level=info msg="Memory available for map entries (0.003% of 67421646848B): 168554117B" subsys=config level=info msg="option bpf-ct-global-tcp-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-ct-global-any-max set by dynamic sizing to 295708" subsys=config level=info msg="option bpf-nat-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-neigh-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-sock-rev-map-max set by dynamic sizing to 295708" subsys=config level=info msg=" --agent-health-port='9879'" subsys=daemon level=info msg=" --agent-labels=''" subsys=daemon level=info msg=" --agent-liveness-update-interval='1s'" subsys=daemon level=info msg=" --agent-not-ready-taint-key='node.cilium.io/agent-not-ready'" subsys=daemon level=info msg=" --allocator-list-timeout='3m0s'" subsys=daemon level=info msg=" --allow-icmp-frag-needed='true'" subsys=daemon level=info msg=" --allow-localhost='auto'" subsys=daemon level=info msg=" --annotate-k8s-node='false'" subsys=daemon level=info msg=" --api-rate-limit=''" subsys=daemon level=info msg=" --arping-refresh-period='30s'" subsys=daemon level=info msg=" --auto-create-cilium-node-resource='true'" subsys=daemon level=info msg=" --auto-direct-node-routes='false'" subsys=daemon level=info msg=" --bgp-announce-lb-ip='false'" subsys=daemon level=info msg=" --bgp-announce-pod-cidr='false'" subsys=daemon level=info msg=" --bgp-config-path='/var/lib/cilium/bgp/config.yaml'" subsys=daemon level=info msg=" --bpf-auth-map-max='524288'" subsys=daemon level=info msg=" --bpf-ct-global-any-max='262144'" subsys=daemon level=info msg=" --bpf-ct-global-tcp-max='524288'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-fin='10s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-syn='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp-grace='1m0s'" subsys=daemon level=info msg=" --bpf-filter-priority='1'" subsys=daemon level=info msg=" --bpf-fragments-map-max='8192'" subsys=daemon level=info msg=" --bpf-lb-acceleration='disabled'" subsys=daemon level=info msg=" --bpf-lb-affinity-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-algorithm='random'" subsys=daemon level=info msg=" --bpf-lb-dev-ip-addr-inherit=''" subsys=daemon level=info msg=" --bpf-lb-dsr-dispatch='opt'" subsys=daemon level=info msg=" --bpf-lb-dsr-l4-xlate='frontend'" subsys=daemon level=info msg=" --bpf-lb-external-clusterip='false'" subsys=daemon level=info msg=" --bpf-lb-maglev-hash-seed='JLfvgnHc2kaSUFaI'" subsys=daemon level=info msg=" --bpf-lb-maglev-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-maglev-table-size='16381'" subsys=daemon level=info msg=" --bpf-lb-map-max='65536'" subsys=daemon level=info msg=" --bpf-lb-mode='snat'" subsys=daemon level=info msg=" --bpf-lb-rev-nat-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-rss-ipv4-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-rss-ipv6-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-service-backend-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-service-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-sock='false'" subsys=daemon level=info msg=" --bpf-lb-sock-hostns-only='false'" subsys=daemon level=info msg=" --bpf-lb-source-range-map-max='0'" subsys=daemon level=info msg=" --bpf-map-dynamic-size-ratio='0.0025'" subsys=daemon level=info msg=" --bpf-map-event-buffers=''" subsys=daemon level=info msg=" --bpf-nat-global-max='524288'" subsys=daemon level=info msg=" --bpf-neigh-global-max='524288'" subsys=daemon level=info msg=" --bpf-policy-map-full-reconciliation-interval='15m0s'" subsys=daemon level=info msg=" --bpf-policy-map-max='16384'" subsys=daemon level=info msg=" --bpf-root='/sys/fs/bpf'" subsys=daemon level=info msg=" --bpf-sock-rev-map-max='262144'" subsys=daemon level=info msg=" --bypass-ip-availability-upon-restore='false'" subsys=daemon level=info msg=" --certificates-directory='/var/run/cilium/certs'" subsys=daemon level=info msg=" --cflags=''" subsys=daemon level=info msg=" --cgroup-root='/run/cilium/cgroupv2'" subsys=daemon level=info msg=" --cilium-endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --cluster-health-port='4240'" subsys=daemon level=info msg=" --cluster-id='0'" subsys=daemon level=info msg=" --cluster-name='default'" subsys=daemon level=info msg=" --cluster-pool-ipv4-cidr='10.0.0.0/8'" subsys=daemon level=info msg=" --cluster-pool-ipv4-mask-size='24'" subsys=daemon level=info msg=" --clustermesh-config='/var/lib/cilium/clustermesh/'" subsys=daemon level=info msg=" --clustermesh-ip-identities-sync-timeout='1m0s'" subsys=daemon level=info msg=" --cmdref=''" subsys=daemon level=info msg=" --cni-chaining-mode='none'" subsys=daemon level=info msg=" --cni-chaining-target=''" subsys=daemon level=info msg=" --cni-exclusive='true'" subsys=daemon level=info msg=" --cni-external-routing='false'" subsys=daemon level=info msg=" --cni-log-file='/var/run/cilium/cilium-cni.log'" subsys=daemon level=info msg=" --cnp-node-status-gc-interval='0s'" subsys=daemon level=info msg=" --config=''" subsys=daemon level=info msg=" --config-dir='/tmp/cilium/config-map'" subsys=daemon level=info msg=" --config-sources='config-map:kube-system/cilium-config'" subsys=daemon level=info msg=" --conntrack-gc-interval='0s'" subsys=daemon level=info msg=" --conntrack-gc-max-interval='0s'" subsys=daemon level=info msg=" --crd-wait-timeout='5m0s'" subsys=daemon level=info msg=" --custom-cni-conf='false'" subsys=daemon level=info msg=" --datapath-mode='veth'" subsys=daemon level=info msg=" --debug='false'" subsys=daemon level=info msg=" --debug-verbose=''" subsys=daemon level=info msg=" --derive-masquerade-ip-addr-from-device=''" subsys=daemon level=info msg=" --devices=''" subsys=daemon level=info msg=" --direct-routing-device=''" subsys=daemon level=info msg=" --disable-cnp-status-updates='true'" subsys=daemon level=info msg=" --disable-endpoint-crd='false'" subsys=daemon level=info msg=" --disable-envoy-version-check='false'" subsys=daemon level=info msg=" --disable-iptables-feeder-rules=''" subsys=daemon level=info msg=" --dns-max-ips-per-restored-rule='1000'" subsys=daemon level=info msg=" --dns-policy-unload-on-shutdown='false'" subsys=daemon level=info msg=" --dnsproxy-concurrency-limit='0'" subsys=daemon level=info msg=" --dnsproxy-concurrency-processing-grace-period='0s'" subsys=daemon level=info msg=" --dnsproxy-enable-transparent-mode='true'" subsys=daemon level=info msg=" --dnsproxy-lock-count='128'" subsys=daemon level=info msg=" --dnsproxy-lock-timeout='500ms'" subsys=daemon level=info msg=" --egress-gateway-policy-map-max='16384'" subsys=daemon level=info msg=" --egress-gateway-reconciliation-trigger-interval='1s'" subsys=daemon level=info msg=" --egress-masquerade-interfaces=''" subsys=daemon level=info msg=" --egress-multi-home-ip-rule-compat='false'" subsys=daemon level=info msg=" --enable-auto-protect-node-port-range='true'" subsys=daemon level=info msg=" --enable-bandwidth-manager='false'" subsys=daemon level=info msg=" --enable-bbr='false'" subsys=daemon level=info msg=" --enable-bgp-control-plane='false'" subsys=daemon level=info msg=" --enable-bpf-clock-probe='false'" subsys=daemon level=info msg=" --enable-bpf-masquerade='false'" subsys=daemon level=info msg=" --enable-bpf-tproxy='false'" subsys=daemon level=info msg=" --enable-cilium-api-server-access='*'" subsys=daemon level=info msg=" --enable-cilium-endpoint-slice='false'" subsys=daemon level=info msg=" --enable-cilium-health-api-server-access='*'" subsys=daemon level=info msg=" --enable-custom-calls='false'" subsys=daemon level=info msg=" --enable-endpoint-health-checking='true'" subsys=daemon level=info msg=" --enable-endpoint-routes='false'" subsys=daemon level=info msg=" --enable-envoy-config='false'" subsys=daemon level=info msg=" --enable-external-ips='false'" subsys=daemon level=info msg=" --enable-health-check-nodeport='true'" subsys=daemon level=info msg=" --enable-health-checking='true'" subsys=daemon level=info msg=" --enable-high-scale-ipcache='false'" subsys=daemon level=info msg=" --enable-host-firewall='false'" subsys=daemon level=info msg=" --enable-host-legacy-routing='false'" subsys=daemon level=info msg=" --enable-host-port='false'" subsys=daemon level=info msg=" --enable-hubble='false'" subsys=daemon level=info msg=" --enable-hubble-recorder-api='true'" subsys=daemon level=info msg=" --enable-icmp-rules='true'" subsys=daemon level=info msg=" --enable-identity-mark='true'" subsys=daemon level=info msg=" --enable-ip-masq-agent='false'" subsys=daemon level=info msg=" --enable-ipsec='false'" subsys=daemon level=info msg=" --enable-ipsec-key-watcher='true'" subsys=daemon level=info msg=" --enable-ipv4='true'" subsys=daemon level=info msg=" --enable-ipv4-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv4-egress-gateway='false'" subsys=daemon level=info msg=" --enable-ipv4-fragment-tracking='true'" subsys=daemon level=info msg=" --enable-ipv4-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6='false'" subsys=daemon level=info msg=" --enable-ipv6-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv6-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6-ndp='false'" subsys=daemon level=info msg=" --enable-k8s='true'" subsys=daemon level=info msg=" --enable-k8s-api-discovery='false'" subsys=daemon level=info msg=" --enable-k8s-endpoint-slice='true'" subsys=daemon level=info msg=" --enable-k8s-event-handover='false'" subsys=daemon level=info msg=" --enable-k8s-networkpolicy='true'" subsys=daemon level=info msg=" --enable-k8s-terminating-endpoint='true'" subsys=daemon level=info msg=" --enable-l2-announcements='false'" subsys=daemon level=info msg=" --enable-l2-neigh-discovery='true'" subsys=daemon level=info msg=" --enable-l2-pod-announcements='false'" subsys=daemon level=info msg=" --enable-l7-proxy='true'" subsys=daemon level=info msg=" --enable-local-node-route='true'" subsys=daemon level=info msg=" --enable-local-redirect-policy='false'" subsys=daemon level=info msg=" --enable-mke='false'" subsys=daemon level=info msg=" --enable-monitor='true'" subsys=daemon level=info msg=" --enable-nat46x64-gateway='false'" subsys=daemon level=info msg=" --enable-node-port='false'" subsys=daemon level=info msg=" --enable-pmtu-discovery='false'" subsys=daemon level=info msg=" --enable-policy='default'" subsys=daemon level=info msg=" --enable-recorder='false'" subsys=daemon level=info msg=" --enable-remote-node-identity='true'" subsys=daemon level=info msg=" --enable-runtime-device-detection='false'" subsys=daemon level=info msg=" --enable-sctp='false'" subsys=daemon level=info msg=" --enable-service-topology='false'" subsys=daemon level=info msg=" --enable-session-affinity='false'" subsys=daemon level=info msg=" --enable-srv6='false'" subsys=daemon level=info msg=" --enable-stale-cilium-endpoint-cleanup='true'" subsys=daemon level=info msg=" --enable-svc-source-range-check='true'" subsys=daemon level=info msg=" --enable-tracing='false'" subsys=daemon level=info msg=" --enable-unreachable-routes='false'" subsys=daemon level=info msg=" --enable-vtep='false'" subsys=daemon level=info msg=" --enable-well-known-identities='false'" subsys=daemon level=info msg=" --enable-wireguard='false'" subsys=daemon level=info msg=" --enable-wireguard-userspace-fallback='false'" subsys=daemon level=info msg=" --enable-xdp-prefilter='false'" subsys=daemon level=info msg=" --enable-xt-socket-fallback='true'" subsys=daemon level=info msg=" --encrypt-interface=''" subsys=daemon level=info msg=" --encrypt-node='false'" subsys=daemon level=info msg=" --endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --endpoint-queue-size='25'" subsys=daemon level=info msg=" --endpoint-status=''" subsys=daemon level=info msg=" --envoy-config-timeout='2m0s'" subsys=daemon level=info msg=" --envoy-log=''" subsys=daemon level=info msg=" --exclude-local-address=''" subsys=daemon level=info msg=" --external-envoy-proxy='false'" subsys=daemon level=info msg=" --fixed-identity-mapping=''" subsys=daemon level=info msg=" --fqdn-regex-compile-lru-size='1024'" subsys=daemon level=info msg=" --gops-port='9890'" subsys=daemon level=info msg=" --http-403-msg=''" subsys=daemon level=info msg=" --http-idle-timeout='0'" subsys=daemon level=info msg=" --http-max-grpc-timeout='0'" subsys=daemon level=info msg=" --http-normalize-path='true'" subsys=daemon level=info msg=" --http-request-timeout='3600'" subsys=daemon level=info msg=" --http-retry-count='3'" subsys=daemon level=info msg=" --http-retry-timeout='0'" subsys=daemon level=info msg=" --hubble-disable-tls='false'" subsys=daemon level=info msg=" --hubble-event-buffer-capacity='4095'" subsys=daemon level=info msg=" --hubble-event-queue-size='0'" subsys=daemon level=info msg=" --hubble-export-file-compress='false'" subsys=daemon level=info msg=" --hubble-export-file-max-backups='5'" subsys=daemon level=info msg=" --hubble-export-file-max-size-mb='10'" subsys=daemon level=info msg=" --hubble-export-file-path=''" subsys=daemon level=info msg=" --hubble-listen-address=''" subsys=daemon level=info msg=" --hubble-metrics=''" subsys=daemon level=info msg=" --hubble-metrics-server=''" subsys=daemon level=info msg=" --hubble-monitor-events=''" subsys=daemon level=info msg=" --hubble-prefer-ipv6='false'" subsys=daemon level=info msg=" --hubble-recorder-sink-queue-size='1024'" subsys=daemon level=info msg=" --hubble-recorder-storage-path='/var/run/cilium/pcaps'" subsys=daemon level=info msg=" --hubble-skip-unknown-cgroup-ids='true'" subsys=daemon level=info msg=" --hubble-socket-path='/var/run/cilium/hubble.sock'" subsys=daemon level=info msg=" --hubble-tls-cert-file=''" subsys=daemon level=info msg=" --hubble-tls-client-ca-files=''" subsys=daemon level=info msg=" --hubble-tls-key-file=''" subsys=daemon level=info msg=" --identity-allocation-mode='crd'" subsys=daemon level=info msg=" --identity-change-grace-period='5s'" subsys=daemon level=info msg=" --identity-gc-interval='15m0s'" subsys=daemon level=info msg=" --identity-heartbeat-timeout='30m0s'" subsys=daemon level=info msg=" --identity-restore-grace-period='10m0s'" subsys=daemon level=info msg=" --install-egress-gateway-routes='false'" subsys=daemon level=info msg=" --install-iptables-rules='true'" subsys=daemon level=info msg=" --install-no-conntrack-iptables-rules='false'" subsys=daemon level=info msg=" --ip-allocation-timeout='2m0s'" subsys=daemon level=info msg=" --ip-masq-agent-config-path='/etc/config/ip-masq-agent'" subsys=daemon level=info msg=" --ipam='cluster-pool'" subsys=daemon level=info msg=" --ipam-cilium-node-update-rate='15s'" subsys=daemon level=info msg=" --ipam-multi-pool-pre-allocation='default=8'" subsys=daemon level=info msg=" --ipsec-key-file=''" subsys=daemon level=info msg=" --ipsec-key-rotation-duration='5m0s'" subsys=daemon level=info msg=" --iptables-lock-timeout='5s'" subsys=daemon level=info msg=" --iptables-random-fully='false'" subsys=daemon level=info msg=" --ipv4-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv4-node='auto'" subsys=daemon level=info msg=" --ipv4-pod-subnets=''" subsys=daemon level=info msg=" --ipv4-range='auto'" subsys=daemon level=info msg=" --ipv4-service-loopback-address='169.254.42.1'" subsys=daemon level=info msg=" --ipv4-service-range='auto'" subsys=daemon level=info msg=" --ipv6-cluster-alloc-cidr='f00d::/64'" subsys=daemon level=info msg=" --ipv6-mcast-device=''" subsys=daemon level=info msg=" --ipv6-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv6-node='auto'" subsys=daemon level=info msg=" --ipv6-pod-subnets=''" subsys=daemon level=info msg=" --ipv6-range='auto'" subsys=daemon level=info msg=" --ipv6-service-range='auto'" subsys=daemon level=info msg=" --join-cluster='false'" subsys=daemon level=info msg=" --k8s-api-server=''" subsys=daemon level=info msg=" --k8s-client-burst='10'" subsys=daemon level=info msg=" --k8s-client-qps='5'" subsys=daemon level=info msg=" --k8s-heartbeat-timeout='30s'" subsys=daemon level=info msg=" --k8s-kubeconfig-path=''" subsys=daemon level=info msg=" --k8s-namespace='kube-system'" subsys=daemon level=info msg=" --k8s-require-ipv4-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-require-ipv6-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-service-cache-size='128'" subsys=daemon level=info msg=" --k8s-service-proxy-name=''" subsys=daemon level=info msg=" --k8s-sync-timeout='3m0s'" subsys=daemon level=info msg=" --k8s-watcher-endpoint-selector='metadata.name!=kube-scheduler,metadata.name!=kube-controller-manager,metadata.name!=etcd-operator,metadata.name!=gcp-controller-manager'" subsys=daemon level=info msg=" --keep-config='false'" subsys=daemon level=info msg=" --kube-proxy-replacement='disabled'" subsys=daemon level=info msg=" --kube-proxy-replacement-healthz-bind-address=''" subsys=daemon level=info msg=" --kvstore=''" subsys=daemon level=info msg=" --kvstore-connectivity-timeout='2m0s'" subsys=daemon level=info msg=" --kvstore-lease-ttl='15m0s'" subsys=daemon level=info msg=" --kvstore-max-consecutive-quorum-errors='2'" subsys=daemon level=info msg=" --kvstore-opt=''" subsys=daemon level=info msg=" --kvstore-periodic-sync='5m0s'" subsys=daemon level=info msg=" --l2-announcements-lease-duration='15s'" subsys=daemon level=info msg=" --l2-announcements-renew-deadline='5s'" subsys=daemon level=info msg=" --l2-announcements-retry-period='2s'" subsys=daemon level=info msg=" --l2-pod-announcements-interface=''" subsys=daemon level=info msg=" --label-prefix-file=''" subsys=daemon level=info msg=" --labels=''" subsys=daemon level=info msg=" --lib-dir='/var/lib/cilium'" subsys=daemon level=info msg=" --local-max-addr-scope='252'" subsys=daemon level=info msg=" --local-router-ipv4=''" subsys=daemon level=info msg=" --local-router-ipv6=''" subsys=daemon level=info msg=" --log-driver=''" subsys=daemon level=info msg=" --log-opt=''" subsys=daemon level=info msg=" --log-system-load='false'" subsys=daemon level=info msg=" --max-controller-interval='0'" subsys=daemon level=info msg=" --mesh-auth-enabled='true'" subsys=daemon level=info msg=" --mesh-auth-gc-interval='5m0s'" subsys=daemon level=info msg=" --mesh-auth-mutual-listener-port='0'" subsys=daemon level=info msg=" --mesh-auth-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-rotated-identities-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-signal-backoff-duration='1s'" subsys=daemon level=info msg=" --mesh-auth-spiffe-trust-domain='spiffe.cilium'" subsys=daemon level=info msg=" --mesh-auth-spire-admin-socket=''" subsys=daemon level=info msg=" --metrics=''" subsys=daemon level=info msg=" --mke-cgroup-mount=''" subsys=daemon level=info msg=" --monitor-aggregation='medium'" subsys=daemon level=info msg=" --monitor-aggregation-flags='all'" subsys=daemon level=info msg=" --monitor-aggregation-interval='5s'" subsys=daemon level=info msg=" --monitor-queue-size='0'" subsys=daemon level=info msg=" --mtu='0'" subsys=daemon level=info msg=" --node-encryption-opt-out-labels='node-role.kubernetes.io/control-plane'" subsys=daemon level=info msg=" --node-port-acceleration='disabled'" subsys=daemon level=info msg=" --node-port-algorithm='random'" subsys=daemon level=info msg=" --node-port-bind-protection='true'" subsys=daemon level=info msg=" --node-port-mode='snat'" subsys=daemon level=info msg=" --node-port-range='30000,32767'" subsys=daemon level=info msg=" --nodes-gc-interval='5m0s'" subsys=daemon level=info msg=" --operator-api-serve-addr='127.0.0.1:9234'" subsys=daemon level=info msg=" --policy-audit-mode='false'" subsys=daemon level=info msg=" --policy-queue-size='100'" subsys=daemon level=info msg=" --policy-trigger-interval='1s'" subsys=daemon level=info msg=" --pprof='false'" subsys=daemon level=info msg=" --pprof-address='localhost'" subsys=daemon level=info msg=" --pprof-port='6060'" subsys=daemon level=info msg=" --preallocate-bpf-maps='false'" subsys=daemon level=info msg=" --prepend-iptables-chains='true'" subsys=daemon level=info msg=" --procfs='/host/proc'" subsys=daemon level=info msg=" --prometheus-serve-addr=':9962'" subsys=daemon level=info msg=" --proxy-connect-timeout='2'" subsys=daemon level=info msg=" --proxy-gid='1337'" subsys=daemon level=info msg=" --proxy-idle-timeout-seconds='60'" subsys=daemon level=info msg=" --proxy-max-connection-duration-seconds='0'" subsys=daemon level=info msg=" --proxy-max-requests-per-connection='0'" subsys=daemon level=info msg=" --proxy-prometheus-port='9964'" subsys=daemon level=info msg=" --read-cni-conf=''" subsys=daemon level=info msg=" --remove-cilium-node-taints='true'" subsys=daemon level=info msg=" --restore='true'" subsys=daemon level=info msg=" --route-metric='0'" subsys=daemon level=info msg=" --routing-mode='tunnel'" subsys=daemon level=info msg=" --set-cilium-is-up-condition='true'" subsys=daemon level=info msg=" --set-cilium-node-taints='true'" subsys=daemon level=info msg=" --sidecar-istio-proxy-image='cilium/istio_proxy'" subsys=daemon level=info msg=" --single-cluster-route='false'" subsys=daemon level=info msg=" --skip-cnp-status-startup-clean='false'" subsys=daemon level=info msg=" --socket-path='/var/run/cilium/cilium.sock'" subsys=daemon level=info msg=" --srv6-encap-mode='reduced'" subsys=daemon level=info msg=" --state-dir='/var/run/cilium'" subsys=daemon level=info msg=" --synchronize-k8s-nodes='true'" subsys=daemon level=info msg=" --tofqdns-dns-reject-response-code='refused'" subsys=daemon level=info msg=" --tofqdns-enable-dns-compression='true'" subsys=daemon level=info msg=" --tofqdns-endpoint-max-ip-per-hostname='50'" subsys=daemon level=info msg=" --tofqdns-idle-connection-grace-period='0s'" subsys=daemon level=info msg=" --tofqdns-max-deferred-connection-deletes='10000'" subsys=daemon level=info msg=" --tofqdns-min-ttl='0'" subsys=daemon level=info msg=" --tofqdns-pre-cache=''" subsys=daemon level=info msg=" --tofqdns-proxy-port='0'" subsys=daemon level=info msg=" --tofqdns-proxy-response-max-delay='100ms'" subsys=daemon level=info msg=" --trace-payloadlen='128'" subsys=daemon level=info msg=" --trace-sock='true'" subsys=daemon level=info msg=" --tunnel=''" subsys=daemon level=info msg=" --tunnel-port='6082'" subsys=daemon level=info msg=" --tunnel-protocol='geneve'" subsys=daemon level=info msg=" --unmanaged-pod-watcher-interval='15'" subsys=daemon level=info msg=" --use-cilium-internal-ip-for-ipsec='false'" subsys=daemon level=info msg=" --version='false'" subsys=daemon level=info msg=" --vlan-bpf-bypass=''" subsys=daemon level=info msg=" --vtep-cidr=''" subsys=daemon level=info msg=" --vtep-endpoint=''" subsys=daemon level=info msg=" --vtep-mac=''" subsys=daemon level=info msg=" --vtep-mask=''" subsys=daemon level=info msg=" --wireguard-encapsulate='false'" subsys=daemon level=info msg=" --write-cni-conf-when-ready='/host/etc/cni/net.d/05-cilium.conflist'" subsys=daemon level=info msg=" _ _ _" subsys=daemon level=info msg=" ___|_| |_|_ _ _____" subsys=daemon level=info msg="| _| | | | | | |" subsys=daemon level=info msg="|___|_|_|_|___|_|_|_|" subsys=daemon level=info msg="Cilium 1.14.8 cf6e022e 2024-03-13T12:23:35-04:00 go version go1.21.8 linux/amd64" subsys=daemon level=info msg="clang (10.0.0) and kernel (5.15.0) versions: OK!" subsys=linux-datapath level=info msg="linking environment: OK!" subsys=linux-datapath level=info msg="Kernel config file not found: if the agent fails to start, check the system requirements at https://docs.cilium.io/en/stable/operations/system_requirements" subsys=probes level=info msg="Detected mounted BPF filesystem at /sys/fs/bpf" subsys=bpf level=info msg="Mounted cgroupv2 filesystem at /run/cilium/cgroupv2" subsys=cgroups level=info msg="Parsing base label prefixes from default label list" subsys=labels-filter level=info msg="Parsing additional label prefixes from user inputs: []" subsys=labels-filter level=info msg="Final label prefixes to be used for identity evaluation:" subsys=labels-filter level=info msg=" - reserved:.*" subsys=labels-filter level=info msg=" - :io\\.kubernetes\\.pod\\.namespace" subsys=labels-filter level=info msg=" - :io\\.cilium\\.k8s\\.namespace\\.labels" subsys=labels-filter level=info msg=" - :app\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:io\\.kubernetes" subsys=labels-filter level=info msg=" - !:kubernetes\\.io" subsys=labels-filter level=info msg=" - !:.*beta\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:k8s\\.io" subsys=labels-filter level=info msg=" - !:pod-template-generation" subsys=labels-filter level=info msg=" - !:pod-template-hash" subsys=labels-filter level=info msg=" - !:controller-revision-hash" subsys=labels-filter level=info msg=" - !:annotation.*" subsys=labels-filter level=info msg=" - !:etcd_node" subsys=labels-filter level=info msg=Invoked duration=1.825561ms function="pprof.glob..func1 (cell.go:50)" subsys=hive level=info msg=Invoked duration="54.201µs" function="gops.registerGopsHooks (cell.go:38)" subsys=hive level=info msg=Invoked duration=1.055ms function="metrics.NewRegistry (registry.go:65)" subsys=hive level=info msg=Invoked duration="11.991µs" function="metrics.glob..func1 (cell.go:12)" subsys=hive level=info msg="Spire Delegate API Client is disabled as no socket path is configured" subsys=spire-delegate level=info msg="Mutual authentication handler is disabled as no port is configured" subsys=auth level=info msg=Invoked duration=104.461011ms function="cmd.glob..func4 (daemon_main.go:1607)" subsys=hive level=info msg=Invoked duration="14.351µs" function="gc.registerSignalHandler (cell.go:47)" subsys=hive level=info msg=Invoked duration="15.87µs" function="utime.initUtimeSync (cell.go:29)" subsys=hive level=info msg=Invoked duration="57.971µs" function="agentliveness.newAgentLivenessUpdater (agent_liveness.go:43)" subsys=hive level=info msg=Invoked duration="55.441µs" function="l2responder.NewL2ResponderReconciler (l2responder.go:63)" subsys=hive level=info msg=Invoked duration="70.022µs" function="garp.newGARPProcessor (processor.go:27)" subsys=hive level=info msg=Starting subsys=hive level=info msg="Started gops server" address="127.0.0.1:9890" subsys=gops level=info msg="Start hook executed" duration="355.23µs" function="gops.registerGopsHooks.func1 (cell.go:43)" subsys=hive level=info msg="Start hook executed" duration="1.34µs" function="metrics.NewRegistry.func1 (registry.go:86)" subsys=hive level=info msg="Establishing connection to apiserver" host="https://10.96.0.1:443" subsys=k8s-client level=info msg="Serving prometheus metrics on :9962" subsys=metrics level=info msg="Connected to apiserver" subsys=k8s-client level=info msg="Start hook executed" duration=12.830722ms function="client.(*compositeClientset).onStart" subsys=hive level=info msg="Start hook executed" duration=9.043814ms function="authmap.newAuthMap.func1 (cell.go:27)" subsys=hive level=info msg="Start hook executed" duration="25.581µs" function="configmap.newMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="50.351µs" function="signalmap.newMap.func1 (cell.go:44)" subsys=hive level=info msg="Start hook executed" duration="210.846µs" function="nodemap.newNodeMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="140.204µs" function="eventsmap.newEventsMap.func1 (cell.go:35)" subsys=hive level=info msg="Start hook executed" duration="96.182µs" function="*cni.cniConfigManager.Start" subsys=hive level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Wrote CNI configuration file to /host/etc/cni/net.d/05-cilium.conflist" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Start hook executed" duration=51.805478ms function="datapath.newDatapath.func1 (cells.go:113)" subsys=hive level=info msg="Restored 0 node IDs from the BPF map" subsys=linux-datapath level=info msg="Start hook executed" duration="271.627µs" function="datapath.newDatapath.func2 (cells.go:126)" subsys=hive level=info msg="Start hook executed" duration="9.27µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Node].Start" subsys=hive level=info msg="Start hook executed" duration="3.86µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNode].Start" subsys=hive level=info msg="Using autogenerated IPv4 allocation range" subsys=node v4Prefix=10.44.0.0/16 level=info msg="no local ciliumnode found, will not restore cilium internal ips from k8s" subsys=daemon level=info msg="Start hook executed" duration=103.023211ms function="node.NewLocalNodeStore.func1 (local_node_store.go:76)" subsys=hive level=info msg="Start hook executed" duration="6.51µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration=101.059055ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration="7.761µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Using discoveryv1.EndpointSlice" subsys=k8s level=info msg="Start hook executed" duration=100.703565ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Start hook executed" duration="13.22µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Pod].Start" subsys=hive level=info msg="Start hook executed" duration="6.55µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Namespace].Start" subsys=hive level=info msg="Start hook executed" duration="1.59µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="4.12µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumClusterwideNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="1.27µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumCIDRGroup].Start" subsys=hive level=info msg="Start hook executed" duration="25.421µs" function="endpointmanager.newDefaultEndpointManager.func1 (cell.go:203)" subsys=hive level=info msg="Start hook executed" duration="53.831µs" function="cmd.newPolicyTrifecta.func1 (policy.go:135)" subsys=hive level=info msg="Start hook executed" duration="81.382µs" function="*manager.manager.Start" subsys=hive level=info msg="Serving cilium node monitor v1.2 API at unix:///var/run/cilium/monitor1_2.sock" subsys=monitor-agent level=info msg="Start hook executed" duration="286.958µs" function="agent.newMonitorAgent.func1 (cell.go:61)" subsys=hive level=info msg="Start hook executed" duration="3.19µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumL2AnnouncementPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="11.17µs" function="*job.group.Start" subsys=hive level=info msg="Start hook executed" duration="228.706µs" function="proxy.newProxy.func1 (cell.go:55)" subsys=hive level=info msg="Envoy: Starting xDS gRPC server listening on /var/run/cilium/envoy/sockets/xds.sock" subsys=envoy-manager level=info msg="Start hook executed" duration=1.578445ms function="signal.provideSignalManager.func1 (cell.go:25)" subsys=hive level=info msg="Datapath signal listener running" subsys=signal level=info msg="Start hook executed" duration=1.325908ms function="auth.registerAuthManager.func1 (cell.go:109)" subsys=hive level=info msg="Start hook executed" duration="5.401µs" function="auth.registerGCJobs.func1 (cell.go:158)" subsys=hive level=info msg="Start hook executed" duration="20.81µs" function="*job.group.Start" subsys=hive level=warning msg="Deprecated value for --kube-proxy-replacement: disabled (use either \"true\", or \"false\")" subsys=daemon level=info msg="Auto-disabling \"enable-node-port\", \"enable-external-ips\", \"bpf-lb-sock\", \"enable-host-port\" features and falling back to \"enable-host-legacy-routing\"" subsys=daemon level=info msg="Inheriting MTU from external network interface" device=ens3 ipAddr=199.204.45.44 mtu=1500 subsys=mtu level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_ipcache, recreating and re-pinning map cilium_ipcache" file-path=/sys/fs/bpf/tc/globals/cilium_ipcache name=cilium_ipcache subsys=bpf level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_tunnel_map, recreating and re-pinning map cilium_tunnel_map" file-path=/sys/fs/bpf/tc/globals/cilium_tunnel_map name=cilium_tunnel_map subsys=bpf level=info msg="Restored services from maps" failedServices=0 restoredServices=0 subsys=service level=info msg="Restored backends from maps" failedBackends=0 restoredBackends=0 skippedBackends=0 subsys=service level=info msg="Reading old endpoints..." subsys=daemon level=info msg="No old endpoints found." subsys=daemon level=info msg="Waiting until all Cilium CRDs are available" subsys=k8s level=info msg="All Cilium CRDs have been found and are available" subsys=k8s level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=info msg="Successfully created CiliumNode resource" subsys=nodediscovery level=warning msg="Unable to create CiliumNode resource, will retry" error="ciliumnodes.cilium.io \"instance\" already exists" subsys=nodediscovery level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=warning msg="Waiting for k8s node information" error="required IPv4 PodCIDR not available" subsys=k8s level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=info msg="Received own node information from API server" ipAddr.ipv4=199.204.45.44 ipAddr.ipv6="" k8sNodeIP=199.204.45.44 labels="map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:]" nodeName=instance subsys=k8s v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="k8s mode: Allowing localhost to reach local endpoints" subsys=daemon level=info msg="Detected devices" devices="[]" subsys=linux-datapath level=info msg="Enabling k8s event listener" subsys=k8s-watcher level=info msg="Removing stale endpoint interfaces" subsys=daemon level=info msg="Waiting until local node addressing before starting watchers depending on it" subsys=k8s-watcher level=info msg="Skipping kvstore configuration" subsys=daemon level=info msg="Initializing node addressing" subsys=daemon level=info msg="Initializing cluster-pool IPAM" subsys=ipam v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="Restoring endpoints..." subsys=daemon level=info msg="Endpoints restored" failed=0 restored=0 subsys=daemon level=info msg="Addressing information:" subsys=daemon level=info msg=" Cluster-Name: default" subsys=daemon level=info msg=" Cluster-ID: 0" subsys=daemon level=info msg=" Local node-name: instance" subsys=daemon level=info msg=" Node-IPv6: " subsys=daemon level=info msg=" External-Node IPv4: 199.204.45.44" subsys=daemon level=info msg=" Internal-Node IPv4: 10.0.0.162" subsys=daemon level=info msg=" IPv4 allocation prefix: 10.0.0.0/24" subsys=daemon level=info msg=" Loopback IPv4: 169.254.42.1" subsys=daemon level=info msg=" Local IPv4 addresses:" subsys=daemon level=info msg=" - 199.204.45.44" subsys=daemon level=info msg=" - 172.17.0.100" subsys=daemon level=info msg=" - 10.96.240.200" subsys=daemon level=info msg="Node updated" clusterName=default nodeName=instance subsys=nodemanager level=info msg="Adding local node to cluster" node="{instance default [{InternalIP 199.204.45.44} {CiliumInternalIP 10.0.0.162}] 10.0.0.0/24 [] [] 10.0.0.234 0 local 0 map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:] map[] 1 }" subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Waiting until all pre-existing resources have been received" subsys=k8s-watcher level=info msg="Initializing identity allocator" subsys=identity-cache level=info msg="Allocating identities between range" cluster-id=0 max=65535 min=256 subsys=identity-cache level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.core.bpf_jit_enable sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.all.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.fib_multipath_use_neigh sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.unprivileged_bpf_disabled sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.timer_migration sysParamValue=0 level=info msg="Setting up BPF datapath" bpfClockSource=ktime bpfInsnSet="" subsys=datapath-loader level=info msg="Iptables rules installed" subsys=iptables level=info msg="Adding new proxy port rules for cilium-dns-egress:39147" id=cilium-dns-egress subsys=proxy level=info msg="Iptables proxy rules installed" subsys=iptables level=info msg="Start hook executed" duration=2.470248508s function="cmd.newDaemonPromise.func1 (daemon_main.go:1663)" subsys=hive level=info msg="Initializing daemon" subsys=daemon level=info msg="Validating configured node address ranges" subsys=daemon level=info msg="Starting IP identity watcher" subsys=ipcache level=info msg="Start hook executed" duration="18.03µs" function="utime.initUtimeSync.func1 (cell.go:33)" subsys=hive level=info msg="Start hook executed" duration="10.061µs" function="*job.group.Start" subsys=hive level=info msg="Starting connection tracking garbage collector" subsys=daemon level=info msg="Start hook executed" duration="57.911µs" function="l2respondermap.newMap.func1 (l2_responder_map4.go:44)" subsys=hive level=info msg="Start hook executed" duration="14.531µs" function="*job.group.Start" subsys=hive level=info msg="Initial scan of connection tracking completed" subsys=ct-gc level=info msg="Regenerating restored endpoints" numRestored=0 subsys=daemon level=info msg="Creating host endpoint" subsys=daemon level=info msg="Finished regenerating restored endpoints" regenerated=0 subsys=daemon total=0 level=info msg="Deleted orphan backends" orphanBackends=0 subsys=service level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=30 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=30 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=30 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Launching Cilium health daemon" subsys=daemon level=info msg="Launching Cilium health endpoint" subsys=daemon level=info msg="Started healthz status API server" address="127.0.0.1:9879" subsys=daemon level=info msg="Processing queued endpoint deletion requests from /var/run/cilium/deleteQueue" subsys=daemon level=info msg="processing 0 queued deletion requests" subsys=daemon level=info msg="Initializing Cilium API" subsys=daemon level=info msg="Daemon initialization completed" bootstrapTime=3.447886692s subsys=daemon level=info msg="Hubble server is disabled" subsys=hubble level=info msg="Serving cilium API at unix:///var/run/cilium/cilium.sock" subsys=daemon level=info msg="Compiled new BPF template" BPFCompilationTime=320.485643ms file-path=/var/run/cilium/state/templates/11b14342a427e30c1e6bcb0ff28bc975c1d20e82ace876f5aeb0b4ce0d853ca9/bpf_host.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=30 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2627 ipv4=10.0.0.234 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2627 identityLabels="reserved:health" ipv4=10.0.0.234 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2627 identity=4 identityLabels="reserved:health" ipv4=10.0.0.234 ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.213 600016ce-08b6-44d9-9afe-acbe58784697 default }" containerID=269639ee857c91cd761bf4f183d5a34dc7984a3589aa1e03263171f2dc380e42 datapathConfiguration="&{false false false false false }" interface=lxc568eddb19cc9 k8sPodName=kube-system/coredns-7c96b6546b-t64k2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=269639ee85 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1322 ipv4=10.0.0.213 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-t64k2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=269639ee85 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1322 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.213 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-t64k2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:kube-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=coredns;k8s:io.kubernetes.pod.namespace=kube-system;k8s:k8s-app=kube-dns;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=269639ee85 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1322 identity=51895 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.213 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-t64k2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=269639ee85 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1322 identity=51895 ipv4=10.0.0.213 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-t64k2 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.219 2b47f6e8-ae76-4f00-a32f-8990996f3f9e default }" containerID=6924a47b66c6ea9616031110f266eb5678d510392510760eb8cd4ae9a7b791af datapathConfiguration="&{false false false false false }" interface=lxcf68253d199d9 k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-q8gw5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6924a47b66 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2955 ipv4=10.0.0.219 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-q8gw5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6924a47b66 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2955 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=6d0ef3be-c849-44b9-a803-416799d30586,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=6d0ef3be-c849-44b9-a803-416799d30586,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.219 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-q8gw5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=certgen;k8s:batch.kubernetes.io/controller-uid=6d0ef3be-c849-44b9-a803-416799d30586;k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen;k8s:controller-uid=6d0ef3be-c849-44b9-a803-416799d30586;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;k8s:job-name=envoy-gateway-gateway-helm-certgen;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6924a47b66 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2955 identity=29418 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=6d0ef3be-c849-44b9-a803-416799d30586,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=6d0ef3be-c849-44b9-a803-416799d30586,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.219 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-q8gw5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6924a47b66 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2955 identity=29418 ipv4=10.0.0.219 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-q8gw5 subsys=endpoint level=info msg="Serving cilium health API at unix:///var/run/cilium/health.sock" subsys=health-server level=info msg="Compiled new BPF template" BPFCompilationTime=1.164384732s file-path=/var/run/cilium/state/templates/36486ab94f8cade2f6a5140d6513bdc82c84280b00751abb0b6bfdb30be46f05/bpf_lxc.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2627 identity=4 ipv4=10.0.0.234 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=269639ee85 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1322 identity=51895 ipv4=10.0.0.213 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-t64k2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=269639ee85 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1322 identity=51895 ipv4=10.0.0.213 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-t64k2 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=6924a47b66 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2955 identity=29418 ipv4=10.0.0.219 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-q8gw5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=6924a47b66 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2955 identity=29418 ipv4=10.0.0.219 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-q8gw5 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=6924a47b66 endpointID=2955 k8sNamespace=envoy-gateway-system k8sPodName=envoy-gateway-gateway-helm-certgen-q8gw5 subsys=daemon level=info msg="Releasing key" key="[k8s:app=certgen k8s:batch.kubernetes.io/controller-uid=6d0ef3be-c849-44b9-a803-416799d30586 k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen k8s:controller-uid=6d0ef3be-c849-44b9-a803-416799d30586 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen k8s:io.kubernetes.pod.namespace=envoy-gateway-system k8s:job-name=envoy-gateway-gateway-helm-certgen]" subsys=allocator level=info msg="Removed endpoint" containerID=6924a47b66 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2955 identity=29418 ipv4=10.0.0.219 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-q8gw5 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.166 e32826c3-83b0-4999-9e8b-d1dc6ab3c796 default }" containerID=44def3272d2fb4de44fb1a3f59b1d163913cdea498e3083f6d366239ecf8d0ac datapathConfiguration="&{false false false false false }" interface=lxc180cfe399f72 k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-kcwzb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=44def3272d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=36 ipv4=10.0.0.166 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-kcwzb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=44def3272d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=36 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.166 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-kcwzb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=44def3272d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=36 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.166 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-kcwzb line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=envoy-gateway;k8s:app.kubernetes.io/name=gateway-helm;k8s:control-plane=envoy-gateway;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=44def3272d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=36 identity=43825 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.166 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-kcwzb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=44def3272d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=36 identity=43825 ipv4=10.0.0.166 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-kcwzb subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=44def3272d datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=36 identity=43825 ipv4=10.0.0.166 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-kcwzb subsys=endpoint level=info msg="Successful endpoint creation" containerID=44def3272d datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=36 identity=43825 ipv4=10.0.0.166 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-kcwzb subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=30 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_00030 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_00030 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_00030 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_00030:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=30 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.74 1f2924e8-d664-4747-9a4a-51b14f13ae98 default }" containerID=76c163e09d8b9140e504bbdc882ad6d05307869b51d09eab2df1d8174282ec03 datapathConfiguration="&{false false false false false }" interface=lxc3e9b4f2cdcd3 k8sPodName=kube-system/coredns-67659f764b-7dkbs labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=76c163e09d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3670 ipv4=10.0.0.74 ipv6= k8sPodName=kube-system/coredns-67659f764b-7dkbs subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=76c163e09d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3670 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.74 ipv6= k8sPodName=kube-system/coredns-67659f764b-7dkbs subsys=endpoint level=info msg="Identity of endpoint changed" containerID=76c163e09d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3670 identity=51895 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.74 ipv6= k8sPodName=kube-system/coredns-67659f764b-7dkbs oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=76c163e09d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3670 identity=51895 ipv4=10.0.0.74 ipv6= k8sPodName=kube-system/coredns-67659f764b-7dkbs subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.95 eb275ed1-8c4d-4595-9092-b4e513ff5282 default }" containerID=b512821e3f95a7fc57e795e62b6d040091993f24badff5e5747ae432e4dbcc09 datapathConfiguration="&{false false false false false }" interface=lxc1846ead558ba k8sPodName=kube-system/coredns-67659f764b-btrxp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b512821e3f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=506 ipv4=10.0.0.95 ipv6= k8sPodName=kube-system/coredns-67659f764b-btrxp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b512821e3f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=506 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.95 ipv6= k8sPodName=kube-system/coredns-67659f764b-btrxp subsys=endpoint level=info msg="Identity of endpoint changed" containerID=b512821e3f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=506 identity=51895 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.95 ipv6= k8sPodName=kube-system/coredns-67659f764b-btrxp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b512821e3f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=506 identity=51895 ipv4=10.0.0.95 ipv6= k8sPodName=kube-system/coredns-67659f764b-btrxp subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=76c163e09d datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3670 identity=51895 ipv4=10.0.0.74 ipv6= k8sPodName=kube-system/coredns-67659f764b-7dkbs subsys=endpoint level=info msg="Successful endpoint creation" containerID=76c163e09d datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3670 identity=51895 ipv4=10.0.0.74 ipv6= k8sPodName=kube-system/coredns-67659f764b-7dkbs subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=b512821e3f datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=506 identity=51895 ipv4=10.0.0.95 ipv6= k8sPodName=kube-system/coredns-67659f764b-btrxp subsys=endpoint level=info msg="Successful endpoint creation" containerID=b512821e3f datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=506 identity=51895 ipv4=10.0.0.95 ipv6= k8sPodName=kube-system/coredns-67659f764b-btrxp subsys=daemon level=info msg="Delete endpoint request" containerID=269639ee85 endpointID=1322 k8sNamespace=kube-system k8sPodName=coredns-7c96b6546b-t64k2 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=coredns k8s:io.kubernetes.pod.namespace=kube-system k8s:k8s-app=kube-dns]" subsys=allocator level=info msg="Removed endpoint" containerID=269639ee85 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1322 identity=51895 ipv4=10.0.0.213 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-t64k2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.154 edeec13a-8c34-4030-af24-110009a459c3 default }" containerID=0c25b51dacd213f8178552e47046848b523e1ce531701a8393f0d65e97b2c355 datapathConfiguration="&{false false false false false }" interface=lxc838d557f5b98 k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-nbfvs labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0c25b51dac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=304 ipv4=10.0.0.154 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-nbfvs subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0c25b51dac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=304 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.154 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-nbfvs subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app=cainjector;k8s:app.kubernetes.io/component=cainjector;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cainjector;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=0c25b51dac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=304 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.154 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-nbfvs line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=0c25b51dac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=304 identity=30951 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.154 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-nbfvs oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0c25b51dac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=304 identity=30951 ipv4=10.0.0.154 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-nbfvs subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.217 53ba7217-1565-4948-ba5e-9383db997c56 default }" containerID=27861a8be0c613506023ccab950d73f95de931d897e798250b927376b8ec7f48 datapathConfiguration="&{false false false false false }" interface=lxc86033931c1fc k8sPodName=cert-manager/cert-manager-webhook-548949fc64-m4mw2 labels="[]" subsys=daemon sync-build=true level=info msg="Create endpoint request" addressing="&{10.0.0.37 7f509efa-60f5-4377-85d3-63e6dff118d2 default }" containerID=a193727ae05b6f25dccdf8344d9913711a66fc43738d0b417fed7e5dcb295bf0 datapathConfiguration="&{false false false false false }" interface=lxc9849fd0738e7 k8sPodName=cert-manager/cert-manager-75c4c745bc-zltql labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=27861a8be0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1726 ipv4=10.0.0.217 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-m4mw2 subsys=endpoint level=info msg="New endpoint" containerID=a193727ae0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1903 ipv4=10.0.0.37 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-zltql subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=27861a8be0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1726 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.217 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-m4mw2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Resolving identity labels (blocking)" containerID=a193727ae0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1903 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.37 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-zltql subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=webhook;k8s:app.kubernetes.io/component=webhook;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=webhook;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=27861a8be0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1726 identity=17719 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.217 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-m4mw2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=27861a8be0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1726 identity=17719 ipv4=10.0.0.217 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-m4mw2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=cert-manager;k8s:app.kubernetes.io/component=controller;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cert-manager;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a193727ae0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1903 identity=2380 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.37 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-zltql oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a193727ae0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1903 identity=2380 ipv4=10.0.0.37 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-zltql subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.251 db21a103-2d2d-4693-9e0a-107054212132 default }" containerID=00742e163a764f615a2c2b56528fd19485e8898eea0a1833433a01d479a151b9 datapathConfiguration="&{false false false false false }" interface=lxc098295157532 k8sPodName=local-path-storage/local-path-provisioner-679c578f5-5tsxz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=00742e163a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=678 ipv4=10.0.0.251 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-5tsxz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=00742e163a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=678 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.251 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-5tsxz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=local-path-provisioner;k8s:app.kubernetes.io/name=local-path-provisioner;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=00742e163a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=678 identity=44166 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.251 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-5tsxz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=00742e163a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=678 identity=44166 ipv4=10.0.0.251 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-5tsxz subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0c25b51dac datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=304 identity=30951 ipv4=10.0.0.154 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-nbfvs subsys=endpoint level=info msg="Successful endpoint creation" containerID=0c25b51dac datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=304 identity=30951 ipv4=10.0.0.154 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-nbfvs subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=a193727ae0 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1903 identity=2380 ipv4=10.0.0.37 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-zltql subsys=endpoint level=info msg="Successful endpoint creation" containerID=a193727ae0 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1903 identity=2380 ipv4=10.0.0.37 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-zltql subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=27861a8be0 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1726 identity=17719 ipv4=10.0.0.217 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-m4mw2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=27861a8be0 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1726 identity=17719 ipv4=10.0.0.217 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-m4mw2 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.6 a12004ba-b69f-4ab5-8f17-f79a4bc71ef6 default }" containerID=0400011f97cbd67ae1218d4d5e0e293a849c713c66781c6ebf63f49b910a8924 datapathConfiguration="&{false false false false false }" interface=lxc9ba68f541d15 k8sPodName=cert-manager/cert-manager-startupapicheck-zp8bv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0400011f97 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2982 ipv4=10.0.0.6 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-zp8bv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0400011f97 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2982 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=acd7bb4e-f02f-4ddc-bb3f-80eb68efcae0,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=acd7bb4e-f02f-4ddc-bb3f-80eb68efcae0,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.6 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-zp8bv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Rewrote endpoint BPF program" containerID=00742e163a datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=678 identity=44166 ipv4=10.0.0.251 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-5tsxz subsys=endpoint level=info msg="Successful endpoint creation" containerID=00742e163a datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=678 identity=44166 ipv4=10.0.0.251 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-5tsxz subsys=daemon level=info msg="Allocated new global key" key="k8s:app=startupapicheck;k8s:app.kubernetes.io/component=startupapicheck;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=startupapicheck;k8s:app.kubernetes.io/version=v1.11.5;k8s:batch.kubernetes.io/controller-uid=acd7bb4e-f02f-4ddc-bb3f-80eb68efcae0;k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck;k8s:controller-uid=acd7bb4e-f02f-4ddc-bb3f-80eb68efcae0;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck;k8s:io.kubernetes.pod.namespace=cert-manager;k8s:job-name=cert-manager-startupapicheck;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0400011f97 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2982 identity=12340 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=acd7bb4e-f02f-4ddc-bb3f-80eb68efcae0,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=acd7bb4e-f02f-4ddc-bb3f-80eb68efcae0,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.6 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-zp8bv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0400011f97 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2982 identity=12340 ipv4=10.0.0.6 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-zp8bv subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0400011f97 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2982 identity=12340 ipv4=10.0.0.6 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-zp8bv subsys=endpoint level=info msg="Successful endpoint creation" containerID=0400011f97 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2982 identity=12340 ipv4=10.0.0.6 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-zp8bv subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=0400011f97 endpointID=2982 k8sNamespace=cert-manager k8sPodName=cert-manager-startupapicheck-zp8bv subsys=daemon level=info msg="Releasing key" key="[k8s:app=startupapicheck k8s:app.kubernetes.io/component=startupapicheck k8s:app.kubernetes.io/instance=cert-manager k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=startupapicheck k8s:app.kubernetes.io/version=v1.11.5 k8s:batch.kubernetes.io/controller-uid=acd7bb4e-f02f-4ddc-bb3f-80eb68efcae0 k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck k8s:controller-uid=acd7bb4e-f02f-4ddc-bb3f-80eb68efcae0 k8s:helm.sh/chart=cert-manager-v1.11.5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager k8s:io.cilium.k8s.namespace.labels.name=cert-manager k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck k8s:io.kubernetes.pod.namespace=cert-manager k8s:job-name=cert-manager-startupapicheck]" subsys=allocator level=info msg="Removed endpoint" containerID=0400011f97 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2982 identity=12340 ipv4=10.0.0.6 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-zp8bv subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.243 868ca1a0-ce2f-45eb-b276-d926a009f23d default }" containerID=b7ef63bfe8835f215d5484143a7afdb2af585d81c1b25271dcb070dbd27f4711 datapathConfiguration="&{false false false false false }" interface=lxc0d5d4b41f0ae k8sPodName=ingress-nginx/ingress-nginx-admission-create-s8gz9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b7ef63bfe8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=174 ipv4=10.0.0.243 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-s8gz9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b7ef63bfe8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=174 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=93a04c1a-d208-4112-95c4-d7cfe5b21f8a,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=93a04c1a-d208-4112-95c4-d7cfe5b21f8a,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.243 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-s8gz9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=93a04c1a-d208-4112-95c4-d7cfe5b21f8a;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create;k8s:controller-uid=93a04c1a-d208-4112-95c4-d7cfe5b21f8a;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-create;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b7ef63bfe8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=174 identity=37543 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=93a04c1a-d208-4112-95c4-d7cfe5b21f8a,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=93a04c1a-d208-4112-95c4-d7cfe5b21f8a,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.243 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-s8gz9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b7ef63bfe8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=174 identity=37543 ipv4=10.0.0.243 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-s8gz9 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=b7ef63bfe8 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=174 identity=37543 ipv4=10.0.0.243 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-s8gz9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=b7ef63bfe8 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=174 identity=37543 ipv4=10.0.0.243 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-s8gz9 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=b7ef63bfe8 endpointID=174 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-create-s8gz9 subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=93a04c1a-d208-4112-95c4-d7cfe5b21f8a k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create k8s:controller-uid=93a04c1a-d208-4112-95c4-d7cfe5b21f8a k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-create]" subsys=allocator level=info msg="Removed endpoint" containerID=b7ef63bfe8 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=174 identity=37543 ipv4=10.0.0.243 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-s8gz9 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.164 8ef51fb0-8243-49b2-809a-ea2f23a71464 default }" containerID=f1b32d7ce02cfd2170439fc9834f44b4d38bbfe416f9de7266608e922a618752 datapathConfiguration="&{false false false false false }" interface=lxccfa5a5e037b1 k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-hd6rg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f1b32d7ce0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1089 ipv4=10.0.0.164 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-hd6rg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f1b32d7ce0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1089 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.164 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-hd6rg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=default-backend;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend;k8s:io.kubernetes.pod.namespace=ingress-nginx;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f1b32d7ce0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1089 identity=9953 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.164 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-hd6rg oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=f1b32d7ce0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1089 identity=9953 ipv4=10.0.0.164 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-hd6rg subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f1b32d7ce0 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1089 identity=9953 ipv4=10.0.0.164 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-hd6rg subsys=endpoint level=info msg="Successful endpoint creation" containerID=f1b32d7ce0 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1089 identity=9953 ipv4=10.0.0.164 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-hd6rg subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.169 47a8d778-89dc-44b6-a518-5f0d3f5f2759 default }" containerID=96bc3fb3902dd0223bfb979257ed65d9d329c6dd934ebd1873c09bb6e36fbad8 datapathConfiguration="&{false false false false false }" interface=lxc6c59dcaa9358 k8sPodName=ingress-nginx/ingress-nginx-admission-patch-bh8xm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=96bc3fb390 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1601 ipv4=10.0.0.169 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-bh8xm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=96bc3fb390 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1601 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=c661f5bc-73cf-42e3-89f6-59e1bd96f302,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=c661f5bc-73cf-42e3-89f6-59e1bd96f302,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.169 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-bh8xm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=c661f5bc-73cf-42e3-89f6-59e1bd96f302;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch;k8s:controller-uid=c661f5bc-73cf-42e3-89f6-59e1bd96f302;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-patch;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=96bc3fb390 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1601 identity=20521 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=c661f5bc-73cf-42e3-89f6-59e1bd96f302,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=c661f5bc-73cf-42e3-89f6-59e1bd96f302,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.169 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-bh8xm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=96bc3fb390 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1601 identity=20521 ipv4=10.0.0.169 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-bh8xm subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=96bc3fb390 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1601 identity=20521 ipv4=10.0.0.169 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-bh8xm subsys=endpoint level=info msg="Successful endpoint creation" containerID=96bc3fb390 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1601 identity=20521 ipv4=10.0.0.169 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-bh8xm subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=96bc3fb390 endpointID=1601 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-patch-bh8xm subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=c661f5bc-73cf-42e3-89f6-59e1bd96f302 k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch k8s:controller-uid=c661f5bc-73cf-42e3-89f6-59e1bd96f302 k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-patch]" subsys=allocator level=info msg="Removed endpoint" containerID=96bc3fb390 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1601 identity=20521 ipv4=10.0.0.169 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-bh8xm subsys=endpoint level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"rabbitmq-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-cluster-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=71cbe440-a338-4c34-a792-690a837cada0] Description:}]" policyAddRequest=88d7bb5b-f16d-4beb-b1ae-0347a1f067aa subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=88d7bb5b-f16d-4beb-b1ae-0347a1f067aa policyRevision=2 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-cluster-operator subsys=k8s-watcher level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"messaging-topology-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9443 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-messaging-topology-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=5c3d2760-2ddc-4997-82b4-e3ab903856b5] Description:}]" policyAddRequest=f50498de-b20e-4742-812f-3263c78740b8 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-messaging-topology-operator subsys=k8s-watcher level=info msg="Policy imported via API, recalculating..." policyAddRequest=f50498de-b20e-4742-812f-3263c78740b8 policyRevision=3 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.42 79a33190-fa59-4815-b315-558daa1a00cb default }" containerID=c0f1cf3717c8e1891f4cb8b2280e406b808293b50810af3e8e42be7c9751223b datapathConfiguration="&{false false false false false }" interface=lxc601f61d16689 k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-lj5j6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c0f1cf3717 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=370 ipv4=10.0.0.42 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-lj5j6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c0f1cf3717 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=370 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.17.4,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.42 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-lj5j6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=messaging-topology-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=1.17.4;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c0f1cf3717 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=370 identity=2425 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.17.4,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.42 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-lj5j6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c0f1cf3717 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=370 identity=2425 ipv4=10.0.0.42 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-lj5j6 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.59 2dc5fe2b-8fc2-40cb-aaac-4555cf7a92a3 default }" containerID=cd945aa72d0ba6ef99348beef5e77560c7997f300b4066c36a736ddde2ae62f2 datapathConfiguration="&{false false false false false }" interface=lxcba2dc4ddc62d k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-rmsxl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=cd945aa72d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1766 ipv4=10.0.0.59 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-rmsxl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=cd945aa72d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1766 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.16.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.59 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-rmsxl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=2.16.1;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=cd945aa72d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1766 identity=29334 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.16.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.59 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-rmsxl oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=cd945aa72d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1766 identity=29334 ipv4=10.0.0.59 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-rmsxl subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c0f1cf3717 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=370 identity=2425 ipv4=10.0.0.42 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-lj5j6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=c0f1cf3717 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=370 identity=2425 ipv4=10.0.0.42 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-lj5j6 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=cd945aa72d datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1766 identity=29334 ipv4=10.0.0.59 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-rmsxl subsys=endpoint level=info msg="Successful endpoint creation" containerID=cd945aa72d datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1766 identity=29334 ipv4=10.0.0.59 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-rmsxl subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.163 09678d4f-876b-4ebd-89e8-ec4fad165fa6 default }" containerID=743b7a5b67ed53393d08763e85590648698c41c31ac100206a6f7e55d2a76d61 datapathConfiguration="&{false false false false false }" interface=lxc1f20e5b2aedb k8sPodName=openstack/pxc-operator-69cb5bbdb9-pvqrm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=743b7a5b67 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2360 ipv4=10.0.0.163 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-pvqrm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=743b7a5b67 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2360 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.163 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-pvqrm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=operator;k8s:app.kubernetes.io/instance=pxc-operator;k8s:app.kubernetes.io/name=pxc-operator;k8s:app.kubernetes.io/part-of=pxc-operator;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=743b7a5b67 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2360 identity=22297 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.163 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-pvqrm oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=743b7a5b67 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2360 identity=22297 ipv4=10.0.0.163 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-pvqrm subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=743b7a5b67 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=2360 identity=22297 ipv4=10.0.0.163 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-pvqrm subsys=endpoint level=info msg="Successful endpoint creation" containerID=743b7a5b67 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=2360 identity=22297 ipv4=10.0.0.163 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-pvqrm subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.78 ce07e185-4544-4aab-b667-038d84f74274 default }" containerID=0fc8a06c43e4df4ff3a579b980d2b3ecce4aaef97c84afe10cf2137f4ff4a90c datapathConfiguration="&{false false false false false }" interface=lxc6cace3af82da k8sPodName=openstack/percona-xtradb-haproxy-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0fc8a06c43 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=177 ipv4=10.0.0.78 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0fc8a06c43 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=177 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.78 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=haproxy;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0fc8a06c43 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=177 identity=15487 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.78 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0fc8a06c43 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=177 identity=15487 ipv4=10.0.0.78 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=0fc8a06c43 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=177 identity=15487 ipv4=10.0.0.78 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=0fc8a06c43 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=177 identity=15487 ipv4=10.0.0.78 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.94 8f5286d3-c225-4c73-accf-89806c45a135 default }" containerID=c1f12c19db381cb710390e38944bdafa6d591f43db601ea68cc7199e9eeeeae1 datapathConfiguration="&{false false false false false }" interface=lxc545eb59d2b84 k8sPodName=local-path-storage/helper-pod-create-pvc-b011fbca-4a00-4aec-b002-16cf88693ff8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c1f12c19db datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=657 ipv4=10.0.0.94 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b011fbca-4a00-4aec-b002-16cf88693ff8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c1f12c19db datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=657 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.94 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b011fbca-4a00-4aec-b002-16cf88693ff8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c1f12c19db datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=657 identity=9115 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.94 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b011fbca-4a00-4aec-b002-16cf88693ff8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c1f12c19db datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=657 identity=9115 ipv4=10.0.0.94 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b011fbca-4a00-4aec-b002-16cf88693ff8 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c1f12c19db datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=657 identity=9115 ipv4=10.0.0.94 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b011fbca-4a00-4aec-b002-16cf88693ff8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=c1f12c19db datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=657 identity=9115 ipv4=10.0.0.94 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b011fbca-4a00-4aec-b002-16cf88693ff8 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=c1f12c19db endpointID=657 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-b011fbca-4a00-4aec-b002-16cf88693ff8 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=c1f12c19db datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=657 identity=9115 ipv4=10.0.0.94 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b011fbca-4a00-4aec-b002-16cf88693ff8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.130 ba6e5fa2-0b28-4e97-8213-7cd09196956c default }" containerID=29876c73200491d629947db02eb034ea2b6ac519558e65f9dcc4436a65573e93 datapathConfiguration="&{false false false false false }" interface=lxc73ba33cd9bdd k8sPodName=openstack/percona-xtradb-pxc-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=29876c7320 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=220 ipv4=10.0.0.130 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=29876c7320 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=220 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.130 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=pxc;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=29876c7320 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=220 identity=40678 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.130 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=29876c7320 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=220 identity=40678 ipv4=10.0.0.130 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=29876c7320 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=220 identity=40678 ipv4=10.0.0.130 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=29876c7320 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=220 identity=40678 ipv4=10.0.0.130 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/instance\":\"valkey\",\"k8s:app.kubernetes.io/name\":\"valkey\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:6379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:26379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:} {IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9121 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=valkey k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=da263fdf-5f56-475f-9f39-674a878b66e4] Description:}]" policyAddRequest=587bb55d-8412-43fb-a890-17b1aeea8a64 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=587bb55d-8412-43fb-a890-17b1aeea8a64 policyRevision=4 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=valkey subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.61 5051ae1b-3950-4240-bb32-5d99ae41aafb default }" containerID=065aaa3203c1229941974d6558281045ae7d4b4ca22a64151851528857970664 datapathConfiguration="&{false false false false false }" interface=lxc14873fe84b32 k8sPodName=local-path-storage/helper-pod-create-pvc-ccf59cba-c860-47ef-b9d8-377921f09103 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=065aaa3203 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1484 ipv4=10.0.0.61 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ccf59cba-c860-47ef-b9d8-377921f09103 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=065aaa3203 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1484 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.61 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ccf59cba-c860-47ef-b9d8-377921f09103 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=065aaa3203 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1484 identity=9115 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.61 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ccf59cba-c860-47ef-b9d8-377921f09103 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=065aaa3203 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1484 identity=9115 ipv4=10.0.0.61 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ccf59cba-c860-47ef-b9d8-377921f09103 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=065aaa3203 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1484 identity=9115 ipv4=10.0.0.61 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ccf59cba-c860-47ef-b9d8-377921f09103 subsys=endpoint level=info msg="Successful endpoint creation" containerID=065aaa3203 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1484 identity=9115 ipv4=10.0.0.61 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ccf59cba-c860-47ef-b9d8-377921f09103 subsys=daemon level=info msg="Delete endpoint request" containerID=065aaa3203 endpointID=1484 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-ccf59cba-c860-47ef-b9d8-377921f09103 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=065aaa3203 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1484 identity=9115 ipv4=10.0.0.61 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ccf59cba-c860-47ef-b9d8-377921f09103 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.174 90f4f1d4-daaa-4167-b3a0-8806f471a8bb default }" containerID=9d761399363b1ccb8387db0c93903e0d1185ba92037de3205158305f065b3a93 datapathConfiguration="&{false false false false false }" interface=lxc12a9dbe86212 k8sPodName=openstack/valkey-node-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9d76139936 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2656 ipv4=10.0.0.174 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9d76139936 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2656 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.174 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=node;k8s:app.kubernetes.io/instance=valkey;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=valkey;k8s:app.kubernetes.io/version=8.0.2;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=valkey-2.4.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=valkey;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=valkey-node-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9d76139936 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2656 identity=6002 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.174 ipv6= k8sPodName=openstack/valkey-node-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9d76139936 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2656 identity=6002 ipv4=10.0.0.174 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=9d76139936 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2656 identity=6002 ipv4=10.0.0.174 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=9d76139936 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2656 identity=6002 ipv4=10.0.0.174 ipv6= k8sPodName=openstack/valkey-node-0 subsys=daemon level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"keycloak\",\"k8s:app.kubernetes.io/instance\":\"keycloak\",\"k8s:app.kubernetes.io/name\":\"keycloak\",\"k8s:io.kubernetes.pod.namespace\":\"auth-system\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:7800 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:8080 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=keycloak k8s:io.cilium.k8s.policy.namespace=auth-system k8s:io.cilium.k8s.policy.uid=c4c9f57f-df98-44d4-a157-3792a1e46bb7] Description:}]" policyAddRequest=5a70eeab-2b86-4ddb-b951-565c18fa4833 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=5a70eeab-2b86-4ddb-b951-565c18fa4833 policyRevision=5 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=keycloak subsys=k8s-watcher level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.9 123bfa90-9baa-420a-91a0-05dfc7204bb8 default }" containerID=8acb1867e085ee15597babf1e55e0d6c31fb6c5b631e654dd08046cf1d1b0130 datapathConfiguration="&{false false false false false }" interface=lxc422383d653be k8sPodName=auth-system/keycloak-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8acb1867e0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=67 ipv4=10.0.0.9 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8acb1867e0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=67 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.9 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:auth-system k8s:io.cilium.k8s.namespace.labels.name:auth-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=keycloak;k8s:app.kubernetes.io/instance=keycloak;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=keycloak;k8s:app.kubernetes.io/version=24.0.5;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=keycloak-21.4.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system;k8s:io.cilium.k8s.namespace.labels.name=auth-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keycloak;k8s:io.kubernetes.pod.namespace=auth-system;k8s:statefulset.kubernetes.io/pod-name=keycloak-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8acb1867e0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=67 identity=57046 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.9 ipv6= k8sPodName=auth-system/keycloak-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8acb1867e0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=67 identity=57046 ipv4=10.0.0.9 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8acb1867e0 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=67 identity=57046 ipv4=10.0.0.9 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=8acb1867e0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=67 identity=57046 ipv4=10.0.0.9 ipv6= k8sPodName=auth-system/keycloak-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.007514169383310563 newInterval=7m30s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.181 48229cb2-999a-4a1d-aea2-96b89177762b default }" containerID=f3a4e2d9e066476147840bf622ce16c9bc5149759069996b9ae952d758f1577e datapathConfiguration="&{false false false false false }" interface=lxc4f77d2ae99ad k8sPodName=monitoring/node-feature-discovery-worker-nb4qw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f3a4e2d9e0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=473 ipv4=10.0.0.181 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-nb4qw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f3a4e2d9e0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=473 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.181 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-nb4qw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=worker;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f3a4e2d9e0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=473 identity=16350 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.181 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-nb4qw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f3a4e2d9e0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=473 identity=16350 ipv4=10.0.0.181 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-nb4qw subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f3a4e2d9e0 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=473 identity=16350 ipv4=10.0.0.181 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-nb4qw subsys=endpoint level=info msg="Successful endpoint creation" containerID=f3a4e2d9e0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=473 identity=16350 ipv4=10.0.0.181 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-nb4qw subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.142 94183791-2abf-4ce6-a78c-31253e7ec9b9 default }" containerID=c783fb6d7bb463cf0f5f9fd55062b43eec6094ade2e56ecf4bb05da24cbb2db4 datapathConfiguration="&{false false false false false }" interface=lxc70bda23b22b5 k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-ws52p labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c783fb6d7b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=82 ipv4=10.0.0.142 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-ws52p subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c783fb6d7b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=82 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.142 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-ws52p subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=gc;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c783fb6d7b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=82 identity=27150 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.142 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-ws52p oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c783fb6d7b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=82 identity=27150 ipv4=10.0.0.142 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-ws52p subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.60 83d4dcca-225e-4a67-bfbb-b24f5cb444ad default }" containerID=d37d0eefd64cc6f561c592b713827cd7b6ceca1493f26c3541eb6903046303b9 datapathConfiguration="&{false false false false false }" interface=lxc31b88af6d044 k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-sprdd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d37d0eefd6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1328 ipv4=10.0.0.60 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-sprdd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d37d0eefd6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1328 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.60 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-sprdd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=master;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d37d0eefd6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1328 identity=7721 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.60 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-sprdd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d37d0eefd6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1328 identity=7721 ipv4=10.0.0.60 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-sprdd subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c783fb6d7b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=82 identity=27150 ipv4=10.0.0.142 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-ws52p subsys=endpoint level=info msg="Successful endpoint creation" containerID=c783fb6d7b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=82 identity=27150 ipv4=10.0.0.142 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-ws52p subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=d37d0eefd6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1328 identity=7721 ipv4=10.0.0.60 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-sprdd subsys=endpoint level=info msg="Successful endpoint creation" containerID=d37d0eefd6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1328 identity=7721 ipv4=10.0.0.60 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-sprdd subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.183 050df4aa-fd49-42ef-bbd0-49ef2e1b7f5f default }" containerID=4965dcf90444115c7ee1abfcdb2126e423795c110de434226e512eac83d2dec0 datapathConfiguration="&{false false false false false }" interface=lxc56f08ada8bf7 k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-l97rs labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4965dcf904 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1698 ipv4=10.0.0.183 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-l97rs subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4965dcf904 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1698 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.183 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-l97rs subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:secretgen-controller]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=secretgen-controller;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa;k8s:io.kubernetes.pod.namespace=secretgen-controller;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4965dcf904 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1698 identity=5685 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.183 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-l97rs oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4965dcf904 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1698 identity=5685 ipv4=10.0.0.183 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-l97rs subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4965dcf904 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1698 identity=5685 ipv4=10.0.0.183 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-l97rs subsys=endpoint level=info msg="Successful endpoint creation" containerID=4965dcf904 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1698 identity=5685 ipv4=10.0.0.183 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-l97rs subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=30 identity=1 identityLabels="k8s:feature.node.kubernetes.io/cpu-cpuid.ADX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AESNI=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX2=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CLZERO=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CMPXCHG8=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FMA3=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSROPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.HYPERVISOR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IA32_ARCH_CAP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBPB=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBRS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.LAHF=true,k8s:feature.node.kubernetes.io/cpu-cpuid.MOVBE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.NRIPS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.OSXSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SHA=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SPEC_CTRL_SSBD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SSE4A=true,k8s:feature.node.kubernetes.io/cpu-cpuid.STIBP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVM=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVMNP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSCALL=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSEE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.TOPEXT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.WBNOINVD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.X87=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XGETBV1=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEC=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEOPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVES=true,k8s:feature.node.kubernetes.io/cpu-hardware_multithreading=false,k8s:feature.node.kubernetes.io/cpu-model.family=23,k8s:feature.node.kubernetes.io/cpu-model.id=49,k8s:feature.node.kubernetes.io/cpu-model.vendor_id=AMD,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ=true,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ_IDLE=true,k8s:feature.node.kubernetes.io/kernel-version.full=5.15.0-174-generic,k8s:feature.node.kubernetes.io/kernel-version.major=5,k8s:feature.node.kubernetes.io/kernel-version.minor=15,k8s:feature.node.kubernetes.io/kernel-version.revision=0,k8s:feature.node.kubernetes.io/pci-0300_1af4.present=true,k8s:feature.node.kubernetes.io/system-os_release.ID=ubuntu,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.major=22,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.minor=04,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID=22.04,k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_00030 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_00030 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_00030 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_00030:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=30 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.32 d80fbcc4-da12-4086-b9ba-835ad765b842 default }" containerID=73430c44037829d4bc7c3c04144827f681c03cd0511db7804b2a76ed470f97ba datapathConfiguration="&{false false false false false }" interface=lxcb58c03d26c1c k8sPodName=monitoring/kube-prometheus-stack-admission-create-g86dz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=73430c4403 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3328 ipv4=10.0.0.32 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-g86dz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=73430c4403 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3328 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=e982aecd-34a8-425d-8e13-c81a6a6090b6,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=e982aecd-34a8-425d-8e13-c81a6a6090b6,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.32 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-g86dz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-create;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=e982aecd-34a8-425d-8e13-c81a6a6090b6;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=e982aecd-34a8-425d-8e13-c81a6a6090b6;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-create;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=73430c4403 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3328 identity=8613 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=e982aecd-34a8-425d-8e13-c81a6a6090b6,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=e982aecd-34a8-425d-8e13-c81a6a6090b6,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.32 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-g86dz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=73430c4403 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3328 identity=8613 ipv4=10.0.0.32 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-g86dz subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=73430c4403 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3328 identity=8613 ipv4=10.0.0.32 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-g86dz subsys=endpoint level=info msg="Successful endpoint creation" containerID=73430c4403 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3328 identity=8613 ipv4=10.0.0.32 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-g86dz subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=73430c4403 endpointID=3328 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-create-g86dz subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-create k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=e982aecd-34a8-425d-8e13-c81a6a6090b6 k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=e982aecd-34a8-425d-8e13-c81a6a6090b6 k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-create k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=73430c4403 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3328 identity=8613 ipv4=10.0.0.32 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-g86dz subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.165 90c91930-8287-4e6c-9cf3-0f81cc3a079f default }" containerID=b48500fafe5f1ae256f931941cfcf96c48233596eedaeb05b3f331f247c291e8 datapathConfiguration="&{false false false false false }" interface=lxcfae3e43d58bd k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-2dr8k labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b48500fafe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=300 ipv4=10.0.0.165 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-2dr8k subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b48500fafe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=300 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.165 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-2dr8k subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=metrics;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-state-metrics;k8s:app.kubernetes.io/part-of=kube-state-metrics;k8s:app.kubernetes.io/version=2.12.0;k8s:helm.sh/chart=kube-state-metrics-5.20.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b48500fafe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=300 identity=19541 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.165 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-2dr8k oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=b48500fafe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=300 identity=19541 ipv4=10.0.0.165 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-2dr8k subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.201 1e7a0c79-095e-4ed8-8048-9452fe26f4ff default }" containerID=6d64a3cf7d2517a4f565a259be7a7cc56dae80389beb3794274f68be650cd092 datapathConfiguration="&{false false false false false }" interface=lxca7ce1aa2053d k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-gvt4j labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6d64a3cf7d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1161 ipv4=10.0.0.201 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-gvt4j subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6d64a3cf7d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1161 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.201 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-gvt4j subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-operator;k8s:app.kubernetes.io/component=prometheus-operator;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:chart=kube-prometheus-stack-60.2.0;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6d64a3cf7d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1161 identity=8775 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.201 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-gvt4j oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6d64a3cf7d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1161 identity=8775 ipv4=10.0.0.201 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-gvt4j subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b48500fafe datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=300 identity=19541 ipv4=10.0.0.165 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-2dr8k subsys=endpoint level=info msg="Successful endpoint creation" containerID=b48500fafe datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=300 identity=19541 ipv4=10.0.0.165 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-2dr8k subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.155 972596ff-b3b1-43db-b833-410d26bd88df default }" containerID=6e670c8afadbf37f14c9eee00381a902f8a207ddc49f185e78960a645506a136 datapathConfiguration="&{false false false false false }" interface=lxc047dfe92dc5d k8sPodName=monitoring/kube-prometheus-stack-grafana-647dff8fbf-xthd2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6e670c8afa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1393 ipv4=10.0.0.155 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-647dff8fbf-xthd2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6e670c8afa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1393 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.155 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-647dff8fbf-xthd2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/name=grafana;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6e670c8afa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1393 identity=11885 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.155 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-647dff8fbf-xthd2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6e670c8afa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1393 identity=11885 ipv4=10.0.0.155 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-647dff8fbf-xthd2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6d64a3cf7d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1161 identity=8775 ipv4=10.0.0.201 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-gvt4j subsys=endpoint level=info msg="Successful endpoint creation" containerID=6d64a3cf7d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1161 identity=8775 ipv4=10.0.0.201 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-gvt4j subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=6e670c8afa datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1393 identity=11885 ipv4=10.0.0.155 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-647dff8fbf-xthd2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=6e670c8afa datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1393 identity=11885 ipv4=10.0.0.155 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-647dff8fbf-xthd2 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.88 64db84a3-baa6-411b-8273-e65e0f17739e default }" containerID=d5617e7a9b98d4c8802d4ad9e0684ae8e2603468bab651640bc2f9713578dcd9 datapathConfiguration="&{false false false false false }" interface=lxc168ba7ed4b8a k8sPodName=monitoring/kube-prometheus-stack-admission-patch-t5fnk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d5617e7a9b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1181 ipv4=10.0.0.88 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-t5fnk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d5617e7a9b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1181 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=d635330d-1b62-4227-b605-cc408179322a,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=d635330d-1b62-4227-b605-cc408179322a,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.88 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-t5fnk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-patch;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=d635330d-1b62-4227-b605-cc408179322a;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=d635330d-1b62-4227-b605-cc408179322a;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-patch;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d5617e7a9b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1181 identity=2660 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=d635330d-1b62-4227-b605-cc408179322a,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=d635330d-1b62-4227-b605-cc408179322a,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.88 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-t5fnk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d5617e7a9b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1181 identity=2660 ipv4=10.0.0.88 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-t5fnk subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d5617e7a9b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1181 identity=2660 ipv4=10.0.0.88 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-t5fnk subsys=endpoint level=info msg="Successful endpoint creation" containerID=d5617e7a9b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1181 identity=2660 ipv4=10.0.0.88 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-t5fnk subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=d5617e7a9b endpointID=1181 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-patch-t5fnk subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-patch k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=d635330d-1b62-4227-b605-cc408179322a k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=d635330d-1b62-4227-b605-cc408179322a k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-patch k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=d5617e7a9b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1181 identity=2660 ipv4=10.0.0.88 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-t5fnk subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.206 0cb8a380-fa16-47e3-bbb4-abce2156b679 default }" containerID=6d56974549b7309278666e1fb384a16034cfcea8909d24af47d7cec051518f6b datapathConfiguration="&{false false false false false }" interface=lxc068fcda0868d k8sPodName=local-path-storage/helper-pod-create-pvc-9cb77a0e-ef25-43e0-90dc-0d8b06a9681c labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6d56974549 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=613 ipv4=10.0.0.206 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-9cb77a0e-ef25-43e0-90dc-0d8b06a9681c subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6d56974549 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=613 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.206 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-9cb77a0e-ef25-43e0-90dc-0d8b06a9681c subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6d56974549 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=613 identity=9115 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.206 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-9cb77a0e-ef25-43e0-90dc-0d8b06a9681c oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6d56974549 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=613 identity=9115 ipv4=10.0.0.206 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-9cb77a0e-ef25-43e0-90dc-0d8b06a9681c subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6d56974549 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=613 identity=9115 ipv4=10.0.0.206 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-9cb77a0e-ef25-43e0-90dc-0d8b06a9681c subsys=endpoint level=info msg="Successful endpoint creation" containerID=6d56974549 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=613 identity=9115 ipv4=10.0.0.206 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-9cb77a0e-ef25-43e0-90dc-0d8b06a9681c subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.226 369be245-35f5-4ca1-bc2d-89e620d13753 default }" containerID=a524586767a4813865aedaba02e5352f3f1fa561811d1937e9479a455d0b8c95 datapathConfiguration="&{false false false false false }" interface=lxcc765b0054a77 k8sPodName=local-path-storage/helper-pod-create-pvc-86bedbe8-fc7c-4f3d-937e-75111d15eed5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a524586767 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2825 ipv4=10.0.0.226 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-86bedbe8-fc7c-4f3d-937e-75111d15eed5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a524586767 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2825 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.226 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-86bedbe8-fc7c-4f3d-937e-75111d15eed5 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=a524586767 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2825 identity=9115 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.226 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-86bedbe8-fc7c-4f3d-937e-75111d15eed5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a524586767 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2825 identity=9115 ipv4=10.0.0.226 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-86bedbe8-fc7c-4f3d-937e-75111d15eed5 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a524586767 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2825 identity=9115 ipv4=10.0.0.226 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-86bedbe8-fc7c-4f3d-937e-75111d15eed5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=a524586767 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2825 identity=9115 ipv4=10.0.0.226 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-86bedbe8-fc7c-4f3d-937e-75111d15eed5 subsys=daemon level=info msg="Delete endpoint request" containerID=6d56974549 endpointID=613 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-9cb77a0e-ef25-43e0-90dc-0d8b06a9681c subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=6d56974549 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=613 identity=9115 ipv4=10.0.0.206 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-9cb77a0e-ef25-43e0-90dc-0d8b06a9681c subsys=endpoint level=info msg="Delete endpoint request" containerID=a524586767 endpointID=2825 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-86bedbe8-fc7c-4f3d-937e-75111d15eed5 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=a524586767 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2825 identity=9115 ipv4=10.0.0.226 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-86bedbe8-fc7c-4f3d-937e-75111d15eed5 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.124 869ff0d3-d9fc-462d-b952-ec69878e79cb default }" containerID=9867dd2934f71b4adec0d95a669e7746c543675662993e67d18ba4b07508d9f6 datapathConfiguration="&{false false false false false }" interface=lxcedd026b01293 k8sPodName=monitoring/loki-gateway-cf54cb88c-84bnp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9867dd2934 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=603 ipv4=10.0.0.124 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-84bnp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9867dd2934 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=603 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.124 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-84bnp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=gateway;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9867dd2934 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=603 identity=59942 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.124 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-84bnp oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=9867dd2934 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=603 identity=59942 ipv4=10.0.0.124 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-84bnp subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.36 16277d0e-931f-41c1-b786-2b82541c4e6b default }" containerID=97cd62478e2eb1a14442407ed71fe945c9ad5e707d357174de548b639a08f41e datapathConfiguration="&{false false false false false }" interface=lxcb5401f495209 k8sPodName=monitoring/loki-results-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=97cd62478e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2318 ipv4=10.0.0.36 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=97cd62478e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2318 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.36 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-results-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-results-cache;k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=97cd62478e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2318 identity=64129 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.36 ipv6= k8sPodName=monitoring/loki-results-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=97cd62478e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2318 identity=64129 ipv4=10.0.0.36 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.138 c4ace0fe-ad6e-4319-9e3e-b5d5d979487e default }" containerID=6fa32c10acaccb60925f857afa4b11f394c1fb99445ac2ba109a8e1b4c4a5696 datapathConfiguration="&{false false false false false }" interface=lxc49eb40b0a7c2 k8sPodName=monitoring/loki-chunks-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6fa32c10ac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3934 ipv4=10.0.0.138 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6fa32c10ac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3934 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.138 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-chunks-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-chunks-cache;k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6fa32c10ac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3934 identity=36588 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.138 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6fa32c10ac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3934 identity=36588 ipv4=10.0.0.138 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9867dd2934 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=603 identity=59942 ipv4=10.0.0.124 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-84bnp subsys=endpoint level=info msg="Successful endpoint creation" containerID=9867dd2934 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=603 identity=59942 ipv4=10.0.0.124 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-84bnp subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=97cd62478e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2318 identity=64129 ipv4=10.0.0.36 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=97cd62478e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2318 identity=64129 ipv4=10.0.0.36 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=6fa32c10ac datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3934 identity=36588 ipv4=10.0.0.138 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=6fa32c10ac datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3934 identity=36588 ipv4=10.0.0.138 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.85 28106192-ade7-4091-bd62-ff275329cd16 default }" containerID=a733e42f3b98e6766d3695cf62a22bb019f2aba1b29b028322327da19c51056e datapathConfiguration="&{false false false false false }" interface=lxcc347f4d550de k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a733e42f3b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2273 ipv4=10.0.0.85 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a733e42f3b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2273 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.85 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:alertmanager=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=alertmanager;k8s:app.kubernetes.io/version=0.27.0;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a733e42f3b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2273 identity=29281 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.85 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a733e42f3b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2273 identity=29281 ipv4=10.0.0.85 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a733e42f3b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2273 identity=29281 ipv4=10.0.0.85 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=a733e42f3b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2273 identity=29281 ipv4=10.0.0.85 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.182 a15529be-b4cd-43c8-b0cd-e1e28177d699 default }" containerID=e80d779378cc525558855065fdbb12c18e1501733609c6ae7e280ba63759d83d datapathConfiguration="&{false false false false false }" interface=lxc779f674466d5 k8sPodName=local-path-storage/helper-pod-create-pvc-cc96c40a-fbdd-42fe-80ba-a298f5ca914c labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e80d779378 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=959 ipv4=10.0.0.182 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-cc96c40a-fbdd-42fe-80ba-a298f5ca914c subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e80d779378 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=959 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.182 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-cc96c40a-fbdd-42fe-80ba-a298f5ca914c subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e80d779378 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=959 identity=9115 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.182 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-cc96c40a-fbdd-42fe-80ba-a298f5ca914c oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e80d779378 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=959 identity=9115 ipv4=10.0.0.182 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-cc96c40a-fbdd-42fe-80ba-a298f5ca914c subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e80d779378 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=959 identity=9115 ipv4=10.0.0.182 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-cc96c40a-fbdd-42fe-80ba-a298f5ca914c subsys=endpoint level=info msg="Successful endpoint creation" containerID=e80d779378 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=959 identity=9115 ipv4=10.0.0.182 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-cc96c40a-fbdd-42fe-80ba-a298f5ca914c subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.75 d57acf24-48b7-4437-9557-8de417d34a0d default }" containerID=2474f3f2c8fc3ec5d89330aa899090536906c8bb03f67beff3bdcbbf10fac808 datapathConfiguration="&{false false false false false }" interface=lxce533e2fd0144 k8sPodName=monitoring/vector-tm8dh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2474f3f2c8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=664 ipv4=10.0.0.75 ipv6= k8sPodName=monitoring/vector-tm8dh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2474f3f2c8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=664 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.75 ipv6= k8sPodName=monitoring/vector-tm8dh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=Agent;k8s:app.kubernetes.io/instance=vector;k8s:app.kubernetes.io/name=vector;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=vector;k8s:io.kubernetes.pod.namespace=monitoring;k8s:vector.dev/exclude=true;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2474f3f2c8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=664 identity=21675 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.75 ipv6= k8sPodName=monitoring/vector-tm8dh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2474f3f2c8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=664 identity=21675 ipv4=10.0.0.75 ipv6= k8sPodName=monitoring/vector-tm8dh subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.50 680b13ed-fbb9-48a6-9ec9-ee7b0a0661be default }" containerID=dd8f235afcac39e6969a842d98c62b55aadd1f93cfd0b4e2460a0fd5e8befad4 datapathConfiguration="&{false false false false false }" interface=lxc19395a89d90f k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=dd8f235afc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=114 ipv4=10.0.0.50 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=dd8f235afc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=114 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.50 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Rewrote endpoint BPF program" containerID=2474f3f2c8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=664 identity=21675 ipv4=10.0.0.75 ipv6= k8sPodName=monitoring/vector-tm8dh subsys=endpoint level=info msg="Successful endpoint creation" containerID=2474f3f2c8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=664 identity=21675 ipv4=10.0.0.75 ipv6= k8sPodName=monitoring/vector-tm8dh subsys=daemon level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=prometheus;k8s:app.kubernetes.io/version=2.51.2;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus;k8s:io.kubernetes.pod.namespace=monitoring;k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus;k8s:operator.prometheus.io/shard=0;k8s:prometheus=kube-prometheus-stack-prometheus;k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=dd8f235afc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=114 identity=26573 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.50 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=dd8f235afc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=114 identity=26573 ipv4=10.0.0.50 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=dd8f235afc datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=114 identity=26573 ipv4=10.0.0.50 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=dd8f235afc datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=114 identity=26573 ipv4=10.0.0.50 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=e80d779378 endpointID=959 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-cc96c40a-fbdd-42fe-80ba-a298f5ca914c subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=e80d779378 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=959 identity=9115 ipv4=10.0.0.182 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-cc96c40a-fbdd-42fe-80ba-a298f5ca914c subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.18 1769482c-1ab7-4474-9d31-a80517bc6903 default }" containerID=3ca5e7344d717428eb4c35091ef5b6e7c4480d567e4c8f5f63301df7c11e6831 datapathConfiguration="&{false false false false false }" interface=lxcfeb5cc5357bc k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-gjn46 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3ca5e7344d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1469 ipv4=10.0.0.18 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-gjn46 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3ca5e7344d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1469 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.18 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-gjn46 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=prometheus-pushgateway;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=prometheus-pushgateway;k8s:app.kubernetes.io/version=v1.8.0;k8s:helm.sh/chart=prometheus-pushgateway-2.13.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=3ca5e7344d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1469 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.18 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-gjn46 line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=3ca5e7344d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1469 identity=57783 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.18 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-gjn46 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3ca5e7344d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1469 identity=57783 ipv4=10.0.0.18 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-gjn46 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3ca5e7344d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1469 identity=57783 ipv4=10.0.0.18 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-gjn46 subsys=endpoint level=info msg="Successful endpoint creation" containerID=3ca5e7344d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1469 identity=57783 ipv4=10.0.0.18 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-gjn46 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.172 88fccdbd-f68a-41ca-ba57-6d7bb42de5b9 default }" containerID=8b5a8033fa59ff48707cfe9e35d396fcffbc147b9e389af59dd078c1f69fc1a8 datapathConfiguration="&{false false false false false }" interface=lxccfd6165bf88a k8sPodName=monitoring/loki-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8b5a8033fa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=973 ipv4=10.0.0.172 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8b5a8033fa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=973 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.172 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=single-binary;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:app.kubernetes.io/part-of=memberlist;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=loki-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8b5a8033fa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=973 identity=19930 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.172 ipv6= k8sPodName=monitoring/loki-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8b5a8033fa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=973 identity=19930 ipv4=10.0.0.172 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8b5a8033fa datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=973 identity=19930 ipv4=10.0.0.172 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=8b5a8033fa datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=973 identity=19930 ipv4=10.0.0.172 ipv6= k8sPodName=monitoring/loki-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.15 822d6210-e15f-4343-987e-9c152438b6d2 default }" containerID=15ce570675f4a5970eddd5bb74e762285c061048b0fa5adf315a18e0181f1363 datapathConfiguration="&{false false false false false }" interface=lxcf52da1d70267 k8sPodName=openstack/memcached-memcached-6479589586-6x7xp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=15ce570675 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2614 ipv4=10.0.0.15 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-6x7xp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=15ce570675 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2614 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.15 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-6x7xp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=memcached;k8s:component=server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=memcached;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=15ce570675 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2614 identity=15311 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.15 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-6x7xp oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=15ce570675 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2614 identity=15311 ipv4=10.0.0.15 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-6x7xp subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=15ce570675 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2614 identity=15311 ipv4=10.0.0.15 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-6x7xp subsys=endpoint level=info msg="Successful endpoint creation" containerID=15ce570675 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2614 identity=15311 ipv4=10.0.0.15 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-6x7xp subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.3 b795d1f7-78e6-4d77-b21c-2580835a281c default }" containerID=ecf140267a73d088e295e24f6781f13c5a3bd3f60c3206ebec47be1f44e4b617 datapathConfiguration="&{false false false false false }" interface=lxc7a4ac06471a3 k8sPodName=local-path-storage/helper-pod-create-pvc-653635ff-3c6c-4a1a-8919-0556a6f0202d labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ecf140267a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=896 ipv4=10.0.0.3 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-653635ff-3c6c-4a1a-8919-0556a6f0202d subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ecf140267a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=896 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.3 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-653635ff-3c6c-4a1a-8919-0556a6f0202d subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ecf140267a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=896 identity=9115 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.3 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-653635ff-3c6c-4a1a-8919-0556a6f0202d oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ecf140267a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=896 identity=9115 ipv4=10.0.0.3 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-653635ff-3c6c-4a1a-8919-0556a6f0202d subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ecf140267a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=896 identity=9115 ipv4=10.0.0.3 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-653635ff-3c6c-4a1a-8919-0556a6f0202d subsys=endpoint level=info msg="Successful endpoint creation" containerID=ecf140267a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=896 identity=9115 ipv4=10.0.0.3 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-653635ff-3c6c-4a1a-8919-0556a6f0202d subsys=daemon level=info msg="Delete endpoint request" containerID=ecf140267a endpointID=896 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-653635ff-3c6c-4a1a-8919-0556a6f0202d subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=ecf140267a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=896 identity=9115 ipv4=10.0.0.3 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-653635ff-3c6c-4a1a-8919-0556a6f0202d subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.49 5dceff5f-5163-4ff6-a030-943b47355a92 default }" containerID=ed1f03e217ad503c0a98e8395ea1f04cd1d24962b9873f9e21b82ffea589448c datapathConfiguration="&{false false false false false }" interface=lxc2183e3230f9d k8sPodName=openstack/rabbitmq-keystone-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ed1f03e217 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3110 ipv4=10.0.0.49 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ed1f03e217 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3110 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.49 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-keystone;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=ed1f03e217 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3110 identity=50752 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.49 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ed1f03e217 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3110 identity=50752 ipv4=10.0.0.49 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ed1f03e217 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3110 identity=50752 ipv4=10.0.0.49 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=ed1f03e217 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3110 identity=50752 ipv4=10.0.0.49 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.38 4b315f29-8366-426b-b4c3-c1919ea0a758 default }" containerID=ea30dfabafee2d3076fb856d8fd0a6eff000bd2a757f4b3fa0e5a15066dc0334 datapathConfiguration="&{false false false false false }" interface=lxc2f76a3f747bf k8sPodName=openstack/keystone-api-556df4b9d6-x6mjz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ea30dfabaf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2161 ipv4=10.0.0.38 ipv6= k8sPodName=openstack/keystone-api-556df4b9d6-x6mjz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ea30dfabaf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2161 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.38 ipv6= k8sPodName=openstack/keystone-api-556df4b9d6-x6mjz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ea30dfabaf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2161 identity=20090 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.38 ipv6= k8sPodName=openstack/keystone-api-556df4b9d6-x6mjz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ea30dfabaf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2161 identity=20090 ipv4=10.0.0.38 ipv6= k8sPodName=openstack/keystone-api-556df4b9d6-x6mjz subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.224 26fe225d-48c2-478a-bd93-fa63f3cd556d default }" containerID=295891ad28b790535e348e798346fd53f514abdafa8ab84f1152431434931ec1 datapathConfiguration="&{false false false false false }" interface=lxcc980a0724c81 k8sPodName=openstack/keystone-credential-setup-qf5qm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=295891ad28 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1813 ipv4=10.0.0.224 ipv6= k8sPodName=openstack/keystone-credential-setup-qf5qm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=295891ad28 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1813 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=1f5d1516-a726-47b1-a20e-b018ce8ccf1f,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=1f5d1516-a726-47b1-a20e-b018ce8ccf1f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.224 ipv6= k8sPodName=openstack/keystone-credential-setup-qf5qm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=1f5d1516-a726-47b1-a20e-b018ce8ccf1f;k8s:batch.kubernetes.io/job-name=keystone-credential-setup;k8s:component=credential-setup;k8s:controller-uid=1f5d1516-a726-47b1-a20e-b018ce8ccf1f;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-credential-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=295891ad28 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1813 identity=51571 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=1f5d1516-a726-47b1-a20e-b018ce8ccf1f,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=1f5d1516-a726-47b1-a20e-b018ce8ccf1f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.224 ipv6= k8sPodName=openstack/keystone-credential-setup-qf5qm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=295891ad28 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1813 identity=51571 ipv4=10.0.0.224 ipv6= k8sPodName=openstack/keystone-credential-setup-qf5qm subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ea30dfabaf datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2161 identity=20090 ipv4=10.0.0.38 ipv6= k8sPodName=openstack/keystone-api-556df4b9d6-x6mjz subsys=endpoint level=info msg="Successful endpoint creation" containerID=ea30dfabaf datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2161 identity=20090 ipv4=10.0.0.38 ipv6= k8sPodName=openstack/keystone-api-556df4b9d6-x6mjz subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=295891ad28 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1813 identity=51571 ipv4=10.0.0.224 ipv6= k8sPodName=openstack/keystone-credential-setup-qf5qm subsys=endpoint level=info msg="Successful endpoint creation" containerID=295891ad28 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1813 identity=51571 ipv4=10.0.0.224 ipv6= k8sPodName=openstack/keystone-credential-setup-qf5qm subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=295891ad28 endpointID=1813 k8sNamespace=openstack k8sPodName=keystone-credential-setup-qf5qm subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=1f5d1516-a726-47b1-a20e-b018ce8ccf1f k8s:batch.kubernetes.io/job-name=keystone-credential-setup k8s:component=credential-setup k8s:controller-uid=1f5d1516-a726-47b1-a20e-b018ce8ccf1f k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-credential-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=295891ad28 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1813 identity=51571 ipv4=10.0.0.224 ipv6= k8sPodName=openstack/keystone-credential-setup-qf5qm subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.177 b7973004-28f6-47ee-bc7a-386c1fe2557c default }" containerID=de3af55b175db78d78f4bd7e4a2b31fb498adf80c8470933121e66bab8176c13 datapathConfiguration="&{false false false false false }" interface=lxcfbcfe4f4ec5f k8sPodName=openstack/keystone-db-init-xghlb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=de3af55b17 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3553 ipv4=10.0.0.177 ipv6= k8sPodName=openstack/keystone-db-init-xghlb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=de3af55b17 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3553 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=bf6e2ea6-b639-49b5-85a6-24ba26f59a5a,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=bf6e2ea6-b639-49b5-85a6-24ba26f59a5a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.177 ipv6= k8sPodName=openstack/keystone-db-init-xghlb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=bf6e2ea6-b639-49b5-85a6-24ba26f59a5a;k8s:batch.kubernetes.io/job-name=keystone-db-init;k8s:component=db-init;k8s:controller-uid=bf6e2ea6-b639-49b5-85a6-24ba26f59a5a;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=de3af55b17 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3553 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.177 ipv6= k8sPodName=openstack/keystone-db-init-xghlb line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=de3af55b17 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3553 identity=5286 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=bf6e2ea6-b639-49b5-85a6-24ba26f59a5a,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=bf6e2ea6-b639-49b5-85a6-24ba26f59a5a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.177 ipv6= k8sPodName=openstack/keystone-db-init-xghlb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=de3af55b17 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3553 identity=5286 ipv4=10.0.0.177 ipv6= k8sPodName=openstack/keystone-db-init-xghlb subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=de3af55b17 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3553 identity=5286 ipv4=10.0.0.177 ipv6= k8sPodName=openstack/keystone-db-init-xghlb subsys=endpoint level=info msg="Successful endpoint creation" containerID=de3af55b17 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3553 identity=5286 ipv4=10.0.0.177 ipv6= k8sPodName=openstack/keystone-db-init-xghlb subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=de3af55b17 endpointID=3553 k8sNamespace=openstack k8sPodName=keystone-db-init-xghlb subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=bf6e2ea6-b639-49b5-85a6-24ba26f59a5a k8s:batch.kubernetes.io/job-name=keystone-db-init k8s:component=db-init k8s:controller-uid=bf6e2ea6-b639-49b5-85a6-24ba26f59a5a k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=de3af55b17 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3553 identity=5286 ipv4=10.0.0.177 ipv6= k8sPodName=openstack/keystone-db-init-xghlb subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.101 641c285e-7898-4db0-ae55-164bcc3931ef default }" containerID=1b320f6f32300c4f58c445ec6e52f11f5230734f342fb3718c3ff521f8bc9ec0 datapathConfiguration="&{false false false false false }" interface=lxc28740b9d7943 k8sPodName=openstack/keystone-fernet-setup-kx5pk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1b320f6f32 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=59 ipv4=10.0.0.101 ipv6= k8sPodName=openstack/keystone-fernet-setup-kx5pk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1b320f6f32 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=59 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=e9fbfb24-f316-40ba-91fb-81585ba6494d,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=e9fbfb24-f316-40ba-91fb-81585ba6494d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.101 ipv6= k8sPodName=openstack/keystone-fernet-setup-kx5pk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=e9fbfb24-f316-40ba-91fb-81585ba6494d;k8s:batch.kubernetes.io/job-name=keystone-fernet-setup;k8s:component=fernet-setup;k8s:controller-uid=e9fbfb24-f316-40ba-91fb-81585ba6494d;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-fernet-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=1b320f6f32 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=59 identity=11944 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=e9fbfb24-f316-40ba-91fb-81585ba6494d,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=e9fbfb24-f316-40ba-91fb-81585ba6494d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.101 ipv6= k8sPodName=openstack/keystone-fernet-setup-kx5pk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1b320f6f32 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=59 identity=11944 ipv4=10.0.0.101 ipv6= k8sPodName=openstack/keystone-fernet-setup-kx5pk subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1b320f6f32 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=59 identity=11944 ipv4=10.0.0.101 ipv6= k8sPodName=openstack/keystone-fernet-setup-kx5pk subsys=endpoint level=info msg="Successful endpoint creation" containerID=1b320f6f32 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=59 identity=11944 ipv4=10.0.0.101 ipv6= k8sPodName=openstack/keystone-fernet-setup-kx5pk subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=1b320f6f32 endpointID=59 k8sNamespace=openstack k8sPodName=keystone-fernet-setup-kx5pk subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=e9fbfb24-f316-40ba-91fb-81585ba6494d k8s:batch.kubernetes.io/job-name=keystone-fernet-setup k8s:component=fernet-setup k8s:controller-uid=e9fbfb24-f316-40ba-91fb-81585ba6494d k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-fernet-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=1b320f6f32 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=59 identity=11944 ipv4=10.0.0.101 ipv6= k8sPodName=openstack/keystone-fernet-setup-kx5pk subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.235 96b36568-7b80-4da3-8a68-c77e133add49 default }" containerID=ee5d96c9586ba772fef24971290f48ed087b2c8814a629dda72a2f8541b35c66 datapathConfiguration="&{false false false false false }" interface=lxc4dc42b52407e k8sPodName=openstack/keystone-db-sync-6kflg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ee5d96c958 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=339 ipv4=10.0.0.235 ipv6= k8sPodName=openstack/keystone-db-sync-6kflg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ee5d96c958 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=339 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=0752138d-59f3-48e6-84c0-d1f1b89dce6b,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=0752138d-59f3-48e6-84c0-d1f1b89dce6b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.235 ipv6= k8sPodName=openstack/keystone-db-sync-6kflg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=ee5d96c958 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=339 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.235 ipv6= k8sPodName=openstack/keystone-db-sync-6kflg line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=0752138d-59f3-48e6-84c0-d1f1b89dce6b;k8s:batch.kubernetes.io/job-name=keystone-db-sync;k8s:component=db-sync;k8s:controller-uid=0752138d-59f3-48e6-84c0-d1f1b89dce6b;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-sync;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ee5d96c958 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=339 identity=44452 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=0752138d-59f3-48e6-84c0-d1f1b89dce6b,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=0752138d-59f3-48e6-84c0-d1f1b89dce6b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.235 ipv6= k8sPodName=openstack/keystone-db-sync-6kflg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ee5d96c958 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=339 identity=44452 ipv4=10.0.0.235 ipv6= k8sPodName=openstack/keystone-db-sync-6kflg subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ee5d96c958 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=339 identity=44452 ipv4=10.0.0.235 ipv6= k8sPodName=openstack/keystone-db-sync-6kflg subsys=endpoint level=info msg="Successful endpoint creation" containerID=ee5d96c958 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=339 identity=44452 ipv4=10.0.0.235 ipv6= k8sPodName=openstack/keystone-db-sync-6kflg subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=ee5d96c958 endpointID=339 k8sNamespace=openstack k8sPodName=keystone-db-sync-6kflg subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=0752138d-59f3-48e6-84c0-d1f1b89dce6b k8s:batch.kubernetes.io/job-name=keystone-db-sync k8s:component=db-sync k8s:controller-uid=0752138d-59f3-48e6-84c0-d1f1b89dce6b k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-sync k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=ee5d96c958 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=339 identity=44452 ipv4=10.0.0.235 ipv6= k8sPodName=openstack/keystone-db-sync-6kflg subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.221 21fc71bb-bc95-415e-85b7-25c276f835bd default }" containerID=3c9d4ca97d11061920852dab96dd43341aa1ae44711244cdae2144b3834bc502 datapathConfiguration="&{false false false false false }" interface=lxc6d989b284276 k8sPodName=openstack/keystone-rabbit-init-cz68m labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3c9d4ca97d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=435 ipv4=10.0.0.221 ipv6= k8sPodName=openstack/keystone-rabbit-init-cz68m subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3c9d4ca97d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=435 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=59dad09f-a4b4-4b74-bd46-1f4c1ccdc267,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=59dad09f-a4b4-4b74-bd46-1f4c1ccdc267,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.221 ipv6= k8sPodName=openstack/keystone-rabbit-init-cz68m subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=3c9d4ca97d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=435 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.221 ipv6= k8sPodName=openstack/keystone-rabbit-init-cz68m line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=59dad09f-a4b4-4b74-bd46-1f4c1ccdc267;k8s:batch.kubernetes.io/job-name=keystone-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=59dad09f-a4b4-4b74-bd46-1f4c1ccdc267;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-rabbit-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3c9d4ca97d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=435 identity=37358 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=59dad09f-a4b4-4b74-bd46-1f4c1ccdc267,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=59dad09f-a4b4-4b74-bd46-1f4c1ccdc267,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.221 ipv6= k8sPodName=openstack/keystone-rabbit-init-cz68m oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3c9d4ca97d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=435 identity=37358 ipv4=10.0.0.221 ipv6= k8sPodName=openstack/keystone-rabbit-init-cz68m subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3c9d4ca97d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=435 identity=37358 ipv4=10.0.0.221 ipv6= k8sPodName=openstack/keystone-rabbit-init-cz68m subsys=endpoint level=info msg="Successful endpoint creation" containerID=3c9d4ca97d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=435 identity=37358 ipv4=10.0.0.221 ipv6= k8sPodName=openstack/keystone-rabbit-init-cz68m subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=3c9d4ca97d endpointID=435 k8sNamespace=openstack k8sPodName=keystone-rabbit-init-cz68m subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=59dad09f-a4b4-4b74-bd46-1f4c1ccdc267 k8s:batch.kubernetes.io/job-name=keystone-rabbit-init k8s:component=rabbit-init k8s:controller-uid=59dad09f-a4b4-4b74-bd46-1f4c1ccdc267 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-rabbit-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=3c9d4ca97d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=435 identity=37358 ipv4=10.0.0.221 ipv6= k8sPodName=openstack/keystone-rabbit-init-cz68m subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.207 4616d815-0aaa-41f0-905c-7b8a6ee54db7 default }" containerID=83abd833d8b138a701f978179757eea8a4799e686e1d82c3011f74d0ce4fafe8 datapathConfiguration="&{false false false false false }" interface=lxcedc1ab75f108 k8sPodName=openstack/keystone-domain-manage-s4cfc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=83abd833d8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=348 ipv4=10.0.0.207 ipv6= k8sPodName=openstack/keystone-domain-manage-s4cfc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=83abd833d8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=348 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=65a23976-4c33-4e0f-8bd6-1d75483a3015,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=65a23976-4c33-4e0f-8bd6-1d75483a3015,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.207 ipv6= k8sPodName=openstack/keystone-domain-manage-s4cfc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=83abd833d8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=348 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.207 ipv6= k8sPodName=openstack/keystone-domain-manage-s4cfc line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=65a23976-4c33-4e0f-8bd6-1d75483a3015;k8s:batch.kubernetes.io/job-name=keystone-domain-manage;k8s:component=domain-manage;k8s:controller-uid=65a23976-4c33-4e0f-8bd6-1d75483a3015;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-domain-manage;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=83abd833d8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=348 identity=29765 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=65a23976-4c33-4e0f-8bd6-1d75483a3015,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=65a23976-4c33-4e0f-8bd6-1d75483a3015,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.207 ipv6= k8sPodName=openstack/keystone-domain-manage-s4cfc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=83abd833d8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=348 identity=29765 ipv4=10.0.0.207 ipv6= k8sPodName=openstack/keystone-domain-manage-s4cfc subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=83abd833d8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=348 identity=29765 ipv4=10.0.0.207 ipv6= k8sPodName=openstack/keystone-domain-manage-s4cfc subsys=endpoint level=info msg="Successful endpoint creation" containerID=83abd833d8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=348 identity=29765 ipv4=10.0.0.207 ipv6= k8sPodName=openstack/keystone-domain-manage-s4cfc subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=83abd833d8 endpointID=348 k8sNamespace=openstack k8sPodName=keystone-domain-manage-s4cfc subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=65a23976-4c33-4e0f-8bd6-1d75483a3015 k8s:batch.kubernetes.io/job-name=keystone-domain-manage k8s:component=domain-manage k8s:controller-uid=65a23976-4c33-4e0f-8bd6-1d75483a3015 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-domain-manage k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=83abd833d8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=348 identity=29765 ipv4=10.0.0.207 ipv6= k8sPodName=openstack/keystone-domain-manage-s4cfc subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.228 94e7db6e-82dd-486b-8f56-cc408d5e7fe9 default }" containerID=5db13aaec75545287a798f65faceb58777c67ba05cb192957edecae73530e81c datapathConfiguration="&{false false false false false }" interface=lxc1941f5f50c2c k8sPodName=openstack/keystone-bootstrap-vl48t labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5db13aaec7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2973 ipv4=10.0.0.228 ipv6= k8sPodName=openstack/keystone-bootstrap-vl48t subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5db13aaec7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2973 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=eff140ce-9bdf-4afc-b479-712d1360cd11,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=eff140ce-9bdf-4afc-b479-712d1360cd11,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.228 ipv6= k8sPodName=openstack/keystone-bootstrap-vl48t subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=eff140ce-9bdf-4afc-b479-712d1360cd11;k8s:batch.kubernetes.io/job-name=keystone-bootstrap;k8s:component=bootstrap;k8s:controller-uid=eff140ce-9bdf-4afc-b479-712d1360cd11;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-bootstrap;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5db13aaec7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2973 identity=626 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=eff140ce-9bdf-4afc-b479-712d1360cd11,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=eff140ce-9bdf-4afc-b479-712d1360cd11,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.228 ipv6= k8sPodName=openstack/keystone-bootstrap-vl48t oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=5db13aaec7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2973 identity=626 ipv4=10.0.0.228 ipv6= k8sPodName=openstack/keystone-bootstrap-vl48t subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5db13aaec7 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2973 identity=626 ipv4=10.0.0.228 ipv6= k8sPodName=openstack/keystone-bootstrap-vl48t subsys=endpoint level=info msg="Successful endpoint creation" containerID=5db13aaec7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2973 identity=626 ipv4=10.0.0.228 ipv6= k8sPodName=openstack/keystone-bootstrap-vl48t subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=5db13aaec7 endpointID=2973 k8sNamespace=openstack k8sPodName=keystone-bootstrap-vl48t subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=eff140ce-9bdf-4afc-b479-712d1360cd11 k8s:batch.kubernetes.io/job-name=keystone-bootstrap k8s:component=bootstrap k8s:controller-uid=eff140ce-9bdf-4afc-b479-712d1360cd11 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-bootstrap k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=5db13aaec7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2973 identity=626 ipv4=10.0.0.228 ipv6= k8sPodName=openstack/keystone-bootstrap-vl48t subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.134 07ae7ce2-86b4-40c1-be56-975f97cf92a3 default }" containerID=f4372816f42114c8778031a92c688ac4017fc5a758a77199f283b7cbbb8bbd4f datapathConfiguration="&{false false false false false }" interface=lxcba1971a2ce00 k8sPodName=local-path-storage/helper-pod-create-pvc-951576c0-866e-45fb-9e3e-9cb515c694d3 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f4372816f4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=397 ipv4=10.0.0.134 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-951576c0-866e-45fb-9e3e-9cb515c694d3 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f4372816f4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=397 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.134 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-951576c0-866e-45fb-9e3e-9cb515c694d3 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f4372816f4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=397 identity=9115 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.134 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-951576c0-866e-45fb-9e3e-9cb515c694d3 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f4372816f4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=397 identity=9115 ipv4=10.0.0.134 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-951576c0-866e-45fb-9e3e-9cb515c694d3 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f4372816f4 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=397 identity=9115 ipv4=10.0.0.134 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-951576c0-866e-45fb-9e3e-9cb515c694d3 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f4372816f4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=397 identity=9115 ipv4=10.0.0.134 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-951576c0-866e-45fb-9e3e-9cb515c694d3 subsys=daemon level=info msg="Delete endpoint request" containerID=f4372816f4 endpointID=397 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-951576c0-866e-45fb-9e3e-9cb515c694d3 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=f4372816f4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=397 identity=9115 ipv4=10.0.0.134 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-951576c0-866e-45fb-9e3e-9cb515c694d3 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.39 7eda74a4-aee1-4459-8718-134e7705ac02 default }" containerID=eb599d101f6170ad62761e28cbee3fad62eb2a67347f6abf78efbdf8b703cabc datapathConfiguration="&{false false false false false }" interface=lxc55d8488f7112 k8sPodName=openstack/rabbitmq-barbican-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=eb599d101f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3003 ipv4=10.0.0.39 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=eb599d101f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3003 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.39 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=eb599d101f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3003 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.39 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-barbican;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=eb599d101f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3003 identity=58042 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.39 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=eb599d101f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3003 identity=58042 ipv4=10.0.0.39 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=eb599d101f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3003 identity=58042 ipv4=10.0.0.39 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=eb599d101f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3003 identity=58042 ipv4=10.0.0.39 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.03450701367565301 newInterval=11m15s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.224 0ae6bb89-9cbe-4777-8b62-67f69c307f94 default }" containerID=dfdf414555a2b0d73d9f5dda0544153d455f20f951551666e218ea0138a8429a datapathConfiguration="&{false false false false false }" interface=lxc8afb389f772f k8sPodName=openstack/barbican-api-55c8955c6b-2jkgz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=dfdf414555 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=260 ipv4=10.0.0.224 ipv6= k8sPodName=openstack/barbican-api-55c8955c6b-2jkgz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=dfdf414555 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=260 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.224 ipv6= k8sPodName=openstack/barbican-api-55c8955c6b-2jkgz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=dfdf414555 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=260 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.224 ipv6= k8sPodName=openstack/barbican-api-55c8955c6b-2jkgz line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=dfdf414555 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=260 identity=58169 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.224 ipv6= k8sPodName=openstack/barbican-api-55c8955c6b-2jkgz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=dfdf414555 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=260 identity=58169 ipv4=10.0.0.224 ipv6= k8sPodName=openstack/barbican-api-55c8955c6b-2jkgz subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=dfdf414555 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=260 identity=58169 ipv4=10.0.0.224 ipv6= k8sPodName=openstack/barbican-api-55c8955c6b-2jkgz subsys=endpoint level=info msg="Successful endpoint creation" containerID=dfdf414555 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=260 identity=58169 ipv4=10.0.0.224 ipv6= k8sPodName=openstack/barbican-api-55c8955c6b-2jkgz subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.4 ec2a8aa9-add7-4ab5-a874-5ee55989eb3f default }" containerID=5281ea8e462abafbe1b58189531887bfa64f6dd7a1e1d820ec7ce0a1e4ffb16c datapathConfiguration="&{false false false false false }" interface=lxc6a6e902356ea k8sPodName=openstack/barbican-db-init-tfwqz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5281ea8e46 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1999 ipv4=10.0.0.4 ipv6= k8sPodName=openstack/barbican-db-init-tfwqz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5281ea8e46 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1999 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=59a28700-b243-41f6-bafe-63e17a62a6ed,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=59a28700-b243-41f6-bafe-63e17a62a6ed,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.4 ipv6= k8sPodName=openstack/barbican-db-init-tfwqz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=59a28700-b243-41f6-bafe-63e17a62a6ed;k8s:batch.kubernetes.io/job-name=barbican-db-init;k8s:component=db-init;k8s:controller-uid=59a28700-b243-41f6-bafe-63e17a62a6ed;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5281ea8e46 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1999 identity=30992 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=59a28700-b243-41f6-bafe-63e17a62a6ed,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=59a28700-b243-41f6-bafe-63e17a62a6ed,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.4 ipv6= k8sPodName=openstack/barbican-db-init-tfwqz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5281ea8e46 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1999 identity=30992 ipv4=10.0.0.4 ipv6= k8sPodName=openstack/barbican-db-init-tfwqz subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5281ea8e46 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1999 identity=30992 ipv4=10.0.0.4 ipv6= k8sPodName=openstack/barbican-db-init-tfwqz subsys=endpoint level=info msg="Successful endpoint creation" containerID=5281ea8e46 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1999 identity=30992 ipv4=10.0.0.4 ipv6= k8sPodName=openstack/barbican-db-init-tfwqz subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=5281ea8e46 endpointID=1999 k8sNamespace=openstack k8sPodName=barbican-db-init-tfwqz subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=59a28700-b243-41f6-bafe-63e17a62a6ed k8s:batch.kubernetes.io/job-name=barbican-db-init k8s:component=db-init k8s:controller-uid=59a28700-b243-41f6-bafe-63e17a62a6ed k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=5281ea8e46 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1999 identity=30992 ipv4=10.0.0.4 ipv6= k8sPodName=openstack/barbican-db-init-tfwqz subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.118 ad3b50a5-eb8b-44dd-acff-9ee563a3bc3a default }" containerID=d96706448af2941ec1a86db9a6e5768ef0fc9e8e884dbcb33da0dc74ef117511 datapathConfiguration="&{false false false false false }" interface=lxc84bdd6ab6625 k8sPodName=openstack/barbican-db-sync-58k52 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d96706448a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=782 ipv4=10.0.0.118 ipv6= k8sPodName=openstack/barbican-db-sync-58k52 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d96706448a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=782 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=8c1f6356-94ce-4ff4-84c7-12614a2aa5b1,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=8c1f6356-94ce-4ff4-84c7-12614a2aa5b1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.118 ipv6= k8sPodName=openstack/barbican-db-sync-58k52 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=d96706448a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=782 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.118 ipv6= k8sPodName=openstack/barbican-db-sync-58k52 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=8c1f6356-94ce-4ff4-84c7-12614a2aa5b1;k8s:batch.kubernetes.io/job-name=barbican-db-sync;k8s:component=db-sync;k8s:controller-uid=8c1f6356-94ce-4ff4-84c7-12614a2aa5b1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-sync;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d96706448a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=782 identity=40980 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=8c1f6356-94ce-4ff4-84c7-12614a2aa5b1,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=8c1f6356-94ce-4ff4-84c7-12614a2aa5b1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.118 ipv6= k8sPodName=openstack/barbican-db-sync-58k52 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d96706448a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=782 identity=40980 ipv4=10.0.0.118 ipv6= k8sPodName=openstack/barbican-db-sync-58k52 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d96706448a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=782 identity=40980 ipv4=10.0.0.118 ipv6= k8sPodName=openstack/barbican-db-sync-58k52 subsys=endpoint level=info msg="Successful endpoint creation" containerID=d96706448a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=782 identity=40980 ipv4=10.0.0.118 ipv6= k8sPodName=openstack/barbican-db-sync-58k52 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=d96706448a endpointID=782 k8sNamespace=openstack k8sPodName=barbican-db-sync-58k52 subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=8c1f6356-94ce-4ff4-84c7-12614a2aa5b1 k8s:batch.kubernetes.io/job-name=barbican-db-sync k8s:component=db-sync k8s:controller-uid=8c1f6356-94ce-4ff4-84c7-12614a2aa5b1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-sync k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=d96706448a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=782 identity=40980 ipv4=10.0.0.118 ipv6= k8sPodName=openstack/barbican-db-sync-58k52 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.173 2c8d6033-e925-4a89-b01f-b31c650715b9 default }" containerID=627f5bc6af94de2e80de8da555743378036ecead816fa89db1c2512c1bd9f1bc datapathConfiguration="&{false false false false false }" interface=lxccfe202b18731 k8sPodName=openstack/barbican-rabbit-init-mq96z labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=627f5bc6af datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3919 ipv4=10.0.0.173 ipv6= k8sPodName=openstack/barbican-rabbit-init-mq96z subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=627f5bc6af datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3919 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=78ebf0c9-1cd8-4ac8-87e9-2345fa8265fb,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=78ebf0c9-1cd8-4ac8-87e9-2345fa8265fb,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.173 ipv6= k8sPodName=openstack/barbican-rabbit-init-mq96z subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=78ebf0c9-1cd8-4ac8-87e9-2345fa8265fb;k8s:batch.kubernetes.io/job-name=barbican-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=78ebf0c9-1cd8-4ac8-87e9-2345fa8265fb;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-rabbit-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=627f5bc6af datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3919 identity=55207 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=78ebf0c9-1cd8-4ac8-87e9-2345fa8265fb,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=78ebf0c9-1cd8-4ac8-87e9-2345fa8265fb,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.173 ipv6= k8sPodName=openstack/barbican-rabbit-init-mq96z oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=627f5bc6af datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3919 identity=55207 ipv4=10.0.0.173 ipv6= k8sPodName=openstack/barbican-rabbit-init-mq96z subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=627f5bc6af datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3919 identity=55207 ipv4=10.0.0.173 ipv6= k8sPodName=openstack/barbican-rabbit-init-mq96z subsys=endpoint level=info msg="Successful endpoint creation" containerID=627f5bc6af datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3919 identity=55207 ipv4=10.0.0.173 ipv6= k8sPodName=openstack/barbican-rabbit-init-mq96z subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=627f5bc6af endpointID=3919 k8sNamespace=openstack k8sPodName=barbican-rabbit-init-mq96z subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=78ebf0c9-1cd8-4ac8-87e9-2345fa8265fb k8s:batch.kubernetes.io/job-name=barbican-rabbit-init k8s:component=rabbit-init k8s:controller-uid=78ebf0c9-1cd8-4ac8-87e9-2345fa8265fb k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-rabbit-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=627f5bc6af datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3919 identity=55207 ipv4=10.0.0.173 ipv6= k8sPodName=openstack/barbican-rabbit-init-mq96z subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.55 9f8f6a2f-46d7-458a-aaed-d8990e0d22fd default }" containerID=feab80586d1de725e85a8d6a0fbb8310282a178861c6cd334885f6d92ded89d4 datapathConfiguration="&{false false false false false }" interface=lxc00dc17a7b3cb k8sPodName=openstack/barbican-ks-service-8z688 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=feab80586d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1386 ipv4=10.0.0.55 ipv6= k8sPodName=openstack/barbican-ks-service-8z688 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=feab80586d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1386 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=9a46b8c7-cae1-44e1-9d1c-6358617afd29,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=9a46b8c7-cae1-44e1-9d1c-6358617afd29,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.55 ipv6= k8sPodName=openstack/barbican-ks-service-8z688 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=9a46b8c7-cae1-44e1-9d1c-6358617afd29;k8s:batch.kubernetes.io/job-name=barbican-ks-service;k8s:component=ks-service;k8s:controller-uid=9a46b8c7-cae1-44e1-9d1c-6358617afd29;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-service;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=feab80586d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1386 identity=23855 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=9a46b8c7-cae1-44e1-9d1c-6358617afd29,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=9a46b8c7-cae1-44e1-9d1c-6358617afd29,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.55 ipv6= k8sPodName=openstack/barbican-ks-service-8z688 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=feab80586d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1386 identity=23855 ipv4=10.0.0.55 ipv6= k8sPodName=openstack/barbican-ks-service-8z688 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=feab80586d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1386 identity=23855 ipv4=10.0.0.55 ipv6= k8sPodName=openstack/barbican-ks-service-8z688 subsys=endpoint level=info msg="Successful endpoint creation" containerID=feab80586d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1386 identity=23855 ipv4=10.0.0.55 ipv6= k8sPodName=openstack/barbican-ks-service-8z688 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=feab80586d endpointID=1386 k8sNamespace=openstack k8sPodName=barbican-ks-service-8z688 subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=9a46b8c7-cae1-44e1-9d1c-6358617afd29 k8s:batch.kubernetes.io/job-name=barbican-ks-service k8s:component=ks-service k8s:controller-uid=9a46b8c7-cae1-44e1-9d1c-6358617afd29 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-service k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=feab80586d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1386 identity=23855 ipv4=10.0.0.55 ipv6= k8sPodName=openstack/barbican-ks-service-8z688 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.19 97e481fe-e6ae-4548-81cb-212af4a1562c default }" containerID=9b9416cc4619ed71c2405caf21a9ab247d3cf893844899bb989521e144b100a2 datapathConfiguration="&{false false false false false }" interface=lxcac9350107be6 k8sPodName=openstack/barbican-ks-endpoints-9lwst labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9b9416cc46 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=421 ipv4=10.0.0.19 ipv6= k8sPodName=openstack/barbican-ks-endpoints-9lwst subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9b9416cc46 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=421 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=e1d03172-28c8-45d0-b7e0-0f07a93feb4a,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=e1d03172-28c8-45d0-b7e0-0f07a93feb4a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.19 ipv6= k8sPodName=openstack/barbican-ks-endpoints-9lwst subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=e1d03172-28c8-45d0-b7e0-0f07a93feb4a;k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=e1d03172-28c8-45d0-b7e0-0f07a93feb4a;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-endpoints;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9b9416cc46 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=421 identity=23477 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=e1d03172-28c8-45d0-b7e0-0f07a93feb4a,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=e1d03172-28c8-45d0-b7e0-0f07a93feb4a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.19 ipv6= k8sPodName=openstack/barbican-ks-endpoints-9lwst oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9b9416cc46 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=421 identity=23477 ipv4=10.0.0.19 ipv6= k8sPodName=openstack/barbican-ks-endpoints-9lwst subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=9b9416cc46 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=421 identity=23477 ipv4=10.0.0.19 ipv6= k8sPodName=openstack/barbican-ks-endpoints-9lwst subsys=endpoint level=info msg="Successful endpoint creation" containerID=9b9416cc46 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=421 identity=23477 ipv4=10.0.0.19 ipv6= k8sPodName=openstack/barbican-ks-endpoints-9lwst subsys=daemon level=info msg="Delete endpoint request" containerID=9b9416cc46 endpointID=421 k8sNamespace=openstack k8sPodName=barbican-ks-endpoints-9lwst subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=e1d03172-28c8-45d0-b7e0-0f07a93feb4a k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=e1d03172-28c8-45d0-b7e0-0f07a93feb4a k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-endpoints k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=9b9416cc46 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=421 identity=23477 ipv4=10.0.0.19 ipv6= k8sPodName=openstack/barbican-ks-endpoints-9lwst subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.43 0cd89607-eac0-425f-839c-41bf498ca276 default }" containerID=f82da3fd0f01bbbe30fecb74ab00b229f0742489f7cb429fb421c9e6b74938c0 datapathConfiguration="&{false false false false false }" interface=lxc3b6fe4a41402 k8sPodName=openstack/barbican-ks-user-jrt7c labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f82da3fd0f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1581 ipv4=10.0.0.43 ipv6= k8sPodName=openstack/barbican-ks-user-jrt7c subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f82da3fd0f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1581 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=498e99d4-8465-40bc-b61c-5670f40a2119,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=498e99d4-8465-40bc-b61c-5670f40a2119,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.43 ipv6= k8sPodName=openstack/barbican-ks-user-jrt7c subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=498e99d4-8465-40bc-b61c-5670f40a2119;k8s:batch.kubernetes.io/job-name=barbican-ks-user;k8s:component=ks-user;k8s:controller-uid=498e99d4-8465-40bc-b61c-5670f40a2119;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-user;k8s:release_group=barbican;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=f82da3fd0f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1581 identity=8134 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=498e99d4-8465-40bc-b61c-5670f40a2119,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=498e99d4-8465-40bc-b61c-5670f40a2119,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.43 ipv6= k8sPodName=openstack/barbican-ks-user-jrt7c oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f82da3fd0f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1581 identity=8134 ipv4=10.0.0.43 ipv6= k8sPodName=openstack/barbican-ks-user-jrt7c subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f82da3fd0f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1581 identity=8134 ipv4=10.0.0.43 ipv6= k8sPodName=openstack/barbican-ks-user-jrt7c subsys=endpoint level=info msg="Successful endpoint creation" containerID=f82da3fd0f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1581 identity=8134 ipv4=10.0.0.43 ipv6= k8sPodName=openstack/barbican-ks-user-jrt7c subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=f82da3fd0f endpointID=1581 k8sNamespace=openstack k8sPodName=barbican-ks-user-jrt7c subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=498e99d4-8465-40bc-b61c-5670f40a2119 k8s:batch.kubernetes.io/job-name=barbican-ks-user k8s:component=ks-user k8s:controller-uid=498e99d4-8465-40bc-b61c-5670f40a2119 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-user k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=f82da3fd0f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1581 identity=8134 ipv4=10.0.0.43 ipv6= k8sPodName=openstack/barbican-ks-user-jrt7c subsys=endpoint level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Create endpoint request" addressing="&{10.0.0.105 5779c851-3f49-4081-8812-7962d3739cc3 default }" containerID=a633562e9cafce0e532d9d796e1a374e285b7b142acd06eb810db2dd4cb4b772 datapathConfiguration="&{false false false false false }" interface=lxcc01549a11c54 k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-qbk4d labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a633562e9c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2500 ipv4=10.0.0.105 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-qbk4d subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a633562e9c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2500 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.15.9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.105 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-qbk4d subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:rook-ceph k8s:io.cilium.k8s.namespace.labels.name:rook-ceph]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-operator;k8s:helm.sh/chart=rook-ceph-v1.15.9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph;k8s:io.cilium.k8s.namespace.labels.name=rook-ceph;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system;k8s:io.kubernetes.pod.namespace=rook-ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a633562e9c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2500 identity=8984 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.15.9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.105 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-qbk4d oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a633562e9c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2500 identity=8984 ipv4=10.0.0.105 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-qbk4d subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=a633562e9c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2500 identity=8984 ipv4=10.0.0.105 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-qbk4d subsys=endpoint level=info msg="Successful endpoint creation" containerID=a633562e9c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2500 identity=8984 ipv4=10.0.0.105 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-qbk4d subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.70 9d8eb72e-c46f-4d77-9920-ff09bf57f54a default }" containerID=1e5907babc01c70360f009d5047a23194354a24aa7335be2ed56f343cf477aba datapathConfiguration="&{false false false false false }" interface=lxc31534b22139c k8sPodName=openstack/rook-ceph-detect-version-scbtg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1e5907babc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=639 ipv4=10.0.0.70 ipv6= k8sPodName=openstack/rook-ceph-detect-version-scbtg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1e5907babc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=639 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=add521e4-a8f3-440c-aa06-dd4c5c0be416,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=add521e4-a8f3-440c-aa06-dd4c5c0be416,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.70 ipv6= k8sPodName=openstack/rook-ceph-detect-version-scbtg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app=rook-ceph-detect-version;k8s:batch.kubernetes.io/controller-uid=add521e4-a8f3-440c-aa06-dd4c5c0be416;k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version;k8s:controller-uid=add521e4-a8f3-440c-aa06-dd4c5c0be416;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=rook-ceph-detect-version;k8s:rook-version=v1.15.9;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=1e5907babc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=639 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.70 ipv6= k8sPodName=openstack/rook-ceph-detect-version-scbtg line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=1e5907babc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=639 identity=3024 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=add521e4-a8f3-440c-aa06-dd4c5c0be416,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=add521e4-a8f3-440c-aa06-dd4c5c0be416,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.70 ipv6= k8sPodName=openstack/rook-ceph-detect-version-scbtg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1e5907babc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=639 identity=3024 ipv4=10.0.0.70 ipv6= k8sPodName=openstack/rook-ceph-detect-version-scbtg subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1e5907babc datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=639 identity=3024 ipv4=10.0.0.70 ipv6= k8sPodName=openstack/rook-ceph-detect-version-scbtg subsys=endpoint level=info msg="Successful endpoint creation" containerID=1e5907babc datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=639 identity=3024 ipv4=10.0.0.70 ipv6= k8sPodName=openstack/rook-ceph-detect-version-scbtg subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=1e5907babc endpointID=639 k8sNamespace=openstack k8sPodName=rook-ceph-detect-version-scbtg subsys=daemon level=info msg="Releasing key" key="[k8s:app=rook-ceph-detect-version k8s:batch.kubernetes.io/controller-uid=add521e4-a8f3-440c-aa06-dd4c5c0be416 k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version k8s:controller-uid=add521e4-a8f3-440c-aa06-dd4c5c0be416 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=rook-ceph-detect-version k8s:rook-version=v1.15.9]" subsys=allocator level=info msg="Removed endpoint" containerID=1e5907babc datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=639 identity=3024 ipv4=10.0.0.70 ipv6= k8sPodName=openstack/rook-ceph-detect-version-scbtg subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.242 c133733d-da4f-4dfa-a60b-2dd714ddee47 default }" containerID=9dfc941f3bdef1110bd76539043783e8c9bf9b4c506e42cbcb3aae70dd20f6c0 datapathConfiguration="&{false false false false false }" interface=lxcf545a22b9979 k8sPodName=openstack/ceph-object-controller-detect-version-scwtw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9dfc941f3b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3159 ipv4=10.0.0.242 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-scwtw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9dfc941f3b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3159 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=ea711f8b-5437-4a88-95ae-6e696d62403f,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=ea711f8b-5437-4a88-95ae-6e696d62403f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.242 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-scwtw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=ceph-object-controller-detect-version;k8s:batch.kubernetes.io/controller-uid=ea711f8b-5437-4a88-95ae-6e696d62403f;k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version;k8s:controller-uid=ea711f8b-5437-4a88-95ae-6e696d62403f;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=ceph-object-controller-detect-version;k8s:rook-version=v1.15.9;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9dfc941f3b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3159 identity=12588 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=ea711f8b-5437-4a88-95ae-6e696d62403f,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=ea711f8b-5437-4a88-95ae-6e696d62403f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.242 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-scwtw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9dfc941f3b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3159 identity=12588 ipv4=10.0.0.242 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-scwtw subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=9dfc941f3b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3159 identity=12588 ipv4=10.0.0.242 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-scwtw subsys=endpoint level=info msg="Successful endpoint creation" containerID=9dfc941f3b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3159 identity=12588 ipv4=10.0.0.242 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-scwtw subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=9dfc941f3b endpointID=3159 k8sNamespace=openstack k8sPodName=ceph-object-controller-detect-version-scwtw subsys=daemon level=info msg="Releasing key" key="[k8s:app=ceph-object-controller-detect-version k8s:batch.kubernetes.io/controller-uid=ea711f8b-5437-4a88-95ae-6e696d62403f k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version k8s:controller-uid=ea711f8b-5437-4a88-95ae-6e696d62403f k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=ceph-object-controller-detect-version k8s:rook-version=v1.15.9]" subsys=allocator level=info msg="Removed endpoint" containerID=9dfc941f3b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3159 identity=12588 ipv4=10.0.0.242 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-scwtw subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.87 d01d90dd-8e44-46e9-9f41-7cf7bc5023e3 default }" containerID=b047e0a021c2ba94592a3e52f11b5e0e7cfee770d6d97d36940d32fb4e65518e datapathConfiguration="&{false false false false false }" interface=lxccb3977676b11 k8sPodName=local-path-storage/helper-pod-create-pvc-28327a7f-ad89-4739-bf91-8731ac5fd113 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b047e0a021 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2768 ipv4=10.0.0.87 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-28327a7f-ad89-4739-bf91-8731ac5fd113 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b047e0a021 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2768 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.87 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-28327a7f-ad89-4739-bf91-8731ac5fd113 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b047e0a021 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2768 identity=9115 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.87 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-28327a7f-ad89-4739-bf91-8731ac5fd113 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b047e0a021 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2768 identity=9115 ipv4=10.0.0.87 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-28327a7f-ad89-4739-bf91-8731ac5fd113 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b047e0a021 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2768 identity=9115 ipv4=10.0.0.87 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-28327a7f-ad89-4739-bf91-8731ac5fd113 subsys=endpoint level=info msg="Successful endpoint creation" containerID=b047e0a021 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2768 identity=9115 ipv4=10.0.0.87 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-28327a7f-ad89-4739-bf91-8731ac5fd113 subsys=daemon level=info msg="Delete endpoint request" containerID=b047e0a021 endpointID=2768 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-28327a7f-ad89-4739-bf91-8731ac5fd113 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=b047e0a021 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2768 identity=9115 ipv4=10.0.0.87 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-28327a7f-ad89-4739-bf91-8731ac5fd113 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.83 b1727efa-f859-4003-b738-c3c0b31e4c58 default }" containerID=3c3bd1f6eae38fd23a44776eb17fecd77bd8bf5f4e8d39296d4d61e536cbdefb datapathConfiguration="&{false false false false false }" interface=lxc34561d4ff9c1 k8sPodName=openstack/rabbitmq-glance-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3c3bd1f6ea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=266 ipv4=10.0.0.83 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3c3bd1f6ea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=266 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.83 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=3c3bd1f6ea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=266 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.83 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-glance;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3c3bd1f6ea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=266 identity=43456 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.83 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3c3bd1f6ea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=266 identity=43456 ipv4=10.0.0.83 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3c3bd1f6ea datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=266 identity=43456 ipv4=10.0.0.83 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=3c3bd1f6ea datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=266 identity=43456 ipv4=10.0.0.83 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.27 cc7ca5db-38d9-427c-ab3e-b3ea9665cb51 default }" containerID=1b75cc45579f1db2f5b91ed6fc08ffbc835572c1adb2b1b2d0517e73aa16f16a datapathConfiguration="&{false false false false false }" interface=lxc7311833aff02 k8sPodName=openstack/glance-db-init-4qr5m labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1b75cc4557 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3999 ipv4=10.0.0.27 ipv6= k8sPodName=openstack/glance-db-init-4qr5m subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1b75cc4557 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3999 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=fc22c09b-f7bc-420b-a7d2-9380fe9d9ebb,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=fc22c09b-f7bc-420b-a7d2-9380fe9d9ebb,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.27 ipv6= k8sPodName=openstack/glance-db-init-4qr5m subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=1b75cc4557 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3999 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.27 ipv6= k8sPodName=openstack/glance-db-init-4qr5m line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=fc22c09b-f7bc-420b-a7d2-9380fe9d9ebb;k8s:batch.kubernetes.io/job-name=glance-db-init;k8s:component=db-init;k8s:controller-uid=fc22c09b-f7bc-420b-a7d2-9380fe9d9ebb;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1b75cc4557 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3999 identity=21245 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=fc22c09b-f7bc-420b-a7d2-9380fe9d9ebb,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=fc22c09b-f7bc-420b-a7d2-9380fe9d9ebb,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.27 ipv6= k8sPodName=openstack/glance-db-init-4qr5m oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1b75cc4557 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3999 identity=21245 ipv4=10.0.0.27 ipv6= k8sPodName=openstack/glance-db-init-4qr5m subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1b75cc4557 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3999 identity=21245 ipv4=10.0.0.27 ipv6= k8sPodName=openstack/glance-db-init-4qr5m subsys=endpoint level=info msg="Successful endpoint creation" containerID=1b75cc4557 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3999 identity=21245 ipv4=10.0.0.27 ipv6= k8sPodName=openstack/glance-db-init-4qr5m subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=1b75cc4557 endpointID=3999 k8sNamespace=openstack k8sPodName=glance-db-init-4qr5m subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=fc22c09b-f7bc-420b-a7d2-9380fe9d9ebb k8s:batch.kubernetes.io/job-name=glance-db-init k8s:component=db-init k8s:controller-uid=fc22c09b-f7bc-420b-a7d2-9380fe9d9ebb k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=1b75cc4557 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3999 identity=21245 ipv4=10.0.0.27 ipv6= k8sPodName=openstack/glance-db-init-4qr5m subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.244 aa919618-3bd2-4eb5-87fe-5a9869af66eb default }" containerID=83cbaeca292801a35200d49d40219edb7f25c2cd62464efc49fb7c4d3667e169 datapathConfiguration="&{false false false false false }" interface=lxca59822b0ac17 k8sPodName=openstack/glance-db-sync-6sn8t labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=83cbaeca29 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1041 ipv4=10.0.0.244 ipv6= k8sPodName=openstack/glance-db-sync-6sn8t subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=83cbaeca29 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1041 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=4796eb0b-6ecd-4a2d-a215-002b6e952a35,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=4796eb0b-6ecd-4a2d-a215-002b6e952a35,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.244 ipv6= k8sPodName=openstack/glance-db-sync-6sn8t subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=83cbaeca29 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1041 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.244 ipv6= k8sPodName=openstack/glance-db-sync-6sn8t line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=4796eb0b-6ecd-4a2d-a215-002b6e952a35;k8s:batch.kubernetes.io/job-name=glance-db-sync;k8s:component=db-sync;k8s:controller-uid=4796eb0b-6ecd-4a2d-a215-002b6e952a35;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-sync;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=83cbaeca29 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1041 identity=65020 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=4796eb0b-6ecd-4a2d-a215-002b6e952a35,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=4796eb0b-6ecd-4a2d-a215-002b6e952a35,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.244 ipv6= k8sPodName=openstack/glance-db-sync-6sn8t oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=83cbaeca29 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1041 identity=65020 ipv4=10.0.0.244 ipv6= k8sPodName=openstack/glance-db-sync-6sn8t subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=83cbaeca29 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1041 identity=65020 ipv4=10.0.0.244 ipv6= k8sPodName=openstack/glance-db-sync-6sn8t subsys=endpoint level=info msg="Successful endpoint creation" containerID=83cbaeca29 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1041 identity=65020 ipv4=10.0.0.244 ipv6= k8sPodName=openstack/glance-db-sync-6sn8t subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.24 3154b65d-e33f-4f94-8e38-2abeda3474c6 default }" containerID=9e18a6ac488808c34170e241d5b3255ed85ef176f50e2e1dac948ff7ba10bec4 datapathConfiguration="&{false false false false false }" interface=lxcb96e6bab075f k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-dzww8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9e18a6ac48 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2147 ipv4=10.0.0.24 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-dzww8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9e18a6ac48 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2147 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.24 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-dzww8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=9e18a6ac48 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2147 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.24 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-dzww8 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=rook-ceph-rgw;k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io;k8s:app.kubernetes.io/created-by=rook-ceph-operator;k8s:app.kubernetes.io/instance=ceph;k8s:app.kubernetes.io/managed-by=rook-ceph-operator;k8s:app.kubernetes.io/name=ceph-rgw;k8s:app.kubernetes.io/part-of=ceph;k8s:ceph_daemon_id=ceph;k8s:ceph_daemon_type=rgw;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw;k8s:io.kubernetes.pod.namespace=openstack;k8s:rgw=ceph;k8s:rook.io/operator-namespace=rook-ceph;k8s:rook_cluster=openstack;k8s:rook_object_store=ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9e18a6ac48 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2147 identity=37411 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.24 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-dzww8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9e18a6ac48 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2147 identity=37411 ipv4=10.0.0.24 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-dzww8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.71 9f8569b6-7961-4c79-b5fe-8e2f7750b1c4 default }" containerID=e66afafcd9fefa25e6cd690f9d1ef1892344a28867b9b8f14c34966327a5da02 datapathConfiguration="&{false false false false false }" interface=lxc2c05040fc1d3 k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-9mm6x labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e66afafcd9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1258 ipv4=10.0.0.71 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-9mm6x subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e66afafcd9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1258 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.71 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-9mm6x subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-crashcollector;k8s:ceph-version=18.2.7-0;k8s:ceph_daemon_id=crash;k8s:crashcollector=crash;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default;k8s:io.kubernetes.pod.namespace=openstack;k8s:node_name=instance;k8s:rook_cluster=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e66afafcd9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1258 identity=37583 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.71 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-9mm6x oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e66afafcd9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1258 identity=37583 ipv4=10.0.0.71 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-9mm6x subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9e18a6ac48 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2147 identity=37411 ipv4=10.0.0.24 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-dzww8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=9e18a6ac48 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2147 identity=37411 ipv4=10.0.0.24 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-dzww8 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=e66afafcd9 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1258 identity=37583 ipv4=10.0.0.71 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-9mm6x subsys=endpoint level=info msg="Successful endpoint creation" containerID=e66afafcd9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1258 identity=37583 ipv4=10.0.0.71 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-9mm6x subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=83cbaeca29 endpointID=1041 k8sNamespace=openstack k8sPodName=glance-db-sync-6sn8t subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=4796eb0b-6ecd-4a2d-a215-002b6e952a35 k8s:batch.kubernetes.io/job-name=glance-db-sync k8s:component=db-sync k8s:controller-uid=4796eb0b-6ecd-4a2d-a215-002b6e952a35 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-sync k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=83cbaeca29 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1041 identity=65020 ipv4=10.0.0.244 ipv6= k8sPodName=openstack/glance-db-sync-6sn8t subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.226 bc7fe60b-f9ea-46f9-b8ae-202434c3a77b default }" containerID=17a5148f3436600fe2966c512b08aa74aed00a5db24844987c6c1441b598c8fb datapathConfiguration="&{false false false false false }" interface=lxc74cea4cef8bf k8sPodName=openstack/glance-rabbit-init-kxfhs labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=17a5148f34 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1279 ipv4=10.0.0.226 ipv6= k8sPodName=openstack/glance-rabbit-init-kxfhs subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=17a5148f34 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1279 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=8752bbf3-cedf-431d-8ee3-f9b2c57d0108,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=8752bbf3-cedf-431d-8ee3-f9b2c57d0108,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.226 ipv6= k8sPodName=openstack/glance-rabbit-init-kxfhs subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=8752bbf3-cedf-431d-8ee3-f9b2c57d0108;k8s:batch.kubernetes.io/job-name=glance-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=8752bbf3-cedf-431d-8ee3-f9b2c57d0108;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-rabbit-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=17a5148f34 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1279 identity=41240 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=8752bbf3-cedf-431d-8ee3-f9b2c57d0108,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=8752bbf3-cedf-431d-8ee3-f9b2c57d0108,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.226 ipv6= k8sPodName=openstack/glance-rabbit-init-kxfhs oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=17a5148f34 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1279 identity=41240 ipv4=10.0.0.226 ipv6= k8sPodName=openstack/glance-rabbit-init-kxfhs subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=17a5148f34 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1279 identity=41240 ipv4=10.0.0.226 ipv6= k8sPodName=openstack/glance-rabbit-init-kxfhs subsys=endpoint level=info msg="Successful endpoint creation" containerID=17a5148f34 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1279 identity=41240 ipv4=10.0.0.226 ipv6= k8sPodName=openstack/glance-rabbit-init-kxfhs subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=17a5148f34 endpointID=1279 k8sNamespace=openstack k8sPodName=glance-rabbit-init-kxfhs subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=8752bbf3-cedf-431d-8ee3-f9b2c57d0108 k8s:batch.kubernetes.io/job-name=glance-rabbit-init k8s:component=rabbit-init k8s:controller-uid=8752bbf3-cedf-431d-8ee3-f9b2c57d0108 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-rabbit-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=17a5148f34 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1279 identity=41240 ipv4=10.0.0.226 ipv6= k8sPodName=openstack/glance-rabbit-init-kxfhs subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.242 b328957e-5106-495e-b06f-6be4f54706df default }" containerID=8c0b5fb4cceb1d5a79104b321087e547e4e3c838863132769449b3041588600d datapathConfiguration="&{false false false false false }" interface=lxcbd53e9ebdbd6 k8sPodName=openstack/glance-ks-service-hwh6v labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8c0b5fb4cc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=155 ipv4=10.0.0.242 ipv6= k8sPodName=openstack/glance-ks-service-hwh6v subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8c0b5fb4cc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=155 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=92e03797-40f2-4f85-aed0-45ce81089518,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=92e03797-40f2-4f85-aed0-45ce81089518,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.242 ipv6= k8sPodName=openstack/glance-ks-service-hwh6v subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=92e03797-40f2-4f85-aed0-45ce81089518;k8s:batch.kubernetes.io/job-name=glance-ks-service;k8s:component=ks-service;k8s:controller-uid=92e03797-40f2-4f85-aed0-45ce81089518;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-service;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8c0b5fb4cc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=155 identity=15672 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=92e03797-40f2-4f85-aed0-45ce81089518,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=92e03797-40f2-4f85-aed0-45ce81089518,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.242 ipv6= k8sPodName=openstack/glance-ks-service-hwh6v oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8c0b5fb4cc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=155 identity=15672 ipv4=10.0.0.242 ipv6= k8sPodName=openstack/glance-ks-service-hwh6v subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=8c0b5fb4cc datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=155 identity=15672 ipv4=10.0.0.242 ipv6= k8sPodName=openstack/glance-ks-service-hwh6v subsys=endpoint level=info msg="Successful endpoint creation" containerID=8c0b5fb4cc datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=155 identity=15672 ipv4=10.0.0.242 ipv6= k8sPodName=openstack/glance-ks-service-hwh6v subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=8c0b5fb4cc endpointID=155 k8sNamespace=openstack k8sPodName=glance-ks-service-hwh6v subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=92e03797-40f2-4f85-aed0-45ce81089518 k8s:batch.kubernetes.io/job-name=glance-ks-service k8s:component=ks-service k8s:controller-uid=92e03797-40f2-4f85-aed0-45ce81089518 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-service k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=8c0b5fb4cc datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=155 identity=15672 ipv4=10.0.0.242 ipv6= k8sPodName=openstack/glance-ks-service-hwh6v subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.161 805e41ae-59b5-4f32-91cb-4dd24808e0e3 default }" containerID=1e54859f5378a4044a2f8f21f6bd8a0414da914adf3d2b21905859bf2a1b61f4 datapathConfiguration="&{false false false false false }" interface=lxc22eec4ed2ee5 k8sPodName=openstack/glance-ks-endpoints-92rs9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1e54859f53 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=750 ipv4=10.0.0.161 ipv6= k8sPodName=openstack/glance-ks-endpoints-92rs9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1e54859f53 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=750 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=1812d55f-e6eb-4116-950a-fe62e0ffe38c,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=1812d55f-e6eb-4116-950a-fe62e0ffe38c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.161 ipv6= k8sPodName=openstack/glance-ks-endpoints-92rs9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=1812d55f-e6eb-4116-950a-fe62e0ffe38c;k8s:batch.kubernetes.io/job-name=glance-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=1812d55f-e6eb-4116-950a-fe62e0ffe38c;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-endpoints;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1e54859f53 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=750 identity=14078 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=1812d55f-e6eb-4116-950a-fe62e0ffe38c,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=1812d55f-e6eb-4116-950a-fe62e0ffe38c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.161 ipv6= k8sPodName=openstack/glance-ks-endpoints-92rs9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1e54859f53 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=750 identity=14078 ipv4=10.0.0.161 ipv6= k8sPodName=openstack/glance-ks-endpoints-92rs9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1e54859f53 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=750 identity=14078 ipv4=10.0.0.161 ipv6= k8sPodName=openstack/glance-ks-endpoints-92rs9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=1e54859f53 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=750 identity=14078 ipv4=10.0.0.161 ipv6= k8sPodName=openstack/glance-ks-endpoints-92rs9 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=1e54859f53 endpointID=750 k8sNamespace=openstack k8sPodName=glance-ks-endpoints-92rs9 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=1812d55f-e6eb-4116-950a-fe62e0ffe38c k8s:batch.kubernetes.io/job-name=glance-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=1812d55f-e6eb-4116-950a-fe62e0ffe38c k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-endpoints k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=1e54859f53 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=750 identity=14078 ipv4=10.0.0.161 ipv6= k8sPodName=openstack/glance-ks-endpoints-92rs9 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.152 431a619e-250c-484c-991d-6f3a86fe00e5 default }" containerID=c4dfc142e5fdb5f7e1ce97b8b12ad088d432122b016a674899401a45a672fb2b datapathConfiguration="&{false false false false false }" interface=lxceeb178402f1c k8sPodName=openstack/glance-ks-user-4xgc8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c4dfc142e5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2927 ipv4=10.0.0.152 ipv6= k8sPodName=openstack/glance-ks-user-4xgc8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c4dfc142e5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2927 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=bfb4f569-c6f8-46b2-b029-8f390bd07b38,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=bfb4f569-c6f8-46b2-b029-8f390bd07b38,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.152 ipv6= k8sPodName=openstack/glance-ks-user-4xgc8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=bfb4f569-c6f8-46b2-b029-8f390bd07b38;k8s:batch.kubernetes.io/job-name=glance-ks-user;k8s:component=ks-user;k8s:controller-uid=bfb4f569-c6f8-46b2-b029-8f390bd07b38;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-user;k8s:release_group=glance;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=c4dfc142e5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2927 identity=43864 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=bfb4f569-c6f8-46b2-b029-8f390bd07b38,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=bfb4f569-c6f8-46b2-b029-8f390bd07b38,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.152 ipv6= k8sPodName=openstack/glance-ks-user-4xgc8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c4dfc142e5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2927 identity=43864 ipv4=10.0.0.152 ipv6= k8sPodName=openstack/glance-ks-user-4xgc8 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c4dfc142e5 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2927 identity=43864 ipv4=10.0.0.152 ipv6= k8sPodName=openstack/glance-ks-user-4xgc8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=c4dfc142e5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2927 identity=43864 ipv4=10.0.0.152 ipv6= k8sPodName=openstack/glance-ks-user-4xgc8 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=c4dfc142e5 endpointID=2927 k8sNamespace=openstack k8sPodName=glance-ks-user-4xgc8 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=bfb4f569-c6f8-46b2-b029-8f390bd07b38 k8s:batch.kubernetes.io/job-name=glance-ks-user k8s:component=ks-user k8s:controller-uid=bfb4f569-c6f8-46b2-b029-8f390bd07b38 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-user k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=c4dfc142e5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2927 identity=43864 ipv4=10.0.0.152 ipv6= k8sPodName=openstack/glance-ks-user-4xgc8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.180 af7983a7-d8db-43d6-9f70-9f0d86c7b0cc default }" containerID=041e9572c28f56631d60244f81b6796ac94f41bdc6e2e8d9c3653f331f428e79 datapathConfiguration="&{false false false false false }" interface=lxc3c4c9509b63f k8sPodName=openstack/glance-metadefs-load-799nk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=041e9572c2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=334 ipv4=10.0.0.180 ipv6= k8sPodName=openstack/glance-metadefs-load-799nk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=041e9572c2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=334 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=8f791b51-6b4c-454a-8a7b-625674f4ccd5,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=8f791b51-6b4c-454a-8a7b-625674f4ccd5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.180 ipv6= k8sPodName=openstack/glance-metadefs-load-799nk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=8f791b51-6b4c-454a-8a7b-625674f4ccd5;k8s:batch.kubernetes.io/job-name=glance-metadefs-load;k8s:component=metadefs_load;k8s:controller-uid=8f791b51-6b4c-454a-8a7b-625674f4ccd5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-metadefs-load;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=041e9572c2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=334 identity=17776 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=8f791b51-6b4c-454a-8a7b-625674f4ccd5,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=8f791b51-6b4c-454a-8a7b-625674f4ccd5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.180 ipv6= k8sPodName=openstack/glance-metadefs-load-799nk oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=041e9572c2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=334 identity=17776 ipv4=10.0.0.180 ipv6= k8sPodName=openstack/glance-metadefs-load-799nk subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=041e9572c2 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=334 identity=17776 ipv4=10.0.0.180 ipv6= k8sPodName=openstack/glance-metadefs-load-799nk subsys=endpoint level=info msg="Successful endpoint creation" containerID=041e9572c2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=334 identity=17776 ipv4=10.0.0.180 ipv6= k8sPodName=openstack/glance-metadefs-load-799nk subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=041e9572c2 endpointID=334 k8sNamespace=openstack k8sPodName=glance-metadefs-load-799nk subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=8f791b51-6b4c-454a-8a7b-625674f4ccd5 k8s:batch.kubernetes.io/job-name=glance-metadefs-load k8s:component=metadefs_load k8s:controller-uid=8f791b51-6b4c-454a-8a7b-625674f4ccd5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-metadefs-load k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=041e9572c2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=334 identity=17776 ipv4=10.0.0.180 ipv6= k8sPodName=openstack/glance-metadefs-load-799nk subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.152 a0ef790f-c7bf-4cb6-8553-596e24acbefb default }" containerID=acb6a62a9402f07fd1144a737fb6444ef9f76707dc13323ae85ae00172f56213 datapathConfiguration="&{false false false false false }" interface=lxc41fb357599a1 k8sPodName=openstack/glance-storage-init-58jct labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=acb6a62a94 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=859 ipv4=10.0.0.152 ipv6= k8sPodName=openstack/glance-storage-init-58jct subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=acb6a62a94 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=859 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=e19fd71e-8dab-4e9c-8ee8-6e6611752abb,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=e19fd71e-8dab-4e9c-8ee8-6e6611752abb,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.152 ipv6= k8sPodName=openstack/glance-storage-init-58jct subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=acb6a62a94 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=859 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.152 ipv6= k8sPodName=openstack/glance-storage-init-58jct line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=e19fd71e-8dab-4e9c-8ee8-6e6611752abb;k8s:batch.kubernetes.io/job-name=glance-storage-init;k8s:component=storage-init;k8s:controller-uid=e19fd71e-8dab-4e9c-8ee8-6e6611752abb;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-storage-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=acb6a62a94 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=859 identity=55439 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=e19fd71e-8dab-4e9c-8ee8-6e6611752abb,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=e19fd71e-8dab-4e9c-8ee8-6e6611752abb,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.152 ipv6= k8sPodName=openstack/glance-storage-init-58jct oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=acb6a62a94 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=859 identity=55439 ipv4=10.0.0.152 ipv6= k8sPodName=openstack/glance-storage-init-58jct subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=acb6a62a94 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=859 identity=55439 ipv4=10.0.0.152 ipv6= k8sPodName=openstack/glance-storage-init-58jct subsys=endpoint level=info msg="Successful endpoint creation" containerID=acb6a62a94 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=859 identity=55439 ipv4=10.0.0.152 ipv6= k8sPodName=openstack/glance-storage-init-58jct subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=acb6a62a94 endpointID=859 k8sNamespace=openstack k8sPodName=glance-storage-init-58jct subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=e19fd71e-8dab-4e9c-8ee8-6e6611752abb k8s:batch.kubernetes.io/job-name=glance-storage-init k8s:component=storage-init k8s:controller-uid=e19fd71e-8dab-4e9c-8ee8-6e6611752abb k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-storage-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=acb6a62a94 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=859 identity=55439 ipv4=10.0.0.152 ipv6= k8sPodName=openstack/glance-storage-init-58jct subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.236 eaa59ea5-afe9-4249-8c99-a009ffdf2803 default }" containerID=16056ce0e50e4f0f4adfc5bd47273595a219be810023114ff4909d605af5c358 datapathConfiguration="&{false false false false false }" interface=lxcb2389f4b8029 k8sPodName=openstack/glance-api-7995f76cb5-h9p5b labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=16056ce0e5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2333 ipv4=10.0.0.236 ipv6= k8sPodName=openstack/glance-api-7995f76cb5-h9p5b subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=16056ce0e5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2333 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.236 ipv6= k8sPodName=openstack/glance-api-7995f76cb5-h9p5b subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=16056ce0e5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2333 identity=41963 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.236 ipv6= k8sPodName=openstack/glance-api-7995f76cb5-h9p5b oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=16056ce0e5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2333 identity=41963 ipv4=10.0.0.236 ipv6= k8sPodName=openstack/glance-api-7995f76cb5-h9p5b subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=16056ce0e5 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2333 identity=41963 ipv4=10.0.0.236 ipv6= k8sPodName=openstack/glance-api-7995f76cb5-h9p5b subsys=endpoint level=info msg="Successful endpoint creation" containerID=16056ce0e5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2333 identity=41963 ipv4=10.0.0.236 ipv6= k8sPodName=openstack/glance-api-7995f76cb5-h9p5b subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.190 e45882d1-e549-46c4-8ce3-22ef6a645635 default }" containerID=a8284f075ecd15457be7031a8a914c56ba7ae3898467179938bd3eb246a3a157 datapathConfiguration="&{false false false false false }" interface=lxced8cba7d68b4 k8sPodName=openstack/staffeln-api-86957d745c-p484r labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a8284f075e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1634 ipv4=10.0.0.190 ipv6= k8sPodName=openstack/staffeln-api-86957d745c-p484r subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a8284f075e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1634 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.190 ipv6= k8sPodName=openstack/staffeln-api-86957d745c-p484r subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=a8284f075e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1634 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.190 ipv6= k8sPodName=openstack/staffeln-api-86957d745c-p484r line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=a8284f075e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1634 identity=5365 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.190 ipv6= k8sPodName=openstack/staffeln-api-86957d745c-p484r oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a8284f075e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1634 identity=5365 ipv4=10.0.0.190 ipv6= k8sPodName=openstack/staffeln-api-86957d745c-p484r subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.228 dc2926f4-fb2a-4ec6-a546-e1d0d8cb1856 default }" containerID=a180faceb691ce68f867bf24115971419f196eb10b6c8cff2531e47b5da1de11 datapathConfiguration="&{false false false false false }" interface=lxc39ca33b4b0c2 k8sPodName=openstack/staffeln-conductor-789fc8846-fsx88 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a180faceb6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=821 ipv4=10.0.0.228 ipv6= k8sPodName=openstack/staffeln-conductor-789fc8846-fsx88 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a180faceb6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=821 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.228 ipv6= k8sPodName=openstack/staffeln-conductor-789fc8846-fsx88 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=conductor;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a180faceb6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=821 identity=5193 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.228 ipv6= k8sPodName=openstack/staffeln-conductor-789fc8846-fsx88 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a180faceb6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=821 identity=5193 ipv4=10.0.0.228 ipv6= k8sPodName=openstack/staffeln-conductor-789fc8846-fsx88 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.243 cce9b7c2-e93a-4d4d-bb79-f4b7bb281ec0 default }" containerID=9ad015b2a421099435c3b0e7f29ed972af5297ea89045c657739344d80700b27 datapathConfiguration="&{false false false false false }" interface=lxc2fdb883cdbe6 k8sPodName=openstack/staffeln-db-init-wgczj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9ad015b2a4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1226 ipv4=10.0.0.243 ipv6= k8sPodName=openstack/staffeln-db-init-wgczj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9ad015b2a4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1226 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=e8337f39-6ae0-458d-bb57-7e9b9e545ec3,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=e8337f39-6ae0-458d-bb57-7e9b9e545ec3,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.243 ipv6= k8sPodName=openstack/staffeln-db-init-wgczj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=e8337f39-6ae0-458d-bb57-7e9b9e545ec3;k8s:batch.kubernetes.io/job-name=staffeln-db-init;k8s:component=db-init;k8s:controller-uid=e8337f39-6ae0-458d-bb57-7e9b9e545ec3;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-init;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9ad015b2a4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1226 identity=26229 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=e8337f39-6ae0-458d-bb57-7e9b9e545ec3,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=e8337f39-6ae0-458d-bb57-7e9b9e545ec3,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.243 ipv6= k8sPodName=openstack/staffeln-db-init-wgczj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9ad015b2a4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1226 identity=26229 ipv4=10.0.0.243 ipv6= k8sPodName=openstack/staffeln-db-init-wgczj subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a8284f075e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1634 identity=5365 ipv4=10.0.0.190 ipv6= k8sPodName=openstack/staffeln-api-86957d745c-p484r subsys=endpoint level=info msg="Successful endpoint creation" containerID=a8284f075e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1634 identity=5365 ipv4=10.0.0.190 ipv6= k8sPodName=openstack/staffeln-api-86957d745c-p484r subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=a180faceb6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=821 identity=5193 ipv4=10.0.0.228 ipv6= k8sPodName=openstack/staffeln-conductor-789fc8846-fsx88 subsys=endpoint level=info msg="Successful endpoint creation" containerID=a180faceb6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=821 identity=5193 ipv4=10.0.0.228 ipv6= k8sPodName=openstack/staffeln-conductor-789fc8846-fsx88 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=9ad015b2a4 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1226 identity=26229 ipv4=10.0.0.243 ipv6= k8sPodName=openstack/staffeln-db-init-wgczj subsys=endpoint level=info msg="Successful endpoint creation" containerID=9ad015b2a4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1226 identity=26229 ipv4=10.0.0.243 ipv6= k8sPodName=openstack/staffeln-db-init-wgczj subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=9ad015b2a4 endpointID=1226 k8sNamespace=openstack k8sPodName=staffeln-db-init-wgczj subsys=daemon level=info msg="Releasing key" key="[k8s:application=staffeln k8s:batch.kubernetes.io/controller-uid=e8337f39-6ae0-458d-bb57-7e9b9e545ec3 k8s:batch.kubernetes.io/job-name=staffeln-db-init k8s:component=db-init k8s:controller-uid=e8337f39-6ae0-458d-bb57-7e9b9e545ec3 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=staffeln-db-init k8s:release_group=staffeln]" subsys=allocator level=info msg="Removed endpoint" containerID=9ad015b2a4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1226 identity=26229 ipv4=10.0.0.243 ipv6= k8sPodName=openstack/staffeln-db-init-wgczj subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.212 2bc30597-b084-4680-b66a-9f5cddd41135 default }" containerID=76ebcb5e6ba643d10f59228c674d056e42304fbe376b9bfa36f7df78a66ec5ed datapathConfiguration="&{false false false false false }" interface=lxc744ea140c75d k8sPodName=openstack/staffeln-db-sync-5rp29 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=76ebcb5e6b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2604 ipv4=10.0.0.212 ipv6= k8sPodName=openstack/staffeln-db-sync-5rp29 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=76ebcb5e6b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2604 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=1955e606-920d-4c74-8934-8e685e5f3539,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=1955e606-920d-4c74-8934-8e685e5f3539,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.212 ipv6= k8sPodName=openstack/staffeln-db-sync-5rp29 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=1955e606-920d-4c74-8934-8e685e5f3539;k8s:batch.kubernetes.io/job-name=staffeln-db-sync;k8s:component=db-sync;k8s:controller-uid=1955e606-920d-4c74-8934-8e685e5f3539;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-sync;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=76ebcb5e6b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2604 identity=26736 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=1955e606-920d-4c74-8934-8e685e5f3539,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=1955e606-920d-4c74-8934-8e685e5f3539,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.212 ipv6= k8sPodName=openstack/staffeln-db-sync-5rp29 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=76ebcb5e6b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2604 identity=26736 ipv4=10.0.0.212 ipv6= k8sPodName=openstack/staffeln-db-sync-5rp29 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=76ebcb5e6b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2604 identity=26736 ipv4=10.0.0.212 ipv6= k8sPodName=openstack/staffeln-db-sync-5rp29 subsys=endpoint level=info msg="Successful endpoint creation" containerID=76ebcb5e6b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2604 identity=26736 ipv4=10.0.0.212 ipv6= k8sPodName=openstack/staffeln-db-sync-5rp29 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager