules for cilium-dns-egress:36379" id=cilium-dns-egress subsys=proxy level=info msg="Iptables proxy rules installed" subsys=iptables level=info msg="Start hook executed" duration=2.456445049s function="cmd.newDaemonPromise.func1 (daemon_main.go:1663)" subsys=hive level=info msg="Starting IP identity watcher" subsys=ipcache level=info msg="Start hook executed" duration="18.51µs" function="utime.initUtimeSync.func1 (cell.go:33)" subsys=hive level=info msg="Start hook executed" duration="12.01µs" function="*job.group.Start" subsys=hive level=info msg="Initializing daemon" subsys=daemon level=info msg="Validating configured node address ranges" subsys=daemon level=info msg="Starting connection tracking garbage collector" subsys=daemon level=info msg="Start hook executed" duration="62.151µs" function="l2respondermap.newMap.func1 (l2_responder_map4.go:44)" subsys=hive level=info msg="Start hook executed" duration="5.27µs" function="*job.group.Start" subsys=hive level=info msg="Initial scan of connection tracking completed" subsys=ct-gc level=info msg="Regenerating restored endpoints" numRestored=0 subsys=daemon level=info msg="Creating host endpoint" subsys=daemon level=info msg="Finished regenerating restored endpoints" regenerated=0 subsys=daemon total=0 level=info msg="Deleted orphan backends" orphanBackends=0 subsys=service level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1761 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1761 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1761 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Launching Cilium health daemon" subsys=daemon level=info msg="Launching Cilium health endpoint" subsys=daemon level=info msg="Started healthz status API server" address="127.0.0.1:9879" subsys=daemon level=info msg="Processing queued endpoint deletion requests from /var/run/cilium/deleteQueue" subsys=daemon level=info msg="processing 0 queued deletion requests" subsys=daemon level=info msg="Initializing Cilium API" subsys=daemon level=info msg="Daemon initialization completed" bootstrapTime=3.380629768s subsys=daemon level=info msg="Hubble server is disabled" subsys=hubble level=info msg="Serving cilium API at unix:///var/run/cilium/cilium.sock" subsys=daemon level=info msg="Compiled new BPF template" BPFCompilationTime=292.864936ms file-path=/var/run/cilium/state/templates/730f93a02722230c95048275baa1bb4766cfcdd27585d010b221c8b336ed52dd/bpf_host.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1761 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.102 ead5ac9b-cf0b-4ba3-8a8c-a21dc0214c18 default }" containerID=cfaf9a879b8a4406a3156d0feea98a28cd7324a718396cfc15a81f38c4f30212 datapathConfiguration="&{false false false false false }" interface=lxc65445c2e1ec0 k8sPodName=kube-system/coredns-7c96b6546b-66skk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=cfaf9a879b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1920 ipv4=10.0.0.102 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-66skk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=cfaf9a879b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1920 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.102 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-66skk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:kube-system]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.143 c25ccbff-69d8-4805-bc84-01ceb831f160 default }" containerID=12311f365382fc2a55b7e6e0d7a5a17bece79f23f5a350583a2b3e91b9c37607 datapathConfiguration="&{false false false false false }" interface=lxc41f6b0323e9b k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-b7pdq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=12311f3653 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1344 ipv4=10.0.0.143 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-b7pdq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=12311f3653 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1344 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=f9464978-39d4-400e-b990-093a0a127cbb,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=f9464978-39d4-400e-b990-093a0a127cbb,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.143 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-b7pdq subsys=endpoint level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=coredns;k8s:io.kubernetes.pod.namespace=kube-system;k8s:k8s-app=kube-dns;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=cfaf9a879b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1920 identity=41545 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.102 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-66skk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=cfaf9a879b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1920 identity=41545 ipv4=10.0.0.102 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-66skk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=12311f3653 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1344 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.143 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-b7pdq line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=certgen;k8s:batch.kubernetes.io/controller-uid=f9464978-39d4-400e-b990-093a0a127cbb;k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen;k8s:controller-uid=f9464978-39d4-400e-b990-093a0a127cbb;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;k8s:job-name=envoy-gateway-gateway-helm-certgen;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=12311f3653 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1344 identity=6414 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=f9464978-39d4-400e-b990-093a0a127cbb,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=f9464978-39d4-400e-b990-093a0a127cbb,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.143 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-b7pdq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=12311f3653 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1344 identity=6414 ipv4=10.0.0.143 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-b7pdq subsys=endpoint level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=386 ipv4=10.0.0.133 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=386 identityLabels="reserved:health" ipv4=10.0.0.133 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=386 identity=4 identityLabels="reserved:health" ipv4=10.0.0.133 ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Compiled new BPF template" BPFCompilationTime=1.086035239s file-path=/var/run/cilium/state/templates/3d17208cbd4cad2a82c77f223e606d33aa027bee35ea6eab883082ed1ebd7297/bpf_lxc.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=386 identity=4 ipv4=10.0.0.133 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=cfaf9a879b datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1920 identity=41545 ipv4=10.0.0.102 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-66skk subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=12311f3653 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1344 identity=6414 ipv4=10.0.0.143 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-b7pdq subsys=endpoint level=info msg="Successful endpoint creation" containerID=cfaf9a879b datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1920 identity=41545 ipv4=10.0.0.102 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-66skk subsys=daemon level=info msg="Successful endpoint creation" containerID=12311f3653 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1344 identity=6414 ipv4=10.0.0.143 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-b7pdq subsys=daemon level=info msg="Serving cilium health API at unix:///var/run/cilium/health.sock" subsys=health-server level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=12311f3653 endpointID=1344 k8sNamespace=envoy-gateway-system k8sPodName=envoy-gateway-gateway-helm-certgen-b7pdq subsys=daemon level=info msg="Releasing key" key="[k8s:app=certgen k8s:batch.kubernetes.io/controller-uid=f9464978-39d4-400e-b990-093a0a127cbb k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen k8s:controller-uid=f9464978-39d4-400e-b990-093a0a127cbb k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen k8s:io.kubernetes.pod.namespace=envoy-gateway-system k8s:job-name=envoy-gateway-gateway-helm-certgen]" subsys=allocator level=info msg="Removed endpoint" containerID=12311f3653 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1344 identity=6414 ipv4=10.0.0.143 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-b7pdq subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.26 5e6f4ac3-b46d-4a2d-83d0-bba6df73d71c default }" containerID=9687ab996f819dac4a9b37ef7d3aedd7ac03d44b37724a19a1ccfa695b54c3df datapathConfiguration="&{false false false false false }" interface=lxc62e668c9f4f8 k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-qwxqk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9687ab996f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=893 ipv4=10.0.0.26 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-qwxqk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9687ab996f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=893 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.26 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-qwxqk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=envoy-gateway;k8s:app.kubernetes.io/name=gateway-helm;k8s:control-plane=envoy-gateway;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9687ab996f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=893 identity=30628 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.26 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-qwxqk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9687ab996f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=893 identity=30628 ipv4=10.0.0.26 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-qwxqk subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=9687ab996f datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=893 identity=30628 ipv4=10.0.0.26 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-qwxqk subsys=endpoint level=info msg="Successful endpoint creation" containerID=9687ab996f datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=893 identity=30628 ipv4=10.0.0.26 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-qwxqk subsys=daemon level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1761 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_01761 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_01761 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_01761 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_01761:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1761 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.34 7ba85eee-d32e-4712-a10f-b17ff5d48c14 default }" containerID=3c938608648ed450a9b9e42234641a508794d67a6f5cb23752e7fc9718fa5007 datapathConfiguration="&{false false false false false }" interface=lxc4953386d6871 k8sPodName=kube-system/coredns-67659f764b-dk775 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3c93860864 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1367 ipv4=10.0.0.34 ipv6= k8sPodName=kube-system/coredns-67659f764b-dk775 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3c93860864 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1367 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.34 ipv6= k8sPodName=kube-system/coredns-67659f764b-dk775 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=3c93860864 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1367 identity=41545 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.34 ipv6= k8sPodName=kube-system/coredns-67659f764b-dk775 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3c93860864 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1367 identity=41545 ipv4=10.0.0.34 ipv6= k8sPodName=kube-system/coredns-67659f764b-dk775 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.65 1cd03912-9ed3-4864-b988-c80e88337a54 default }" containerID=7522d5a7f1dc9103be00ec0293f6bcbfb38f497b9493ad6e9cd3235ef35e2111 datapathConfiguration="&{false false false false false }" interface=lxc56293d928b07 k8sPodName=kube-system/coredns-67659f764b-9pxnf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7522d5a7f1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1656 ipv4=10.0.0.65 ipv6= k8sPodName=kube-system/coredns-67659f764b-9pxnf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7522d5a7f1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1656 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.65 ipv6= k8sPodName=kube-system/coredns-67659f764b-9pxnf subsys=endpoint level=info msg="Identity of endpoint changed" containerID=7522d5a7f1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1656 identity=41545 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.65 ipv6= k8sPodName=kube-system/coredns-67659f764b-9pxnf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7522d5a7f1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1656 identity=41545 ipv4=10.0.0.65 ipv6= k8sPodName=kube-system/coredns-67659f764b-9pxnf subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3c93860864 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1367 identity=41545 ipv4=10.0.0.34 ipv6= k8sPodName=kube-system/coredns-67659f764b-dk775 subsys=endpoint level=info msg="Successful endpoint creation" containerID=3c93860864 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1367 identity=41545 ipv4=10.0.0.34 ipv6= k8sPodName=kube-system/coredns-67659f764b-dk775 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=7522d5a7f1 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1656 identity=41545 ipv4=10.0.0.65 ipv6= k8sPodName=kube-system/coredns-67659f764b-9pxnf subsys=endpoint level=info msg="Successful endpoint creation" containerID=7522d5a7f1 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1656 identity=41545 ipv4=10.0.0.65 ipv6= k8sPodName=kube-system/coredns-67659f764b-9pxnf subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.28 5d88e9eb-157e-4c4a-9054-09032255c188 default }" containerID=5a28a4520f7fc603e177aa5a10fa5d5fb58a9d9316008ed0243a1389186525bd datapathConfiguration="&{false false false false false }" interface=lxc6de438c093aa k8sPodName=local-path-storage/local-path-provisioner-679c578f5-87sjx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5a28a4520f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2222 ipv4=10.0.0.28 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-87sjx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5a28a4520f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2222 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.28 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-87sjx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=local-path-provisioner;k8s:app.kubernetes.io/name=local-path-provisioner;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5a28a4520f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2222 identity=42431 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.28 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-87sjx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5a28a4520f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2222 identity=42431 ipv4=10.0.0.28 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-87sjx subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5a28a4520f datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2222 identity=42431 ipv4=10.0.0.28 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-87sjx subsys=endpoint level=info msg="Successful endpoint creation" containerID=5a28a4520f datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2222 identity=42431 ipv4=10.0.0.28 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-87sjx subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=cfaf9a879b endpointID=1920 k8sNamespace=kube-system k8sPodName=coredns-7c96b6546b-66skk subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=coredns k8s:io.kubernetes.pod.namespace=kube-system k8s:k8s-app=kube-dns]" subsys=allocator level=info msg="Removed endpoint" containerID=cfaf9a879b datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1920 identity=41545 ipv4=10.0.0.102 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-66skk subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.182 53f0a52a-390d-4a6d-a37f-9af70e00298a default }" containerID=57df6e1c8980d5443a4ac726193f8ccae7783e5417299d2d25d16e6659b77052 datapathConfiguration="&{false false false false false }" interface=lxc5d146f469335 k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-59llj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=57df6e1c89 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=876 ipv4=10.0.0.182 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-59llj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=57df6e1c89 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=876 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.182 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-59llj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=cainjector;k8s:app.kubernetes.io/component=cainjector;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cainjector;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=57df6e1c89 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=876 identity=715 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.182 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-59llj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=57df6e1c89 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=876 identity=715 ipv4=10.0.0.182 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-59llj subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=57df6e1c89 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=876 identity=715 ipv4=10.0.0.182 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-59llj subsys=endpoint level=info msg="Successful endpoint creation" containerID=57df6e1c89 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=876 identity=715 ipv4=10.0.0.182 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-59llj subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.125 6a0f7b32-705b-4cb5-ae22-5c10e80a7c0e default }" containerID=812c6c261c148e7dced1bcd14d2cbc573653ee78a589b0e1f5d7d8973c16542a datapathConfiguration="&{false false false false false }" interface=lxc331a49f6f578 k8sPodName=cert-manager/cert-manager-webhook-548949fc64-zg7fr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=812c6c261c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=461 ipv4=10.0.0.125 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-zg7fr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=812c6c261c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=461 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.125 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-zg7fr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=webhook;k8s:app.kubernetes.io/component=webhook;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=webhook;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=812c6c261c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=461 identity=7885 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.125 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-zg7fr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=812c6c261c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=461 identity=7885 ipv4=10.0.0.125 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-zg7fr subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.196 3f5e900a-6080-4db5-8eb8-7745b54a6ed4 default }" containerID=3b28daaccae87e09de2594fc4431d97b95db47c57b66738eb01c45b1585886df datapathConfiguration="&{false false false false false }" interface=lxc2d9f9b680ca5 k8sPodName=cert-manager/cert-manager-75c4c745bc-pfjv8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3b28daacca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=221 ipv4=10.0.0.196 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-pfjv8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3b28daacca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=221 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.196 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-pfjv8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=cert-manager;k8s:app.kubernetes.io/component=controller;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cert-manager;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3b28daacca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=221 identity=48830 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.196 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-pfjv8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3b28daacca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=221 identity=48830 ipv4=10.0.0.196 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-pfjv8 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=812c6c261c datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=461 identity=7885 ipv4=10.0.0.125 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-zg7fr subsys=endpoint level=info msg="Successful endpoint creation" containerID=812c6c261c datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=461 identity=7885 ipv4=10.0.0.125 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-zg7fr subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=3b28daacca datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=221 identity=48830 ipv4=10.0.0.196 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-pfjv8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=3b28daacca datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=221 identity=48830 ipv4=10.0.0.196 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-pfjv8 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.153 5377d948-ac61-416f-8a0a-1a34d53a6b4d default }" containerID=168eb0767369ce4ebe5c292161c529663952d1c592b0490e74be4a2e69961e5e datapathConfiguration="&{false false false false false }" interface=lxc1b569eb0ab06 k8sPodName=cert-manager/cert-manager-startupapicheck-gdhz4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=168eb07673 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1780 ipv4=10.0.0.153 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-gdhz4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=168eb07673 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1780 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=64911bb7-f6ff-4ba0-8c2e-52eeea8c8aac,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=64911bb7-f6ff-4ba0-8c2e-52eeea8c8aac,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.153 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-gdhz4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=startupapicheck;k8s:app.kubernetes.io/component=startupapicheck;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=startupapicheck;k8s:app.kubernetes.io/version=v1.11.5;k8s:batch.kubernetes.io/controller-uid=64911bb7-f6ff-4ba0-8c2e-52eeea8c8aac;k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck;k8s:controller-uid=64911bb7-f6ff-4ba0-8c2e-52eeea8c8aac;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck;k8s:io.kubernetes.pod.namespace=cert-manager;k8s:job-name=cert-manager-startupapicheck;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=168eb07673 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1780 identity=16206 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=64911bb7-f6ff-4ba0-8c2e-52eeea8c8aac,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=64911bb7-f6ff-4ba0-8c2e-52eeea8c8aac,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.153 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-gdhz4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=168eb07673 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1780 identity=16206 ipv4=10.0.0.153 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-gdhz4 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=168eb07673 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1780 identity=16206 ipv4=10.0.0.153 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-gdhz4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=168eb07673 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1780 identity=16206 ipv4=10.0.0.153 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-gdhz4 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=168eb07673 endpointID=1780 k8sNamespace=cert-manager k8sPodName=cert-manager-startupapicheck-gdhz4 subsys=daemon level=info msg="Releasing key" key="[k8s:app=startupapicheck k8s:app.kubernetes.io/component=startupapicheck k8s:app.kubernetes.io/instance=cert-manager k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=startupapicheck k8s:app.kubernetes.io/version=v1.11.5 k8s:batch.kubernetes.io/controller-uid=64911bb7-f6ff-4ba0-8c2e-52eeea8c8aac k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck k8s:controller-uid=64911bb7-f6ff-4ba0-8c2e-52eeea8c8aac k8s:helm.sh/chart=cert-manager-v1.11.5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager k8s:io.cilium.k8s.namespace.labels.name=cert-manager k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck k8s:io.kubernetes.pod.namespace=cert-manager k8s:job-name=cert-manager-startupapicheck]" subsys=allocator level=info msg="Removed endpoint" containerID=168eb07673 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1780 identity=16206 ipv4=10.0.0.153 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-gdhz4 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.184 79779c3d-7c92-4191-b168-65d1a9084202 default }" containerID=88976b60e0fc15e340c9c1a4efeb8ec509d8cb2814f1f0c7ae78c33833c8205b datapathConfiguration="&{false false false false false }" interface=lxc4eaca3ea2376 k8sPodName=ingress-nginx/ingress-nginx-admission-create-7s7qk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=88976b60e0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=791 ipv4=10.0.0.184 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-7s7qk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=88976b60e0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=791 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=50b6bddd-ab82-45ba-97a6-3e6819b22858,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=50b6bddd-ab82-45ba-97a6-3e6819b22858,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.184 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-7s7qk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=50b6bddd-ab82-45ba-97a6-3e6819b22858;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create;k8s:controller-uid=50b6bddd-ab82-45ba-97a6-3e6819b22858;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-create;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=88976b60e0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=791 identity=9856 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=50b6bddd-ab82-45ba-97a6-3e6819b22858,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=50b6bddd-ab82-45ba-97a6-3e6819b22858,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.184 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-7s7qk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=88976b60e0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=791 identity=9856 ipv4=10.0.0.184 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-7s7qk subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=88976b60e0 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=791 identity=9856 ipv4=10.0.0.184 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-7s7qk subsys=endpoint level=info msg="Successful endpoint creation" containerID=88976b60e0 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=791 identity=9856 ipv4=10.0.0.184 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-7s7qk subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=88976b60e0 endpointID=791 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-create-7s7qk subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=50b6bddd-ab82-45ba-97a6-3e6819b22858 k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create k8s:controller-uid=50b6bddd-ab82-45ba-97a6-3e6819b22858 k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-create]" subsys=allocator level=info msg="Removed endpoint" containerID=88976b60e0 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=791 identity=9856 ipv4=10.0.0.184 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-7s7qk subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.36 8608f4d1-22d2-4e27-84ac-35d650eea554 default }" containerID=e74afa090a8dc9c3f071015a206488f3d405fdac61d4d6aaabee9879feae598a datapathConfiguration="&{false false false false false }" interface=lxcae2105739fd0 k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-8zff9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e74afa090a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4023 ipv4=10.0.0.36 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-8zff9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e74afa090a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4023 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.36 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-8zff9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=default-backend;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend;k8s:io.kubernetes.pod.namespace=ingress-nginx;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=e74afa090a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4023 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.36 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-8zff9 line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=e74afa090a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4023 identity=39662 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.36 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-8zff9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e74afa090a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4023 identity=39662 ipv4=10.0.0.36 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-8zff9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e74afa090a datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=4023 identity=39662 ipv4=10.0.0.36 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-8zff9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=e74afa090a datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=4023 identity=39662 ipv4=10.0.0.36 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-8zff9 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.242 2e4aa22c-9e9d-46d0-8165-633d5c768484 default }" containerID=9c2028b124ab373f79c6051c6b0d67a4a905ee5d8e59c5fb2f7920d6f77611ec datapathConfiguration="&{false false false false false }" interface=lxcd9aaf5836116 k8sPodName=ingress-nginx/ingress-nginx-admission-patch-jj5mt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9c2028b124 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=218 ipv4=10.0.0.242 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-jj5mt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9c2028b124 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=218 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=fd2cdd2b-d7cb-4fdf-9428-a15bf50873fc,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=fd2cdd2b-d7cb-4fdf-9428-a15bf50873fc,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.242 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-jj5mt subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=fd2cdd2b-d7cb-4fdf-9428-a15bf50873fc;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch;k8s:controller-uid=fd2cdd2b-d7cb-4fdf-9428-a15bf50873fc;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-patch;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9c2028b124 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=218 identity=2468 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=fd2cdd2b-d7cb-4fdf-9428-a15bf50873fc,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=fd2cdd2b-d7cb-4fdf-9428-a15bf50873fc,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.242 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-jj5mt oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9c2028b124 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=218 identity=2468 ipv4=10.0.0.242 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-jj5mt subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9c2028b124 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=218 identity=2468 ipv4=10.0.0.242 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-jj5mt subsys=endpoint level=info msg="Successful endpoint creation" containerID=9c2028b124 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=218 identity=2468 ipv4=10.0.0.242 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-jj5mt subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=9c2028b124 endpointID=218 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-patch-jj5mt subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=fd2cdd2b-d7cb-4fdf-9428-a15bf50873fc k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch k8s:controller-uid=fd2cdd2b-d7cb-4fdf-9428-a15bf50873fc k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-patch]" subsys=allocator level=info msg="Removed endpoint" containerID=9c2028b124 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=218 identity=2468 ipv4=10.0.0.242 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-jj5mt subsys=endpoint level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"messaging-topology-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9443 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-messaging-topology-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=b8ba9880-0409-476a-91f2-91efd7e7d789] Description:}]" policyAddRequest=2c4d48c8-4283-4ff9-a005-c7652731a420 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=2c4d48c8-4283-4ff9-a005-c7652731a420 policyRevision=2 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-messaging-topology-operator subsys=k8s-watcher level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"rabbitmq-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-cluster-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=25c97adc-c2ad-4593-8f56-cbd5339a1f60] Description:}]" policyAddRequest=fea6c08c-f03b-4d26-b47f-a4111c73f706 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=fea6c08c-f03b-4d26-b47f-a4111c73f706 policyRevision=3 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-cluster-operator subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.80 817f3674-5cb8-4400-a239-d39ee77446a4 default }" containerID=ba626d234086fd5cd0435ca303da7620971883590b7012ee7a9cf99f9cd0fa08 datapathConfiguration="&{false false false false false }" interface=lxcde9c79f18e47 k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-j6blj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ba626d2340 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=914 ipv4=10.0.0.80 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-j6blj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ba626d2340 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=914 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.16.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.80 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-j6blj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=ba626d2340 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=914 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.80 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-j6blj line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=2.16.1;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ba626d2340 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=914 identity=1816 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.16.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.80 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-j6blj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ba626d2340 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=914 identity=1816 ipv4=10.0.0.80 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-j6blj subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ba626d2340 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=914 identity=1816 ipv4=10.0.0.80 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-j6blj subsys=endpoint level=info msg="Successful endpoint creation" containerID=ba626d2340 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=914 identity=1816 ipv4=10.0.0.80 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-j6blj subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.228 1886832a-65cf-4216-b663-d37f9af12e77 default }" containerID=1ba981d66441090a374f0de0dbeed46419edb7fe0d381e0f7c3a86ff3a0ee6eb datapathConfiguration="&{false false false false false }" interface=lxceddad75465c3 k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-n2757 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1ba981d664 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=445 ipv4=10.0.0.228 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-n2757 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1ba981d664 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=445 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.17.4,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.228 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-n2757 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=messaging-topology-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=1.17.4;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1ba981d664 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=445 identity=49614 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.17.4,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.228 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-n2757 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1ba981d664 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=445 identity=49614 ipv4=10.0.0.228 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-n2757 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1ba981d664 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=445 identity=49614 ipv4=10.0.0.228 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-n2757 subsys=endpoint level=info msg="Successful endpoint creation" containerID=1ba981d664 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=445 identity=49614 ipv4=10.0.0.228 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-n2757 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.90 95dfe71f-b2e9-42a5-a4b0-fdecd38c6c1b default }" containerID=62bd88616917e5dc5430d10741bfc740c9ecf8129138c5064d86194fbd67bf18 datapathConfiguration="&{false false false false false }" interface=lxc5e3e06f58c27 k8sPodName=openstack/pxc-operator-69cb5bbdb9-jsrts labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=62bd886169 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3081 ipv4=10.0.0.90 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-jsrts subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=62bd886169 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3081 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.90 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-jsrts subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=62bd886169 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3081 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.90 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-jsrts line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=operator;k8s:app.kubernetes.io/instance=pxc-operator;k8s:app.kubernetes.io/name=pxc-operator;k8s:app.kubernetes.io/part-of=pxc-operator;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=62bd886169 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3081 identity=28041 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.90 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-jsrts oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=62bd886169 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3081 identity=28041 ipv4=10.0.0.90 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-jsrts subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=62bd886169 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=3081 identity=28041 ipv4=10.0.0.90 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-jsrts subsys=endpoint level=info msg="Successful endpoint creation" containerID=62bd886169 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=3081 identity=28041 ipv4=10.0.0.90 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-jsrts subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.216 157b4eed-21dc-43d0-9774-1d32e59e0b19 default }" containerID=fcc390455782c0a70910fe46c347a91a2dc2fd8a9dd627ac571339b828c07efb datapathConfiguration="&{false false false false false }" interface=lxc247c08cc9c9a k8sPodName=openstack/percona-xtradb-haproxy-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fcc3904557 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=926 ipv4=10.0.0.216 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fcc3904557 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=926 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.216 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=haproxy;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fcc3904557 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=926 identity=54169 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.216 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fcc3904557 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=926 identity=54169 ipv4=10.0.0.216 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=fcc3904557 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=926 identity=54169 ipv4=10.0.0.216 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=fcc3904557 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=926 identity=54169 ipv4=10.0.0.216 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.140 06f653e4-f5cc-4f82-8f16-451650d7f5b3 default }" containerID=3c29b81fca023993d111c31ddff2aae238188390a9e3e919aeddd73f4925d0cc datapathConfiguration="&{false false false false false }" interface=lxc6ff0b0c6e7c7 k8sPodName=local-path-storage/helper-pod-create-pvc-071858fb-dce9-42d6-8aad-b88dd1db8bcc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3c29b81fca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3792 ipv4=10.0.0.140 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-071858fb-dce9-42d6-8aad-b88dd1db8bcc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3c29b81fca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3792 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.140 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-071858fb-dce9-42d6-8aad-b88dd1db8bcc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3c29b81fca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3792 identity=48697 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.140 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-071858fb-dce9-42d6-8aad-b88dd1db8bcc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3c29b81fca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3792 identity=48697 ipv4=10.0.0.140 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-071858fb-dce9-42d6-8aad-b88dd1db8bcc subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3c29b81fca datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=3792 identity=48697 ipv4=10.0.0.140 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-071858fb-dce9-42d6-8aad-b88dd1db8bcc subsys=endpoint level=info msg="Successful endpoint creation" containerID=3c29b81fca datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=3792 identity=48697 ipv4=10.0.0.140 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-071858fb-dce9-42d6-8aad-b88dd1db8bcc subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=3c29b81fca endpointID=3792 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-071858fb-dce9-42d6-8aad-b88dd1db8bcc subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=3c29b81fca datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=3792 identity=48697 ipv4=10.0.0.140 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-071858fb-dce9-42d6-8aad-b88dd1db8bcc subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.156 5ad91a11-e0ef-4709-a183-75242e3221c6 default }" containerID=cd98fb486410daa043fbcd066fbb4060c8a49f27fc496b64028a4e61054046d1 datapathConfiguration="&{false false false false false }" interface=lxc0492ebce7a31 k8sPodName=openstack/percona-xtradb-pxc-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=cd98fb4864 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3716 ipv4=10.0.0.156 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=cd98fb4864 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3716 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.156 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=pxc;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=cd98fb4864 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3716 identity=25238 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.156 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=cd98fb4864 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3716 identity=25238 ipv4=10.0.0.156 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=cd98fb4864 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=3716 identity=25238 ipv4=10.0.0.156 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=cd98fb4864 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=3716 identity=25238 ipv4=10.0.0.156 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/instance\":\"valkey\",\"k8s:app.kubernetes.io/name\":\"valkey\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:6379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:26379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:} {IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9121 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=valkey k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=cd65ea74-cb43-4468-aa95-43803512402c] Description:}]" policyAddRequest=68873f6b-2034-4a7f-9cdf-727662c57d4d subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=68873f6b-2034-4a7f-9cdf-727662c57d4d policyRevision=4 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=valkey subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.102 9e4a472c-f041-417e-beac-a843006b26ec default }" containerID=ce74c3da2910d60b4fdecc660a1ef5f5d60a11a1786fbf04206fdf3f6ae77e06 datapathConfiguration="&{false false false false false }" interface=lxcc155d81b4561 k8sPodName=local-path-storage/helper-pod-create-pvc-52e645c1-c66e-4f7c-9c71-e61cfb1e1074 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ce74c3da29 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=399 ipv4=10.0.0.102 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-52e645c1-c66e-4f7c-9c71-e61cfb1e1074 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ce74c3da29 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=399 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.102 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-52e645c1-c66e-4f7c-9c71-e61cfb1e1074 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ce74c3da29 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=399 identity=48697 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.102 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-52e645c1-c66e-4f7c-9c71-e61cfb1e1074 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ce74c3da29 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=399 identity=48697 ipv4=10.0.0.102 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-52e645c1-c66e-4f7c-9c71-e61cfb1e1074 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ce74c3da29 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=399 identity=48697 ipv4=10.0.0.102 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-52e645c1-c66e-4f7c-9c71-e61cfb1e1074 subsys=endpoint level=info msg="Successful endpoint creation" containerID=ce74c3da29 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=399 identity=48697 ipv4=10.0.0.102 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-52e645c1-c66e-4f7c-9c71-e61cfb1e1074 subsys=daemon level=info msg="Delete endpoint request" containerID=ce74c3da29 endpointID=399 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-52e645c1-c66e-4f7c-9c71-e61cfb1e1074 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=ce74c3da29 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=399 identity=48697 ipv4=10.0.0.102 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-52e645c1-c66e-4f7c-9c71-e61cfb1e1074 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.168 d7c17a7f-5af5-46ea-960e-68bba16cde68 default }" containerID=3cbe6e2e31ead0c5bd144128432e2ef50ec7f3d6f9b86a8d3f3c3060701b56bb datapathConfiguration="&{false false false false false }" interface=lxc03d799c9b261 k8sPodName=openstack/valkey-node-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3cbe6e2e31 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2709 ipv4=10.0.0.168 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3cbe6e2e31 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2709 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.168 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=node;k8s:app.kubernetes.io/instance=valkey;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=valkey;k8s:app.kubernetes.io/version=8.0.2;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=valkey-2.4.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=valkey;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=valkey-node-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3cbe6e2e31 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2709 identity=22196 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.168 ipv6= k8sPodName=openstack/valkey-node-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3cbe6e2e31 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2709 identity=22196 ipv4=10.0.0.168 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=3cbe6e2e31 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2709 identity=22196 ipv4=10.0.0.168 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=3cbe6e2e31 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2709 identity=22196 ipv4=10.0.0.168 ipv6= k8sPodName=openstack/valkey-node-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"keycloak\",\"k8s:app.kubernetes.io/instance\":\"keycloak\",\"k8s:app.kubernetes.io/name\":\"keycloak\",\"k8s:io.kubernetes.pod.namespace\":\"auth-system\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:7800 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:8080 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=keycloak k8s:io.cilium.k8s.policy.namespace=auth-system k8s:io.cilium.k8s.policy.uid=6af75e89-f2d2-4575-ac3c-36211fa31608] Description:}]" policyAddRequest=44ad6f84-4adb-420a-82f3-c0800f8d114d subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=44ad6f84-4adb-420a-82f3-c0800f8d114d policyRevision=5 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=keycloak subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.9 29f8b025-44b7-46ec-a116-fa7bfe701989 default }" containerID=20c94c3b7612f86f66a82b14c87a572784af12e9e583f0accda4521153cf4a21 datapathConfiguration="&{false false false false false }" interface=lxcac07acce6301 k8sPodName=auth-system/keycloak-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=20c94c3b76 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3609 ipv4=10.0.0.9 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=20c94c3b76 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3609 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.9 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:auth-system k8s:io.cilium.k8s.namespace.labels.name:auth-system]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=20c94c3b76 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3609 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.9 ipv6= k8sPodName=auth-system/keycloak-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=keycloak;k8s:app.kubernetes.io/instance=keycloak;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=keycloak;k8s:app.kubernetes.io/version=24.0.5;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=keycloak-21.4.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system;k8s:io.cilium.k8s.namespace.labels.name=auth-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keycloak;k8s:io.kubernetes.pod.namespace=auth-system;k8s:statefulset.kubernetes.io/pod-name=keycloak-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=20c94c3b76 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3609 identity=29181 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.9 ipv6= k8sPodName=auth-system/keycloak-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=20c94c3b76 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3609 identity=29181 ipv4=10.0.0.9 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=20c94c3b76 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3609 identity=29181 ipv4=10.0.0.9 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=20c94c3b76 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3609 identity=29181 ipv4=10.0.0.9 ipv6= k8sPodName=auth-system/keycloak-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.010784287202240048 newInterval=7m30s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.206 2fe80ac0-ffbb-40cd-b1c2-753c5d141b7d default }" containerID=1b7e2daa958e36760284c2e5d6af295ea155a24a93bf438e9791fbfced5fdb0e datapathConfiguration="&{false false false false false }" interface=lxcdcd57a1ace40 k8sPodName=monitoring/node-feature-discovery-worker-9v8jp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1b7e2daa95 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=398 ipv4=10.0.0.206 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-9v8jp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1b7e2daa95 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=398 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.206 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-9v8jp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=worker;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1b7e2daa95 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=398 identity=40900 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.206 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-9v8jp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1b7e2daa95 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=398 identity=40900 ipv4=10.0.0.206 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-9v8jp subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.254 415b2717-08c8-44b5-a606-1c92823c5106 default }" containerID=0888068ea4fc361eb43f7f6223967ec9505a64a80f66d62b1aa5414dbc698206 datapathConfiguration="&{false false false false false }" interface=lxc096355b61eb2 k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-mcp6f labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0888068ea4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1263 ipv4=10.0.0.254 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-mcp6f subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0888068ea4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1263 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.254 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-mcp6f subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=master;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0888068ea4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1263 identity=65289 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.254 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-mcp6f oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0888068ea4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1263 identity=65289 ipv4=10.0.0.254 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-mcp6f subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1b7e2daa95 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=398 identity=40900 ipv4=10.0.0.206 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-9v8jp subsys=endpoint level=info msg="Successful endpoint creation" containerID=1b7e2daa95 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=398 identity=40900 ipv4=10.0.0.206 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-9v8jp subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.148 339669c1-c0f2-445b-b3a5-bdb9e4651a5b default }" containerID=bfd30e8ad6eb1376109660e5284aaedfe6e34706cd28d7c138e40d37c74d19d5 datapathConfiguration="&{false false false false false }" interface=lxc405ca52bc2aa k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-hflqh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bfd30e8ad6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=648 ipv4=10.0.0.148 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-hflqh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bfd30e8ad6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=648 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.148 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-hflqh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=gc;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=bfd30e8ad6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=648 identity=37592 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.148 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-hflqh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=bfd30e8ad6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=648 identity=37592 ipv4=10.0.0.148 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-hflqh subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0888068ea4 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1263 identity=65289 ipv4=10.0.0.254 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-mcp6f subsys=endpoint level=info msg="Successful endpoint creation" containerID=0888068ea4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1263 identity=65289 ipv4=10.0.0.254 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-mcp6f subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=bfd30e8ad6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=648 identity=37592 ipv4=10.0.0.148 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-hflqh subsys=endpoint level=info msg="Successful endpoint creation" containerID=bfd30e8ad6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=648 identity=37592 ipv4=10.0.0.148 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-hflqh subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.89 a71954ab-9dd9-4547-9847-6bbea9e6cb15 default }" containerID=819261ed64bd7b6c4e3eea5b734429148012b54b5dce2469453419df56a68f25 datapathConfiguration="&{false false false false false }" interface=lxcd7027208980e k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-4z9h8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=819261ed64 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1992 ipv4=10.0.0.89 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-4z9h8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=819261ed64 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1992 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.89 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-4z9h8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:secretgen-controller]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=secretgen-controller;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa;k8s:io.kubernetes.pod.namespace=secretgen-controller;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=819261ed64 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1992 identity=8722 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.89 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-4z9h8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=819261ed64 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1992 identity=8722 ipv4=10.0.0.89 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-4z9h8 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=819261ed64 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1992 identity=8722 ipv4=10.0.0.89 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-4z9h8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=819261ed64 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1992 identity=8722 ipv4=10.0.0.89 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-4z9h8 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1761 identity=1 identityLabels="k8s:feature.node.kubernetes.io/cpu-cpuid.ADX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AESNI=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX2=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CLZERO=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CMPXCHG8=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FMA3=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSROPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.HYPERVISOR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IA32_ARCH_CAP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBPB=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBRS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.LAHF=true,k8s:feature.node.kubernetes.io/cpu-cpuid.MOVBE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.NRIPS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.OSXSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SHA=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SPEC_CTRL_SSBD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SSE4A=true,k8s:feature.node.kubernetes.io/cpu-cpuid.STIBP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVM=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVMNP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSCALL=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSEE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.TOPEXT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.WBNOINVD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.X87=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XGETBV1=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEC=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEOPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVES=true,k8s:feature.node.kubernetes.io/cpu-hardware_multithreading=false,k8s:feature.node.kubernetes.io/cpu-model.family=23,k8s:feature.node.kubernetes.io/cpu-model.id=49,k8s:feature.node.kubernetes.io/cpu-model.vendor_id=AMD,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ=true,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ_IDLE=true,k8s:feature.node.kubernetes.io/kernel-version.full=5.15.0-174-generic,k8s:feature.node.kubernetes.io/kernel-version.major=5,k8s:feature.node.kubernetes.io/kernel-version.minor=15,k8s:feature.node.kubernetes.io/kernel-version.revision=0,k8s:feature.node.kubernetes.io/pci-0300_1af4.present=true,k8s:feature.node.kubernetes.io/system-os_release.ID=ubuntu,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.major=22,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.minor=04,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID=22.04,k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_01761 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_01761 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_01761 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_01761:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1761 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.175 cdd3aa29-4a17-4576-96fd-77e28757956c default }" containerID=a7e40114e45372ebf53e874a6f2f46db3764a383fa99930d5627813e06eab87f datapathConfiguration="&{false false false false false }" interface=lxce23038859379 k8sPodName=monitoring/kube-prometheus-stack-admission-create-tgxpv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a7e40114e4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1109 ipv4=10.0.0.175 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-tgxpv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a7e40114e4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1109 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=7530e743-97b4-4cc4-b874-5b72e3e94b38,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=7530e743-97b4-4cc4-b874-5b72e3e94b38,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.175 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-tgxpv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-create;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=7530e743-97b4-4cc4-b874-5b72e3e94b38;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=7530e743-97b4-4cc4-b874-5b72e3e94b38;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-create;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=a7e40114e4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1109 identity=20083 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=7530e743-97b4-4cc4-b874-5b72e3e94b38,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=7530e743-97b4-4cc4-b874-5b72e3e94b38,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.175 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-tgxpv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a7e40114e4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1109 identity=20083 ipv4=10.0.0.175 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-tgxpv subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a7e40114e4 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1109 identity=20083 ipv4=10.0.0.175 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-tgxpv subsys=endpoint level=info msg="Successful endpoint creation" containerID=a7e40114e4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1109 identity=20083 ipv4=10.0.0.175 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-tgxpv subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=a7e40114e4 endpointID=1109 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-create-tgxpv subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-create k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=7530e743-97b4-4cc4-b874-5b72e3e94b38 k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=7530e743-97b4-4cc4-b874-5b72e3e94b38 k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-create k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=a7e40114e4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1109 identity=20083 ipv4=10.0.0.175 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-tgxpv subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.114 cd74ec06-329c-448d-838e-1526b13acd1f default }" containerID=81b167c26d8f5e1d1a12e5c2dcb6d9ef136e231d1cfac77c2f93409c4f154bb4 datapathConfiguration="&{false false false false false }" interface=lxcaa7546eb9e9b k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-pkjks labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=81b167c26d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=13 ipv4=10.0.0.114 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-pkjks subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=81b167c26d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=13 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.114 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-pkjks subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=metrics;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-state-metrics;k8s:app.kubernetes.io/part-of=kube-state-metrics;k8s:app.kubernetes.io/version=2.12.0;k8s:helm.sh/chart=kube-state-metrics-5.20.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=81b167c26d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=13 identity=2314 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.114 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-pkjks oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=81b167c26d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=13 identity=2314 ipv4=10.0.0.114 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-pkjks subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.11 6cdbbaba-7623-4610-b68d-3c534c522ed4 default }" containerID=51efde75eaa819834018adc7d8722c8227a308719f2c1d112891b950e9edcd5c datapathConfiguration="&{false false false false false }" interface=lxc55fe1a58944c k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-znbjw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=51efde75ea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=178 ipv4=10.0.0.11 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-znbjw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=51efde75ea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=178 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.11 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-znbjw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.186 0f9da833-2479-413c-af95-f5071cb51882 default }" containerID=d15652dd67011feb2e209f91ffca0cb8c420aa65230256fc4659408a7b8cfee2 datapathConfiguration="&{false false false false false }" interface=lxc6d39490210bf k8sPodName=monitoring/kube-prometheus-stack-grafana-cd484597b-dhj4m labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d15652dd67 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=112 ipv4=10.0.0.186 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-cd484597b-dhj4m subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d15652dd67 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=112 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.186 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-cd484597b-dhj4m subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-operator;k8s:app.kubernetes.io/component=prometheus-operator;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:chart=kube-prometheus-stack-60.2.0;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=51efde75ea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=178 identity=27871 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.11 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-znbjw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=51efde75ea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=178 identity=27871 ipv4=10.0.0.11 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-znbjw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/name=grafana;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d15652dd67 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=112 identity=3527 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.186 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-cd484597b-dhj4m oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d15652dd67 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=112 identity=3527 ipv4=10.0.0.186 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-cd484597b-dhj4m subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=81b167c26d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=13 identity=2314 ipv4=10.0.0.114 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-pkjks subsys=endpoint level=info msg="Successful endpoint creation" containerID=81b167c26d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=13 identity=2314 ipv4=10.0.0.114 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-pkjks subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=51efde75ea datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=178 identity=27871 ipv4=10.0.0.11 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-znbjw subsys=endpoint level=info msg="Successful endpoint creation" containerID=51efde75ea datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=178 identity=27871 ipv4=10.0.0.11 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-znbjw subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=d15652dd67 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=112 identity=3527 ipv4=10.0.0.186 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-cd484597b-dhj4m subsys=endpoint level=info msg="Successful endpoint creation" containerID=d15652dd67 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=112 identity=3527 ipv4=10.0.0.186 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-cd484597b-dhj4m subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.77 36d1b6f5-146a-4eab-9117-45b23a1d5e02 default }" containerID=8eab40fc36a685fe85b9284edb5d7fbaefe84665fad6fd85b4acaad51dc1ebe1 datapathConfiguration="&{false false false false false }" interface=lxc6bf42c978a01 k8sPodName=monitoring/kube-prometheus-stack-admission-patch-ww252 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8eab40fc36 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=123 ipv4=10.0.0.77 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-ww252 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8eab40fc36 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=123 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=07114054-4162-42ce-b224-da9c0d61df98,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=07114054-4162-42ce-b224-da9c0d61df98,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.77 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-ww252 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-patch;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=07114054-4162-42ce-b224-da9c0d61df98;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=07114054-4162-42ce-b224-da9c0d61df98;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-patch;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8eab40fc36 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=123 identity=5869 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=07114054-4162-42ce-b224-da9c0d61df98,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=07114054-4162-42ce-b224-da9c0d61df98,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.77 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-ww252 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8eab40fc36 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=123 identity=5869 ipv4=10.0.0.77 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-ww252 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8eab40fc36 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=123 identity=5869 ipv4=10.0.0.77 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-ww252 subsys=endpoint level=info msg="Successful endpoint creation" containerID=8eab40fc36 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=123 identity=5869 ipv4=10.0.0.77 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-ww252 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.119 1ca3244f-61f6-400a-b7a2-d963834042ee default }" containerID=594c1a24cdd7569a0a7b91c287dc130dcdad4aaac868cd98666c811559055040 datapathConfiguration="&{false false false false false }" interface=lxceb7c5f9f356f k8sPodName=local-path-storage/helper-pod-create-pvc-286f5e34-4799-4b2f-ae60-e86dcb53d677 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=594c1a24cd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=288 ipv4=10.0.0.119 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-286f5e34-4799-4b2f-ae60-e86dcb53d677 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=594c1a24cd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=288 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.119 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-286f5e34-4799-4b2f-ae60-e86dcb53d677 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=594c1a24cd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=288 identity=48697 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.119 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-286f5e34-4799-4b2f-ae60-e86dcb53d677 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=594c1a24cd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=288 identity=48697 ipv4=10.0.0.119 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-286f5e34-4799-4b2f-ae60-e86dcb53d677 subsys=endpoint level=info msg="Delete endpoint request" containerID=8eab40fc36 endpointID=123 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-patch-ww252 subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-patch k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=07114054-4162-42ce-b224-da9c0d61df98 k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=07114054-4162-42ce-b224-da9c0d61df98 k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-patch k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=8eab40fc36 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=123 identity=5869 ipv4=10.0.0.77 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-ww252 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=594c1a24cd datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=288 identity=48697 ipv4=10.0.0.119 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-286f5e34-4799-4b2f-ae60-e86dcb53d677 subsys=endpoint level=info msg="Successful endpoint creation" containerID=594c1a24cd datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=288 identity=48697 ipv4=10.0.0.119 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-286f5e34-4799-4b2f-ae60-e86dcb53d677 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.134 63733fca-e067-4732-a9cc-302d1ebe948c default }" containerID=85d1593d26401289e1575990a7059b101ca5a6f299d8b38a6cab693084c144c5 datapathConfiguration="&{false false false false false }" interface=lxcca65af439a7e k8sPodName=local-path-storage/helper-pod-create-pvc-36f8a664-31d1-4547-9af8-2eefccee2811 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=85d1593d26 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1225 ipv4=10.0.0.134 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-36f8a664-31d1-4547-9af8-2eefccee2811 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=85d1593d26 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1225 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.134 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-36f8a664-31d1-4547-9af8-2eefccee2811 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=85d1593d26 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1225 identity=48697 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.134 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-36f8a664-31d1-4547-9af8-2eefccee2811 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=85d1593d26 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1225 identity=48697 ipv4=10.0.0.134 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-36f8a664-31d1-4547-9af8-2eefccee2811 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=85d1593d26 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1225 identity=48697 ipv4=10.0.0.134 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-36f8a664-31d1-4547-9af8-2eefccee2811 subsys=endpoint level=info msg="Successful endpoint creation" containerID=85d1593d26 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1225 identity=48697 ipv4=10.0.0.134 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-36f8a664-31d1-4547-9af8-2eefccee2811 subsys=daemon level=info msg="Delete endpoint request" containerID=594c1a24cd endpointID=288 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-286f5e34-4799-4b2f-ae60-e86dcb53d677 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=594c1a24cd datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=288 identity=48697 ipv4=10.0.0.119 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-286f5e34-4799-4b2f-ae60-e86dcb53d677 subsys=endpoint level=info msg="Delete endpoint request" containerID=85d1593d26 endpointID=1225 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-36f8a664-31d1-4547-9af8-2eefccee2811 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=85d1593d26 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1225 identity=48697 ipv4=10.0.0.134 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-36f8a664-31d1-4547-9af8-2eefccee2811 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.208 84391261-b5ef-4996-a268-ba2330189a1c default }" containerID=740177b473253829e07ecfde5204d52500d49146e5c7d1b1b0043708e5c58fc3 datapathConfiguration="&{false false false false false }" interface=lxc94c6aef35dbd k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=740177b473 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4087 ipv4=10.0.0.208 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=740177b473 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4087 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.208 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:alertmanager=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=alertmanager;k8s:app.kubernetes.io/version=0.27.0;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=740177b473 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4087 identity=58451 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.208 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=740177b473 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4087 identity=58451 ipv4=10.0.0.208 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=740177b473 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=4087 identity=58451 ipv4=10.0.0.208 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=740177b473 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=4087 identity=58451 ipv4=10.0.0.208 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.85 10e9d141-a36c-408c-a3d9-8ab3a31ec564 default }" containerID=6bc35f1ac3d8c6d9b0144522d4e5bfb799c0b33fa5649b5d6080cf4839572933 datapathConfiguration="&{false false false false false }" interface=lxcd5e27697dcee k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6bc35f1ac3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=450 ipv4=10.0.0.85 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6bc35f1ac3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=450 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.85 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=prometheus;k8s:app.kubernetes.io/version=2.51.2;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus;k8s:io.kubernetes.pod.namespace=monitoring;k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus;k8s:operator.prometheus.io/shard=0;k8s:prometheus=kube-prometheus-stack-prometheus;k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6bc35f1ac3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=450 identity=64193 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.85 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6bc35f1ac3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=450 identity=64193 ipv4=10.0.0.85 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6bc35f1ac3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=450 identity=64193 ipv4=10.0.0.85 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=6bc35f1ac3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=450 identity=64193 ipv4=10.0.0.85 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.158 c88b060c-909f-4a4a-8622-06775c237709 default }" containerID=1886e49e441a5ef96c4b1dbc81b6926c09ec19da84cb89ee2fee7f75ddc57a1d datapathConfiguration="&{false false false false false }" interface=lxcb0736b41b27f k8sPodName=monitoring/loki-gateway-cf54cb88c-5zrd9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1886e49e44 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2608 ipv4=10.0.0.158 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-5zrd9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1886e49e44 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2608 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.158 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-5zrd9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=gateway;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1886e49e44 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2608 identity=9407 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.158 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-5zrd9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1886e49e44 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2608 identity=9407 ipv4=10.0.0.158 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-5zrd9 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=1886e49e44 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2608 identity=9407 ipv4=10.0.0.158 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-5zrd9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=1886e49e44 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2608 identity=9407 ipv4=10.0.0.158 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-5zrd9 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.72 17665999-b5ae-4a12-8bd9-3b4cb0362f85 default }" containerID=33e1aecd52e803fb3de2600f5dd5e8b5e0182004634725c9ed45a8d679880025 datapathConfiguration="&{false false false false false }" interface=lxc93a4faeaea30 k8sPodName=monitoring/loki-chunks-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=33e1aecd52 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3135 ipv4=10.0.0.72 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=33e1aecd52 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3135 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.72 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.126 fed2ad96-546f-4cb7-ac72-dad170dc7d6f default }" containerID=05643058bc6b9a8ccb08d3840eb80ab01b95e720d44e72a481b611dceaa5061f datapathConfiguration="&{false false false false false }" interface=lxc6ffba9c87b68 k8sPodName=monitoring/loki-results-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=05643058bc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=301 ipv4=10.0.0.126 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=05643058bc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=301 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.126 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-chunks-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-chunks-cache;k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=33e1aecd52 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3135 identity=5145 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.72 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=33e1aecd52 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3135 identity=5145 ipv4=10.0.0.72 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-results-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-results-cache;k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=05643058bc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=301 identity=818 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.126 ipv6= k8sPodName=monitoring/loki-results-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=05643058bc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=301 identity=818 ipv4=10.0.0.126 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=33e1aecd52 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3135 identity=5145 ipv4=10.0.0.72 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=33e1aecd52 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3135 identity=5145 ipv4=10.0.0.72 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=05643058bc datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=301 identity=818 ipv4=10.0.0.126 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=05643058bc datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=301 identity=818 ipv4=10.0.0.126 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.239 db558900-3d2d-4e28-bacd-257e37fcc285 default }" containerID=bdc8def6ee0667f02818160ebb94374bc5c08ceaee9cde802542839a0e21dab8 datapathConfiguration="&{false false false false false }" interface=lxcd5dd82a3229f k8sPodName=local-path-storage/helper-pod-create-pvc-4898ef8e-3987-4937-a36f-5dd76b5fde0d labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bdc8def6ee datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2540 ipv4=10.0.0.239 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4898ef8e-3987-4937-a36f-5dd76b5fde0d subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bdc8def6ee datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2540 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.239 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4898ef8e-3987-4937-a36f-5dd76b5fde0d subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=bdc8def6ee datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2540 identity=48697 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.239 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4898ef8e-3987-4937-a36f-5dd76b5fde0d oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=bdc8def6ee datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2540 identity=48697 ipv4=10.0.0.239 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4898ef8e-3987-4937-a36f-5dd76b5fde0d subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=bdc8def6ee datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2540 identity=48697 ipv4=10.0.0.239 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4898ef8e-3987-4937-a36f-5dd76b5fde0d subsys=endpoint level=info msg="Successful endpoint creation" containerID=bdc8def6ee datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2540 identity=48697 ipv4=10.0.0.239 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4898ef8e-3987-4937-a36f-5dd76b5fde0d subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.92 c3f65c0c-c46e-419d-9e27-9dd60c8786a0 default }" containerID=c01622a202fcf572e620bdb145b524b9d27be2e87f01ba7cf95400f42e8dd807 datapathConfiguration="&{false false false false false }" interface=lxce60fc762cfc5 k8sPodName=monitoring/vector-h9hst labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c01622a202 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=123 ipv4=10.0.0.92 ipv6= k8sPodName=monitoring/vector-h9hst subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c01622a202 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=123 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.92 ipv6= k8sPodName=monitoring/vector-h9hst subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=Agent;k8s:app.kubernetes.io/instance=vector;k8s:app.kubernetes.io/name=vector;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=vector;k8s:io.kubernetes.pod.namespace=monitoring;k8s:vector.dev/exclude=true;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c01622a202 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=123 identity=30237 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.92 ipv6= k8sPodName=monitoring/vector-h9hst oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c01622a202 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=123 identity=30237 ipv4=10.0.0.92 ipv6= k8sPodName=monitoring/vector-h9hst subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c01622a202 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=123 identity=30237 ipv4=10.0.0.92 ipv6= k8sPodName=monitoring/vector-h9hst subsys=endpoint level=info msg="Successful endpoint creation" containerID=c01622a202 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=123 identity=30237 ipv4=10.0.0.92 ipv6= k8sPodName=monitoring/vector-h9hst subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=bdc8def6ee endpointID=2540 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-4898ef8e-3987-4937-a36f-5dd76b5fde0d subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=bdc8def6ee datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2540 identity=48697 ipv4=10.0.0.239 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4898ef8e-3987-4937-a36f-5dd76b5fde0d subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.122 31ef0fc9-ecb7-4e0f-a9c6-2ac8c12f3347 default }" containerID=1d20ae4dee47fcad34ca15b5dde7bb94a8393944c291913a1039bfdac288bbd4 datapathConfiguration="&{false false false false false }" interface=lxc5d4d08b42f84 k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-jnvdz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1d20ae4dee datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=569 ipv4=10.0.0.122 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-jnvdz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1d20ae4dee datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=569 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.122 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-jnvdz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=prometheus-pushgateway;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=prometheus-pushgateway;k8s:app.kubernetes.io/version=v1.8.0;k8s:helm.sh/chart=prometheus-pushgateway-2.13.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1d20ae4dee datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=569 identity=11320 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.122 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-jnvdz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1d20ae4dee datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=569 identity=11320 ipv4=10.0.0.122 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-jnvdz subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1d20ae4dee datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=569 identity=11320 ipv4=10.0.0.122 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-jnvdz subsys=endpoint level=info msg="Successful endpoint creation" containerID=1d20ae4dee datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=569 identity=11320 ipv4=10.0.0.122 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-jnvdz subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.199 d8b6c791-b0ad-4c2f-8f44-681757be6edb default }" containerID=481d08f8e478a81512826b2469806b7f983be6036fb776bac7cfb88dee62f8ef datapathConfiguration="&{false false false false false }" interface=lxcef66bf3f7ee7 k8sPodName=monitoring/loki-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=481d08f8e4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1157 ipv4=10.0.0.199 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=481d08f8e4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1157 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.199 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=single-binary;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:app.kubernetes.io/part-of=memberlist;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=loki-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=481d08f8e4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1157 identity=26979 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.199 ipv6= k8sPodName=monitoring/loki-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=481d08f8e4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1157 identity=26979 ipv4=10.0.0.199 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=481d08f8e4 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1157 identity=26979 ipv4=10.0.0.199 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=481d08f8e4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1157 identity=26979 ipv4=10.0.0.199 ipv6= k8sPodName=monitoring/loki-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.79 3b33dfad-209a-47f9-8bd5-b2d5c35d696b default }" containerID=6e687dea1e36e4f5f86cb5e446c1bf22fb124d78fc0dde363f91db11338d3791 datapathConfiguration="&{false false false false false }" interface=lxc189c1f52b332 k8sPodName=openstack/memcached-memcached-6479589586-fsmk9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6e687dea1e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3253 ipv4=10.0.0.79 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-fsmk9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6e687dea1e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3253 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.79 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-fsmk9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=memcached;k8s:component=server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=memcached;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6e687dea1e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3253 identity=42737 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.79 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-fsmk9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6e687dea1e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3253 identity=42737 ipv4=10.0.0.79 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-fsmk9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6e687dea1e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3253 identity=42737 ipv4=10.0.0.79 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-fsmk9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=6e687dea1e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3253 identity=42737 ipv4=10.0.0.79 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-fsmk9 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.81 2ee9cad2-9117-45ad-b474-820296d4cc1a default }" containerID=a87cca6479801120116d7f9571f873ffb802ce94bf07df9918e974998a4a869e datapathConfiguration="&{false false false false false }" interface=lxcdb4014ee215e k8sPodName=local-path-storage/helper-pod-create-pvc-a40136c3-21b8-4d28-b188-e61664fc58e8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a87cca6479 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=312 ipv4=10.0.0.81 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a40136c3-21b8-4d28-b188-e61664fc58e8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a87cca6479 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=312 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.81 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a40136c3-21b8-4d28-b188-e61664fc58e8 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a87cca6479 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=312 identity=48697 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.81 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a40136c3-21b8-4d28-b188-e61664fc58e8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a87cca6479 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=312 identity=48697 ipv4=10.0.0.81 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a40136c3-21b8-4d28-b188-e61664fc58e8 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a87cca6479 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=312 identity=48697 ipv4=10.0.0.81 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a40136c3-21b8-4d28-b188-e61664fc58e8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=a87cca6479 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=312 identity=48697 ipv4=10.0.0.81 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a40136c3-21b8-4d28-b188-e61664fc58e8 subsys=daemon level=info msg="Delete endpoint request" containerID=a87cca6479 endpointID=312 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-a40136c3-21b8-4d28-b188-e61664fc58e8 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=a87cca6479 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=312 identity=48697 ipv4=10.0.0.81 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a40136c3-21b8-4d28-b188-e61664fc58e8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.39 0de4968f-ad4b-466d-b911-a9adf687cf15 default }" containerID=de0534fc13ba80f381ff47a086091078ab3872be648d5ce2be650cd05492fa7e datapathConfiguration="&{false false false false false }" interface=lxcba9797d831ca k8sPodName=openstack/rabbitmq-keystone-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=de0534fc13 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=578 ipv4=10.0.0.39 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=de0534fc13 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=578 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.39 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-keystone;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=de0534fc13 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=578 identity=3569 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.39 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=de0534fc13 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=578 identity=3569 ipv4=10.0.0.39 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=de0534fc13 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=578 identity=3569 ipv4=10.0.0.39 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=de0534fc13 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=578 identity=3569 ipv4=10.0.0.39 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.109 aa6c96f4-a766-4b86-8a83-b1e699be88f5 default }" containerID=2b0151dd8a1723f5fda4bad2d916621af15fbb15fb51ff37ce11c44295af2ae4 datapathConfiguration="&{false false false false false }" interface=lxc15f05d79ddf8 k8sPodName=openstack/keystone-api-6cbf597687-2czzl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2b0151dd8a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=608 ipv4=10.0.0.109 ipv6= k8sPodName=openstack/keystone-api-6cbf597687-2czzl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2b0151dd8a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=608 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.109 ipv6= k8sPodName=openstack/keystone-api-6cbf597687-2czzl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2b0151dd8a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=608 identity=64992 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.109 ipv6= k8sPodName=openstack/keystone-api-6cbf597687-2czzl oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2b0151dd8a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=608 identity=64992 ipv4=10.0.0.109 ipv6= k8sPodName=openstack/keystone-api-6cbf597687-2czzl subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.2 240d83bd-eb6b-440e-bd09-24be4ba6effe default }" containerID=5d724f4505733ab117570ba163f334b9db9d21a644315858222de7b4b74e6694 datapathConfiguration="&{false false false false false }" interface=lxc1a530e8dec66 k8sPodName=openstack/keystone-credential-setup-44cs6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5d724f4505 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=276 ipv4=10.0.0.2 ipv6= k8sPodName=openstack/keystone-credential-setup-44cs6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5d724f4505 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=276 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=75162ee2-f8d2-42ff-9937-83348ae13169,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=75162ee2-f8d2-42ff-9937-83348ae13169,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.2 ipv6= k8sPodName=openstack/keystone-credential-setup-44cs6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=75162ee2-f8d2-42ff-9937-83348ae13169;k8s:batch.kubernetes.io/job-name=keystone-credential-setup;k8s:component=credential-setup;k8s:controller-uid=75162ee2-f8d2-42ff-9937-83348ae13169;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-credential-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5d724f4505 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=276 identity=54343 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=75162ee2-f8d2-42ff-9937-83348ae13169,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=75162ee2-f8d2-42ff-9937-83348ae13169,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.2 ipv6= k8sPodName=openstack/keystone-credential-setup-44cs6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5d724f4505 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=276 identity=54343 ipv4=10.0.0.2 ipv6= k8sPodName=openstack/keystone-credential-setup-44cs6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2b0151dd8a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=608 identity=64992 ipv4=10.0.0.109 ipv6= k8sPodName=openstack/keystone-api-6cbf597687-2czzl subsys=endpoint level=info msg="Successful endpoint creation" containerID=2b0151dd8a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=608 identity=64992 ipv4=10.0.0.109 ipv6= k8sPodName=openstack/keystone-api-6cbf597687-2czzl subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=5d724f4505 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=276 identity=54343 ipv4=10.0.0.2 ipv6= k8sPodName=openstack/keystone-credential-setup-44cs6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=5d724f4505 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=276 identity=54343 ipv4=10.0.0.2 ipv6= k8sPodName=openstack/keystone-credential-setup-44cs6 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=5d724f4505 endpointID=276 k8sNamespace=openstack k8sPodName=keystone-credential-setup-44cs6 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=75162ee2-f8d2-42ff-9937-83348ae13169 k8s:batch.kubernetes.io/job-name=keystone-credential-setup k8s:component=credential-setup k8s:controller-uid=75162ee2-f8d2-42ff-9937-83348ae13169 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-credential-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=5d724f4505 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=276 identity=54343 ipv4=10.0.0.2 ipv6= k8sPodName=openstack/keystone-credential-setup-44cs6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.2 82151c1f-0836-4a9d-90a2-b5f359a9a58c default }" containerID=5bca5a271304d59f51f7013957a73d6a97c884a8118bc44fd2a4e1fdf5f8116d datapathConfiguration="&{false false false false false }" interface=lxc587c8bccc459 k8sPodName=openstack/keystone-db-init-2rlxw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5bca5a2713 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3960 ipv4=10.0.0.2 ipv6= k8sPodName=openstack/keystone-db-init-2rlxw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5bca5a2713 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3960 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=8d10bd38-2340-447c-b48d-5cc7d9d1f577,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=8d10bd38-2340-447c-b48d-5cc7d9d1f577,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.2 ipv6= k8sPodName=openstack/keystone-db-init-2rlxw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=8d10bd38-2340-447c-b48d-5cc7d9d1f577;k8s:batch.kubernetes.io/job-name=keystone-db-init;k8s:component=db-init;k8s:controller-uid=8d10bd38-2340-447c-b48d-5cc7d9d1f577;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-init;k8s:release_group=keystone;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=5bca5a2713 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3960 identity=3502 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=8d10bd38-2340-447c-b48d-5cc7d9d1f577,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=8d10bd38-2340-447c-b48d-5cc7d9d1f577,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.2 ipv6= k8sPodName=openstack/keystone-db-init-2rlxw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5bca5a2713 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3960 identity=3502 ipv4=10.0.0.2 ipv6= k8sPodName=openstack/keystone-db-init-2rlxw subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5bca5a2713 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3960 identity=3502 ipv4=10.0.0.2 ipv6= k8sPodName=openstack/keystone-db-init-2rlxw subsys=endpoint level=info msg="Successful endpoint creation" containerID=5bca5a2713 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3960 identity=3502 ipv4=10.0.0.2 ipv6= k8sPodName=openstack/keystone-db-init-2rlxw subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=5bca5a2713 endpointID=3960 k8sNamespace=openstack k8sPodName=keystone-db-init-2rlxw subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=8d10bd38-2340-447c-b48d-5cc7d9d1f577 k8s:batch.kubernetes.io/job-name=keystone-db-init k8s:component=db-init k8s:controller-uid=8d10bd38-2340-447c-b48d-5cc7d9d1f577 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=5bca5a2713 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3960 identity=3502 ipv4=10.0.0.2 ipv6= k8sPodName=openstack/keystone-db-init-2rlxw subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.93 15aa05e7-e1db-437c-8e94-506ab5112826 default }" containerID=5b149ac0765f52ae4258bab4e1805d0b26660daac1ab918b29a78454fbd07532 datapathConfiguration="&{false false false false false }" interface=lxc53fa44c539af k8sPodName=openstack/keystone-fernet-setup-xwx6v labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5b149ac076 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1836 ipv4=10.0.0.93 ipv6= k8sPodName=openstack/keystone-fernet-setup-xwx6v subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5b149ac076 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1836 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=c16aab55-f4b2-4ee9-8f33-f32c666b610f,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=c16aab55-f4b2-4ee9-8f33-f32c666b610f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.93 ipv6= k8sPodName=openstack/keystone-fernet-setup-xwx6v subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=c16aab55-f4b2-4ee9-8f33-f32c666b610f;k8s:batch.kubernetes.io/job-name=keystone-fernet-setup;k8s:component=fernet-setup;k8s:controller-uid=c16aab55-f4b2-4ee9-8f33-f32c666b610f;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-fernet-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=5b149ac076 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1836 identity=45477 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=c16aab55-f4b2-4ee9-8f33-f32c666b610f,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=c16aab55-f4b2-4ee9-8f33-f32c666b610f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.93 ipv6= k8sPodName=openstack/keystone-fernet-setup-xwx6v oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5b149ac076 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1836 identity=45477 ipv4=10.0.0.93 ipv6= k8sPodName=openstack/keystone-fernet-setup-xwx6v subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5b149ac076 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1836 identity=45477 ipv4=10.0.0.93 ipv6= k8sPodName=openstack/keystone-fernet-setup-xwx6v subsys=endpoint level=info msg="Successful endpoint creation" containerID=5b149ac076 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1836 identity=45477 ipv4=10.0.0.93 ipv6= k8sPodName=openstack/keystone-fernet-setup-xwx6v subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=5b149ac076 endpointID=1836 k8sNamespace=openstack k8sPodName=keystone-fernet-setup-xwx6v subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=c16aab55-f4b2-4ee9-8f33-f32c666b610f k8s:batch.kubernetes.io/job-name=keystone-fernet-setup k8s:component=fernet-setup k8s:controller-uid=c16aab55-f4b2-4ee9-8f33-f32c666b610f k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-fernet-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=5b149ac076 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1836 identity=45477 ipv4=10.0.0.93 ipv6= k8sPodName=openstack/keystone-fernet-setup-xwx6v subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.12 ad077c6f-d170-4a17-94df-791ff9d9077d default }" containerID=7fed57608ead204cdbc828be35fb9d9b5e7ecc27568cd24f5f8dc099ddc52a4c datapathConfiguration="&{false false false false false }" interface=lxc7491230e11a2 k8sPodName=openstack/keystone-db-sync-jgpns labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7fed57608e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2182 ipv4=10.0.0.12 ipv6= k8sPodName=openstack/keystone-db-sync-jgpns subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7fed57608e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2182 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=8f57fcbd-0582-4461-a063-5c88e98b1803,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=8f57fcbd-0582-4461-a063-5c88e98b1803,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.12 ipv6= k8sPodName=openstack/keystone-db-sync-jgpns subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=8f57fcbd-0582-4461-a063-5c88e98b1803;k8s:batch.kubernetes.io/job-name=keystone-db-sync;k8s:component=db-sync;k8s:controller-uid=8f57fcbd-0582-4461-a063-5c88e98b1803;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-sync;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7fed57608e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2182 identity=1491 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=8f57fcbd-0582-4461-a063-5c88e98b1803,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=8f57fcbd-0582-4461-a063-5c88e98b1803,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.12 ipv6= k8sPodName=openstack/keystone-db-sync-jgpns oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7fed57608e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2182 identity=1491 ipv4=10.0.0.12 ipv6= k8sPodName=openstack/keystone-db-sync-jgpns subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=7fed57608e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2182 identity=1491 ipv4=10.0.0.12 ipv6= k8sPodName=openstack/keystone-db-sync-jgpns subsys=endpoint level=info msg="Successful endpoint creation" containerID=7fed57608e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2182 identity=1491 ipv4=10.0.0.12 ipv6= k8sPodName=openstack/keystone-db-sync-jgpns subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=7fed57608e endpointID=2182 k8sNamespace=openstack k8sPodName=keystone-db-sync-jgpns subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=8f57fcbd-0582-4461-a063-5c88e98b1803 k8s:batch.kubernetes.io/job-name=keystone-db-sync k8s:component=db-sync k8s:controller-uid=8f57fcbd-0582-4461-a063-5c88e98b1803 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-sync k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=7fed57608e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2182 identity=1491 ipv4=10.0.0.12 ipv6= k8sPodName=openstack/keystone-db-sync-jgpns subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.41 f11bb709-1765-4925-b92d-e4925d8fae16 default }" containerID=6603b08c15e6b1965b239cef1a880afa62ad946458f9c5ba8d77184de69451bd datapathConfiguration="&{false false false false false }" interface=lxcfa2f18449efd k8sPodName=openstack/keystone-rabbit-init-sdk2c labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6603b08c15 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2997 ipv4=10.0.0.41 ipv6= k8sPodName=openstack/keystone-rabbit-init-sdk2c subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6603b08c15 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2997 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=ea3dba93-80cb-4bf8-818d-b08583dd2f72,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=ea3dba93-80cb-4bf8-818d-b08583dd2f72,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.41 ipv6= k8sPodName=openstack/keystone-rabbit-init-sdk2c subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=ea3dba93-80cb-4bf8-818d-b08583dd2f72;k8s:batch.kubernetes.io/job-name=keystone-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=ea3dba93-80cb-4bf8-818d-b08583dd2f72;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-rabbit-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6603b08c15 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2997 identity=2933 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=ea3dba93-80cb-4bf8-818d-b08583dd2f72,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=ea3dba93-80cb-4bf8-818d-b08583dd2f72,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.41 ipv6= k8sPodName=openstack/keystone-rabbit-init-sdk2c oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6603b08c15 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2997 identity=2933 ipv4=10.0.0.41 ipv6= k8sPodName=openstack/keystone-rabbit-init-sdk2c subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=6603b08c15 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2997 identity=2933 ipv4=10.0.0.41 ipv6= k8sPodName=openstack/keystone-rabbit-init-sdk2c subsys=endpoint level=info msg="Successful endpoint creation" containerID=6603b08c15 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2997 identity=2933 ipv4=10.0.0.41 ipv6= k8sPodName=openstack/keystone-rabbit-init-sdk2c subsys=daemon level=info msg="Delete endpoint request" containerID=6603b08c15 endpointID=2997 k8sNamespace=openstack k8sPodName=keystone-rabbit-init-sdk2c subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=ea3dba93-80cb-4bf8-818d-b08583dd2f72 k8s:batch.kubernetes.io/job-name=keystone-rabbit-init k8s:component=rabbit-init k8s:controller-uid=ea3dba93-80cb-4bf8-818d-b08583dd2f72 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-rabbit-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=6603b08c15 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2997 identity=2933 ipv4=10.0.0.41 ipv6= k8sPodName=openstack/keystone-rabbit-init-sdk2c subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.68 de45ecb7-ba0f-427f-af34-a941e58fefef default }" containerID=eb6d30e8ffc14975158522df3711e324b43df0dfb804c2907a25888a2b954562 datapathConfiguration="&{false false false false false }" interface=lxc0b1ebe4cf030 k8sPodName=openstack/keystone-domain-manage-jl47h labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=eb6d30e8ff datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1018 ipv4=10.0.0.68 ipv6= k8sPodName=openstack/keystone-domain-manage-jl47h subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=eb6d30e8ff datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1018 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=26a0db23-4c8a-41e1-84ab-6aedca43658b,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=26a0db23-4c8a-41e1-84ab-6aedca43658b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.68 ipv6= k8sPodName=openstack/keystone-domain-manage-jl47h subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=26a0db23-4c8a-41e1-84ab-6aedca43658b;k8s:batch.kubernetes.io/job-name=keystone-domain-manage;k8s:component=domain-manage;k8s:controller-uid=26a0db23-4c8a-41e1-84ab-6aedca43658b;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-domain-manage;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=eb6d30e8ff datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1018 identity=10286 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=26a0db23-4c8a-41e1-84ab-6aedca43658b,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=26a0db23-4c8a-41e1-84ab-6aedca43658b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.68 ipv6= k8sPodName=openstack/keystone-domain-manage-jl47h oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=eb6d30e8ff datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1018 identity=10286 ipv4=10.0.0.68 ipv6= k8sPodName=openstack/keystone-domain-manage-jl47h subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=eb6d30e8ff datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1018 identity=10286 ipv4=10.0.0.68 ipv6= k8sPodName=openstack/keystone-domain-manage-jl47h subsys=endpoint level=info msg="Successful endpoint creation" containerID=eb6d30e8ff datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1018 identity=10286 ipv4=10.0.0.68 ipv6= k8sPodName=openstack/keystone-domain-manage-jl47h subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=eb6d30e8ff endpointID=1018 k8sNamespace=openstack k8sPodName=keystone-domain-manage-jl47h subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=26a0db23-4c8a-41e1-84ab-6aedca43658b k8s:batch.kubernetes.io/job-name=keystone-domain-manage k8s:component=domain-manage k8s:controller-uid=26a0db23-4c8a-41e1-84ab-6aedca43658b k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-domain-manage k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=eb6d30e8ff datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1018 identity=10286 ipv4=10.0.0.68 ipv6= k8sPodName=openstack/keystone-domain-manage-jl47h subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.157 f961c0e4-7482-42a9-8667-dbc315f6003d default }" containerID=8a1d30911f03a4d3e441141ee25204ed7eb95d20c3c866e07c4bb75cf414774c datapathConfiguration="&{false false false false false }" interface=lxcf04ee0e196b1 k8sPodName=openstack/keystone-bootstrap-csq6f labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8a1d30911f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=309 ipv4=10.0.0.157 ipv6= k8sPodName=openstack/keystone-bootstrap-csq6f subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8a1d30911f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=309 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=b58ec685-eeb0-4ae5-b267-0517f4bbb951,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=b58ec685-eeb0-4ae5-b267-0517f4bbb951,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.157 ipv6= k8sPodName=openstack/keystone-bootstrap-csq6f subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=b58ec685-eeb0-4ae5-b267-0517f4bbb951;k8s:batch.kubernetes.io/job-name=keystone-bootstrap;k8s:component=bootstrap;k8s:controller-uid=b58ec685-eeb0-4ae5-b267-0517f4bbb951;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-bootstrap;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8a1d30911f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=309 identity=46802 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=b58ec685-eeb0-4ae5-b267-0517f4bbb951,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=b58ec685-eeb0-4ae5-b267-0517f4bbb951,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.157 ipv6= k8sPodName=openstack/keystone-bootstrap-csq6f oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8a1d30911f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=309 identity=46802 ipv4=10.0.0.157 ipv6= k8sPodName=openstack/keystone-bootstrap-csq6f subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8a1d30911f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=309 identity=46802 ipv4=10.0.0.157 ipv6= k8sPodName=openstack/keystone-bootstrap-csq6f subsys=endpoint level=info msg="Successful endpoint creation" containerID=8a1d30911f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=309 identity=46802 ipv4=10.0.0.157 ipv6= k8sPodName=openstack/keystone-bootstrap-csq6f subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=8a1d30911f endpointID=309 k8sNamespace=openstack k8sPodName=keystone-bootstrap-csq6f subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=b58ec685-eeb0-4ae5-b267-0517f4bbb951 k8s:batch.kubernetes.io/job-name=keystone-bootstrap k8s:component=bootstrap k8s:controller-uid=b58ec685-eeb0-4ae5-b267-0517f4bbb951 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-bootstrap k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=8a1d30911f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=309 identity=46802 ipv4=10.0.0.157 ipv6= k8sPodName=openstack/keystone-bootstrap-csq6f subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.75 a524af4a-88e8-4877-895f-7f7cbb900b73 default }" containerID=831138846c8a751d3bc2179c14ee6b2842f3db7b50e429a8e47a766c96c2a922 datapathConfiguration="&{false false false false false }" interface=lxccbf4776d6b27 k8sPodName=local-path-storage/helper-pod-create-pvc-e8840048-6c2e-4894-90d4-6acfe9cbd7a3 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=831138846c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1352 ipv4=10.0.0.75 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e8840048-6c2e-4894-90d4-6acfe9cbd7a3 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=831138846c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1352 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.75 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e8840048-6c2e-4894-90d4-6acfe9cbd7a3 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=831138846c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1352 identity=48697 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.75 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e8840048-6c2e-4894-90d4-6acfe9cbd7a3 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=831138846c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1352 identity=48697 ipv4=10.0.0.75 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e8840048-6c2e-4894-90d4-6acfe9cbd7a3 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=831138846c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1352 identity=48697 ipv4=10.0.0.75 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e8840048-6c2e-4894-90d4-6acfe9cbd7a3 subsys=endpoint level=info msg="Successful endpoint creation" containerID=831138846c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1352 identity=48697 ipv4=10.0.0.75 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e8840048-6c2e-4894-90d4-6acfe9cbd7a3 subsys=daemon level=info msg="Delete endpoint request" containerID=831138846c endpointID=1352 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-e8840048-6c2e-4894-90d4-6acfe9cbd7a3 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=831138846c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1352 identity=48697 ipv4=10.0.0.75 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e8840048-6c2e-4894-90d4-6acfe9cbd7a3 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.37 1ca5b559-e1b5-433d-98f1-0788889577f3 default }" containerID=a33b99b97642d7e50014c50ea7e18e1f8835be497efdbf3b7ae92721d96b8933 datapathConfiguration="&{false false false false false }" interface=lxc5002146235d7 k8sPodName=openstack/rabbitmq-barbican-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a33b99b976 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2193 ipv4=10.0.0.37 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a33b99b976 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2193 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.37 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-barbican;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a33b99b976 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2193 identity=21373 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.37 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a33b99b976 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2193 identity=21373 ipv4=10.0.0.37 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=a33b99b976 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2193 identity=21373 ipv4=10.0.0.37 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=a33b99b976 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2193 identity=21373 ipv4=10.0.0.37 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.239 af796b38-2cd1-495e-b553-a9967543c863 default }" containerID=5015dd6c40259356ebecd057349e260148a94f8d411fd01d017a2a76732ab51d datapathConfiguration="&{false false false false false }" interface=lxcf2a29b126067 k8sPodName=openstack/barbican-api-854fffd779-tb2kc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5015dd6c40 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3122 ipv4=10.0.0.239 ipv6= k8sPodName=openstack/barbican-api-854fffd779-tb2kc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5015dd6c40 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3122 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.239 ipv6= k8sPodName=openstack/barbican-api-854fffd779-tb2kc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5015dd6c40 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3122 identity=48010 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.239 ipv6= k8sPodName=openstack/barbican-api-854fffd779-tb2kc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5015dd6c40 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3122 identity=48010 ipv4=10.0.0.239 ipv6= k8sPodName=openstack/barbican-api-854fffd779-tb2kc subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=5015dd6c40 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3122 identity=48010 ipv4=10.0.0.239 ipv6= k8sPodName=openstack/barbican-api-854fffd779-tb2kc subsys=endpoint level=info msg="Successful endpoint creation" containerID=5015dd6c40 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3122 identity=48010 ipv4=10.0.0.239 ipv6= k8sPodName=openstack/barbican-api-854fffd779-tb2kc subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.110 9bffad43-2b7b-465b-a3c2-1ed2c515cce1 default }" containerID=f4ff1950e0a4d920874d94b653124903df9b891816e2fbac89795293a371f512 datapathConfiguration="&{false false false false false }" interface=lxcd1f27c3e7b34 k8sPodName=openstack/barbican-db-init-5jlcd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f4ff1950e0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3508 ipv4=10.0.0.110 ipv6= k8sPodName=openstack/barbican-db-init-5jlcd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f4ff1950e0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3508 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=1b735032-e941-4c32-b537-6c92683e86ec,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=1b735032-e941-4c32-b537-6c92683e86ec,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.110 ipv6= k8sPodName=openstack/barbican-db-init-5jlcd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=1b735032-e941-4c32-b537-6c92683e86ec;k8s:batch.kubernetes.io/job-name=barbican-db-init;k8s:component=db-init;k8s:controller-uid=1b735032-e941-4c32-b537-6c92683e86ec;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f4ff1950e0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3508 identity=1111 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=1b735032-e941-4c32-b537-6c92683e86ec,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=1b735032-e941-4c32-b537-6c92683e86ec,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.110 ipv6= k8sPodName=openstack/barbican-db-init-5jlcd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f4ff1950e0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3508 identity=1111 ipv4=10.0.0.110 ipv6= k8sPodName=openstack/barbican-db-init-5jlcd subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f4ff1950e0 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3508 identity=1111 ipv4=10.0.0.110 ipv6= k8sPodName=openstack/barbican-db-init-5jlcd subsys=endpoint level=info msg="Successful endpoint creation" containerID=f4ff1950e0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3508 identity=1111 ipv4=10.0.0.110 ipv6= k8sPodName=openstack/barbican-db-init-5jlcd subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=f4ff1950e0 endpointID=3508 k8sNamespace=openstack k8sPodName=barbican-db-init-5jlcd subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=1b735032-e941-4c32-b537-6c92683e86ec k8s:batch.kubernetes.io/job-name=barbican-db-init k8s:component=db-init k8s:controller-uid=1b735032-e941-4c32-b537-6c92683e86ec k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=f4ff1950e0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3508 identity=1111 ipv4=10.0.0.110 ipv6= k8sPodName=openstack/barbican-db-init-5jlcd subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.23 a3ba668f-5933-4d93-ad66-d24e5ad146d6 default }" containerID=5bb246b5ae8aa6f2aa7bc3f357d4dc7a79185c6e895a13964ab1b3578a205982 datapathConfiguration="&{false false false false false }" interface=lxc55ee0626831c k8sPodName=openstack/barbican-db-sync-xlj2p labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5bb246b5ae datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=665 ipv4=10.0.0.23 ipv6= k8sPodName=openstack/barbican-db-sync-xlj2p subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5bb246b5ae datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=665 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=f0cb8b60-6deb-4f75-98ce-e240bfc99df9,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=f0cb8b60-6deb-4f75-98ce-e240bfc99df9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.23 ipv6= k8sPodName=openstack/barbican-db-sync-xlj2p subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=f0cb8b60-6deb-4f75-98ce-e240bfc99df9;k8s:batch.kubernetes.io/job-name=barbican-db-sync;k8s:component=db-sync;k8s:controller-uid=f0cb8b60-6deb-4f75-98ce-e240bfc99df9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-sync;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5bb246b5ae datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=665 identity=19895 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=f0cb8b60-6deb-4f75-98ce-e240bfc99df9,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=f0cb8b60-6deb-4f75-98ce-e240bfc99df9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.23 ipv6= k8sPodName=openstack/barbican-db-sync-xlj2p oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5bb246b5ae datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=665 identity=19895 ipv4=10.0.0.23 ipv6= k8sPodName=openstack/barbican-db-sync-xlj2p subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=5bb246b5ae datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=665 identity=19895 ipv4=10.0.0.23 ipv6= k8sPodName=openstack/barbican-db-sync-xlj2p subsys=endpoint level=info msg="Successful endpoint creation" containerID=5bb246b5ae datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=665 identity=19895 ipv4=10.0.0.23 ipv6= k8sPodName=openstack/barbican-db-sync-xlj2p subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=5bb246b5ae endpointID=665 k8sNamespace=openstack k8sPodName=barbican-db-sync-xlj2p subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=f0cb8b60-6deb-4f75-98ce-e240bfc99df9 k8s:batch.kubernetes.io/job-name=barbican-db-sync k8s:component=db-sync k8s:controller-uid=f0cb8b60-6deb-4f75-98ce-e240bfc99df9 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-sync k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=5bb246b5ae datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=665 identity=19895 ipv4=10.0.0.23 ipv6= k8sPodName=openstack/barbican-db-sync-xlj2p subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.241 527e16f4-82a4-4db2-b110-46c227e1db10 default }" containerID=c2657ed32996b2aa700271affeea2fbcc8446a1507e96d7d9915364bc2f01b7a datapathConfiguration="&{false false false false false }" interface=lxc3fb45e3e3ef9 k8sPodName=openstack/barbican-rabbit-init-kk7sf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c2657ed329 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1584 ipv4=10.0.0.241 ipv6= k8sPodName=openstack/barbican-rabbit-init-kk7sf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c2657ed329 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1584 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=bd6d47df-e341-4cf7-9c4e-8a4a2e500ef9,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=bd6d47df-e341-4cf7-9c4e-8a4a2e500ef9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.241 ipv6= k8sPodName=openstack/barbican-rabbit-init-kk7sf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=bd6d47df-e341-4cf7-9c4e-8a4a2e500ef9;k8s:batch.kubernetes.io/job-name=barbican-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=bd6d47df-e341-4cf7-9c4e-8a4a2e500ef9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-rabbit-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c2657ed329 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1584 identity=29705 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=bd6d47df-e341-4cf7-9c4e-8a4a2e500ef9,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=bd6d47df-e341-4cf7-9c4e-8a4a2e500ef9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.241 ipv6= k8sPodName=openstack/barbican-rabbit-init-kk7sf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c2657ed329 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1584 identity=29705 ipv4=10.0.0.241 ipv6= k8sPodName=openstack/barbican-rabbit-init-kk7sf subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=c2657ed329 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1584 identity=29705 ipv4=10.0.0.241 ipv6= k8sPodName=openstack/barbican-rabbit-init-kk7sf subsys=endpoint level=info msg="Successful endpoint creation" containerID=c2657ed329 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1584 identity=29705 ipv4=10.0.0.241 ipv6= k8sPodName=openstack/barbican-rabbit-init-kk7sf subsys=daemon level=info msg="Delete endpoint request" containerID=c2657ed329 endpointID=1584 k8sNamespace=openstack k8sPodName=barbican-rabbit-init-kk7sf subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=bd6d47df-e341-4cf7-9c4e-8a4a2e500ef9 k8s:batch.kubernetes.io/job-name=barbican-rabbit-init k8s:component=rabbit-init k8s:controller-uid=bd6d47df-e341-4cf7-9c4e-8a4a2e500ef9 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-rabbit-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=c2657ed329 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1584 identity=29705 ipv4=10.0.0.241 ipv6= k8sPodName=openstack/barbican-rabbit-init-kk7sf subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.225 cc4df0eb-3600-4a27-88f7-f019f3999232 default }" containerID=fcabf5c1c8af310f6bfa7cc9634504c6e21dca3ee34b420932e9f100648a2823 datapathConfiguration="&{false false false false false }" interface=lxca460cb2467ad k8sPodName=openstack/barbican-ks-service-zcmv8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fcabf5c1c8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2383 ipv4=10.0.0.225 ipv6= k8sPodName=openstack/barbican-ks-service-zcmv8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fcabf5c1c8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2383 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=3ce08bb3-bc8b-4ca2-9930-10ead2dc0b29,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=3ce08bb3-bc8b-4ca2-9930-10ead2dc0b29,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.225 ipv6= k8sPodName=openstack/barbican-ks-service-zcmv8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=3ce08bb3-bc8b-4ca2-9930-10ead2dc0b29;k8s:batch.kubernetes.io/job-name=barbican-ks-service;k8s:component=ks-service;k8s:controller-uid=3ce08bb3-bc8b-4ca2-9930-10ead2dc0b29;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-service;k8s:release_group=barbican;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=fcabf5c1c8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2383 identity=41101 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=3ce08bb3-bc8b-4ca2-9930-10ead2dc0b29,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=3ce08bb3-bc8b-4ca2-9930-10ead2dc0b29,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.225 ipv6= k8sPodName=openstack/barbican-ks-service-zcmv8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fcabf5c1c8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2383 identity=41101 ipv4=10.0.0.225 ipv6= k8sPodName=openstack/barbican-ks-service-zcmv8 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=fcabf5c1c8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2383 identity=41101 ipv4=10.0.0.225 ipv6= k8sPodName=openstack/barbican-ks-service-zcmv8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=fcabf5c1c8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2383 identity=41101 ipv4=10.0.0.225 ipv6= k8sPodName=openstack/barbican-ks-service-zcmv8 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.035879989719588244 newInterval=11m15s subsys=map-ct level=info msg="Delete endpoint request" containerID=fcabf5c1c8 endpointID=2383 k8sNamespace=openstack k8sPodName=barbican-ks-service-zcmv8 subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=3ce08bb3-bc8b-4ca2-9930-10ead2dc0b29 k8s:batch.kubernetes.io/job-name=barbican-ks-service k8s:component=ks-service k8s:controller-uid=3ce08bb3-bc8b-4ca2-9930-10ead2dc0b29 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-service k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=fcabf5c1c8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2383 identity=41101 ipv4=10.0.0.225 ipv6= k8sPodName=openstack/barbican-ks-service-zcmv8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.91 e6b74147-12d5-471e-8b23-942e6c7799fd default }" containerID=8d999bda2919323d539cbf39668427d2f44b722855d7fa7a0e15ab2bfc4bb9f4 datapathConfiguration="&{false false false false false }" interface=lxcdff73e73d99d k8sPodName=openstack/barbican-ks-endpoints-42pxf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8d999bda29 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3145 ipv4=10.0.0.91 ipv6= k8sPodName=openstack/barbican-ks-endpoints-42pxf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8d999bda29 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3145 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=b2fbd37b-768b-4319-a689-a63a0182e150,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=b2fbd37b-768b-4319-a689-a63a0182e150,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.91 ipv6= k8sPodName=openstack/barbican-ks-endpoints-42pxf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=b2fbd37b-768b-4319-a689-a63a0182e150;k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=b2fbd37b-768b-4319-a689-a63a0182e150;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-endpoints;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8d999bda29 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3145 identity=2027 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=b2fbd37b-768b-4319-a689-a63a0182e150,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=b2fbd37b-768b-4319-a689-a63a0182e150,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.91 ipv6= k8sPodName=openstack/barbican-ks-endpoints-42pxf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8d999bda29 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3145 identity=2027 ipv4=10.0.0.91 ipv6= k8sPodName=openstack/barbican-ks-endpoints-42pxf subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=8d999bda29 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3145 identity=2027 ipv4=10.0.0.91 ipv6= k8sPodName=openstack/barbican-ks-endpoints-42pxf subsys=endpoint level=info msg="Successful endpoint creation" containerID=8d999bda29 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3145 identity=2027 ipv4=10.0.0.91 ipv6= k8sPodName=openstack/barbican-ks-endpoints-42pxf subsys=daemon level=info msg="Delete endpoint request" containerID=8d999bda29 endpointID=3145 k8sNamespace=openstack k8sPodName=barbican-ks-endpoints-42pxf subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=b2fbd37b-768b-4319-a689-a63a0182e150 k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=b2fbd37b-768b-4319-a689-a63a0182e150 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-endpoints k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=8d999bda29 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3145 identity=2027 ipv4=10.0.0.91 ipv6= k8sPodName=openstack/barbican-ks-endpoints-42pxf subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.29 790ab66b-45d1-4df9-8fa8-af159d5c7875 default }" containerID=616927a45faaa8c49d5b9029e2c040ae769ad96f4d6d13629a91c3749ea32b94 datapathConfiguration="&{false false false false false }" interface=lxcfe9dbfc7ee5f k8sPodName=openstack/barbican-ks-user-x2pgt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=616927a45f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1915 ipv4=10.0.0.29 ipv6= k8sPodName=openstack/barbican-ks-user-x2pgt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=616927a45f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1915 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=1c9a1c3f-cd9d-43dd-9134-26d0f5928d24,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=1c9a1c3f-cd9d-43dd-9134-26d0f5928d24,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.29 ipv6= k8sPodName=openstack/barbican-ks-user-x2pgt subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=616927a45f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1915 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.29 ipv6= k8sPodName=openstack/barbican-ks-user-x2pgt line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=1c9a1c3f-cd9d-43dd-9134-26d0f5928d24;k8s:batch.kubernetes.io/job-name=barbican-ks-user;k8s:component=ks-user;k8s:controller-uid=1c9a1c3f-cd9d-43dd-9134-26d0f5928d24;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-user;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=616927a45f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1915 identity=23423 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=1c9a1c3f-cd9d-43dd-9134-26d0f5928d24,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=1c9a1c3f-cd9d-43dd-9134-26d0f5928d24,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.29 ipv6= k8sPodName=openstack/barbican-ks-user-x2pgt oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=616927a45f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1915 identity=23423 ipv4=10.0.0.29 ipv6= k8sPodName=openstack/barbican-ks-user-x2pgt subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=616927a45f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1915 identity=23423 ipv4=10.0.0.29 ipv6= k8sPodName=openstack/barbican-ks-user-x2pgt subsys=endpoint level=info msg="Successful endpoint creation" containerID=616927a45f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1915 identity=23423 ipv4=10.0.0.29 ipv6= k8sPodName=openstack/barbican-ks-user-x2pgt subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=616927a45f endpointID=1915 k8sNamespace=openstack k8sPodName=barbican-ks-user-x2pgt subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=1c9a1c3f-cd9d-43dd-9134-26d0f5928d24 k8s:batch.kubernetes.io/job-name=barbican-ks-user k8s:component=ks-user k8s:controller-uid=1c9a1c3f-cd9d-43dd-9134-26d0f5928d24 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-user k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=616927a45f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1915 identity=23423 ipv4=10.0.0.29 ipv6= k8sPodName=openstack/barbican-ks-user-x2pgt subsys=endpoint level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Create endpoint request" addressing="&{10.0.0.162 cb929453-79c6-4d13-8f4e-00b6c46e9ad2 default }" containerID=6824df2e990a095d9acf6b3dbbe1dcbdf8e11d88547eff9dbb822c65ab36304e datapathConfiguration="&{false false false false false }" interface=lxc3ad0fe1ad5b6 k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-skn6w labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6824df2e99 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3266 ipv4=10.0.0.162 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-skn6w subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6824df2e99 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3266 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.15.9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.162 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-skn6w subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:rook-ceph k8s:io.cilium.k8s.namespace.labels.name:rook-ceph]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app=rook-ceph-operator;k8s:helm.sh/chart=rook-ceph-v1.15.9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph;k8s:io.cilium.k8s.namespace.labels.name=rook-ceph;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system;k8s:io.kubernetes.pod.namespace=rook-ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6824df2e99 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3266 identity=29037 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.15.9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.162 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-skn6w oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6824df2e99 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3266 identity=29037 ipv4=10.0.0.162 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-skn6w subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6824df2e99 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3266 identity=29037 ipv4=10.0.0.162 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-skn6w subsys=endpoint level=info msg="Successful endpoint creation" containerID=6824df2e99 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3266 identity=29037 ipv4=10.0.0.162 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-skn6w subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.203 0a22108a-c2ce-4ee8-a905-e2ecaee4b97c default }" containerID=6183276633efcf9dd000427f489c68c490be96ab95ebcc0dc39b30f02ae9f8f4 datapathConfiguration="&{false false false false false }" interface=lxc9f35eb3cc383 k8sPodName=openstack/rook-ceph-detect-version-hftnh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6183276633 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3220 ipv4=10.0.0.203 ipv6= k8sPodName=openstack/rook-ceph-detect-version-hftnh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6183276633 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3220 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=a6a76465-7e67-4b7f-b10a-f018c962643d,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=a6a76465-7e67-4b7f-b10a-f018c962643d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.203 ipv6= k8sPodName=openstack/rook-ceph-detect-version-hftnh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-detect-version;k8s:batch.kubernetes.io/controller-uid=a6a76465-7e67-4b7f-b10a-f018c962643d;k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version;k8s:controller-uid=a6a76465-7e67-4b7f-b10a-f018c962643d;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=rook-ceph-detect-version;k8s:rook-version=v1.15.9;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6183276633 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3220 identity=3565 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=a6a76465-7e67-4b7f-b10a-f018c962643d,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=a6a76465-7e67-4b7f-b10a-f018c962643d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.203 ipv6= k8sPodName=openstack/rook-ceph-detect-version-hftnh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6183276633 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3220 identity=3565 ipv4=10.0.0.203 ipv6= k8sPodName=openstack/rook-ceph-detect-version-hftnh subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=6183276633 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3220 identity=3565 ipv4=10.0.0.203 ipv6= k8sPodName=openstack/rook-ceph-detect-version-hftnh subsys=endpoint level=info msg="Successful endpoint creation" containerID=6183276633 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3220 identity=3565 ipv4=10.0.0.203 ipv6= k8sPodName=openstack/rook-ceph-detect-version-hftnh subsys=daemon level=info msg="Delete endpoint request" containerID=6183276633 endpointID=3220 k8sNamespace=openstack k8sPodName=rook-ceph-detect-version-hftnh subsys=daemon level=info msg="Releasing key" key="[k8s:app=rook-ceph-detect-version k8s:batch.kubernetes.io/controller-uid=a6a76465-7e67-4b7f-b10a-f018c962643d k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version k8s:controller-uid=a6a76465-7e67-4b7f-b10a-f018c962643d k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=rook-ceph-detect-version k8s:rook-version=v1.15.9]" subsys=allocator level=info msg="Removed endpoint" containerID=6183276633 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3220 identity=3565 ipv4=10.0.0.203 ipv6= k8sPodName=openstack/rook-ceph-detect-version-hftnh subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.204 d65bb37d-2cc5-4e5f-9b36-7a05d48be104 default }" containerID=b6174c7c9aba6742ba5908590d7501852c4cafcb8ab34a04320e0b871ea61d8f datapathConfiguration="&{false false false false false }" interface=lxc5b59903511e3 k8sPodName=openstack/ceph-object-controller-detect-version-xmpl9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b6174c7c9a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3975 ipv4=10.0.0.204 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-xmpl9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b6174c7c9a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3975 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=fd1d5013-960f-454c-a673-0f605523c324,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=fd1d5013-960f-454c-a673-0f605523c324,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.204 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-xmpl9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=ceph-object-controller-detect-version;k8s:batch.kubernetes.io/controller-uid=fd1d5013-960f-454c-a673-0f605523c324;k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version;k8s:controller-uid=fd1d5013-960f-454c-a673-0f605523c324;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=ceph-object-controller-detect-version;k8s:rook-version=v1.15.9;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b6174c7c9a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3975 identity=46496 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=fd1d5013-960f-454c-a673-0f605523c324,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=fd1d5013-960f-454c-a673-0f605523c324,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.204 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-xmpl9 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=b6174c7c9a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3975 identity=46496 ipv4=10.0.0.204 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-xmpl9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b6174c7c9a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3975 identity=46496 ipv4=10.0.0.204 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-xmpl9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=b6174c7c9a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3975 identity=46496 ipv4=10.0.0.204 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-xmpl9 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=b6174c7c9a endpointID=3975 k8sNamespace=openstack k8sPodName=ceph-object-controller-detect-version-xmpl9 subsys=daemon level=info msg="Releasing key" key="[k8s:app=ceph-object-controller-detect-version k8s:batch.kubernetes.io/controller-uid=fd1d5013-960f-454c-a673-0f605523c324 k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version k8s:controller-uid=fd1d5013-960f-454c-a673-0f605523c324 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=ceph-object-controller-detect-version k8s:rook-version=v1.15.9]" subsys=allocator level=info msg="Removed endpoint" containerID=b6174c7c9a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3975 identity=46496 ipv4=10.0.0.204 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-xmpl9 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.98 54483d1b-dc0d-4e09-98ec-06fb269ac736 default }" containerID=e4dbec52a7226be227f986dbdde202fb4fd7222766966f72cf1bc758b4201bdb datapathConfiguration="&{false false false false false }" interface=lxc2f033bb931b2 k8sPodName=local-path-storage/helper-pod-create-pvc-5b9e2b16-bbed-48b1-bf20-821cf432a360 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e4dbec52a7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=362 ipv4=10.0.0.98 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5b9e2b16-bbed-48b1-bf20-821cf432a360 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e4dbec52a7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=362 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.98 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5b9e2b16-bbed-48b1-bf20-821cf432a360 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e4dbec52a7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=362 identity=48697 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.98 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5b9e2b16-bbed-48b1-bf20-821cf432a360 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e4dbec52a7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=362 identity=48697 ipv4=10.0.0.98 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5b9e2b16-bbed-48b1-bf20-821cf432a360 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e4dbec52a7 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=362 identity=48697 ipv4=10.0.0.98 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5b9e2b16-bbed-48b1-bf20-821cf432a360 subsys=endpoint level=info msg="Successful endpoint creation" containerID=e4dbec52a7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=362 identity=48697 ipv4=10.0.0.98 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5b9e2b16-bbed-48b1-bf20-821cf432a360 subsys=daemon level=info msg="Delete endpoint request" containerID=e4dbec52a7 endpointID=362 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-5b9e2b16-bbed-48b1-bf20-821cf432a360 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=e4dbec52a7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=362 identity=48697 ipv4=10.0.0.98 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5b9e2b16-bbed-48b1-bf20-821cf432a360 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.238 295f01d5-4a01-4af6-a299-f59b03f77aff default }" containerID=6c57f64b9ded1429fcd353c77d267fccef01b4228886ec2f345876fa6404c774 datapathConfiguration="&{false false false false false }" interface=lxc6518b1250fa6 k8sPodName=openstack/rabbitmq-glance-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6c57f64b9d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3260 ipv4=10.0.0.238 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6c57f64b9d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3260 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.238 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-glance;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6c57f64b9d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3260 identity=20306 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.238 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=6c57f64b9d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3260 identity=20306 ipv4=10.0.0.238 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6c57f64b9d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3260 identity=20306 ipv4=10.0.0.238 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=6c57f64b9d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3260 identity=20306 ipv4=10.0.0.238 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.253 4b9c84a8-d7f9-42b7-82c1-e5a2473e1bf7 default }" containerID=1520ff46af4bf02498fe55c7674cf3d9ff522254dae35d1ae575218486216c6b datapathConfiguration="&{false false false false false }" interface=lxc7b0b73e18f2f k8sPodName=openstack/glance-db-init-b4gwl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1520ff46af datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2502 ipv4=10.0.0.253 ipv6= k8sPodName=openstack/glance-db-init-b4gwl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1520ff46af datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2502 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=e848b9e4-6c6d-43a0-8cab-0c2ee3be0777,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=e848b9e4-6c6d-43a0-8cab-0c2ee3be0777,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.253 ipv6= k8sPodName=openstack/glance-db-init-b4gwl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=e848b9e4-6c6d-43a0-8cab-0c2ee3be0777;k8s:batch.kubernetes.io/job-name=glance-db-init;k8s:component=db-init;k8s:controller-uid=e848b9e4-6c6d-43a0-8cab-0c2ee3be0777;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1520ff46af datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2502 identity=42730 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=e848b9e4-6c6d-43a0-8cab-0c2ee3be0777,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=e848b9e4-6c6d-43a0-8cab-0c2ee3be0777,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.253 ipv6= k8sPodName=openstack/glance-db-init-b4gwl oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1520ff46af datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2502 identity=42730 ipv4=10.0.0.253 ipv6= k8sPodName=openstack/glance-db-init-b4gwl subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=1520ff46af datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2502 identity=42730 ipv4=10.0.0.253 ipv6= k8sPodName=openstack/glance-db-init-b4gwl subsys=endpoint level=info msg="Successful endpoint creation" containerID=1520ff46af datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2502 identity=42730 ipv4=10.0.0.253 ipv6= k8sPodName=openstack/glance-db-init-b4gwl subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=1520ff46af endpointID=2502 k8sNamespace=openstack k8sPodName=glance-db-init-b4gwl subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=e848b9e4-6c6d-43a0-8cab-0c2ee3be0777 k8s:batch.kubernetes.io/job-name=glance-db-init k8s:component=db-init k8s:controller-uid=e848b9e4-6c6d-43a0-8cab-0c2ee3be0777 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=1520ff46af datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2502 identity=42730 ipv4=10.0.0.253 ipv6= k8sPodName=openstack/glance-db-init-b4gwl subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.86 a0c457ed-b3d3-4d8e-9e7a-5ca245eb22ca default }" containerID=67b5ef01b7b82766db4db55a680761bc14b12b2d6ca7d3ae2f778dbf632a9244 datapathConfiguration="&{false false false false false }" interface=lxc1f9959185f20 k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-f4cqh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=67b5ef01b7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2326 ipv4=10.0.0.86 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-f4cqh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=67b5ef01b7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2326 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.86 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-f4cqh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=67b5ef01b7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2326 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.86 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-f4cqh line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=rook-ceph-rgw;k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io;k8s:app.kubernetes.io/created-by=rook-ceph-operator;k8s:app.kubernetes.io/instance=ceph;k8s:app.kubernetes.io/managed-by=rook-ceph-operator;k8s:app.kubernetes.io/name=ceph-rgw;k8s:app.kubernetes.io/part-of=ceph;k8s:ceph_daemon_id=ceph;k8s:ceph_daemon_type=rgw;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw;k8s:io.kubernetes.pod.namespace=openstack;k8s:rgw=ceph;k8s:rook.io/operator-namespace=rook-ceph;k8s:rook_cluster=openstack;k8s:rook_object_store=ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=67b5ef01b7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2326 identity=6412 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.86 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-f4cqh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=67b5ef01b7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2326 identity=6412 ipv4=10.0.0.86 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-f4cqh subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.144 f0727ffb-fe07-438f-bec5-3ea6bd7b5b28 default }" containerID=0ba934da8eb7b4f44338d5cacbf1ce246d58372289def1db56d6c4a225062363 datapathConfiguration="&{false false false false false }" interface=lxcecce5580b6b2 k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-4wdc4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0ba934da8e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1283 ipv4=10.0.0.144 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-4wdc4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0ba934da8e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1283 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.144 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-4wdc4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-crashcollector;k8s:ceph-version=18.2.7-0;k8s:ceph_daemon_id=crash;k8s:crashcollector=crash;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default;k8s:io.kubernetes.pod.namespace=openstack;k8s:node_name=instance;k8s:rook_cluster=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0ba934da8e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1283 identity=8519 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.144 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-4wdc4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0ba934da8e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1283 identity=8519 ipv4=10.0.0.144 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-4wdc4 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=67b5ef01b7 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2326 identity=6412 ipv4=10.0.0.86 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-f4cqh subsys=endpoint level=info msg="Successful endpoint creation" containerID=67b5ef01b7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2326 identity=6412 ipv4=10.0.0.86 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-f4cqh subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=0ba934da8e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1283 identity=8519 ipv4=10.0.0.144 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-4wdc4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=0ba934da8e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1283 identity=8519 ipv4=10.0.0.144 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-4wdc4 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.24 e19601d2-0d1e-4713-bcef-8e51652b254c default }" containerID=3e3dff1e38540e38466225c3e11bd0ce8e7ace9a6f453736d5ed3eedc9da3598 datapathConfiguration="&{false false false false false }" interface=lxc6d43aaa99f21 k8sPodName=openstack/glance-db-sync-rfdfl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3e3dff1e38 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1357 ipv4=10.0.0.24 ipv6= k8sPodName=openstack/glance-db-sync-rfdfl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3e3dff1e38 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1357 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=feca9220-1440-4d5f-b5ef-33993b0a2bf6,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=feca9220-1440-4d5f-b5ef-33993b0a2bf6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.24 ipv6= k8sPodName=openstack/glance-db-sync-rfdfl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=feca9220-1440-4d5f-b5ef-33993b0a2bf6;k8s:batch.kubernetes.io/job-name=glance-db-sync;k8s:component=db-sync;k8s:controller-uid=feca9220-1440-4d5f-b5ef-33993b0a2bf6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-sync;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3e3dff1e38 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1357 identity=33378 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=feca9220-1440-4d5f-b5ef-33993b0a2bf6,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=feca9220-1440-4d5f-b5ef-33993b0a2bf6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.24 ipv6= k8sPodName=openstack/glance-db-sync-rfdfl oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3e3dff1e38 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1357 identity=33378 ipv4=10.0.0.24 ipv6= k8sPodName=openstack/glance-db-sync-rfdfl subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3e3dff1e38 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1357 identity=33378 ipv4=10.0.0.24 ipv6= k8sPodName=openstack/glance-db-sync-rfdfl subsys=endpoint level=info msg="Successful endpoint creation" containerID=3e3dff1e38 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1357 identity=33378 ipv4=10.0.0.24 ipv6= k8sPodName=openstack/glance-db-sync-rfdfl subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=3e3dff1e38 endpointID=1357 k8sNamespace=openstack k8sPodName=glance-db-sync-rfdfl subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=feca9220-1440-4d5f-b5ef-33993b0a2bf6 k8s:batch.kubernetes.io/job-name=glance-db-sync k8s:component=db-sync k8s:controller-uid=feca9220-1440-4d5f-b5ef-33993b0a2bf6 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-sync k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=3e3dff1e38 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1357 identity=33378 ipv4=10.0.0.24 ipv6= k8sPodName=openstack/glance-db-sync-rfdfl subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.130 abd9b793-4b1b-4bb2-b8f0-52eaf1f19574 default }" containerID=8bcd3a172f0cac1fb39a43b00a8e7a3bc3fc8209db9c5f0f382b6f4099a55a22 datapathConfiguration="&{false false false false false }" interface=lxcd6c015c518d4 k8sPodName=openstack/glance-rabbit-init-xvsmb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8bcd3a172f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1741 ipv4=10.0.0.130 ipv6= k8sPodName=openstack/glance-rabbit-init-xvsmb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8bcd3a172f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1741 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=6542ce80-c408-4de8-8c36-ec27edf014d1,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=6542ce80-c408-4de8-8c36-ec27edf014d1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.130 ipv6= k8sPodName=openstack/glance-rabbit-init-xvsmb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=6542ce80-c408-4de8-8c36-ec27edf014d1;k8s:batch.kubernetes.io/job-name=glance-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=6542ce80-c408-4de8-8c36-ec27edf014d1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-rabbit-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8bcd3a172f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1741 identity=64512 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=6542ce80-c408-4de8-8c36-ec27edf014d1,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=6542ce80-c408-4de8-8c36-ec27edf014d1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.130 ipv6= k8sPodName=openstack/glance-rabbit-init-xvsmb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8bcd3a172f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1741 identity=64512 ipv4=10.0.0.130 ipv6= k8sPodName=openstack/glance-rabbit-init-xvsmb subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=8bcd3a172f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1741 identity=64512 ipv4=10.0.0.130 ipv6= k8sPodName=openstack/glance-rabbit-init-xvsmb subsys=endpoint level=info msg="Successful endpoint creation" containerID=8bcd3a172f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1741 identity=64512 ipv4=10.0.0.130 ipv6= k8sPodName=openstack/glance-rabbit-init-xvsmb subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=8bcd3a172f endpointID=1741 k8sNamespace=openstack k8sPodName=glance-rabbit-init-xvsmb subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=6542ce80-c408-4de8-8c36-ec27edf014d1 k8s:batch.kubernetes.io/job-name=glance-rabbit-init k8s:component=rabbit-init k8s:controller-uid=6542ce80-c408-4de8-8c36-ec27edf014d1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-rabbit-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=8bcd3a172f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1741 identity=64512 ipv4=10.0.0.130 ipv6= k8sPodName=openstack/glance-rabbit-init-xvsmb subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.127 eee3e59e-56ca-4103-b74e-166315eeb374 default }" containerID=bbd633590d887a0f17a42c96b1bfa39ee096e95a436ec7676b67dfaac8b572fd datapathConfiguration="&{false false false false false }" interface=lxc00681c6f5d02 k8sPodName=openstack/glance-ks-service-2hz8r labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bbd633590d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1413 ipv4=10.0.0.127 ipv6= k8sPodName=openstack/glance-ks-service-2hz8r subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bbd633590d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1413 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=a936577b-759f-41aa-bca2-29d6218081cc,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=a936577b-759f-41aa-bca2-29d6218081cc,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.127 ipv6= k8sPodName=openstack/glance-ks-service-2hz8r subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=a936577b-759f-41aa-bca2-29d6218081cc;k8s:batch.kubernetes.io/job-name=glance-ks-service;k8s:component=ks-service;k8s:controller-uid=a936577b-759f-41aa-bca2-29d6218081cc;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-service;k8s:release_group=glance;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=bbd633590d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1413 identity=61274 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=a936577b-759f-41aa-bca2-29d6218081cc,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=a936577b-759f-41aa-bca2-29d6218081cc,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.127 ipv6= k8sPodName=openstack/glance-ks-service-2hz8r oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=bbd633590d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1413 identity=61274 ipv4=10.0.0.127 ipv6= k8sPodName=openstack/glance-ks-service-2hz8r subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=bbd633590d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1413 identity=61274 ipv4=10.0.0.127 ipv6= k8sPodName=openstack/glance-ks-service-2hz8r subsys=endpoint level=info msg="Successful endpoint creation" containerID=bbd633590d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1413 identity=61274 ipv4=10.0.0.127 ipv6= k8sPodName=openstack/glance-ks-service-2hz8r subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=bbd633590d endpointID=1413 k8sNamespace=openstack k8sPodName=glance-ks-service-2hz8r subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=a936577b-759f-41aa-bca2-29d6218081cc k8s:batch.kubernetes.io/job-name=glance-ks-service k8s:component=ks-service k8s:controller-uid=a936577b-759f-41aa-bca2-29d6218081cc k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-service k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=bbd633590d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1413 identity=61274 ipv4=10.0.0.127 ipv6= k8sPodName=openstack/glance-ks-service-2hz8r subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.13 124234eb-3426-48fe-8825-3890c2449ed9 default }" containerID=4ecf13f9579721496120efe419e7b8b0e3147494381075032b0746c9af108af0 datapathConfiguration="&{false false false false false }" interface=lxc76bcf5b88335 k8sPodName=openstack/glance-ks-endpoints-nbtwh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4ecf13f957 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=128 ipv4=10.0.0.13 ipv6= k8sPodName=openstack/glance-ks-endpoints-nbtwh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4ecf13f957 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=128 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=b1693b0e-71ab-44b2-ab94-6c53d2e13bd3,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=b1693b0e-71ab-44b2-ab94-6c53d2e13bd3,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.13 ipv6= k8sPodName=openstack/glance-ks-endpoints-nbtwh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=b1693b0e-71ab-44b2-ab94-6c53d2e13bd3;k8s:batch.kubernetes.io/job-name=glance-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=b1693b0e-71ab-44b2-ab94-6c53d2e13bd3;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-endpoints;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4ecf13f957 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=128 identity=28093 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=b1693b0e-71ab-44b2-ab94-6c53d2e13bd3,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=b1693b0e-71ab-44b2-ab94-6c53d2e13bd3,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.13 ipv6= k8sPodName=openstack/glance-ks-endpoints-nbtwh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4ecf13f957 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=128 identity=28093 ipv4=10.0.0.13 ipv6= k8sPodName=openstack/glance-ks-endpoints-nbtwh subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=4ecf13f957 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=128 identity=28093 ipv4=10.0.0.13 ipv6= k8sPodName=openstack/glance-ks-endpoints-nbtwh subsys=endpoint level=info msg="Successful endpoint creation" containerID=4ecf13f957 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=128 identity=28093 ipv4=10.0.0.13 ipv6= k8sPodName=openstack/glance-ks-endpoints-nbtwh subsys=daemon level=info msg="Delete endpoint request" containerID=4ecf13f957 endpointID=128 k8sNamespace=openstack k8sPodName=glance-ks-endpoints-nbtwh subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=b1693b0e-71ab-44b2-ab94-6c53d2e13bd3 k8s:batch.kubernetes.io/job-name=glance-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=b1693b0e-71ab-44b2-ab94-6c53d2e13bd3 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-endpoints k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=4ecf13f957 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=128 identity=28093 ipv4=10.0.0.13 ipv6= k8sPodName=openstack/glance-ks-endpoints-nbtwh subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.147 c553b2b3-3475-446f-9c2e-d0af5c395465 default }" containerID=e87d8434efc00afe86964cc83d7cec80bd0aeb41c1e430fb0b4030e56cffc8c3 datapathConfiguration="&{false false false false false }" interface=lxc629f3e114bcc k8sPodName=openstack/glance-ks-user-z5cmd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e87d8434ef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2061 ipv4=10.0.0.147 ipv6= k8sPodName=openstack/glance-ks-user-z5cmd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e87d8434ef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2061 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=98ee2296-9e10-47bf-ab45-43d82c03cd8c,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=98ee2296-9e10-47bf-ab45-43d82c03cd8c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.147 ipv6= k8sPodName=openstack/glance-ks-user-z5cmd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=98ee2296-9e10-47bf-ab45-43d82c03cd8c;k8s:batch.kubernetes.io/job-name=glance-ks-user;k8s:component=ks-user;k8s:controller-uid=98ee2296-9e10-47bf-ab45-43d82c03cd8c;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-user;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e87d8434ef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2061 identity=1161 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=98ee2296-9e10-47bf-ab45-43d82c03cd8c,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=98ee2296-9e10-47bf-ab45-43d82c03cd8c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.147 ipv6= k8sPodName=openstack/glance-ks-user-z5cmd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e87d8434ef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2061 identity=1161 ipv4=10.0.0.147 ipv6= k8sPodName=openstack/glance-ks-user-z5cmd subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=e87d8434ef datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2061 identity=1161 ipv4=10.0.0.147 ipv6= k8sPodName=openstack/glance-ks-user-z5cmd subsys=endpoint level=info msg="Successful endpoint creation" containerID=e87d8434ef datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2061 identity=1161 ipv4=10.0.0.147 ipv6= k8sPodName=openstack/glance-ks-user-z5cmd subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=e87d8434ef endpointID=2061 k8sNamespace=openstack k8sPodName=glance-ks-user-z5cmd subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=98ee2296-9e10-47bf-ab45-43d82c03cd8c k8s:batch.kubernetes.io/job-name=glance-ks-user k8s:component=ks-user k8s:controller-uid=98ee2296-9e10-47bf-ab45-43d82c03cd8c k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-user k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=e87d8434ef datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2061 identity=1161 ipv4=10.0.0.147 ipv6= k8sPodName=openstack/glance-ks-user-z5cmd subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.188 a095e802-f0c1-45c4-a898-2676edd548a7 default }" containerID=9696b970becbe3704f9f3fbad258cfb0507bd57c674423f5a3b7e081558abaf5 datapathConfiguration="&{false false false false false }" interface=lxceee668f1a4d2 k8sPodName=openstack/glance-metadefs-load-2thfg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9696b970be datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1143 ipv4=10.0.0.188 ipv6= k8sPodName=openstack/glance-metadefs-load-2thfg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9696b970be datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1143 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=fa296fbc-56a7-491a-84f3-0463f0f697b2,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=fa296fbc-56a7-491a-84f3-0463f0f697b2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.188 ipv6= k8sPodName=openstack/glance-metadefs-load-2thfg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=fa296fbc-56a7-491a-84f3-0463f0f697b2;k8s:batch.kubernetes.io/job-name=glance-metadefs-load;k8s:component=metadefs_load;k8s:controller-uid=fa296fbc-56a7-491a-84f3-0463f0f697b2;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-metadefs-load;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9696b970be datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1143 identity=64403 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=fa296fbc-56a7-491a-84f3-0463f0f697b2,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=fa296fbc-56a7-491a-84f3-0463f0f697b2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.188 ipv6= k8sPodName=openstack/glance-metadefs-load-2thfg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9696b970be datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1143 identity=64403 ipv4=10.0.0.188 ipv6= k8sPodName=openstack/glance-metadefs-load-2thfg subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=9696b970be datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1143 identity=64403 ipv4=10.0.0.188 ipv6= k8sPodName=openstack/glance-metadefs-load-2thfg subsys=endpoint level=info msg="Successful endpoint creation" containerID=9696b970be datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1143 identity=64403 ipv4=10.0.0.188 ipv6= k8sPodName=openstack/glance-metadefs-load-2thfg subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=9696b970be endpointID=1143 k8sNamespace=openstack k8sPodName=glance-metadefs-load-2thfg subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=fa296fbc-56a7-491a-84f3-0463f0f697b2 k8s:batch.kubernetes.io/job-name=glance-metadefs-load k8s:component=metadefs_load k8s:controller-uid=fa296fbc-56a7-491a-84f3-0463f0f697b2 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-metadefs-load k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=9696b970be datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1143 identity=64403 ipv4=10.0.0.188 ipv6= k8sPodName=openstack/glance-metadefs-load-2thfg subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.127 5972823f-1777-4b89-bdb4-39fb688b63ba default }" containerID=a47e21027ebcb5001cf6a1c09d9776848c276ec44197223c1374eb6dbe87c52d datapathConfiguration="&{false false false false false }" interface=lxcc7faab7078b1 k8sPodName=openstack/glance-storage-init-74sm7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a47e21027e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2570 ipv4=10.0.0.127 ipv6= k8sPodName=openstack/glance-storage-init-74sm7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a47e21027e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2570 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=0cbe5047-8d6d-4dfa-a410-914270bc2adf,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=0cbe5047-8d6d-4dfa-a410-914270bc2adf,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.127 ipv6= k8sPodName=openstack/glance-storage-init-74sm7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=0cbe5047-8d6d-4dfa-a410-914270bc2adf;k8s:batch.kubernetes.io/job-name=glance-storage-init;k8s:component=storage-init;k8s:controller-uid=0cbe5047-8d6d-4dfa-a410-914270bc2adf;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-storage-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a47e21027e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2570 identity=46328 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=0cbe5047-8d6d-4dfa-a410-914270bc2adf,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=0cbe5047-8d6d-4dfa-a410-914270bc2adf,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.127 ipv6= k8sPodName=openstack/glance-storage-init-74sm7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a47e21027e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2570 identity=46328 ipv4=10.0.0.127 ipv6= k8sPodName=openstack/glance-storage-init-74sm7 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a47e21027e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2570 identity=46328 ipv4=10.0.0.127 ipv6= k8sPodName=openstack/glance-storage-init-74sm7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=a47e21027e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2570 identity=46328 ipv4=10.0.0.127 ipv6= k8sPodName=openstack/glance-storage-init-74sm7 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=a47e21027e endpointID=2570 k8sNamespace=openstack k8sPodName=glance-storage-init-74sm7 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=0cbe5047-8d6d-4dfa-a410-914270bc2adf k8s:batch.kubernetes.io/job-name=glance-storage-init k8s:component=storage-init k8s:controller-uid=0cbe5047-8d6d-4dfa-a410-914270bc2adf k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-storage-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=a47e21027e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2570 identity=46328 ipv4=10.0.0.127 ipv6= k8sPodName=openstack/glance-storage-init-74sm7 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.1 b8481db3-5b83-40b3-a9b8-d316aad05703 default }" containerID=ca042b9657d5733e0e539c9a9779cd2f011a91a923e5132906af083ec74a8401 datapathConfiguration="&{false false false false false }" interface=lxccbf52c04a134 k8sPodName=openstack/glance-api-5996df9d97-5djqj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ca042b9657 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1645 ipv4=10.0.0.1 ipv6= k8sPodName=openstack/glance-api-5996df9d97-5djqj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ca042b9657 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1645 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.1 ipv6= k8sPodName=openstack/glance-api-5996df9d97-5djqj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=glance;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=ca042b9657 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1645 identity=2891 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.1 ipv6= k8sPodName=openstack/glance-api-5996df9d97-5djqj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ca042b9657 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1645 identity=2891 ipv4=10.0.0.1 ipv6= k8sPodName=openstack/glance-api-5996df9d97-5djqj subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ca042b9657 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1645 identity=2891 ipv4=10.0.0.1 ipv6= k8sPodName=openstack/glance-api-5996df9d97-5djqj subsys=endpoint level=info msg="Successful endpoint creation" containerID=ca042b9657 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1645 identity=2891 ipv4=10.0.0.1 ipv6= k8sPodName=openstack/glance-api-5996df9d97-5djqj subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.17 7b7aea55-e188-42ae-a5a2-624720c80a36 default }" containerID=56c9a9c3111fd4e9811c7d44467151e218ce8a6b6f0a724139ea5d5e16991fcf datapathConfiguration="&{false false false false false }" interface=lxc4286b60ad4f9 k8sPodName=openstack/staffeln-api-7b47f895f4-7g9st labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=56c9a9c311 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1259 ipv4=10.0.0.17 ipv6= k8sPodName=openstack/staffeln-api-7b47f895f4-7g9st subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=56c9a9c311 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1259 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.17 ipv6= k8sPodName=openstack/staffeln-api-7b47f895f4-7g9st subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=56c9a9c311 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1259 identity=33738 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.17 ipv6= k8sPodName=openstack/staffeln-api-7b47f895f4-7g9st oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=56c9a9c311 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1259 identity=33738 ipv4=10.0.0.17 ipv6= k8sPodName=openstack/staffeln-api-7b47f895f4-7g9st subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.249 3dbcb0cc-405c-4ac8-a999-bb4f88302f7f default }" containerID=4e9ea9ec95791b88a1bbc54888a302fb14728e4e49b594b4cb4ce652b6d0b938 datapathConfiguration="&{false false false false false }" interface=lxc8f67c61fedc8 k8sPodName=openstack/staffeln-conductor-7569785cfc-dfmjz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4e9ea9ec95 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2620 ipv4=10.0.0.249 ipv6= k8sPodName=openstack/staffeln-conductor-7569785cfc-dfmjz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4e9ea9ec95 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2620 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.249 ipv6= k8sPodName=openstack/staffeln-conductor-7569785cfc-dfmjz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=conductor;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4e9ea9ec95 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2620 identity=11090 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.249 ipv6= k8sPodName=openstack/staffeln-conductor-7569785cfc-dfmjz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4e9ea9ec95 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2620 identity=11090 ipv4=10.0.0.249 ipv6= k8sPodName=openstack/staffeln-conductor-7569785cfc-dfmjz subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.69 31261105-f4b0-4dcb-b3a1-4ac0c1ea868e default }" containerID=81d4d9205a6287fd4f7b428b9fe81e3eb6994ed5fe18c2925278694c9ed5b963 datapathConfiguration="&{false false false false false }" interface=lxcf1ae1ddd4899 k8sPodName=openstack/staffeln-db-init-7qjv8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=81d4d9205a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=664 ipv4=10.0.0.69 ipv6= k8sPodName=openstack/staffeln-db-init-7qjv8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=81d4d9205a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=664 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=6f1e8996-5290-4263-a99b-dc4c7a50d5a0,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=6f1e8996-5290-4263-a99b-dc4c7a50d5a0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.69 ipv6= k8sPodName=openstack/staffeln-db-init-7qjv8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=6f1e8996-5290-4263-a99b-dc4c7a50d5a0;k8s:batch.kubernetes.io/job-name=staffeln-db-init;k8s:component=db-init;k8s:controller-uid=6f1e8996-5290-4263-a99b-dc4c7a50d5a0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-init;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=81d4d9205a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=664 identity=11656 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=6f1e8996-5290-4263-a99b-dc4c7a50d5a0,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=6f1e8996-5290-4263-a99b-dc4c7a50d5a0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.69 ipv6= k8sPodName=openstack/staffeln-db-init-7qjv8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=81d4d9205a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=664 identity=11656 ipv4=10.0.0.69 ipv6= k8sPodName=openstack/staffeln-db-init-7qjv8 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=56c9a9c311 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1259 identity=33738 ipv4=10.0.0.17 ipv6= k8sPodName=openstack/staffeln-api-7b47f895f4-7g9st subsys=endpoint level=info msg="Successful endpoint creation" containerID=56c9a9c311 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1259 identity=33738 ipv4=10.0.0.17 ipv6= k8sPodName=openstack/staffeln-api-7b47f895f4-7g9st subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=4e9ea9ec95 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2620 identity=11090 ipv4=10.0.0.249 ipv6= k8sPodName=openstack/staffeln-conductor-7569785cfc-dfmjz subsys=endpoint level=info msg="Successful endpoint creation" containerID=4e9ea9ec95 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2620 identity=11090 ipv4=10.0.0.249 ipv6= k8sPodName=openstack/staffeln-conductor-7569785cfc-dfmjz subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=81d4d9205a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=664 identity=11656 ipv4=10.0.0.69 ipv6= k8sPodName=openstack/staffeln-db-init-7qjv8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=81d4d9205a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=664 identity=11656 ipv4=10.0.0.69 ipv6= k8sPodName=openstack/staffeln-db-init-7qjv8 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=81d4d9205a endpointID=664 k8sNamespace=openstack k8sPodName=staffeln-db-init-7qjv8 subsys=daemon level=info msg="Releasing key" key="[k8s:application=staffeln k8s:batch.kubernetes.io/controller-uid=6f1e8996-5290-4263-a99b-dc4c7a50d5a0 k8s:batch.kubernetes.io/job-name=staffeln-db-init k8s:component=db-init k8s:controller-uid=6f1e8996-5290-4263-a99b-dc4c7a50d5a0 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=staffeln-db-init k8s:release_group=staffeln]" subsys=allocator level=info msg="Removed endpoint" containerID=81d4d9205a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=664 identity=11656 ipv4=10.0.0.69 ipv6= k8sPodName=openstack/staffeln-db-init-7qjv8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.120 7bffd40f-a15b-422e-912e-026bf4112839 default }" containerID=c3b4d092f5fdc2e37c8b0bf2e00d4aab741a978da669f84c3db5dcd103d99072 datapathConfiguration="&{false false false false false }" interface=lxcf7bb8234b265 k8sPodName=openstack/staffeln-db-sync-2twhm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c3b4d092f5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3800 ipv4=10.0.0.120 ipv6= k8sPodName=openstack/staffeln-db-sync-2twhm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c3b4d092f5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3800 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=c8899265-12a1-44c9-8e35-de907e68695d,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=c8899265-12a1-44c9-8e35-de907e68695d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.120 ipv6= k8sPodName=openstack/staffeln-db-sync-2twhm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=c8899265-12a1-44c9-8e35-de907e68695d;k8s:batch.kubernetes.io/job-name=staffeln-db-sync;k8s:component=db-sync;k8s:controller-uid=c8899265-12a1-44c9-8e35-de907e68695d;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-sync;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c3b4d092f5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3800 identity=8249 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=c8899265-12a1-44c9-8e35-de907e68695d,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=c8899265-12a1-44c9-8e35-de907e68695d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.120 ipv6= k8sPodName=openstack/staffeln-db-sync-2twhm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c3b4d092f5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3800 identity=8249 ipv4=10.0.0.120 ipv6= k8sPodName=openstack/staffeln-db-sync-2twhm subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c3b4d092f5 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3800 identity=8249 ipv4=10.0.0.120 ipv6= k8sPodName=openstack/staffeln-db-sync-2twhm subsys=endpoint level=info msg="Successful endpoint creation" containerID=c3b4d092f5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3800 identity=8249 ipv4=10.0.0.120 ipv6= k8sPodName=openstack/staffeln-db-sync-2twhm subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager