level=info msg="Memory available for map entries (0.003% of 67421642752B): 168554106B" subsys=config level=info msg="option bpf-ct-global-tcp-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-ct-global-any-max set by dynamic sizing to 295708" subsys=config level=info msg="option bpf-nat-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-neigh-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-sock-rev-map-max set by dynamic sizing to 295708" subsys=config level=info msg=" --agent-health-port='9879'" subsys=daemon level=info msg=" --agent-labels=''" subsys=daemon level=info msg=" --agent-liveness-update-interval='1s'" subsys=daemon level=info msg=" --agent-not-ready-taint-key='node.cilium.io/agent-not-ready'" subsys=daemon level=info msg=" --allocator-list-timeout='3m0s'" subsys=daemon level=info msg=" --allow-icmp-frag-needed='true'" subsys=daemon level=info msg=" --allow-localhost='auto'" subsys=daemon level=info msg=" --annotate-k8s-node='false'" subsys=daemon level=info msg=" --api-rate-limit=''" subsys=daemon level=info msg=" --arping-refresh-period='30s'" subsys=daemon level=info msg=" --auto-create-cilium-node-resource='true'" subsys=daemon level=info msg=" --auto-direct-node-routes='false'" subsys=daemon level=info msg=" --bgp-announce-lb-ip='false'" subsys=daemon level=info msg=" --bgp-announce-pod-cidr='false'" subsys=daemon level=info msg=" --bgp-config-path='/var/lib/cilium/bgp/config.yaml'" subsys=daemon level=info msg=" --bpf-auth-map-max='524288'" subsys=daemon level=info msg=" --bpf-ct-global-any-max='262144'" subsys=daemon level=info msg=" --bpf-ct-global-tcp-max='524288'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-fin='10s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-syn='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp-grace='1m0s'" subsys=daemon level=info msg=" --bpf-filter-priority='1'" subsys=daemon level=info msg=" --bpf-fragments-map-max='8192'" subsys=daemon level=info msg=" --bpf-lb-acceleration='disabled'" subsys=daemon level=info msg=" --bpf-lb-affinity-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-algorithm='random'" subsys=daemon level=info msg=" --bpf-lb-dev-ip-addr-inherit=''" subsys=daemon level=info msg=" --bpf-lb-dsr-dispatch='opt'" subsys=daemon level=info msg=" --bpf-lb-dsr-l4-xlate='frontend'" subsys=daemon level=info msg=" --bpf-lb-external-clusterip='false'" subsys=daemon level=info msg=" --bpf-lb-maglev-hash-seed='JLfvgnHc2kaSUFaI'" subsys=daemon level=info msg=" --bpf-lb-maglev-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-maglev-table-size='16381'" subsys=daemon level=info msg=" --bpf-lb-map-max='65536'" subsys=daemon level=info msg=" --bpf-lb-mode='snat'" subsys=daemon level=info msg=" --bpf-lb-rev-nat-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-rss-ipv4-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-rss-ipv6-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-service-backend-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-service-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-sock='false'" subsys=daemon level=info msg=" --bpf-lb-sock-hostns-only='false'" subsys=daemon level=info msg=" --bpf-lb-source-range-map-max='0'" subsys=daemon level=info msg=" --bpf-map-dynamic-size-ratio='0.0025'" subsys=daemon level=info msg=" --bpf-map-event-buffers=''" subsys=daemon level=info msg=" --bpf-nat-global-max='524288'" subsys=daemon level=info msg=" --bpf-neigh-global-max='524288'" subsys=daemon level=info msg=" --bpf-policy-map-full-reconciliation-interval='15m0s'" subsys=daemon level=info msg=" --bpf-policy-map-max='16384'" subsys=daemon level=info msg=" --bpf-root='/sys/fs/bpf'" subsys=daemon level=info msg=" --bpf-sock-rev-map-max='262144'" subsys=daemon level=info msg=" --bypass-ip-availability-upon-restore='false'" subsys=daemon level=info msg=" --certificates-directory='/var/run/cilium/certs'" subsys=daemon level=info msg=" --cflags=''" subsys=daemon level=info msg=" --cgroup-root='/run/cilium/cgroupv2'" subsys=daemon level=info msg=" --cilium-endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --cluster-health-port='4240'" subsys=daemon level=info msg=" --cluster-id='0'" subsys=daemon level=info msg=" --cluster-name='default'" subsys=daemon level=info msg=" --cluster-pool-ipv4-cidr='10.0.0.0/8'" subsys=daemon level=info msg=" --cluster-pool-ipv4-mask-size='24'" subsys=daemon level=info msg=" --clustermesh-config='/var/lib/cilium/clustermesh/'" subsys=daemon level=info msg=" --clustermesh-ip-identities-sync-timeout='1m0s'" subsys=daemon level=info msg=" --cmdref=''" subsys=daemon level=info msg=" --cni-chaining-mode='none'" subsys=daemon level=info msg=" --cni-chaining-target=''" subsys=daemon level=info msg=" --cni-exclusive='true'" subsys=daemon level=info msg=" --cni-external-routing='false'" subsys=daemon level=info msg=" --cni-log-file='/var/run/cilium/cilium-cni.log'" subsys=daemon level=info msg=" --cnp-node-status-gc-interval='0s'" subsys=daemon level=info msg=" --config=''" subsys=daemon level=info msg=" --config-dir='/tmp/cilium/config-map'" subsys=daemon level=info msg=" --config-sources='config-map:kube-system/cilium-config'" subsys=daemon level=info msg=" --conntrack-gc-interval='0s'" subsys=daemon level=info msg=" --conntrack-gc-max-interval='0s'" subsys=daemon level=info msg=" --crd-wait-timeout='5m0s'" subsys=daemon level=info msg=" --custom-cni-conf='false'" subsys=daemon level=info msg=" --datapath-mode='veth'" subsys=daemon level=info msg=" --debug='false'" subsys=daemon level=info msg=" --debug-verbose=''" subsys=daemon level=info msg=" --derive-masquerade-ip-addr-from-device=''" subsys=daemon level=info msg=" --devices=''" subsys=daemon level=info msg=" --direct-routing-device=''" subsys=daemon level=info msg=" --disable-cnp-status-updates='true'" subsys=daemon level=info msg=" --disable-endpoint-crd='false'" subsys=daemon level=info msg=" --disable-envoy-version-check='false'" subsys=daemon level=info msg=" --disable-iptables-feeder-rules=''" subsys=daemon level=info msg=" --dns-max-ips-per-restored-rule='1000'" subsys=daemon level=info msg=" --dns-policy-unload-on-shutdown='false'" subsys=daemon level=info msg=" --dnsproxy-concurrency-limit='0'" subsys=daemon level=info msg=" --dnsproxy-concurrency-processing-grace-period='0s'" subsys=daemon level=info msg=" --dnsproxy-enable-transparent-mode='true'" subsys=daemon level=info msg=" --dnsproxy-lock-count='128'" subsys=daemon level=info msg=" --dnsproxy-lock-timeout='500ms'" subsys=daemon level=info msg=" --egress-gateway-policy-map-max='16384'" subsys=daemon level=info msg=" --egress-gateway-reconciliation-trigger-interval='1s'" subsys=daemon level=info msg=" --egress-masquerade-interfaces=''" subsys=daemon level=info msg=" --egress-multi-home-ip-rule-compat='false'" subsys=daemon level=info msg=" --enable-auto-protect-node-port-range='true'" subsys=daemon level=info msg=" --enable-bandwidth-manager='false'" subsys=daemon level=info msg=" --enable-bbr='false'" subsys=daemon level=info msg=" --enable-bgp-control-plane='false'" subsys=daemon level=info msg=" --enable-bpf-clock-probe='false'" subsys=daemon level=info msg=" --enable-bpf-masquerade='false'" subsys=daemon level=info msg=" --enable-bpf-tproxy='false'" subsys=daemon level=info msg=" --enable-cilium-api-server-access='*'" subsys=daemon level=info msg=" --enable-cilium-endpoint-slice='false'" subsys=daemon level=info msg=" --enable-cilium-health-api-server-access='*'" subsys=daemon level=info msg=" --enable-custom-calls='false'" subsys=daemon level=info msg=" --enable-endpoint-health-checking='true'" subsys=daemon level=info msg=" --enable-endpoint-routes='false'" subsys=daemon level=info msg=" --enable-envoy-config='false'" subsys=daemon level=info msg=" --enable-external-ips='false'" subsys=daemon level=info msg=" --enable-health-check-nodeport='true'" subsys=daemon level=info msg=" --enable-health-checking='true'" subsys=daemon level=info msg=" --enable-high-scale-ipcache='false'" subsys=daemon level=info msg=" --enable-host-firewall='false'" subsys=daemon level=info msg=" --enable-host-legacy-routing='false'" subsys=daemon level=info msg=" --enable-host-port='false'" subsys=daemon level=info msg=" --enable-hubble='false'" subsys=daemon level=info msg=" --enable-hubble-recorder-api='true'" subsys=daemon level=info msg=" --enable-icmp-rules='true'" subsys=daemon level=info msg=" --enable-identity-mark='true'" subsys=daemon level=info msg=" --enable-ip-masq-agent='false'" subsys=daemon level=info msg=" --enable-ipsec='false'" subsys=daemon level=info msg=" --enable-ipsec-key-watcher='true'" subsys=daemon level=info msg=" --enable-ipv4='true'" subsys=daemon level=info msg=" --enable-ipv4-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv4-egress-gateway='false'" subsys=daemon level=info msg=" --enable-ipv4-fragment-tracking='true'" subsys=daemon level=info msg=" --enable-ipv4-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6='false'" subsys=daemon level=info msg=" --enable-ipv6-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv6-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6-ndp='false'" subsys=daemon level=info msg=" --enable-k8s='true'" subsys=daemon level=info msg=" --enable-k8s-api-discovery='false'" subsys=daemon level=info msg=" --enable-k8s-endpoint-slice='true'" subsys=daemon level=info msg=" --enable-k8s-event-handover='false'" subsys=daemon level=info msg=" --enable-k8s-networkpolicy='true'" subsys=daemon level=info msg=" --enable-k8s-terminating-endpoint='true'" subsys=daemon level=info msg=" --enable-l2-announcements='false'" subsys=daemon level=info msg=" --enable-l2-neigh-discovery='true'" subsys=daemon level=info msg=" --enable-l2-pod-announcements='false'" subsys=daemon level=info msg=" --enable-l7-proxy='true'" subsys=daemon level=info msg=" --enable-local-node-route='true'" subsys=daemon level=info msg=" --enable-local-redirect-policy='false'" subsys=daemon level=info msg=" --enable-mke='false'" subsys=daemon level=info msg=" --enable-monitor='true'" subsys=daemon level=info msg=" --enable-nat46x64-gateway='false'" subsys=daemon level=info msg=" --enable-node-port='false'" subsys=daemon level=info msg=" --enable-pmtu-discovery='false'" subsys=daemon level=info msg=" --enable-policy='default'" subsys=daemon level=info msg=" --enable-recorder='false'" subsys=daemon level=info msg=" --enable-remote-node-identity='true'" subsys=daemon level=info msg=" --enable-runtime-device-detection='false'" subsys=daemon level=info msg=" --enable-sctp='false'" subsys=daemon level=info msg=" --enable-service-topology='false'" subsys=daemon level=info msg=" --enable-session-affinity='false'" subsys=daemon level=info msg=" --enable-srv6='false'" subsys=daemon level=info msg=" --enable-stale-cilium-endpoint-cleanup='true'" subsys=daemon level=info msg=" --enable-svc-source-range-check='true'" subsys=daemon level=info msg=" --enable-tracing='false'" subsys=daemon level=info msg=" --enable-unreachable-routes='false'" subsys=daemon level=info msg=" --enable-vtep='false'" subsys=daemon level=info msg=" --enable-well-known-identities='false'" subsys=daemon level=info msg=" --enable-wireguard='false'" subsys=daemon level=info msg=" --enable-wireguard-userspace-fallback='false'" subsys=daemon level=info msg=" --enable-xdp-prefilter='false'" subsys=daemon level=info msg=" --enable-xt-socket-fallback='true'" subsys=daemon level=info msg=" --encrypt-interface=''" subsys=daemon level=info msg=" --encrypt-node='false'" subsys=daemon level=info msg=" --endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --endpoint-queue-size='25'" subsys=daemon level=info msg=" --endpoint-status=''" subsys=daemon level=info msg=" --envoy-config-timeout='2m0s'" subsys=daemon level=info msg=" --envoy-log=''" subsys=daemon level=info msg=" --exclude-local-address=''" subsys=daemon level=info msg=" --external-envoy-proxy='false'" subsys=daemon level=info msg=" --fixed-identity-mapping=''" subsys=daemon level=info msg=" --fqdn-regex-compile-lru-size='1024'" subsys=daemon level=info msg=" --gops-port='9890'" subsys=daemon level=info msg=" --http-403-msg=''" subsys=daemon level=info msg=" --http-idle-timeout='0'" subsys=daemon level=info msg=" --http-max-grpc-timeout='0'" subsys=daemon level=info msg=" --http-normalize-path='true'" subsys=daemon level=info msg=" --http-request-timeout='3600'" subsys=daemon level=info msg=" --http-retry-count='3'" subsys=daemon level=info msg=" --http-retry-timeout='0'" subsys=daemon level=info msg=" --hubble-disable-tls='false'" subsys=daemon level=info msg=" --hubble-event-buffer-capacity='4095'" subsys=daemon level=info msg=" --hubble-event-queue-size='0'" subsys=daemon level=info msg=" --hubble-export-file-compress='false'" subsys=daemon level=info msg=" --hubble-export-file-max-backups='5'" subsys=daemon level=info msg=" --hubble-export-file-max-size-mb='10'" subsys=daemon level=info msg=" --hubble-export-file-path=''" subsys=daemon level=info msg=" --hubble-listen-address=''" subsys=daemon level=info msg=" --hubble-metrics=''" subsys=daemon level=info msg=" --hubble-metrics-server=''" subsys=daemon level=info msg=" --hubble-monitor-events=''" subsys=daemon level=info msg=" --hubble-prefer-ipv6='false'" subsys=daemon level=info msg=" --hubble-recorder-sink-queue-size='1024'" subsys=daemon level=info msg=" --hubble-recorder-storage-path='/var/run/cilium/pcaps'" subsys=daemon level=info msg=" --hubble-skip-unknown-cgroup-ids='true'" subsys=daemon level=info msg=" --hubble-socket-path='/var/run/cilium/hubble.sock'" subsys=daemon level=info msg=" --hubble-tls-cert-file=''" subsys=daemon level=info msg=" --hubble-tls-client-ca-files=''" subsys=daemon level=info msg=" --hubble-tls-key-file=''" subsys=daemon level=info msg=" --identity-allocation-mode='crd'" subsys=daemon level=info msg=" --identity-change-grace-period='5s'" subsys=daemon level=info msg=" --identity-gc-interval='15m0s'" subsys=daemon level=info msg=" --identity-heartbeat-timeout='30m0s'" subsys=daemon level=info msg=" --identity-restore-grace-period='10m0s'" subsys=daemon level=info msg=" --install-egress-gateway-routes='false'" subsys=daemon level=info msg=" --install-iptables-rules='true'" subsys=daemon level=info msg=" --install-no-conntrack-iptables-rules='false'" subsys=daemon level=info msg=" --ip-allocation-timeout='2m0s'" subsys=daemon level=info msg=" --ip-masq-agent-config-path='/etc/config/ip-masq-agent'" subsys=daemon level=info msg=" --ipam='cluster-pool'" subsys=daemon level=info msg=" --ipam-cilium-node-update-rate='15s'" subsys=daemon level=info msg=" --ipam-multi-pool-pre-allocation='default=8'" subsys=daemon level=info msg=" --ipsec-key-file=''" subsys=daemon level=info msg=" --ipsec-key-rotation-duration='5m0s'" subsys=daemon level=info msg=" --iptables-lock-timeout='5s'" subsys=daemon level=info msg=" --iptables-random-fully='false'" subsys=daemon level=info msg=" --ipv4-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv4-node='auto'" subsys=daemon level=info msg=" --ipv4-pod-subnets=''" subsys=daemon level=info msg=" --ipv4-range='auto'" subsys=daemon level=info msg=" --ipv4-service-loopback-address='169.254.42.1'" subsys=daemon level=info msg=" --ipv4-service-range='auto'" subsys=daemon level=info msg=" --ipv6-cluster-alloc-cidr='f00d::/64'" subsys=daemon level=info msg=" --ipv6-mcast-device=''" subsys=daemon level=info msg=" --ipv6-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv6-node='auto'" subsys=daemon level=info msg=" --ipv6-pod-subnets=''" subsys=daemon level=info msg=" --ipv6-range='auto'" subsys=daemon level=info msg=" --ipv6-service-range='auto'" subsys=daemon level=info msg=" --join-cluster='false'" subsys=daemon level=info msg=" --k8s-api-server=''" subsys=daemon level=info msg=" --k8s-client-burst='10'" subsys=daemon level=info msg=" --k8s-client-qps='5'" subsys=daemon level=info msg=" --k8s-heartbeat-timeout='30s'" subsys=daemon level=info msg=" --k8s-kubeconfig-path=''" subsys=daemon level=info msg=" --k8s-namespace='kube-system'" subsys=daemon level=info msg=" --k8s-require-ipv4-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-require-ipv6-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-service-cache-size='128'" subsys=daemon level=info msg=" --k8s-service-proxy-name=''" subsys=daemon level=info msg=" --k8s-sync-timeout='3m0s'" subsys=daemon level=info msg=" --k8s-watcher-endpoint-selector='metadata.name!=kube-scheduler,metadata.name!=kube-controller-manager,metadata.name!=etcd-operator,metadata.name!=gcp-controller-manager'" subsys=daemon level=info msg=" --keep-config='false'" subsys=daemon level=info msg=" --kube-proxy-replacement='disabled'" subsys=daemon level=info msg=" --kube-proxy-replacement-healthz-bind-address=''" subsys=daemon level=info msg=" --kvstore=''" subsys=daemon level=info msg=" --kvstore-connectivity-timeout='2m0s'" subsys=daemon level=info msg=" --kvstore-lease-ttl='15m0s'" subsys=daemon level=info msg=" --kvstore-max-consecutive-quorum-errors='2'" subsys=daemon level=info msg=" --kvstore-opt=''" subsys=daemon level=info msg=" --kvstore-periodic-sync='5m0s'" subsys=daemon level=info msg=" --l2-announcements-lease-duration='15s'" subsys=daemon level=info msg=" --l2-announcements-renew-deadline='5s'" subsys=daemon level=info msg=" --l2-announcements-retry-period='2s'" subsys=daemon level=info msg=" --l2-pod-announcements-interface=''" subsys=daemon level=info msg=" --label-prefix-file=''" subsys=daemon level=info msg=" --labels=''" subsys=daemon level=info msg=" --lib-dir='/var/lib/cilium'" subsys=daemon level=info msg=" --local-max-addr-scope='252'" subsys=daemon level=info msg=" --local-router-ipv4=''" subsys=daemon level=info msg=" --local-router-ipv6=''" subsys=daemon level=info msg=" --log-driver=''" subsys=daemon level=info msg=" --log-opt=''" subsys=daemon level=info msg=" --log-system-load='false'" subsys=daemon level=info msg=" --max-controller-interval='0'" subsys=daemon level=info msg=" --mesh-auth-enabled='true'" subsys=daemon level=info msg=" --mesh-auth-gc-interval='5m0s'" subsys=daemon level=info msg=" --mesh-auth-mutual-listener-port='0'" subsys=daemon level=info msg=" --mesh-auth-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-rotated-identities-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-signal-backoff-duration='1s'" subsys=daemon level=info msg=" --mesh-auth-spiffe-trust-domain='spiffe.cilium'" subsys=daemon level=info msg=" --mesh-auth-spire-admin-socket=''" subsys=daemon level=info msg=" --metrics=''" subsys=daemon level=info msg=" --mke-cgroup-mount=''" subsys=daemon level=info msg=" --monitor-aggregation='medium'" subsys=daemon level=info msg=" --monitor-aggregation-flags='all'" subsys=daemon level=info msg=" --monitor-aggregation-interval='5s'" subsys=daemon level=info msg=" --monitor-queue-size='0'" subsys=daemon level=info msg=" --mtu='0'" subsys=daemon level=info msg=" --node-encryption-opt-out-labels='node-role.kubernetes.io/control-plane'" subsys=daemon level=info msg=" --node-port-acceleration='disabled'" subsys=daemon level=info msg=" --node-port-algorithm='random'" subsys=daemon level=info msg=" --node-port-bind-protection='true'" subsys=daemon level=info msg=" --node-port-mode='snat'" subsys=daemon level=info msg=" --node-port-range='30000,32767'" subsys=daemon level=info msg=" --nodes-gc-interval='5m0s'" subsys=daemon level=info msg=" --operator-api-serve-addr='127.0.0.1:9234'" subsys=daemon level=info msg=" --policy-audit-mode='false'" subsys=daemon level=info msg=" --policy-queue-size='100'" subsys=daemon level=info msg=" --policy-trigger-interval='1s'" subsys=daemon level=info msg=" --pprof='false'" subsys=daemon level=info msg=" --pprof-address='localhost'" subsys=daemon level=info msg=" --pprof-port='6060'" subsys=daemon level=info msg=" --preallocate-bpf-maps='false'" subsys=daemon level=info msg=" --prepend-iptables-chains='true'" subsys=daemon level=info msg=" --procfs='/host/proc'" subsys=daemon level=info msg=" --prometheus-serve-addr=':9962'" subsys=daemon level=info msg=" --proxy-connect-timeout='2'" subsys=daemon level=info msg=" --proxy-gid='1337'" subsys=daemon level=info msg=" --proxy-idle-timeout-seconds='60'" subsys=daemon level=info msg=" --proxy-max-connection-duration-seconds='0'" subsys=daemon level=info msg=" --proxy-max-requests-per-connection='0'" subsys=daemon level=info msg=" --proxy-prometheus-port='9964'" subsys=daemon level=info msg=" --read-cni-conf=''" subsys=daemon level=info msg=" --remove-cilium-node-taints='true'" subsys=daemon level=info msg=" --restore='true'" subsys=daemon level=info msg=" --route-metric='0'" subsys=daemon level=info msg=" --routing-mode='tunnel'" subsys=daemon level=info msg=" --set-cilium-is-up-condition='true'" subsys=daemon level=info msg=" --set-cilium-node-taints='true'" subsys=daemon level=info msg=" --sidecar-istio-proxy-image='cilium/istio_proxy'" subsys=daemon level=info msg=" --single-cluster-route='false'" subsys=daemon level=info msg=" --skip-cnp-status-startup-clean='false'" subsys=daemon level=info msg=" --socket-path='/var/run/cilium/cilium.sock'" subsys=daemon level=info msg=" --srv6-encap-mode='reduced'" subsys=daemon level=info msg=" --state-dir='/var/run/cilium'" subsys=daemon level=info msg=" --synchronize-k8s-nodes='true'" subsys=daemon level=info msg=" --tofqdns-dns-reject-response-code='refused'" subsys=daemon level=info msg=" --tofqdns-enable-dns-compression='true'" subsys=daemon level=info msg=" --tofqdns-endpoint-max-ip-per-hostname='50'" subsys=daemon level=info msg=" --tofqdns-idle-connection-grace-period='0s'" subsys=daemon level=info msg=" --tofqdns-max-deferred-connection-deletes='10000'" subsys=daemon level=info msg=" --tofqdns-min-ttl='0'" subsys=daemon level=info msg=" --tofqdns-pre-cache=''" subsys=daemon level=info msg=" --tofqdns-proxy-port='0'" subsys=daemon level=info msg=" --tofqdns-proxy-response-max-delay='100ms'" subsys=daemon level=info msg=" --trace-payloadlen='128'" subsys=daemon level=info msg=" --trace-sock='true'" subsys=daemon level=info msg=" --tunnel=''" subsys=daemon level=info msg=" --tunnel-port='6082'" subsys=daemon level=info msg=" --tunnel-protocol='geneve'" subsys=daemon level=info msg=" --unmanaged-pod-watcher-interval='15'" subsys=daemon level=info msg=" --use-cilium-internal-ip-for-ipsec='false'" subsys=daemon level=info msg=" --version='false'" subsys=daemon level=info msg=" --vlan-bpf-bypass=''" subsys=daemon level=info msg=" --vtep-cidr=''" subsys=daemon level=info msg=" --vtep-endpoint=''" subsys=daemon level=info msg=" --vtep-mac=''" subsys=daemon level=info msg=" --vtep-mask=''" subsys=daemon level=info msg=" --wireguard-encapsulate='false'" subsys=daemon level=info msg=" --write-cni-conf-when-ready='/host/etc/cni/net.d/05-cilium.conflist'" subsys=daemon level=info msg=" _ _ _" subsys=daemon level=info msg=" ___|_| |_|_ _ _____" subsys=daemon level=info msg="| _| | | | | | |" subsys=daemon level=info msg="|___|_|_|_|___|_|_|_|" subsys=daemon level=info msg="Cilium 1.14.8 cf6e022e 2024-03-13T12:23:35-04:00 go version go1.21.8 linux/amd64" subsys=daemon level=info msg="clang (10.0.0) and kernel (5.15.0) versions: OK!" subsys=linux-datapath level=info msg="linking environment: OK!" subsys=linux-datapath level=info msg="Kernel config file not found: if the agent fails to start, check the system requirements at https://docs.cilium.io/en/stable/operations/system_requirements" subsys=probes level=info msg="Detected mounted BPF filesystem at /sys/fs/bpf" subsys=bpf level=info msg="Mounted cgroupv2 filesystem at /run/cilium/cgroupv2" subsys=cgroups level=info msg="Parsing base label prefixes from default label list" subsys=labels-filter level=info msg="Parsing additional label prefixes from user inputs: []" subsys=labels-filter level=info msg="Final label prefixes to be used for identity evaluation:" subsys=labels-filter level=info msg=" - reserved:.*" subsys=labels-filter level=info msg=" - :io\\.kubernetes\\.pod\\.namespace" subsys=labels-filter level=info msg=" - :io\\.cilium\\.k8s\\.namespace\\.labels" subsys=labels-filter level=info msg=" - :app\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:io\\.kubernetes" subsys=labels-filter level=info msg=" - !:kubernetes\\.io" subsys=labels-filter level=info msg=" - !:.*beta\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:k8s\\.io" subsys=labels-filter level=info msg=" - !:pod-template-generation" subsys=labels-filter level=info msg=" - !:pod-template-hash" subsys=labels-filter level=info msg=" - !:controller-revision-hash" subsys=labels-filter level=info msg=" - !:annotation.*" subsys=labels-filter level=info msg=" - !:etcd_node" subsys=labels-filter level=info msg=Invoked duration=1.215453ms function="pprof.glob..func1 (cell.go:50)" subsys=hive level=info msg=Invoked duration="78.692µs" function="gops.registerGopsHooks (cell.go:38)" subsys=hive level=info msg=Invoked duration=1.149151ms function="metrics.NewRegistry (registry.go:65)" subsys=hive level=info msg=Invoked duration="14.94µs" function="metrics.glob..func1 (cell.go:12)" subsys=hive level=info msg="Spire Delegate API Client is disabled as no socket path is configured" subsys=spire-delegate level=info msg="Mutual authentication handler is disabled as no port is configured" subsys=auth level=info msg=Invoked duration=98.854103ms function="cmd.glob..func4 (daemon_main.go:1607)" subsys=hive level=info msg=Invoked duration="12.3µs" function="gc.registerSignalHandler (cell.go:47)" subsys=hive level=info msg=Invoked duration="17.34µs" function="utime.initUtimeSync (cell.go:29)" subsys=hive level=info msg=Invoked duration="59.272µs" function="agentliveness.newAgentLivenessUpdater (agent_liveness.go:43)" subsys=hive level=info msg=Invoked duration="63.102µs" function="l2responder.NewL2ResponderReconciler (l2responder.go:63)" subsys=hive level=info msg=Invoked duration="72.502µs" function="garp.newGARPProcessor (processor.go:27)" subsys=hive level=info msg=Starting subsys=hive level=info msg="Started gops server" address="127.0.0.1:9890" subsys=gops level=info msg="Start hook executed" duration="428.601µs" function="gops.registerGopsHooks.func1 (cell.go:43)" subsys=hive level=info msg="Start hook executed" duration="1.41µs" function="metrics.NewRegistry.func1 (registry.go:86)" subsys=hive level=info msg="Establishing connection to apiserver" host="https://10.96.0.1:443" subsys=k8s-client level=info msg="Serving prometheus metrics on :9962" subsys=metrics level=info msg="Connected to apiserver" subsys=k8s-client level=info msg="Start hook executed" duration=8.871081ms function="client.(*compositeClientset).onStart" subsys=hive level=info msg="Start hook executed" duration=6.178177ms function="authmap.newAuthMap.func1 (cell.go:27)" subsys=hive level=info msg="Start hook executed" duration="75.142µs" function="configmap.newMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="43.562µs" function="signalmap.newMap.func1 (cell.go:44)" subsys=hive level=info msg="Start hook executed" duration="239.326µs" function="nodemap.newNodeMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="148.114µs" function="eventsmap.newEventsMap.func1 (cell.go:35)" subsys=hive level=info msg="Start hook executed" duration="93.272µs" function="*cni.cniConfigManager.Start" subsys=hive level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Wrote CNI configuration file to /host/etc/cni/net.d/05-cilium.conflist" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Start hook executed" duration=41.830405ms function="datapath.newDatapath.func1 (cells.go:113)" subsys=hive level=info msg="Restored 0 node IDs from the BPF map" subsys=linux-datapath level=info msg="Start hook executed" duration="190.775µs" function="datapath.newDatapath.func2 (cells.go:126)" subsys=hive level=info msg="Start hook executed" duration="13.07µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Node].Start" subsys=hive level=info msg="Start hook executed" duration="4.03µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNode].Start" subsys=hive level=info msg="Using autogenerated IPv4 allocation range" subsys=node v4Prefix=10.156.0.0/16 level=info msg="no local ciliumnode found, will not restore cilium internal ips from k8s" subsys=daemon level=info msg="Start hook executed" duration=103.423726ms function="node.NewLocalNodeStore.func1 (local_node_store.go:76)" subsys=hive level=info msg="Start hook executed" duration="13.881µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration=101.191206ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration="4.11µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Using discoveryv1.EndpointSlice" subsys=k8s level=info msg="Start hook executed" duration=100.94942ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Start hook executed" duration="2.48µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Pod].Start" subsys=hive level=info msg="Start hook executed" duration="1.3µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Namespace].Start" subsys=hive level=info msg="Start hook executed" duration="1.03µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="1.47µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumClusterwideNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="1.58µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumCIDRGroup].Start" subsys=hive level=info msg="Start hook executed" duration="20.78µs" function="endpointmanager.newDefaultEndpointManager.func1 (cell.go:203)" subsys=hive level=info msg="Start hook executed" duration="11.93µs" function="cmd.newPolicyTrifecta.func1 (policy.go:135)" subsys=hive level=info msg="Start hook executed" duration="41.532µs" function="*manager.manager.Start" subsys=hive level=info msg="Serving cilium node monitor v1.2 API at unix:///var/run/cilium/monitor1_2.sock" subsys=monitor-agent level=info msg="Start hook executed" duration="320.738µs" function="agent.newMonitorAgent.func1 (cell.go:61)" subsys=hive level=info msg="Start hook executed" duration="5.46µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumL2AnnouncementPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="9.62µs" function="*job.group.Start" subsys=hive level=info msg="Start hook executed" duration="268.677µs" function="proxy.newProxy.func1 (cell.go:55)" subsys=hive level=info msg="Envoy: Starting xDS gRPC server listening on /var/run/cilium/envoy/sockets/xds.sock" subsys=envoy-manager level=info msg="Start hook executed" duration=1.993054ms function="signal.provideSignalManager.func1 (cell.go:25)" subsys=hive level=info msg="Datapath signal listener running" subsys=signal level=info msg="Start hook executed" duration="917.665µs" function="auth.registerAuthManager.func1 (cell.go:109)" subsys=hive level=info msg="Start hook executed" duration="3.86µs" function="auth.registerGCJobs.func1 (cell.go:158)" subsys=hive level=info msg="Start hook executed" duration="19.481µs" function="*job.group.Start" subsys=hive level=warning msg="Deprecated value for --kube-proxy-replacement: disabled (use either \"true\", or \"false\")" subsys=daemon level=info msg="Auto-disabling \"enable-node-port\", \"enable-external-ips\", \"bpf-lb-sock\", \"enable-host-port\" features and falling back to \"enable-host-legacy-routing\"" subsys=daemon level=info msg="Inheriting MTU from external network interface" device=ens3 ipAddr=199.204.45.156 mtu=1500 subsys=mtu level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_ipcache, recreating and re-pinning map cilium_ipcache" file-path=/sys/fs/bpf/tc/globals/cilium_ipcache name=cilium_ipcache subsys=bpf level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_tunnel_map, recreating and re-pinning map cilium_tunnel_map" file-path=/sys/fs/bpf/tc/globals/cilium_tunnel_map name=cilium_tunnel_map subsys=bpf level=info msg="Restored services from maps" failedServices=0 restoredServices=0 subsys=service level=info msg="Restored backends from maps" failedBackends=0 restoredBackends=0 skippedBackends=0 subsys=service level=info msg="Reading old endpoints..." subsys=daemon level=info msg="No old endpoints found." subsys=daemon level=info msg="Waiting until all Cilium CRDs are available" subsys=k8s level=info msg="All Cilium CRDs have been found and are available" subsys=k8s level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=info msg="Successfully created CiliumNode resource" subsys=nodediscovery level=warning msg="Unable to create CiliumNode resource, will retry" error="ciliumnodes.cilium.io \"instance\" already exists" subsys=nodediscovery level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=info msg="Received own node information from API server" ipAddr.ipv4=199.204.45.156 ipAddr.ipv6="" k8sNodeIP=199.204.45.156 labels="map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:]" nodeName=instance subsys=k8s v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="k8s mode: Allowing localhost to reach local endpoints" subsys=daemon level=info msg="Detected devices" devices="[]" subsys=linux-datapath level=info msg="Enabling k8s event listener" subsys=k8s-watcher level=info msg="Removing stale endpoint interfaces" subsys=daemon level=info msg="Skipping kvstore configuration" subsys=daemon level=info msg="Waiting until local node addressing before starting watchers depending on it" subsys=k8s-watcher level=info msg="Initializing node addressing" subsys=daemon level=info msg="Initializing cluster-pool IPAM" subsys=ipam v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="Restoring endpoints..." subsys=daemon level=info msg="Endpoints restored" failed=0 restored=0 subsys=daemon level=info msg="Addressing information:" subsys=daemon level=info msg=" Cluster-Name: default" subsys=daemon level=info msg=" Cluster-ID: 0" subsys=daemon level=info msg=" Local node-name: instance" subsys=daemon level=info msg=" Node-IPv6: " subsys=daemon level=info msg=" External-Node IPv4: 199.204.45.156" subsys=daemon level=info msg=" Internal-Node IPv4: 10.0.0.132" subsys=daemon level=info msg=" IPv4 allocation prefix: 10.0.0.0/24" subsys=daemon level=info msg=" Loopback IPv4: 169.254.42.1" subsys=daemon level=info msg=" Local IPv4 addresses:" subsys=daemon level=info msg=" - 199.204.45.156" subsys=daemon level=info msg=" - 172.17.0.100" subsys=daemon level=info msg=" - 10.96.240.200" subsys=daemon level=info msg="Node updated" clusterName=default nodeName=instance subsys=nodemanager level=info msg="Adding local node to cluster" node="{instance default [{InternalIP 199.204.45.156} {CiliumInternalIP 10.0.0.132}] 10.0.0.0/24 [] [] 10.0.0.138 0 local 0 map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:] map[] 1 }" subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Waiting until all pre-existing resources have been received" subsys=k8s-watcher level=info msg="Initializing identity allocator" subsys=identity-cache level=info msg="Allocating identities between range" cluster-id=0 max=65535 min=256 subsys=identity-cache level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.core.bpf_jit_enable sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.all.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.fib_multipath_use_neigh sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.unprivileged_bpf_disabled sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.timer_migration sysParamValue=0 level=info msg="Setting up BPF datapath" bpfClockSource=ktime bpfInsnSet="" subsys=datapath-loader level=info msg="Iptables rules installed" subsys=iptables level=info msg="Adding new proxy port rules for cilium-dns-egress:41863" id=cilium-dns-egress subsys=proxy level=info msg="Iptables proxy rules installed" subsys=iptables level=info msg="Start hook executed" duration=2.659979726s function="cmd.newDaemonPromise.func1 (daemon_main.go:1663)" subsys=hive level=info msg="Initializing daemon" subsys=daemon level=info msg="Validating configured node address ranges" subsys=daemon level=info msg="Start hook executed" duration="17.011µs" function="utime.initUtimeSync.func1 (cell.go:33)" subsys=hive level=info msg="Start hook executed" duration="8.36µs" function="*job.group.Start" subsys=hive level=info msg="Starting IP identity watcher" subsys=ipcache level=info msg="Start hook executed" duration="42.351µs" function="l2respondermap.newMap.func1 (l2_responder_map4.go:44)" subsys=hive level=info msg="Start hook executed" duration="24.171µs" function="*job.group.Start" subsys=hive level=info msg="Starting connection tracking garbage collector" subsys=daemon level=info msg="Initial scan of connection tracking completed" subsys=ct-gc level=info msg="Regenerating restored endpoints" numRestored=0 subsys=daemon level=info msg="Creating host endpoint" subsys=daemon level=info msg="Finished regenerating restored endpoints" regenerated=0 subsys=daemon total=0 level=info msg="Deleted orphan backends" orphanBackends=0 subsys=service level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1968 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1968 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1968 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Launching Cilium health daemon" subsys=daemon level=info msg="Launching Cilium health endpoint" subsys=daemon level=info msg="Started healthz status API server" address="127.0.0.1:9879" subsys=daemon level=info msg="Processing queued endpoint deletion requests from /var/run/cilium/deleteQueue" subsys=daemon level=info msg="processing 0 queued deletion requests" subsys=daemon level=info msg="Initializing Cilium API" subsys=daemon level=info msg="Daemon initialization completed" bootstrapTime=3.597033328s subsys=daemon level=info msg="Hubble server is disabled" subsys=hubble level=info msg="Serving cilium API at unix:///var/run/cilium/cilium.sock" subsys=daemon level=info msg="Compiled new BPF template" BPFCompilationTime=305.577313ms file-path=/var/run/cilium/state/templates/36e01f77654398ad33d1f1e7d5c712f35de38e2acbcd9ab43c66602ac5f012ca/bpf_host.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1968 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2607 ipv4=10.0.0.138 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2607 identityLabels="reserved:health" ipv4=10.0.0.138 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2607 identity=4 identityLabels="reserved:health" ipv4=10.0.0.138 ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.12 f1bb6afc-fc2e-46f4-8549-10aa631bbf18 default }" containerID=bd7cee373a596bdb73c9fc6e3d0b0b0100a209cabedc95c701e9b847b3df0474 datapathConfiguration="&{false false false false false }" interface=lxc038a0d569de4 k8sPodName=kube-system/coredns-7c96b6546b-6ccjt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bd7cee373a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1386 ipv4=10.0.0.12 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-6ccjt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bd7cee373a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1386 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.12 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-6ccjt subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:kube-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=coredns;k8s:io.kubernetes.pod.namespace=kube-system;k8s:k8s-app=kube-dns;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=bd7cee373a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1386 identity=4495 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.12 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-6ccjt oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=bd7cee373a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1386 identity=4495 ipv4=10.0.0.12 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-6ccjt subsys=endpoint level=info msg="Serving cilium health API at unix:///var/run/cilium/health.sock" subsys=health-server level=info msg="Create endpoint request" addressing="&{10.0.0.220 022cf02c-3d94-4d3e-9928-9b29e4686d69 default }" containerID=127cb8dc25838da6e6852cd0170d7d034bf15f3e960dbdd5140e6e375a6a5d34 datapathConfiguration="&{false false false false false }" interface=lxca447a9d4f601 k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-frctf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=127cb8dc25 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=436 ipv4=10.0.0.220 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-frctf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=127cb8dc25 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=436 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=4b86c181-80cd-4843-8d5f-d923fd167ac9,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=4b86c181-80cd-4843-8d5f-d923fd167ac9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.220 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-frctf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=certgen;k8s:batch.kubernetes.io/controller-uid=4b86c181-80cd-4843-8d5f-d923fd167ac9;k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen;k8s:controller-uid=4b86c181-80cd-4843-8d5f-d923fd167ac9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;k8s:job-name=envoy-gateway-gateway-helm-certgen;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=127cb8dc25 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=436 identity=4968 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=4b86c181-80cd-4843-8d5f-d923fd167ac9,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=4b86c181-80cd-4843-8d5f-d923fd167ac9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.220 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-frctf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=127cb8dc25 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=436 identity=4968 ipv4=10.0.0.220 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-frctf subsys=endpoint level=info msg="Compiled new BPF template" BPFCompilationTime=1.151585506s file-path=/var/run/cilium/state/templates/ad9f7fb4ff0fb1a64218bcfad483360817bfb5c5e8cac3c365fae0e6d40e181a/bpf_lxc.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID=bd7cee373a datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1386 identity=4495 ipv4=10.0.0.12 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-6ccjt subsys=endpoint level=info msg="Successful endpoint creation" containerID=bd7cee373a datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1386 identity=4495 ipv4=10.0.0.12 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-6ccjt subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=127cb8dc25 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=436 identity=4968 ipv4=10.0.0.220 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-frctf subsys=endpoint level=info msg="Successful endpoint creation" containerID=127cb8dc25 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=436 identity=4968 ipv4=10.0.0.220 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-frctf subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2607 identity=4 ipv4=10.0.0.138 ipv6= k8sPodName=/ subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=127cb8dc25 endpointID=436 k8sNamespace=envoy-gateway-system k8sPodName=envoy-gateway-gateway-helm-certgen-frctf subsys=daemon level=info msg="Releasing key" key="[k8s:app=certgen k8s:batch.kubernetes.io/controller-uid=4b86c181-80cd-4843-8d5f-d923fd167ac9 k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen k8s:controller-uid=4b86c181-80cd-4843-8d5f-d923fd167ac9 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen k8s:io.kubernetes.pod.namespace=envoy-gateway-system k8s:job-name=envoy-gateway-gateway-helm-certgen]" subsys=allocator level=info msg="Removed endpoint" containerID=127cb8dc25 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=436 identity=4968 ipv4=10.0.0.220 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-frctf subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.56 a0208265-6058-4949-b3a5-5efd6451ac3e default }" containerID=f6b595e64a2e2d2d01afc174e25a8ba853ccfcd64a3e6fe87b2b0a8c3cc65de3 datapathConfiguration="&{false false false false false }" interface=lxcdd222a85fa81 k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-tkbsh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f6b595e64a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3646 ipv4=10.0.0.56 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-tkbsh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f6b595e64a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3646 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.56 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-tkbsh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=f6b595e64a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3646 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.56 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-tkbsh line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=envoy-gateway;k8s:app.kubernetes.io/name=gateway-helm;k8s:control-plane=envoy-gateway;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f6b595e64a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3646 identity=1348 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.56 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-tkbsh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f6b595e64a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3646 identity=1348 ipv4=10.0.0.56 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-tkbsh subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f6b595e64a datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3646 identity=1348 ipv4=10.0.0.56 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-tkbsh subsys=endpoint level=info msg="Successful endpoint creation" containerID=f6b595e64a datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3646 identity=1348 ipv4=10.0.0.56 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-tkbsh subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1968 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_01968 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_01968 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_01968 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_01968:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1968 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.233 89b5dc3a-1099-4b4c-8f2d-d6688f0a9a1e default }" containerID=9ca5b16a3c4c19e581a2c383bd3c0d189c86fa856870b9bb6574bbb5f9c6e72b datapathConfiguration="&{false false false false false }" interface=lxc9ea80bd2d0dd k8sPodName=kube-system/coredns-67659f764b-s8xzf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9ca5b16a3c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=173 ipv4=10.0.0.233 ipv6= k8sPodName=kube-system/coredns-67659f764b-s8xzf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9ca5b16a3c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=173 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.233 ipv6= k8sPodName=kube-system/coredns-67659f764b-s8xzf subsys=endpoint level=info msg="Identity of endpoint changed" containerID=9ca5b16a3c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=173 identity=4495 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.233 ipv6= k8sPodName=kube-system/coredns-67659f764b-s8xzf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9ca5b16a3c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=173 identity=4495 ipv4=10.0.0.233 ipv6= k8sPodName=kube-system/coredns-67659f764b-s8xzf subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.9 294e6319-0caa-4cf1-86f3-029e301374f9 default }" containerID=16662d350a40f27e6a6a85a1fea4ad7eed3df5fb75085e32047024049e783a89 datapathConfiguration="&{false false false false false }" interface=lxcedf7c82ebbce k8sPodName=kube-system/coredns-67659f764b-22ljw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=16662d350a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1114 ipv4=10.0.0.9 ipv6= k8sPodName=kube-system/coredns-67659f764b-22ljw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=16662d350a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1114 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.9 ipv6= k8sPodName=kube-system/coredns-67659f764b-22ljw subsys=endpoint level=info msg="Identity of endpoint changed" containerID=16662d350a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1114 identity=4495 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.9 ipv6= k8sPodName=kube-system/coredns-67659f764b-22ljw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=16662d350a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1114 identity=4495 ipv4=10.0.0.9 ipv6= k8sPodName=kube-system/coredns-67659f764b-22ljw subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9ca5b16a3c datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=173 identity=4495 ipv4=10.0.0.233 ipv6= k8sPodName=kube-system/coredns-67659f764b-s8xzf subsys=endpoint level=info msg="Successful endpoint creation" containerID=9ca5b16a3c datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=173 identity=4495 ipv4=10.0.0.233 ipv6= k8sPodName=kube-system/coredns-67659f764b-s8xzf subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=16662d350a datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1114 identity=4495 ipv4=10.0.0.9 ipv6= k8sPodName=kube-system/coredns-67659f764b-22ljw subsys=endpoint level=info msg="Successful endpoint creation" containerID=16662d350a datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1114 identity=4495 ipv4=10.0.0.9 ipv6= k8sPodName=kube-system/coredns-67659f764b-22ljw subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.182 4a2d8419-13b6-4681-a6fe-fbe1c880e1b8 default }" containerID=c88f76912f7bc465b7c0678e015f254f2d58b57e25c5f724e5f60bcdb175f3c6 datapathConfiguration="&{false false false false false }" interface=lxc3d56fa2942c9 k8sPodName=local-path-storage/local-path-provisioner-679c578f5-hfvrj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c88f76912f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1027 ipv4=10.0.0.182 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-hfvrj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c88f76912f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1027 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.182 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-hfvrj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=local-path-provisioner;k8s:app.kubernetes.io/name=local-path-provisioner;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c88f76912f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1027 identity=2829 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.182 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-hfvrj oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=c88f76912f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1027 identity=2829 ipv4=10.0.0.182 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-hfvrj subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c88f76912f datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1027 identity=2829 ipv4=10.0.0.182 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-hfvrj subsys=endpoint level=info msg="Successful endpoint creation" containerID=c88f76912f datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1027 identity=2829 ipv4=10.0.0.182 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-hfvrj subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=bd7cee373a endpointID=1386 k8sNamespace=kube-system k8sPodName=coredns-7c96b6546b-6ccjt subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=coredns k8s:io.kubernetes.pod.namespace=kube-system k8s:k8s-app=kube-dns]" subsys=allocator level=info msg="Removed endpoint" containerID=bd7cee373a datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1386 identity=4495 ipv4=10.0.0.12 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-6ccjt subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.144 eecbb2d8-760a-48d1-b3a7-c12ecfc26dc2 default }" containerID=d2b4756a8283248af227a78d4a6e7db5d6f27fda93f2c6610d7b9d9c8f534bd3 datapathConfiguration="&{false false false false false }" interface=lxc70afbab1fc0b k8sPodName=cert-manager/cert-manager-webhook-548949fc64-jftx9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d2b4756a82 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2381 ipv4=10.0.0.144 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-jftx9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d2b4756a82 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2381 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.144 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-jftx9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=webhook;k8s:app.kubernetes.io/component=webhook;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=webhook;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d2b4756a82 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2381 identity=19139 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.144 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-jftx9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d2b4756a82 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2381 identity=19139 ipv4=10.0.0.144 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-jftx9 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.110 a73ed040-b5c0-458c-9da2-a7c8b56e0ebc default }" containerID=254e92f4db0a51128fc188724e5e37c14f4fc75d573875c208d420a9966d2cf4 datapathConfiguration="&{false false false false false }" interface=lxc696cff731bd4 k8sPodName=cert-manager/cert-manager-75c4c745bc-dz657 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=254e92f4db datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2588 ipv4=10.0.0.110 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-dz657 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=254e92f4db datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2588 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.110 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-dz657 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.32 1e4b5f7e-0809-4923-85d3-16ee81c7b671 default }" containerID=055a79305dfb8e51db1dd063a9279587a6c42c4bc906c099a15f9d2b0610a9d4 datapathConfiguration="&{false false false false false }" interface=lxcee4af4d522c3 k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-l4ck5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=055a79305d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=833 ipv4=10.0.0.32 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-l4ck5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=055a79305d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=833 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.32 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-l4ck5 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=cert-manager;k8s:app.kubernetes.io/component=controller;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cert-manager;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=254e92f4db datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2588 identity=12886 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.110 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-dz657 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=254e92f4db datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2588 identity=12886 ipv4=10.0.0.110 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-dz657 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=cainjector;k8s:app.kubernetes.io/component=cainjector;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cainjector;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=055a79305d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=833 identity=32728 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.32 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-l4ck5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=055a79305d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=833 identity=32728 ipv4=10.0.0.32 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-l4ck5 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d2b4756a82 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2381 identity=19139 ipv4=10.0.0.144 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-jftx9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=d2b4756a82 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2381 identity=19139 ipv4=10.0.0.144 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-jftx9 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=254e92f4db datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2588 identity=12886 ipv4=10.0.0.110 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-dz657 subsys=endpoint level=info msg="Successful endpoint creation" containerID=254e92f4db datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2588 identity=12886 ipv4=10.0.0.110 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-dz657 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=055a79305d datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=833 identity=32728 ipv4=10.0.0.32 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-l4ck5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=055a79305d datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=833 identity=32728 ipv4=10.0.0.32 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-l4ck5 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.217 7eb54ae5-e5f4-4b87-ab45-9378d69388c8 default }" containerID=254353090a60ceb6123f84175a5eeb50c264ed41250fd502b0cbcc28a8a6ed19 datapathConfiguration="&{false false false false false }" interface=lxc545f614658a4 k8sPodName=cert-manager/cert-manager-startupapicheck-b2hqr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=254353090a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1276 ipv4=10.0.0.217 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-b2hqr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=254353090a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1276 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=390fdba6-5abb-4b07-8dee-45dad92e0762,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=390fdba6-5abb-4b07-8dee-45dad92e0762,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.217 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-b2hqr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=startupapicheck;k8s:app.kubernetes.io/component=startupapicheck;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=startupapicheck;k8s:app.kubernetes.io/version=v1.11.5;k8s:batch.kubernetes.io/controller-uid=390fdba6-5abb-4b07-8dee-45dad92e0762;k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck;k8s:controller-uid=390fdba6-5abb-4b07-8dee-45dad92e0762;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck;k8s:io.kubernetes.pod.namespace=cert-manager;k8s:job-name=cert-manager-startupapicheck;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=254353090a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1276 identity=4106 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=390fdba6-5abb-4b07-8dee-45dad92e0762,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=390fdba6-5abb-4b07-8dee-45dad92e0762,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.217 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-b2hqr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=254353090a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1276 identity=4106 ipv4=10.0.0.217 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-b2hqr subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=254353090a datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1276 identity=4106 ipv4=10.0.0.217 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-b2hqr subsys=endpoint level=info msg="Successful endpoint creation" containerID=254353090a datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1276 identity=4106 ipv4=10.0.0.217 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-b2hqr subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=254353090a endpointID=1276 k8sNamespace=cert-manager k8sPodName=cert-manager-startupapicheck-b2hqr subsys=daemon level=info msg="Releasing key" key="[k8s:app=startupapicheck k8s:app.kubernetes.io/component=startupapicheck k8s:app.kubernetes.io/instance=cert-manager k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=startupapicheck k8s:app.kubernetes.io/version=v1.11.5 k8s:batch.kubernetes.io/controller-uid=390fdba6-5abb-4b07-8dee-45dad92e0762 k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck k8s:controller-uid=390fdba6-5abb-4b07-8dee-45dad92e0762 k8s:helm.sh/chart=cert-manager-v1.11.5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager k8s:io.cilium.k8s.namespace.labels.name=cert-manager k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck k8s:io.kubernetes.pod.namespace=cert-manager k8s:job-name=cert-manager-startupapicheck]" subsys=allocator level=info msg="Removed endpoint" containerID=254353090a datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1276 identity=4106 ipv4=10.0.0.217 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-b2hqr subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.76 fb1e1f8b-798b-403b-9af5-2a6d19bdbee4 default }" containerID=602d3a8a16c0295683e1b68ba8a44960c1fa222d6bafd666234efdd214891058 datapathConfiguration="&{false false false false false }" interface=lxc411a1c35542d k8sPodName=ingress-nginx/ingress-nginx-admission-create-5dk57 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=602d3a8a16 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=778 ipv4=10.0.0.76 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-5dk57 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=602d3a8a16 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=778 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=999b03ee-f5ae-4d8f-aa07-f608821beeff,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=999b03ee-f5ae-4d8f-aa07-f608821beeff,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.76 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-5dk57 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=602d3a8a16 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=778 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.76 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-5dk57 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=999b03ee-f5ae-4d8f-aa07-f608821beeff;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create;k8s:controller-uid=999b03ee-f5ae-4d8f-aa07-f608821beeff;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-create;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=602d3a8a16 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=778 identity=24906 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=999b03ee-f5ae-4d8f-aa07-f608821beeff,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=999b03ee-f5ae-4d8f-aa07-f608821beeff,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.76 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-5dk57 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=602d3a8a16 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=778 identity=24906 ipv4=10.0.0.76 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-5dk57 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=602d3a8a16 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=778 identity=24906 ipv4=10.0.0.76 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-5dk57 subsys=endpoint level=info msg="Successful endpoint creation" containerID=602d3a8a16 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=778 identity=24906 ipv4=10.0.0.76 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-5dk57 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=602d3a8a16 endpointID=778 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-create-5dk57 subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=999b03ee-f5ae-4d8f-aa07-f608821beeff k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create k8s:controller-uid=999b03ee-f5ae-4d8f-aa07-f608821beeff k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-create]" subsys=allocator level=info msg="Removed endpoint" containerID=602d3a8a16 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=778 identity=24906 ipv4=10.0.0.76 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-5dk57 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.140 efaa291c-40e8-42af-bc3c-a07423a8d094 default }" containerID=1bc358939af526db0e61e9c0594e189b3fe082e12bfd919effb73d3e3d160b14 datapathConfiguration="&{false false false false false }" interface=lxceb4ad8215c1d k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-8v468 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1bc358939a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1024 ipv4=10.0.0.140 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-8v468 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1bc358939a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1024 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.140 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-8v468 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=default-backend;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend;k8s:io.kubernetes.pod.namespace=ingress-nginx;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1bc358939a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1024 identity=4780 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.140 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-8v468 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1bc358939a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1024 identity=4780 ipv4=10.0.0.140 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-8v468 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=1bc358939a datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1024 identity=4780 ipv4=10.0.0.140 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-8v468 subsys=endpoint level=info msg="Successful endpoint creation" containerID=1bc358939a datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1024 identity=4780 ipv4=10.0.0.140 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-8v468 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.10 b69fca7e-e7d4-410d-a75d-29f7a9229b0e default }" containerID=13f8de35c39337b129a12ee27a52a1895e28d09a12e6744e3dff5924e0712282 datapathConfiguration="&{false false false false false }" interface=lxc52d077ada5dc k8sPodName=ingress-nginx/ingress-nginx-admission-patch-hpfqr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=13f8de35c3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1893 ipv4=10.0.0.10 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-hpfqr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=13f8de35c3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1893 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=c2c559be-a53b-4c72-96e3-8b883ac1225c,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=c2c559be-a53b-4c72-96e3-8b883ac1225c,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.10 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-hpfqr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=c2c559be-a53b-4c72-96e3-8b883ac1225c;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch;k8s:controller-uid=c2c559be-a53b-4c72-96e3-8b883ac1225c;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-patch;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=13f8de35c3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1893 identity=57141 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=c2c559be-a53b-4c72-96e3-8b883ac1225c,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=c2c559be-a53b-4c72-96e3-8b883ac1225c,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.10 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-hpfqr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=13f8de35c3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1893 identity=57141 ipv4=10.0.0.10 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-hpfqr subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=13f8de35c3 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1893 identity=57141 ipv4=10.0.0.10 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-hpfqr subsys=endpoint level=info msg="Successful endpoint creation" containerID=13f8de35c3 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1893 identity=57141 ipv4=10.0.0.10 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-hpfqr subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=13f8de35c3 endpointID=1893 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-patch-hpfqr subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=c2c559be-a53b-4c72-96e3-8b883ac1225c k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch k8s:controller-uid=c2c559be-a53b-4c72-96e3-8b883ac1225c k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-patch]" subsys=allocator level=info msg="Removed endpoint" containerID=13f8de35c3 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1893 identity=57141 ipv4=10.0.0.10 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-hpfqr subsys=endpoint level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"rabbitmq-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-cluster-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=96c22ffa-dabf-43d0-87a9-5239de942fe9] Description:}]" policyAddRequest=42f27869-3818-4076-a271-1364d67ba6ea subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=42f27869-3818-4076-a271-1364d67ba6ea policyRevision=2 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-cluster-operator subsys=k8s-watcher level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"messaging-topology-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9443 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-messaging-topology-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=c61ca0b2-6d21-4ecf-8e6b-0a967b96c691] Description:}]" policyAddRequest=0979903e-58f7-4e2a-aef6-aeabe731213f subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-messaging-topology-operator subsys=k8s-watcher level=info msg="Policy imported via API, recalculating..." policyAddRequest=0979903e-58f7-4e2a-aef6-aeabe731213f policyRevision=3 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.37 8a8d99e4-2fc3-4f58-ad91-99564df82d33 default }" containerID=251ef521eba5a09db46cac95b5009eb641e0d6395bd8c1122b9758d1daf243b9 datapathConfiguration="&{false false false false false }" interface=lxc1a1c6d058d33 k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-z9hfw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=251ef521eb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=456 ipv4=10.0.0.37 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-z9hfw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=251ef521eb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=456 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.9.0,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.37 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-z9hfw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=2.9.0;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=251ef521eb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=456 identity=3735 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.9.0,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.37 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-z9hfw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=251ef521eb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=456 identity=3735 ipv4=10.0.0.37 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-z9hfw subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=251ef521eb datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=456 identity=3735 ipv4=10.0.0.37 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-z9hfw subsys=endpoint level=info msg="Successful endpoint creation" containerID=251ef521eb datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=456 identity=3735 ipv4=10.0.0.37 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-z9hfw subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.253 6c119eec-821c-4fa3-ada5-661b046a5112 default }" containerID=775dfe4827264fd3c1cc20d46fde71312d40d76fdd420222eb2cab32f6d90bf1 datapathConfiguration="&{false false false false false }" interface=lxc12e3a45f5fd6 k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-vn9vq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=775dfe4827 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1052 ipv4=10.0.0.253 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-vn9vq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=775dfe4827 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1052 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.14.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.253 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-vn9vq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=messaging-topology-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=1.14.1;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=775dfe4827 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1052 identity=4159 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.14.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.253 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-vn9vq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=775dfe4827 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1052 identity=4159 ipv4=10.0.0.253 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-vn9vq subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=775dfe4827 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1052 identity=4159 ipv4=10.0.0.253 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-vn9vq subsys=endpoint level=info msg="Successful endpoint creation" containerID=775dfe4827 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1052 identity=4159 ipv4=10.0.0.253 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-vn9vq subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.235 1e2c4049-7191-4cf6-a41d-942ba06bb64c default }" containerID=98ca1530c0ccd255d2a01a1cd1f19fd5e2d76d71015c00cf4cdc824cb8425a8e datapathConfiguration="&{false false false false false }" interface=lxce930125d17c4 k8sPodName=openstack/pxc-operator-69cb5bbdb9-r5q72 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=98ca1530c0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=908 ipv4=10.0.0.235 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-r5q72 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=98ca1530c0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=908 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.235 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-r5q72 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=98ca1530c0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=908 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.235 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-r5q72 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=operator;k8s:app.kubernetes.io/instance=pxc-operator;k8s:app.kubernetes.io/name=pxc-operator;k8s:app.kubernetes.io/part-of=pxc-operator;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=98ca1530c0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=908 identity=34217 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.235 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-r5q72 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=98ca1530c0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=908 identity=34217 ipv4=10.0.0.235 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-r5q72 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=98ca1530c0 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=908 identity=34217 ipv4=10.0.0.235 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-r5q72 subsys=endpoint level=info msg="Successful endpoint creation" containerID=98ca1530c0 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=908 identity=34217 ipv4=10.0.0.235 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-r5q72 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.254 c6bb4d64-c759-496c-9468-cb578f264a65 default }" containerID=fa0b2bcdba374f66a7b777d20ae29579e5b1bc7197520e0bfe0dadf6bb339fdc datapathConfiguration="&{false false false false false }" interface=lxc103f12a203de k8sPodName=openstack/percona-xtradb-haproxy-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fa0b2bcdba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1973 ipv4=10.0.0.254 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fa0b2bcdba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1973 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.254 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=haproxy;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fa0b2bcdba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1973 identity=58373 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.254 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fa0b2bcdba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1973 identity=58373 ipv4=10.0.0.254 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=fa0b2bcdba datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1973 identity=58373 ipv4=10.0.0.254 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=fa0b2bcdba datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1973 identity=58373 ipv4=10.0.0.254 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.139 85df9870-6840-47b6-9cde-5319280cf166 default }" containerID=4885d5308c75ea3f762c396b508fb2c407b2af1cf1b781ace3895ffcf4a11c02 datapathConfiguration="&{false false false false false }" interface=lxcaadd5c7801e6 k8sPodName=local-path-storage/helper-pod-create-pvc-f326b28b-dbfc-410f-ad23-af29e80c298b labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4885d5308c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3473 ipv4=10.0.0.139 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f326b28b-dbfc-410f-ad23-af29e80c298b subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4885d5308c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3473 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.139 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f326b28b-dbfc-410f-ad23-af29e80c298b subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4885d5308c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3473 identity=11276 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.139 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f326b28b-dbfc-410f-ad23-af29e80c298b oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4885d5308c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3473 identity=11276 ipv4=10.0.0.139 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f326b28b-dbfc-410f-ad23-af29e80c298b subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4885d5308c datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=3473 identity=11276 ipv4=10.0.0.139 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f326b28b-dbfc-410f-ad23-af29e80c298b subsys=endpoint level=info msg="Successful endpoint creation" containerID=4885d5308c datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=3473 identity=11276 ipv4=10.0.0.139 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f326b28b-dbfc-410f-ad23-af29e80c298b subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=4885d5308c endpointID=3473 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-f326b28b-dbfc-410f-ad23-af29e80c298b subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=4885d5308c datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=3473 identity=11276 ipv4=10.0.0.139 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f326b28b-dbfc-410f-ad23-af29e80c298b subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.239 827a0e60-bc1e-492a-93c1-34bc4593daa2 default }" containerID=31dd9d310ac65f398aa931a2f4043c04f04f80f9659355cc784814ff90d74418 datapathConfiguration="&{false false false false false }" interface=lxc163592a8dfcf k8sPodName=openstack/percona-xtradb-pxc-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=31dd9d310a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=903 ipv4=10.0.0.239 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=31dd9d310a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=903 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.239 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=pxc;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=31dd9d310a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=903 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.239 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=31dd9d310a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=903 identity=10025 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.239 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=31dd9d310a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=903 identity=10025 ipv4=10.0.0.239 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=31dd9d310a datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=903 identity=10025 ipv4=10.0.0.239 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=31dd9d310a datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=903 identity=10025 ipv4=10.0.0.239 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/instance\":\"valkey\",\"k8s:app.kubernetes.io/name\":\"valkey\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:6379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:26379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:} {IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9121 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=valkey k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=2a890056-a3d9-4281-b92f-a0c71278e35d] Description:}]" policyAddRequest=07abef30-a78d-4209-b91d-0317ca7ba1f7 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=07abef30-a78d-4209-b91d-0317ca7ba1f7 policyRevision=4 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=valkey subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.127 397a5dfc-6ce6-436e-9896-e9919459ea7c default }" containerID=ac03aa8a6a9613e4c804f69abb3965166892a4634dc93f51d8fdba559a07b018 datapathConfiguration="&{false false false false false }" interface=lxcca91cf37a30b k8sPodName=local-path-storage/helper-pod-create-pvc-d3234171-550f-475a-97a3-1c25dec55dc0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ac03aa8a6a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3966 ipv4=10.0.0.127 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d3234171-550f-475a-97a3-1c25dec55dc0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ac03aa8a6a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3966 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.127 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d3234171-550f-475a-97a3-1c25dec55dc0 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ac03aa8a6a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3966 identity=11276 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.127 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d3234171-550f-475a-97a3-1c25dec55dc0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ac03aa8a6a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3966 identity=11276 ipv4=10.0.0.127 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d3234171-550f-475a-97a3-1c25dec55dc0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ac03aa8a6a datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3966 identity=11276 ipv4=10.0.0.127 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d3234171-550f-475a-97a3-1c25dec55dc0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=ac03aa8a6a datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3966 identity=11276 ipv4=10.0.0.127 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d3234171-550f-475a-97a3-1c25dec55dc0 subsys=daemon level=info msg="Delete endpoint request" containerID=ac03aa8a6a endpointID=3966 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-d3234171-550f-475a-97a3-1c25dec55dc0 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=ac03aa8a6a datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3966 identity=11276 ipv4=10.0.0.127 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d3234171-550f-475a-97a3-1c25dec55dc0 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.244 50e8c343-c548-4c42-8e19-802be8bc981c default }" containerID=5dbeed9752c80e17a05159554b1237369fdc9bcbde63321be73550d5d144da6e datapathConfiguration="&{false false false false false }" interface=lxcb9b237ef9893 k8sPodName=openstack/valkey-node-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5dbeed9752 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=972 ipv4=10.0.0.244 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5dbeed9752 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=972 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.244 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=node;k8s:app.kubernetes.io/instance=valkey;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=valkey;k8s:app.kubernetes.io/version=8.0.2;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=valkey-2.4.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=valkey;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=valkey-node-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5dbeed9752 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=972 identity=41162 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.244 ipv6= k8sPodName=openstack/valkey-node-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5dbeed9752 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=972 identity=41162 ipv4=10.0.0.244 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=5dbeed9752 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=972 identity=41162 ipv4=10.0.0.244 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=5dbeed9752 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=972 identity=41162 ipv4=10.0.0.244 ipv6= k8sPodName=openstack/valkey-node-0 subsys=daemon level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"keycloak\",\"k8s:app.kubernetes.io/instance\":\"keycloak\",\"k8s:app.kubernetes.io/name\":\"keycloak\",\"k8s:io.kubernetes.pod.namespace\":\"auth-system\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:7800 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:8080 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=keycloak k8s:io.cilium.k8s.policy.namespace=auth-system k8s:io.cilium.k8s.policy.uid=5d2ab2d0-fbe1-4d3b-84d4-89a3012f3841] Description:}]" policyAddRequest=7530133c-dc6f-47f3-8b1a-7ab1d6b832f6 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=7530133c-dc6f-47f3-8b1a-7ab1d6b832f6 policyRevision=5 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=keycloak subsys=k8s-watcher level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.216 15ced3b0-24d3-4fe5-bfd9-8c4ac1ad3f43 default }" containerID=3c570c86095a62ea699632bcd1583b7c8f44a31cc8a3d2b796da17f6a60c1e51 datapathConfiguration="&{false false false false false }" interface=lxcae29414cde6a k8sPodName=auth-system/keycloak-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3c570c8609 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=935 ipv4=10.0.0.216 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3c570c8609 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=935 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.216 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:auth-system k8s:io.cilium.k8s.namespace.labels.name:auth-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=keycloak;k8s:app.kubernetes.io/instance=keycloak;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=keycloak;k8s:app.kubernetes.io/version=24.0.5;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=keycloak-21.4.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system;k8s:io.cilium.k8s.namespace.labels.name=auth-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keycloak;k8s:io.kubernetes.pod.namespace=auth-system;k8s:statefulset.kubernetes.io/pod-name=keycloak-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3c570c8609 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=935 identity=7903 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.216 ipv6= k8sPodName=auth-system/keycloak-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3c570c8609 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=935 identity=7903 ipv4=10.0.0.216 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3c570c8609 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=935 identity=7903 ipv4=10.0.0.216 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=3c570c8609 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=935 identity=7903 ipv4=10.0.0.216 ipv6= k8sPodName=auth-system/keycloak-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.009593923735576989 newInterval=7m30s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.215 22e870f3-55bb-4c35-ab08-53064cddc922 default }" containerID=44653b4b726470d54695661592a27807c99d0b6de4dd660b5f30e2eae19f0cc1 datapathConfiguration="&{false false false false false }" interface=lxce401ff4e4746 k8sPodName=monitoring/node-feature-discovery-worker-9h5f8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=44653b4b72 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2008 ipv4=10.0.0.215 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-9h5f8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=44653b4b72 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2008 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.215 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-9h5f8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=worker;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=44653b4b72 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2008 identity=24334 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.215 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-9h5f8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=44653b4b72 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2008 identity=24334 ipv4=10.0.0.215 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-9h5f8 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=44653b4b72 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2008 identity=24334 ipv4=10.0.0.215 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-9h5f8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=44653b4b72 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2008 identity=24334 ipv4=10.0.0.215 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-9h5f8 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.206 4e000f3f-16c1-45d3-b3af-26c4af4805fd default }" containerID=95fa0496be187a4426a3ff9a86d118fbd807827f06ab36c97e73a1018ad41791 datapathConfiguration="&{false false false false false }" interface=lxcbc2155b24b89 k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-4x8kb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=95fa0496be datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=285 ipv4=10.0.0.206 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-4x8kb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=95fa0496be datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=285 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.206 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-4x8kb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.248 a2789656-acfe-4e6f-962e-800ae5ca8ffb default }" containerID=43fe353384c86d5869bcac84125334d431b4e2063072e62a23010fd9da5f1d01 datapathConfiguration="&{false false false false false }" interface=lxcdddf6e5460b7 k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-44w2h labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=43fe353384 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1143 ipv4=10.0.0.248 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-44w2h subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=43fe353384 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1143 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.248 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-44w2h subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=gc;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=95fa0496be datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=285 identity=20902 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.206 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-4x8kb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=95fa0496be datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=285 identity=20902 ipv4=10.0.0.206 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-4x8kb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=master;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=43fe353384 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1143 identity=23635 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.248 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-44w2h oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=43fe353384 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1143 identity=23635 ipv4=10.0.0.248 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-44w2h subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=95fa0496be datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=285 identity=20902 ipv4=10.0.0.206 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-4x8kb subsys=endpoint level=info msg="Successful endpoint creation" containerID=95fa0496be datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=285 identity=20902 ipv4=10.0.0.206 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-4x8kb subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=43fe353384 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1143 identity=23635 ipv4=10.0.0.248 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-44w2h subsys=endpoint level=info msg="Successful endpoint creation" containerID=43fe353384 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1143 identity=23635 ipv4=10.0.0.248 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-44w2h subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.66 cb11fa68-55e8-4c8e-a673-0a4528eff3e6 default }" containerID=29e3b05d08b3b60d93a759dc68abf511c572b872d9c64ba4b8c470e78ed4b745 datapathConfiguration="&{false false false false false }" interface=lxc412b8a1d0304 k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-x64vt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=29e3b05d08 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1866 ipv4=10.0.0.66 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-x64vt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=29e3b05d08 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1866 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.66 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-x64vt subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:secretgen-controller]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=secretgen-controller;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa;k8s:io.kubernetes.pod.namespace=secretgen-controller;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=29e3b05d08 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1866 identity=749 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.66 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-x64vt oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=29e3b05d08 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1866 identity=749 ipv4=10.0.0.66 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-x64vt subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=29e3b05d08 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1866 identity=749 ipv4=10.0.0.66 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-x64vt subsys=endpoint level=info msg="Successful endpoint creation" containerID=29e3b05d08 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1866 identity=749 ipv4=10.0.0.66 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-x64vt subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1968 identity=1 identityLabels="k8s:feature.node.kubernetes.io/cpu-cpuid.ADX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AESNI=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX2=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CLZERO=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CMPXCHG8=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FMA3=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSROPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.HYPERVISOR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IA32_ARCH_CAP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBPB=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBRS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.LAHF=true,k8s:feature.node.kubernetes.io/cpu-cpuid.MOVBE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.NRIPS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.OSXSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SHA=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SPEC_CTRL_SSBD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SSE4A=true,k8s:feature.node.kubernetes.io/cpu-cpuid.STIBP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVM=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVMNP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSCALL=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSEE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.TOPEXT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.WBNOINVD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.X87=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XGETBV1=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEC=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEOPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVES=true,k8s:feature.node.kubernetes.io/cpu-hardware_multithreading=false,k8s:feature.node.kubernetes.io/cpu-model.family=23,k8s:feature.node.kubernetes.io/cpu-model.id=49,k8s:feature.node.kubernetes.io/cpu-model.vendor_id=AMD,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ=true,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ_IDLE=true,k8s:feature.node.kubernetes.io/kernel-version.full=5.15.0-174-generic,k8s:feature.node.kubernetes.io/kernel-version.major=5,k8s:feature.node.kubernetes.io/kernel-version.minor=15,k8s:feature.node.kubernetes.io/kernel-version.revision=0,k8s:feature.node.kubernetes.io/pci-0300_1af4.present=true,k8s:feature.node.kubernetes.io/system-os_release.ID=ubuntu,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.major=22,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.minor=04,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID=22.04,k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_01968 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_01968 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_01968 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_01968:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1968 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.141 af7a54c6-4875-462d-96de-2d6f552bffdf default }" containerID=c95fef3f9d96e224565bb56fbd0d7b9298844886d02467a639464bb6e3f5b229 datapathConfiguration="&{false false false false false }" interface=lxc7159cef034e6 k8sPodName=monitoring/kube-prometheus-stack-admission-create-xcpzn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c95fef3f9d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1173 ipv4=10.0.0.141 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-xcpzn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c95fef3f9d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1173 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=a18bd553-4937-4dfe-a6e9-44449a9fe982,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=a18bd553-4937-4dfe-a6e9-44449a9fe982,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.141 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-xcpzn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-create;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=a18bd553-4937-4dfe-a6e9-44449a9fe982;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=a18bd553-4937-4dfe-a6e9-44449a9fe982;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-create;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c95fef3f9d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1173 identity=60382 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=a18bd553-4937-4dfe-a6e9-44449a9fe982,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=a18bd553-4937-4dfe-a6e9-44449a9fe982,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.141 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-xcpzn oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=c95fef3f9d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1173 identity=60382 ipv4=10.0.0.141 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-xcpzn subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c95fef3f9d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1173 identity=60382 ipv4=10.0.0.141 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-xcpzn subsys=endpoint level=info msg="Successful endpoint creation" containerID=c95fef3f9d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1173 identity=60382 ipv4=10.0.0.141 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-xcpzn subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=c95fef3f9d endpointID=1173 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-create-xcpzn subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-create k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=a18bd553-4937-4dfe-a6e9-44449a9fe982 k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=a18bd553-4937-4dfe-a6e9-44449a9fe982 k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-create k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=c95fef3f9d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1173 identity=60382 ipv4=10.0.0.141 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-xcpzn subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.1 56b01385-1045-45b1-a466-d99424926aa2 default }" containerID=cd9138a2eb994c70353fe6e16a5c7b060f87ebda2f2ce9f6f9771f4904b4c5b9 datapathConfiguration="&{false false false false false }" interface=lxcbf602b4d42f3 k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-fd5gf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=cd9138a2eb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3497 ipv4=10.0.0.1 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-fd5gf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=cd9138a2eb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3497 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.1 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-fd5gf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=metrics;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-state-metrics;k8s:app.kubernetes.io/part-of=kube-state-metrics;k8s:app.kubernetes.io/version=2.12.0;k8s:helm.sh/chart=kube-state-metrics-5.20.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=cd9138a2eb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3497 identity=48250 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.1 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-fd5gf oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=cd9138a2eb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3497 identity=48250 ipv4=10.0.0.1 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-fd5gf subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=cd9138a2eb datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3497 identity=48250 ipv4=10.0.0.1 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-fd5gf subsys=endpoint level=info msg="Successful endpoint creation" containerID=cd9138a2eb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3497 identity=48250 ipv4=10.0.0.1 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-fd5gf subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.214 d5629656-3111-4502-ba82-798ed5c41146 default }" containerID=b2f9c8c0f64a3c68cdfe0dd5f8af0b1ef0478a854c1ccbc9b79698647e76603d datapathConfiguration="&{false false false false false }" interface=lxc692a89e7c7f8 k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-qlhnp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b2f9c8c0f6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3450 ipv4=10.0.0.214 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-qlhnp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b2f9c8c0f6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3450 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.214 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-qlhnp subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.101 b4796e81-4c5b-460f-bca0-cce77d0dda42 default }" containerID=edfaec30b59e0381662e1e9729d0007b799e05db8ae10b6fbe0011bd4ae82246 datapathConfiguration="&{false false false false false }" interface=lxc5453d9977b12 k8sPodName=monitoring/kube-prometheus-stack-grafana-7cd868bcf9-8gwqv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=edfaec30b5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4008 ipv4=10.0.0.101 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-7cd868bcf9-8gwqv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Resolving identity labels (blocking)" containerID=edfaec30b5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4008 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.101 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-7cd868bcf9-8gwqv subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-operator;k8s:app.kubernetes.io/component=prometheus-operator;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:chart=kube-prometheus-stack-60.2.0;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b2f9c8c0f6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3450 identity=57295 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.214 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-qlhnp oldIdentity="no identity" subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Waiting for endpoint to be generated" containerID=b2f9c8c0f6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3450 identity=57295 ipv4=10.0.0.214 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-qlhnp subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/name=grafana;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=edfaec30b5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4008 identity=11785 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.101 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-7cd868bcf9-8gwqv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=edfaec30b5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4008 identity=11785 ipv4=10.0.0.101 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-7cd868bcf9-8gwqv subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b2f9c8c0f6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3450 identity=57295 ipv4=10.0.0.214 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-qlhnp subsys=endpoint level=info msg="Successful endpoint creation" containerID=b2f9c8c0f6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3450 identity=57295 ipv4=10.0.0.214 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-qlhnp subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=edfaec30b5 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=4008 identity=11785 ipv4=10.0.0.101 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-7cd868bcf9-8gwqv subsys=endpoint level=info msg="Successful endpoint creation" containerID=edfaec30b5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=4008 identity=11785 ipv4=10.0.0.101 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-7cd868bcf9-8gwqv subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.234 b7c0d066-af4c-441f-991f-3b066e3e40b5 default }" containerID=d046e50138f2cac174b7b1a693968c2394cec4daaeb808eeae91b4b6731e6012 datapathConfiguration="&{false false false false false }" interface=lxcd0be4da81278 k8sPodName=monitoring/kube-prometheus-stack-admission-patch-jhf5f labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d046e50138 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=905 ipv4=10.0.0.234 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-jhf5f subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d046e50138 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=905 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=96448211-46c8-414c-825e-329a5a25fce4,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=96448211-46c8-414c-825e-329a5a25fce4,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.234 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-jhf5f subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-patch;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=96448211-46c8-414c-825e-329a5a25fce4;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=96448211-46c8-414c-825e-329a5a25fce4;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-patch;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d046e50138 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=905 identity=42729 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=96448211-46c8-414c-825e-329a5a25fce4,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=96448211-46c8-414c-825e-329a5a25fce4,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.234 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-jhf5f oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d046e50138 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=905 identity=42729 ipv4=10.0.0.234 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-jhf5f subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d046e50138 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=905 identity=42729 ipv4=10.0.0.234 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-jhf5f subsys=endpoint level=info msg="Successful endpoint creation" containerID=d046e50138 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=905 identity=42729 ipv4=10.0.0.234 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-jhf5f subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.112 4aa80dcb-5670-4ec0-8365-0e866ab31b73 default }" containerID=8d3b64d033cef38e639ed8dc76efe27249f54feafaaae721156c8bdf7b14dac0 datapathConfiguration="&{false false false false false }" interface=lxca33d6c2b125b k8sPodName=local-path-storage/helper-pod-create-pvc-2a09f6a3-9266-4641-a3ef-db09bd9d393b labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8d3b64d033 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2311 ipv4=10.0.0.112 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2a09f6a3-9266-4641-a3ef-db09bd9d393b subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8d3b64d033 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2311 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.112 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2a09f6a3-9266-4641-a3ef-db09bd9d393b subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8d3b64d033 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2311 identity=11276 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.112 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2a09f6a3-9266-4641-a3ef-db09bd9d393b oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8d3b64d033 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2311 identity=11276 ipv4=10.0.0.112 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2a09f6a3-9266-4641-a3ef-db09bd9d393b subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8d3b64d033 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2311 identity=11276 ipv4=10.0.0.112 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2a09f6a3-9266-4641-a3ef-db09bd9d393b subsys=endpoint level=info msg="Successful endpoint creation" containerID=8d3b64d033 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2311 identity=11276 ipv4=10.0.0.112 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2a09f6a3-9266-4641-a3ef-db09bd9d393b subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.150 ef769007-827e-4dd9-81ef-1b544adc8c96 default }" containerID=0cbfc445ba5eed1868ce21ee604031b14442afc6b176b1b75bc2a3457ef789bc datapathConfiguration="&{false false false false false }" interface=lxcee046c684d33 k8sPodName=local-path-storage/helper-pod-create-pvc-ca86d3d3-d888-4c68-b273-288fc3a52f7e labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0cbfc445ba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1599 ipv4=10.0.0.150 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ca86d3d3-d888-4c68-b273-288fc3a52f7e subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0cbfc445ba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1599 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.150 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ca86d3d3-d888-4c68-b273-288fc3a52f7e subsys=endpoint level=info msg="Identity of endpoint changed" containerID=0cbfc445ba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1599 identity=11276 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.150 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ca86d3d3-d888-4c68-b273-288fc3a52f7e oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0cbfc445ba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1599 identity=11276 ipv4=10.0.0.150 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ca86d3d3-d888-4c68-b273-288fc3a52f7e subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0cbfc445ba datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1599 identity=11276 ipv4=10.0.0.150 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ca86d3d3-d888-4c68-b273-288fc3a52f7e subsys=endpoint level=info msg="Successful endpoint creation" containerID=0cbfc445ba datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1599 identity=11276 ipv4=10.0.0.150 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ca86d3d3-d888-4c68-b273-288fc3a52f7e subsys=daemon level=info msg="Delete endpoint request" containerID=d046e50138 endpointID=905 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-patch-jhf5f subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-patch k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=96448211-46c8-414c-825e-329a5a25fce4 k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=96448211-46c8-414c-825e-329a5a25fce4 k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-patch k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=d046e50138 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=905 identity=42729 ipv4=10.0.0.234 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-jhf5f subsys=endpoint level=info msg="Delete endpoint request" containerID=0cbfc445ba endpointID=1599 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-ca86d3d3-d888-4c68-b273-288fc3a52f7e subsys=daemon level=info msg="Delete endpoint request" containerID=8d3b64d033 endpointID=2311 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-2a09f6a3-9266-4641-a3ef-db09bd9d393b subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=0cbfc445ba datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1599 identity=11276 ipv4=10.0.0.150 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ca86d3d3-d888-4c68-b273-288fc3a52f7e subsys=endpoint level=info msg="Removed endpoint" containerID=8d3b64d033 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2311 identity=11276 ipv4=10.0.0.112 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2a09f6a3-9266-4641-a3ef-db09bd9d393b subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.191 fb67d157-dc5e-4dc5-a559-d73ec7624fc4 default }" containerID=44344589b46386dad4956291269f3c4caf5ceb31b0b48b324dab44d5723f3f12 datapathConfiguration="&{false false false false false }" interface=lxcdb45a1c97672 k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=44344589b4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=835 ipv4=10.0.0.191 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=44344589b4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=835 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.191 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:alertmanager=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=alertmanager;k8s:app.kubernetes.io/version=0.27.0;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=44344589b4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=835 identity=1776 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.191 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=44344589b4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=835 identity=1776 ipv4=10.0.0.191 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=44344589b4 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=835 identity=1776 ipv4=10.0.0.191 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=44344589b4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=835 identity=1776 ipv4=10.0.0.191 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.57 b074722d-86e8-4a69-b465-a6f3d6daae29 default }" containerID=605e19a366f98e408acc0c0f4cf5e70f2f6cfd948454e40b1ba9d49137221c53 datapathConfiguration="&{false false false false false }" interface=lxcda3f98bf7be6 k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=605e19a366 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1821 ipv4=10.0.0.57 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=605e19a366 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1821 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.57 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=prometheus;k8s:app.kubernetes.io/version=2.51.2;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus;k8s:io.kubernetes.pod.namespace=monitoring;k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus;k8s:operator.prometheus.io/shard=0;k8s:prometheus=kube-prometheus-stack-prometheus;k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=605e19a366 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1821 identity=7912 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.57 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=605e19a366 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1821 identity=7912 ipv4=10.0.0.57 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=605e19a366 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1821 identity=7912 ipv4=10.0.0.57 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=605e19a366 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1821 identity=7912 ipv4=10.0.0.57 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.243 0e90f762-5b11-4987-b0f7-0204c53f4c9e default }" containerID=539eb5c5861f370d7ed6a339045880af6b42f0f4707e8e7711b520a6a052fd52 datapathConfiguration="&{false false false false false }" interface=lxc2e09b7a4373a k8sPodName=monitoring/loki-gateway-cf54cb88c-gsdj4 labels="[]" subsys=daemon sync-build=true level=info msg="Create endpoint request" addressing="&{10.0.0.19 541586b3-9a0d-45b0-ab0c-b37f30320b39 default }" containerID=8394b43005a25ac1f4ffdfcf01f33f0c94cb584fa0f3fa4a7c89f3e9a7f9f47b datapathConfiguration="&{false false false false false }" interface=lxc5395a7110515 k8sPodName=monitoring/loki-results-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=539eb5c586 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1715 ipv4=10.0.0.243 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-gsdj4 subsys=endpoint level=info msg="New endpoint" containerID=8394b43005 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2406 ipv4=10.0.0.19 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=539eb5c586 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1715 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.243 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-gsdj4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8394b43005 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2406 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.19 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=gateway;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Identity of endpoint changed" containerID=539eb5c586 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1715 identity=2621 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.243 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-gsdj4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=539eb5c586 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1715 identity=2621 ipv4=10.0.0.243 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-gsdj4 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-results-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-results-cache;k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8394b43005 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2406 identity=20808 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.19 ipv6= k8sPodName=monitoring/loki-results-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8394b43005 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2406 identity=20808 ipv4=10.0.0.19 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.176 65850069-50fc-4ef8-80d4-1b99e02d438e default }" containerID=391078735699b6c1af6fd7373a23cca3f5c7b37d14abbae78f436d19a141a721 datapathConfiguration="&{false false false false false }" interface=lxcca3013abeafc k8sPodName=monitoring/loki-chunks-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3910787356 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2794 ipv4=10.0.0.176 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3910787356 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2794 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.176 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-chunks-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-chunks-cache;k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3910787356 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2794 identity=2379 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.176 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3910787356 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2794 identity=2379 ipv4=10.0.0.176 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=539eb5c586 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1715 identity=2621 ipv4=10.0.0.243 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-gsdj4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=539eb5c586 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1715 identity=2621 ipv4=10.0.0.243 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-gsdj4 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=8394b43005 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2406 identity=20808 ipv4=10.0.0.19 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=8394b43005 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2406 identity=20808 ipv4=10.0.0.19 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.247 126186b3-01fd-429f-8160-47d9ec524ce9 default }" containerID=78ad23ec15ca64ca96841cfb24929dda5e4cacc65ff57c6b138dfd1d246c5aa0 datapathConfiguration="&{false false false false false }" interface=lxcf30a38f775a1 k8sPodName=local-path-storage/helper-pod-create-pvc-49f2dd65-d721-4c99-bd59-d72e2b5bc773 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=78ad23ec15 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=896 ipv4=10.0.0.247 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-49f2dd65-d721-4c99-bd59-d72e2b5bc773 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=78ad23ec15 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=896 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.247 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-49f2dd65-d721-4c99-bd59-d72e2b5bc773 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=78ad23ec15 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=896 identity=11276 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.247 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-49f2dd65-d721-4c99-bd59-d72e2b5bc773 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=78ad23ec15 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=896 identity=11276 ipv4=10.0.0.247 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-49f2dd65-d721-4c99-bd59-d72e2b5bc773 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3910787356 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2794 identity=2379 ipv4=10.0.0.176 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=3910787356 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2794 identity=2379 ipv4=10.0.0.176 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=78ad23ec15 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=896 identity=11276 ipv4=10.0.0.247 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-49f2dd65-d721-4c99-bd59-d72e2b5bc773 subsys=endpoint level=info msg="Successful endpoint creation" containerID=78ad23ec15 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=896 identity=11276 ipv4=10.0.0.247 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-49f2dd65-d721-4c99-bd59-d72e2b5bc773 subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.104 b553815d-1575-45d1-b84f-75b0fd846418 default }" containerID=bc1e0447757f82e0cf8dc97e6755b24af7c9d42677b1e13a56fbb830f2225cfe datapathConfiguration="&{false false false false false }" interface=lxc7adcc5825d60 k8sPodName=monitoring/vector-qqpfs labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bc1e044775 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2392 ipv4=10.0.0.104 ipv6= k8sPodName=monitoring/vector-qqpfs subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bc1e044775 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2392 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.104 ipv6= k8sPodName=monitoring/vector-qqpfs subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=Agent;k8s:app.kubernetes.io/instance=vector;k8s:app.kubernetes.io/name=vector;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=vector;k8s:io.kubernetes.pod.namespace=monitoring;k8s:vector.dev/exclude=true;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=bc1e044775 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2392 identity=58854 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.104 ipv6= k8sPodName=monitoring/vector-qqpfs oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=bc1e044775 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2392 identity=58854 ipv4=10.0.0.104 ipv6= k8sPodName=monitoring/vector-qqpfs subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=bc1e044775 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2392 identity=58854 ipv4=10.0.0.104 ipv6= k8sPodName=monitoring/vector-qqpfs subsys=endpoint level=info msg="Successful endpoint creation" containerID=bc1e044775 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2392 identity=58854 ipv4=10.0.0.104 ipv6= k8sPodName=monitoring/vector-qqpfs subsys=daemon level=info msg="Delete endpoint request" containerID=78ad23ec15 endpointID=896 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-49f2dd65-d721-4c99-bd59-d72e2b5bc773 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=78ad23ec15 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=896 identity=11276 ipv4=10.0.0.247 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-49f2dd65-d721-4c99-bd59-d72e2b5bc773 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.232 3f7e9095-8e7c-4ec1-ba33-c4b2e4049c64 default }" containerID=923654c689b6e943f82bcd51bc237c9d52a9e68147cc9d9ef154cc5c7ac0b897 datapathConfiguration="&{false false false false false }" interface=lxc63bdc6d8c866 k8sPodName=monitoring/loki-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=923654c689 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1132 ipv4=10.0.0.232 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=923654c689 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1132 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.232 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=923654c689 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1132 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.232 ipv6= k8sPodName=monitoring/loki-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=single-binary;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:app.kubernetes.io/part-of=memberlist;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=loki-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=923654c689 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1132 identity=61121 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.232 ipv6= k8sPodName=monitoring/loki-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=923654c689 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1132 identity=61121 ipv4=10.0.0.232 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=923654c689 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1132 identity=61121 ipv4=10.0.0.232 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=923654c689 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1132 identity=61121 ipv4=10.0.0.232 ipv6= k8sPodName=monitoring/loki-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.76 257d21a8-5510-4e10-b2fd-754d4fe80f13 default }" containerID=bc9a40a017b2bfcfb7213cb27c531ce8ca1c80342fd84e0f55222857a3b9ff53 datapathConfiguration="&{false false false false false }" interface=lxc9126f12a2471 k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-jpknd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bc9a40a017 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=427 ipv4=10.0.0.76 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-jpknd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bc9a40a017 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=427 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.76 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-jpknd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=prometheus-pushgateway;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=prometheus-pushgateway;k8s:app.kubernetes.io/version=v1.8.0;k8s:helm.sh/chart=prometheus-pushgateway-2.13.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=bc9a40a017 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=427 identity=11185 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.76 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-jpknd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=bc9a40a017 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=427 identity=11185 ipv4=10.0.0.76 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-jpknd subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=bc9a40a017 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=427 identity=11185 ipv4=10.0.0.76 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-jpknd subsys=endpoint level=info msg="Successful endpoint creation" containerID=bc9a40a017 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=427 identity=11185 ipv4=10.0.0.76 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-jpknd subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.80 36d7edb7-36fb-4a8f-8062-c042200e3f0f default }" containerID=a3f18dcef9f07f954deec9fd2b528531b83651a7838d3a9bd53a504bf3562c1f datapathConfiguration="&{false false false false false }" interface=lxc89ad44042cf2 k8sPodName=openstack/memcached-memcached-6479589586-54tfs labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a3f18dcef9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1530 ipv4=10.0.0.80 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-54tfs subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a3f18dcef9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1530 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.80 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-54tfs subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=memcached;k8s:component=server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=memcached;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=a3f18dcef9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1530 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.80 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-54tfs line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=a3f18dcef9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1530 identity=41179 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.80 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-54tfs oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a3f18dcef9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1530 identity=41179 ipv4=10.0.0.80 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-54tfs subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a3f18dcef9 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1530 identity=41179 ipv4=10.0.0.80 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-54tfs subsys=endpoint level=info msg="Successful endpoint creation" containerID=a3f18dcef9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1530 identity=41179 ipv4=10.0.0.80 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-54tfs subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.251 d9f29e39-5110-4f13-83bc-40f3fb50eff8 default }" containerID=094fa1593c08cdfc37da72a8924569e7be97971df37b4b85909c5260b464b99b datapathConfiguration="&{false false false false false }" interface=lxc91e9f54b3e94 k8sPodName=local-path-storage/helper-pod-create-pvc-5287ff56-a3da-4b95-a205-7811450343a0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=094fa1593c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=597 ipv4=10.0.0.251 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5287ff56-a3da-4b95-a205-7811450343a0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=094fa1593c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=597 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.251 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5287ff56-a3da-4b95-a205-7811450343a0 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=094fa1593c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=597 identity=11276 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.251 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5287ff56-a3da-4b95-a205-7811450343a0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=094fa1593c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=597 identity=11276 ipv4=10.0.0.251 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5287ff56-a3da-4b95-a205-7811450343a0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=094fa1593c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=597 identity=11276 ipv4=10.0.0.251 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5287ff56-a3da-4b95-a205-7811450343a0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=094fa1593c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=597 identity=11276 ipv4=10.0.0.251 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5287ff56-a3da-4b95-a205-7811450343a0 subsys=daemon level=info msg="Delete endpoint request" containerID=094fa1593c endpointID=597 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-5287ff56-a3da-4b95-a205-7811450343a0 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=094fa1593c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=597 identity=11276 ipv4=10.0.0.251 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5287ff56-a3da-4b95-a205-7811450343a0 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.96 67c818ff-5bce-4f40-b441-44d255e46f5d default }" containerID=eefad4d68a68ca020e5a8b9bac9ade3b5635584bea4dd8c2863e1c9b2c156823 datapathConfiguration="&{false false false false false }" interface=lxc173fc07e0267 k8sPodName=openstack/rabbitmq-keystone-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=eefad4d68a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1809 ipv4=10.0.0.96 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=eefad4d68a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1809 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.96 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=eefad4d68a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1809 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.96 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-keystone;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=eefad4d68a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1809 identity=13637 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.96 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=eefad4d68a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1809 identity=13637 ipv4=10.0.0.96 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=eefad4d68a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1809 identity=13637 ipv4=10.0.0.96 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=eefad4d68a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1809 identity=13637 ipv4=10.0.0.96 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.226 90ce2adc-8fbd-41b2-b0e8-a7486ba5f545 default }" containerID=dacf752ca6f4c2aef7f8939c165b0df87bc5f1966515eff72d2b89b77928e351 datapathConfiguration="&{false false false false false }" interface=lxc9a96ce7a9093 k8sPodName=openstack/keystone-api-6496d8847-bn8nw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=dacf752ca6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3196 ipv4=10.0.0.226 ipv6= k8sPodName=openstack/keystone-api-6496d8847-bn8nw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=dacf752ca6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3196 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.226 ipv6= k8sPodName=openstack/keystone-api-6496d8847-bn8nw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=dacf752ca6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3196 identity=56664 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.226 ipv6= k8sPodName=openstack/keystone-api-6496d8847-bn8nw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=dacf752ca6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3196 identity=56664 ipv4=10.0.0.226 ipv6= k8sPodName=openstack/keystone-api-6496d8847-bn8nw subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.217 22139a11-6532-48e0-a370-7030f04fb264 default }" containerID=58cf10f27defd0577409f571293e7bc87fc732a4ec270700ad46303098fd1ddf datapathConfiguration="&{false false false false false }" interface=lxc7e35c35307b8 k8sPodName=openstack/keystone-credential-setup-b4kff labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=58cf10f27d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2979 ipv4=10.0.0.217 ipv6= k8sPodName=openstack/keystone-credential-setup-b4kff subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=58cf10f27d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2979 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=60b61c22-bf77-46a8-9c07-cb5473f88986,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=60b61c22-bf77-46a8-9c07-cb5473f88986,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.217 ipv6= k8sPodName=openstack/keystone-credential-setup-b4kff subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=60b61c22-bf77-46a8-9c07-cb5473f88986;k8s:batch.kubernetes.io/job-name=keystone-credential-setup;k8s:component=credential-setup;k8s:controller-uid=60b61c22-bf77-46a8-9c07-cb5473f88986;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-credential-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=58cf10f27d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2979 identity=366 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=60b61c22-bf77-46a8-9c07-cb5473f88986,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=60b61c22-bf77-46a8-9c07-cb5473f88986,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.217 ipv6= k8sPodName=openstack/keystone-credential-setup-b4kff oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=58cf10f27d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2979 identity=366 ipv4=10.0.0.217 ipv6= k8sPodName=openstack/keystone-credential-setup-b4kff subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=dacf752ca6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3196 identity=56664 ipv4=10.0.0.226 ipv6= k8sPodName=openstack/keystone-api-6496d8847-bn8nw subsys=endpoint level=info msg="Successful endpoint creation" containerID=dacf752ca6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3196 identity=56664 ipv4=10.0.0.226 ipv6= k8sPodName=openstack/keystone-api-6496d8847-bn8nw subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=58cf10f27d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2979 identity=366 ipv4=10.0.0.217 ipv6= k8sPodName=openstack/keystone-credential-setup-b4kff subsys=endpoint level=info msg="Successful endpoint creation" containerID=58cf10f27d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2979 identity=366 ipv4=10.0.0.217 ipv6= k8sPodName=openstack/keystone-credential-setup-b4kff subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=58cf10f27d endpointID=2979 k8sNamespace=openstack k8sPodName=keystone-credential-setup-b4kff subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=60b61c22-bf77-46a8-9c07-cb5473f88986 k8s:batch.kubernetes.io/job-name=keystone-credential-setup k8s:component=credential-setup k8s:controller-uid=60b61c22-bf77-46a8-9c07-cb5473f88986 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-credential-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=58cf10f27d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2979 identity=366 ipv4=10.0.0.217 ipv6= k8sPodName=openstack/keystone-credential-setup-b4kff subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.150 b9b0a723-f5c1-463c-a0eb-1231517ffcc5 default }" containerID=ecff687578dcecbbfd3ab957b359453c862674ec7348aaf3590114f40c044755 datapathConfiguration="&{false false false false false }" interface=lxc4f5113d0bc63 k8sPodName=openstack/keystone-db-init-kcv6j labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ecff687578 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4060 ipv4=10.0.0.150 ipv6= k8sPodName=openstack/keystone-db-init-kcv6j subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ecff687578 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4060 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=6c2ea4a1-b476-4e4c-a4c5-e68564f62fc3,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=6c2ea4a1-b476-4e4c-a4c5-e68564f62fc3,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.150 ipv6= k8sPodName=openstack/keystone-db-init-kcv6j subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=6c2ea4a1-b476-4e4c-a4c5-e68564f62fc3;k8s:batch.kubernetes.io/job-name=keystone-db-init;k8s:component=db-init;k8s:controller-uid=6c2ea4a1-b476-4e4c-a4c5-e68564f62fc3;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ecff687578 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4060 identity=31675 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=6c2ea4a1-b476-4e4c-a4c5-e68564f62fc3,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=6c2ea4a1-b476-4e4c-a4c5-e68564f62fc3,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.150 ipv6= k8sPodName=openstack/keystone-db-init-kcv6j oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=ecff687578 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=4060 identity=31675 ipv4=10.0.0.150 ipv6= k8sPodName=openstack/keystone-db-init-kcv6j subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ecff687578 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=4060 identity=31675 ipv4=10.0.0.150 ipv6= k8sPodName=openstack/keystone-db-init-kcv6j subsys=endpoint level=info msg="Successful endpoint creation" containerID=ecff687578 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=4060 identity=31675 ipv4=10.0.0.150 ipv6= k8sPodName=openstack/keystone-db-init-kcv6j subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=ecff687578 endpointID=4060 k8sNamespace=openstack k8sPodName=keystone-db-init-kcv6j subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=6c2ea4a1-b476-4e4c-a4c5-e68564f62fc3 k8s:batch.kubernetes.io/job-name=keystone-db-init k8s:component=db-init k8s:controller-uid=6c2ea4a1-b476-4e4c-a4c5-e68564f62fc3 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=ecff687578 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=4060 identity=31675 ipv4=10.0.0.150 ipv6= k8sPodName=openstack/keystone-db-init-kcv6j subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.165 849a3c05-4a9c-4df5-9d2e-6cf33909f3ac default }" containerID=65771b6caafa4307630f16d318e83bba8cec823223693ad4cc54573240555e7d datapathConfiguration="&{false false false false false }" interface=lxc7b505b5b7487 k8sPodName=openstack/keystone-fernet-setup-ln8j7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=65771b6caa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=498 ipv4=10.0.0.165 ipv6= k8sPodName=openstack/keystone-fernet-setup-ln8j7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=65771b6caa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=498 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=3741b25c-7a77-4597-b947-a440f417a55a,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=3741b25c-7a77-4597-b947-a440f417a55a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.165 ipv6= k8sPodName=openstack/keystone-fernet-setup-ln8j7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=65771b6caa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=498 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.165 ipv6= k8sPodName=openstack/keystone-fernet-setup-ln8j7 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=3741b25c-7a77-4597-b947-a440f417a55a;k8s:batch.kubernetes.io/job-name=keystone-fernet-setup;k8s:component=fernet-setup;k8s:controller-uid=3741b25c-7a77-4597-b947-a440f417a55a;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-fernet-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=65771b6caa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=498 identity=44458 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=3741b25c-7a77-4597-b947-a440f417a55a,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=3741b25c-7a77-4597-b947-a440f417a55a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.165 ipv6= k8sPodName=openstack/keystone-fernet-setup-ln8j7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=65771b6caa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=498 identity=44458 ipv4=10.0.0.165 ipv6= k8sPodName=openstack/keystone-fernet-setup-ln8j7 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=65771b6caa datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=498 identity=44458 ipv4=10.0.0.165 ipv6= k8sPodName=openstack/keystone-fernet-setup-ln8j7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=65771b6caa datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=498 identity=44458 ipv4=10.0.0.165 ipv6= k8sPodName=openstack/keystone-fernet-setup-ln8j7 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=65771b6caa endpointID=498 k8sNamespace=openstack k8sPodName=keystone-fernet-setup-ln8j7 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=3741b25c-7a77-4597-b947-a440f417a55a k8s:batch.kubernetes.io/job-name=keystone-fernet-setup k8s:component=fernet-setup k8s:controller-uid=3741b25c-7a77-4597-b947-a440f417a55a k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-fernet-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=65771b6caa datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=498 identity=44458 ipv4=10.0.0.165 ipv6= k8sPodName=openstack/keystone-fernet-setup-ln8j7 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.234 743198f1-53a4-48fe-ae2e-c364d61b59e1 default }" containerID=f4c6893e652fe742ba05ba8245571486cc424ef0e9a4dc9199c0e477c6e3c138 datapathConfiguration="&{false false false false false }" interface=lxc6efea14ca8f2 k8sPodName=openstack/keystone-db-sync-gbff5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f4c6893e65 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=841 ipv4=10.0.0.234 ipv6= k8sPodName=openstack/keystone-db-sync-gbff5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f4c6893e65 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=841 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=84667e5e-bddf-4f7a-b8d6-d9ba45d32f86,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=84667e5e-bddf-4f7a-b8d6-d9ba45d32f86,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.234 ipv6= k8sPodName=openstack/keystone-db-sync-gbff5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=84667e5e-bddf-4f7a-b8d6-d9ba45d32f86;k8s:batch.kubernetes.io/job-name=keystone-db-sync;k8s:component=db-sync;k8s:controller-uid=84667e5e-bddf-4f7a-b8d6-d9ba45d32f86;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-sync;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f4c6893e65 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=841 identity=13114 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=84667e5e-bddf-4f7a-b8d6-d9ba45d32f86,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=84667e5e-bddf-4f7a-b8d6-d9ba45d32f86,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.234 ipv6= k8sPodName=openstack/keystone-db-sync-gbff5 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=f4c6893e65 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=841 identity=13114 ipv4=10.0.0.234 ipv6= k8sPodName=openstack/keystone-db-sync-gbff5 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f4c6893e65 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=841 identity=13114 ipv4=10.0.0.234 ipv6= k8sPodName=openstack/keystone-db-sync-gbff5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f4c6893e65 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=841 identity=13114 ipv4=10.0.0.234 ipv6= k8sPodName=openstack/keystone-db-sync-gbff5 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=f4c6893e65 endpointID=841 k8sNamespace=openstack k8sPodName=keystone-db-sync-gbff5 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=84667e5e-bddf-4f7a-b8d6-d9ba45d32f86 k8s:batch.kubernetes.io/job-name=keystone-db-sync k8s:component=db-sync k8s:controller-uid=84667e5e-bddf-4f7a-b8d6-d9ba45d32f86 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-sync k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=f4c6893e65 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=841 identity=13114 ipv4=10.0.0.234 ipv6= k8sPodName=openstack/keystone-db-sync-gbff5 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.63 c71811c1-314e-4543-9091-b138fa47e278 default }" containerID=2935dd528caf9e3bef4a5c4ec90bb56324bed3058acb495a5abe0715265c9301 datapathConfiguration="&{false false false false false }" interface=lxc3b1dda45c36e k8sPodName=openstack/keystone-rabbit-init-wl2s9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2935dd528c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1304 ipv4=10.0.0.63 ipv6= k8sPodName=openstack/keystone-rabbit-init-wl2s9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2935dd528c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1304 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=9dbd3049-8c21-49d9-9ecb-45e2906facae,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=9dbd3049-8c21-49d9-9ecb-45e2906facae,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.63 ipv6= k8sPodName=openstack/keystone-rabbit-init-wl2s9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=9dbd3049-8c21-49d9-9ecb-45e2906facae;k8s:batch.kubernetes.io/job-name=keystone-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=9dbd3049-8c21-49d9-9ecb-45e2906facae;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-rabbit-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2935dd528c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1304 identity=48155 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=9dbd3049-8c21-49d9-9ecb-45e2906facae,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=9dbd3049-8c21-49d9-9ecb-45e2906facae,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.63 ipv6= k8sPodName=openstack/keystone-rabbit-init-wl2s9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2935dd528c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1304 identity=48155 ipv4=10.0.0.63 ipv6= k8sPodName=openstack/keystone-rabbit-init-wl2s9 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=2935dd528c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1304 identity=48155 ipv4=10.0.0.63 ipv6= k8sPodName=openstack/keystone-rabbit-init-wl2s9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=2935dd528c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1304 identity=48155 ipv4=10.0.0.63 ipv6= k8sPodName=openstack/keystone-rabbit-init-wl2s9 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=2935dd528c endpointID=1304 k8sNamespace=openstack k8sPodName=keystone-rabbit-init-wl2s9 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=9dbd3049-8c21-49d9-9ecb-45e2906facae k8s:batch.kubernetes.io/job-name=keystone-rabbit-init k8s:component=rabbit-init k8s:controller-uid=9dbd3049-8c21-49d9-9ecb-45e2906facae k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-rabbit-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=2935dd528c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1304 identity=48155 ipv4=10.0.0.63 ipv6= k8sPodName=openstack/keystone-rabbit-init-wl2s9 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.131 88456cca-b2ec-48b5-94f2-517cc81d3c68 default }" containerID=f2273505e610ba7c2a36e672321a066476381ce871e659dce6068b7a90e5f19e datapathConfiguration="&{false false false false false }" interface=lxc50b9a3714177 k8sPodName=openstack/keystone-domain-manage-7nstz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f2273505e6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=221 ipv4=10.0.0.131 ipv6= k8sPodName=openstack/keystone-domain-manage-7nstz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f2273505e6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=221 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=6436d165-a0b4-49f2-9e8d-1af2feec3413,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=6436d165-a0b4-49f2-9e8d-1af2feec3413,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.131 ipv6= k8sPodName=openstack/keystone-domain-manage-7nstz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=6436d165-a0b4-49f2-9e8d-1af2feec3413;k8s:batch.kubernetes.io/job-name=keystone-domain-manage;k8s:component=domain-manage;k8s:controller-uid=6436d165-a0b4-49f2-9e8d-1af2feec3413;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-domain-manage;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f2273505e6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=221 identity=1700 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=6436d165-a0b4-49f2-9e8d-1af2feec3413,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=6436d165-a0b4-49f2-9e8d-1af2feec3413,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.131 ipv6= k8sPodName=openstack/keystone-domain-manage-7nstz oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=f2273505e6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=221 identity=1700 ipv4=10.0.0.131 ipv6= k8sPodName=openstack/keystone-domain-manage-7nstz subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f2273505e6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=221 identity=1700 ipv4=10.0.0.131 ipv6= k8sPodName=openstack/keystone-domain-manage-7nstz subsys=endpoint level=info msg="Successful endpoint creation" containerID=f2273505e6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=221 identity=1700 ipv4=10.0.0.131 ipv6= k8sPodName=openstack/keystone-domain-manage-7nstz subsys=daemon level=info msg="Delete endpoint request" containerID=f2273505e6 endpointID=221 k8sNamespace=openstack k8sPodName=keystone-domain-manage-7nstz subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=6436d165-a0b4-49f2-9e8d-1af2feec3413 k8s:batch.kubernetes.io/job-name=keystone-domain-manage k8s:component=domain-manage k8s:controller-uid=6436d165-a0b4-49f2-9e8d-1af2feec3413 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-domain-manage k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=f2273505e6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=221 identity=1700 ipv4=10.0.0.131 ipv6= k8sPodName=openstack/keystone-domain-manage-7nstz subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.47 04205d0d-02b2-4651-8cc0-9b3c178c4b8c default }" containerID=242a0e6f8b3f644d9e1df0b97a384f5ef059af9f91717e8603de4b1a1d62a239 datapathConfiguration="&{false false false false false }" interface=lxcda1613d48aa8 k8sPodName=openstack/keystone-bootstrap-9w6bm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=242a0e6f8b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1018 ipv4=10.0.0.47 ipv6= k8sPodName=openstack/keystone-bootstrap-9w6bm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=242a0e6f8b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1018 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=245f258e-4d0b-4819-a9fa-5051f8d959a1,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=245f258e-4d0b-4819-a9fa-5051f8d959a1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.47 ipv6= k8sPodName=openstack/keystone-bootstrap-9w6bm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=245f258e-4d0b-4819-a9fa-5051f8d959a1;k8s:batch.kubernetes.io/job-name=keystone-bootstrap;k8s:component=bootstrap;k8s:controller-uid=245f258e-4d0b-4819-a9fa-5051f8d959a1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-bootstrap;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=242a0e6f8b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1018 identity=25827 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=245f258e-4d0b-4819-a9fa-5051f8d959a1,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=245f258e-4d0b-4819-a9fa-5051f8d959a1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.47 ipv6= k8sPodName=openstack/keystone-bootstrap-9w6bm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=242a0e6f8b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1018 identity=25827 ipv4=10.0.0.47 ipv6= k8sPodName=openstack/keystone-bootstrap-9w6bm subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=242a0e6f8b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1018 identity=25827 ipv4=10.0.0.47 ipv6= k8sPodName=openstack/keystone-bootstrap-9w6bm subsys=endpoint level=info msg="Successful endpoint creation" containerID=242a0e6f8b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1018 identity=25827 ipv4=10.0.0.47 ipv6= k8sPodName=openstack/keystone-bootstrap-9w6bm subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=242a0e6f8b endpointID=1018 k8sNamespace=openstack k8sPodName=keystone-bootstrap-9w6bm subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=245f258e-4d0b-4819-a9fa-5051f8d959a1 k8s:batch.kubernetes.io/job-name=keystone-bootstrap k8s:component=bootstrap k8s:controller-uid=245f258e-4d0b-4819-a9fa-5051f8d959a1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-bootstrap k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=242a0e6f8b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1018 identity=25827 ipv4=10.0.0.47 ipv6= k8sPodName=openstack/keystone-bootstrap-9w6bm subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.29 5dd90c83-ffd6-4b9f-942d-afa127bc20ca default }" containerID=46fcbd6f08f10876ee947543c13cade066e2390332bf89b510089d0b48b99e54 datapathConfiguration="&{false false false false false }" interface=lxc0e97ff08424a k8sPodName=local-path-storage/helper-pod-create-pvc-c095cee0-eb99-4dc6-bea8-7a9dde6bfe97 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=46fcbd6f08 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2300 ipv4=10.0.0.29 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c095cee0-eb99-4dc6-bea8-7a9dde6bfe97 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=46fcbd6f08 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2300 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.29 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c095cee0-eb99-4dc6-bea8-7a9dde6bfe97 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=46fcbd6f08 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2300 identity=11276 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.29 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c095cee0-eb99-4dc6-bea8-7a9dde6bfe97 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=46fcbd6f08 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2300 identity=11276 ipv4=10.0.0.29 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c095cee0-eb99-4dc6-bea8-7a9dde6bfe97 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=46fcbd6f08 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2300 identity=11276 ipv4=10.0.0.29 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c095cee0-eb99-4dc6-bea8-7a9dde6bfe97 subsys=endpoint level=info msg="Successful endpoint creation" containerID=46fcbd6f08 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2300 identity=11276 ipv4=10.0.0.29 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c095cee0-eb99-4dc6-bea8-7a9dde6bfe97 subsys=daemon level=info msg="Delete endpoint request" containerID=46fcbd6f08 endpointID=2300 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-c095cee0-eb99-4dc6-bea8-7a9dde6bfe97 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=46fcbd6f08 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2300 identity=11276 ipv4=10.0.0.29 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c095cee0-eb99-4dc6-bea8-7a9dde6bfe97 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.199 ba83d815-a3a0-43c1-8ccd-4747f8469dd2 default }" containerID=bd34b0affa1c305b06b2ff90ee6b4c6606ed1b2ec0e644a909c2392f068f7fa7 datapathConfiguration="&{false false false false false }" interface=lxc3be6ce237ee3 k8sPodName=openstack/rabbitmq-barbican-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bd34b0affa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=409 ipv4=10.0.0.199 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bd34b0affa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=409 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.199 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-barbican;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=bd34b0affa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=409 identity=5248 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.199 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=bd34b0affa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=409 identity=5248 ipv4=10.0.0.199 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=bd34b0affa datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=409 identity=5248 ipv4=10.0.0.199 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=bd34b0affa datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=409 identity=5248 ipv4=10.0.0.199 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.234 3dbbd10b-6ffc-46b2-ad31-0ebe7787c23f default }" containerID=6d0f41c679420d750da2b2582f0ac479839f3a173d59754972a7191bcdff4806 datapathConfiguration="&{false false false false false }" interface=lxcd302bc9e55c4 k8sPodName=openstack/barbican-api-5494657585-p2rb2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6d0f41c679 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3907 ipv4=10.0.0.234 ipv6= k8sPodName=openstack/barbican-api-5494657585-p2rb2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6d0f41c679 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3907 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.234 ipv6= k8sPodName=openstack/barbican-api-5494657585-p2rb2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6d0f41c679 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3907 identity=698 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.234 ipv6= k8sPodName=openstack/barbican-api-5494657585-p2rb2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6d0f41c679 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3907 identity=698 ipv4=10.0.0.234 ipv6= k8sPodName=openstack/barbican-api-5494657585-p2rb2 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.154 33c1335e-8167-4426-a262-0b88f978ecb0 default }" containerID=f26edc5158171d29348f343817834da41e0fe74e2291334c054abd63546fdbf1 datapathConfiguration="&{false false false false false }" interface=lxc64dedf7579a9 k8sPodName=openstack/barbican-db-init-n78mh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f26edc5158 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=645 ipv4=10.0.0.154 ipv6= k8sPodName=openstack/barbican-db-init-n78mh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f26edc5158 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=645 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=5a9a938a-3f97-41e6-a1ab-10c5638ed7f7,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=5a9a938a-3f97-41e6-a1ab-10c5638ed7f7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.154 ipv6= k8sPodName=openstack/barbican-db-init-n78mh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=5a9a938a-3f97-41e6-a1ab-10c5638ed7f7;k8s:batch.kubernetes.io/job-name=barbican-db-init;k8s:component=db-init;k8s:controller-uid=5a9a938a-3f97-41e6-a1ab-10c5638ed7f7;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f26edc5158 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=645 identity=12432 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=5a9a938a-3f97-41e6-a1ab-10c5638ed7f7,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=5a9a938a-3f97-41e6-a1ab-10c5638ed7f7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.154 ipv6= k8sPodName=openstack/barbican-db-init-n78mh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f26edc5158 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=645 identity=12432 ipv4=10.0.0.154 ipv6= k8sPodName=openstack/barbican-db-init-n78mh subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6d0f41c679 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3907 identity=698 ipv4=10.0.0.234 ipv6= k8sPodName=openstack/barbican-api-5494657585-p2rb2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=6d0f41c679 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3907 identity=698 ipv4=10.0.0.234 ipv6= k8sPodName=openstack/barbican-api-5494657585-p2rb2 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=f26edc5158 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=645 identity=12432 ipv4=10.0.0.154 ipv6= k8sPodName=openstack/barbican-db-init-n78mh subsys=endpoint level=info msg="Successful endpoint creation" containerID=f26edc5158 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=645 identity=12432 ipv4=10.0.0.154 ipv6= k8sPodName=openstack/barbican-db-init-n78mh subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=f26edc5158 endpointID=645 k8sNamespace=openstack k8sPodName=barbican-db-init-n78mh subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=5a9a938a-3f97-41e6-a1ab-10c5638ed7f7 k8s:batch.kubernetes.io/job-name=barbican-db-init k8s:component=db-init k8s:controller-uid=5a9a938a-3f97-41e6-a1ab-10c5638ed7f7 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=f26edc5158 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=645 identity=12432 ipv4=10.0.0.154 ipv6= k8sPodName=openstack/barbican-db-init-n78mh subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.79 e09ba4f3-a0e6-4dbe-aacc-9897d3f2d64d default }" containerID=b848c40c2de936ef12ca967e1d45e57fd61f0737025f09ab0d73ca4d475b7a95 datapathConfiguration="&{false false false false false }" interface=lxc13348ff3be24 k8sPodName=openstack/barbican-db-sync-h5w4d labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b848c40c2d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=773 ipv4=10.0.0.79 ipv6= k8sPodName=openstack/barbican-db-sync-h5w4d subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b848c40c2d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=773 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=9c31395c-dde9-4046-ac51-ce64ef92ea03,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=9c31395c-dde9-4046-ac51-ce64ef92ea03,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.79 ipv6= k8sPodName=openstack/barbican-db-sync-h5w4d subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=9c31395c-dde9-4046-ac51-ce64ef92ea03;k8s:batch.kubernetes.io/job-name=barbican-db-sync;k8s:component=db-sync;k8s:controller-uid=9c31395c-dde9-4046-ac51-ce64ef92ea03;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-sync;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b848c40c2d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=773 identity=10661 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=9c31395c-dde9-4046-ac51-ce64ef92ea03,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=9c31395c-dde9-4046-ac51-ce64ef92ea03,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.79 ipv6= k8sPodName=openstack/barbican-db-sync-h5w4d oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b848c40c2d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=773 identity=10661 ipv4=10.0.0.79 ipv6= k8sPodName=openstack/barbican-db-sync-h5w4d subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=b848c40c2d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=773 identity=10661 ipv4=10.0.0.79 ipv6= k8sPodName=openstack/barbican-db-sync-h5w4d subsys=endpoint level=info msg="Successful endpoint creation" containerID=b848c40c2d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=773 identity=10661 ipv4=10.0.0.79 ipv6= k8sPodName=openstack/barbican-db-sync-h5w4d subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=b848c40c2d endpointID=773 k8sNamespace=openstack k8sPodName=barbican-db-sync-h5w4d subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=9c31395c-dde9-4046-ac51-ce64ef92ea03 k8s:batch.kubernetes.io/job-name=barbican-db-sync k8s:component=db-sync k8s:controller-uid=9c31395c-dde9-4046-ac51-ce64ef92ea03 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-sync k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=b848c40c2d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=773 identity=10661 ipv4=10.0.0.79 ipv6= k8sPodName=openstack/barbican-db-sync-h5w4d subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.142 c72d857e-9a58-4f86-9cb3-a2c4d8081c0e default }" containerID=501afe4c3738e04b1aed7870d69e0b90235a77c359fde5f1be6f554ed563a845 datapathConfiguration="&{false false false false false }" interface=lxc1b6e351c539c k8sPodName=openstack/barbican-rabbit-init-plcrb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=501afe4c37 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=917 ipv4=10.0.0.142 ipv6= k8sPodName=openstack/barbican-rabbit-init-plcrb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=501afe4c37 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=917 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=e26b3c4a-9ef6-4e6d-9ba4-3c2e2070f9cd,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=e26b3c4a-9ef6-4e6d-9ba4-3c2e2070f9cd,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.142 ipv6= k8sPodName=openstack/barbican-rabbit-init-plcrb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=e26b3c4a-9ef6-4e6d-9ba4-3c2e2070f9cd;k8s:batch.kubernetes.io/job-name=barbican-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=e26b3c4a-9ef6-4e6d-9ba4-3c2e2070f9cd;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-rabbit-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=501afe4c37 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=917 identity=17358 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=e26b3c4a-9ef6-4e6d-9ba4-3c2e2070f9cd,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=e26b3c4a-9ef6-4e6d-9ba4-3c2e2070f9cd,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.142 ipv6= k8sPodName=openstack/barbican-rabbit-init-plcrb oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=501afe4c37 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=917 identity=17358 ipv4=10.0.0.142 ipv6= k8sPodName=openstack/barbican-rabbit-init-plcrb subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=501afe4c37 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=917 identity=17358 ipv4=10.0.0.142 ipv6= k8sPodName=openstack/barbican-rabbit-init-plcrb subsys=endpoint level=info msg="Successful endpoint creation" containerID=501afe4c37 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=917 identity=17358 ipv4=10.0.0.142 ipv6= k8sPodName=openstack/barbican-rabbit-init-plcrb subsys=daemon level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.036099801155193637 newInterval=11m15s subsys=map-ct level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=501afe4c37 endpointID=917 k8sNamespace=openstack k8sPodName=barbican-rabbit-init-plcrb subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=e26b3c4a-9ef6-4e6d-9ba4-3c2e2070f9cd k8s:batch.kubernetes.io/job-name=barbican-rabbit-init k8s:component=rabbit-init k8s:controller-uid=e26b3c4a-9ef6-4e6d-9ba4-3c2e2070f9cd k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-rabbit-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=501afe4c37 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=917 identity=17358 ipv4=10.0.0.142 ipv6= k8sPodName=openstack/barbican-rabbit-init-plcrb subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.227 68ec33b1-28e1-40ec-968f-2772846b11e4 default }" containerID=06bc56bd295712c1fcb9444caeffa83e941aaabcec11666c7e87c7d024413c04 datapathConfiguration="&{false false false false false }" interface=lxc6046d20f187e k8sPodName=openstack/barbican-ks-service-d8jdx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=06bc56bd29 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=53 ipv4=10.0.0.227 ipv6= k8sPodName=openstack/barbican-ks-service-d8jdx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=06bc56bd29 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=53 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=f426491b-114e-4774-858b-3d1affab5eaf,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=f426491b-114e-4774-858b-3d1affab5eaf,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.227 ipv6= k8sPodName=openstack/barbican-ks-service-d8jdx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=06bc56bd29 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=53 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.227 ipv6= k8sPodName=openstack/barbican-ks-service-d8jdx line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=f426491b-114e-4774-858b-3d1affab5eaf;k8s:batch.kubernetes.io/job-name=barbican-ks-service;k8s:component=ks-service;k8s:controller-uid=f426491b-114e-4774-858b-3d1affab5eaf;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-service;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=06bc56bd29 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=53 identity=65439 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=f426491b-114e-4774-858b-3d1affab5eaf,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=f426491b-114e-4774-858b-3d1affab5eaf,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.227 ipv6= k8sPodName=openstack/barbican-ks-service-d8jdx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=06bc56bd29 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=53 identity=65439 ipv4=10.0.0.227 ipv6= k8sPodName=openstack/barbican-ks-service-d8jdx subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=06bc56bd29 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=53 identity=65439 ipv4=10.0.0.227 ipv6= k8sPodName=openstack/barbican-ks-service-d8jdx subsys=endpoint level=info msg="Successful endpoint creation" containerID=06bc56bd29 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=53 identity=65439 ipv4=10.0.0.227 ipv6= k8sPodName=openstack/barbican-ks-service-d8jdx subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=06bc56bd29 endpointID=53 k8sNamespace=openstack k8sPodName=barbican-ks-service-d8jdx subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=f426491b-114e-4774-858b-3d1affab5eaf k8s:batch.kubernetes.io/job-name=barbican-ks-service k8s:component=ks-service k8s:controller-uid=f426491b-114e-4774-858b-3d1affab5eaf k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-service k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=06bc56bd29 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=53 identity=65439 ipv4=10.0.0.227 ipv6= k8sPodName=openstack/barbican-ks-service-d8jdx subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.109 3682206e-71da-4169-881c-a8961d05d490 default }" containerID=889c7d6f5c27dac1132a47971ba4258046540e2a8b9139d5e6706be60811db90 datapathConfiguration="&{false false false false false }" interface=lxc0d75e7eabefa k8sPodName=openstack/barbican-ks-endpoints-k2nhb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=889c7d6f5c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1405 ipv4=10.0.0.109 ipv6= k8sPodName=openstack/barbican-ks-endpoints-k2nhb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=889c7d6f5c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1405 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=71875fd5-09ae-4490-86a2-85704eff0c26,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=71875fd5-09ae-4490-86a2-85704eff0c26,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.109 ipv6= k8sPodName=openstack/barbican-ks-endpoints-k2nhb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=71875fd5-09ae-4490-86a2-85704eff0c26;k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=71875fd5-09ae-4490-86a2-85704eff0c26;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-endpoints;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=889c7d6f5c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1405 identity=28135 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=71875fd5-09ae-4490-86a2-85704eff0c26,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=71875fd5-09ae-4490-86a2-85704eff0c26,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.109 ipv6= k8sPodName=openstack/barbican-ks-endpoints-k2nhb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=889c7d6f5c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1405 identity=28135 ipv4=10.0.0.109 ipv6= k8sPodName=openstack/barbican-ks-endpoints-k2nhb subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=889c7d6f5c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1405 identity=28135 ipv4=10.0.0.109 ipv6= k8sPodName=openstack/barbican-ks-endpoints-k2nhb subsys=endpoint level=info msg="Successful endpoint creation" containerID=889c7d6f5c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1405 identity=28135 ipv4=10.0.0.109 ipv6= k8sPodName=openstack/barbican-ks-endpoints-k2nhb subsys=daemon level=info msg="Delete endpoint request" containerID=889c7d6f5c endpointID=1405 k8sNamespace=openstack k8sPodName=barbican-ks-endpoints-k2nhb subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=71875fd5-09ae-4490-86a2-85704eff0c26 k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=71875fd5-09ae-4490-86a2-85704eff0c26 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-endpoints k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=889c7d6f5c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1405 identity=28135 ipv4=10.0.0.109 ipv6= k8sPodName=openstack/barbican-ks-endpoints-k2nhb subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.217 1debf4fd-4554-48bb-b969-87f387e2b3f5 default }" containerID=76621238a631f85d04958040e48654e152447b646f794e0e64aca35826d1873c datapathConfiguration="&{false false false false false }" interface=lxcc03d3b367985 k8sPodName=openstack/barbican-ks-user-xjqj5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=76621238a6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=702 ipv4=10.0.0.217 ipv6= k8sPodName=openstack/barbican-ks-user-xjqj5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=76621238a6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=702 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=bece29fd-c3ed-44e2-8869-6bbbd4eaae88,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=bece29fd-c3ed-44e2-8869-6bbbd4eaae88,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.217 ipv6= k8sPodName=openstack/barbican-ks-user-xjqj5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=bece29fd-c3ed-44e2-8869-6bbbd4eaae88;k8s:batch.kubernetes.io/job-name=barbican-ks-user;k8s:component=ks-user;k8s:controller-uid=bece29fd-c3ed-44e2-8869-6bbbd4eaae88;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-user;k8s:release_group=barbican;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=76621238a6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=702 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.217 ipv6= k8sPodName=openstack/barbican-ks-user-xjqj5 line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=76621238a6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=702 identity=55397 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=bece29fd-c3ed-44e2-8869-6bbbd4eaae88,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=bece29fd-c3ed-44e2-8869-6bbbd4eaae88,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.217 ipv6= k8sPodName=openstack/barbican-ks-user-xjqj5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=76621238a6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=702 identity=55397 ipv4=10.0.0.217 ipv6= k8sPodName=openstack/barbican-ks-user-xjqj5 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=76621238a6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=702 identity=55397 ipv4=10.0.0.217 ipv6= k8sPodName=openstack/barbican-ks-user-xjqj5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=76621238a6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=702 identity=55397 ipv4=10.0.0.217 ipv6= k8sPodName=openstack/barbican-ks-user-xjqj5 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=76621238a6 endpointID=702 k8sNamespace=openstack k8sPodName=barbican-ks-user-xjqj5 subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=bece29fd-c3ed-44e2-8869-6bbbd4eaae88 k8s:batch.kubernetes.io/job-name=barbican-ks-user k8s:component=ks-user k8s:controller-uid=bece29fd-c3ed-44e2-8869-6bbbd4eaae88 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-user k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=76621238a6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=702 identity=55397 ipv4=10.0.0.217 ipv6= k8sPodName=openstack/barbican-ks-user-xjqj5 subsys=endpoint level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Create endpoint request" addressing="&{10.0.0.120 bde6eabc-ead2-4351-a093-f798280616f6 default }" containerID=328faa268a53fa89aeddd92581603c84ba2a5f9fe68f2c3c7b1a6e43561beaf9 datapathConfiguration="&{false false false false false }" interface=lxcee1c5ded06e7 k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-zclgg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=328faa268a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=469 ipv4=10.0.0.120 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-zclgg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=328faa268a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=469 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.15.9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.120 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-zclgg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:rook-ceph k8s:io.cilium.k8s.namespace.labels.name:rook-ceph]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-operator;k8s:helm.sh/chart=rook-ceph-v1.15.9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph;k8s:io.cilium.k8s.namespace.labels.name=rook-ceph;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system;k8s:io.kubernetes.pod.namespace=rook-ceph;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=328faa268a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=469 identity=8434 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.15.9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.120 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-zclgg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=328faa268a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=469 identity=8434 ipv4=10.0.0.120 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-zclgg subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=328faa268a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=469 identity=8434 ipv4=10.0.0.120 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-zclgg subsys=endpoint level=info msg="Successful endpoint creation" containerID=328faa268a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=469 identity=8434 ipv4=10.0.0.120 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-zclgg subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.38 ddaab534-73f3-4b38-b233-fd4547ede98e default }" containerID=cdffc0f1742f2509e991d694b63e1ec1fdf509cc0ff011d57737156aa8f389c2 datapathConfiguration="&{false false false false false }" interface=lxcb365ad37cf3a k8sPodName=openstack/rook-ceph-detect-version-7242x labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=cdffc0f174 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2757 ipv4=10.0.0.38 ipv6= k8sPodName=openstack/rook-ceph-detect-version-7242x subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=cdffc0f174 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2757 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=8c38bdb4-adc3-4e78-a989-d0b9c34b6424,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=8c38bdb4-adc3-4e78-a989-d0b9c34b6424,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.38 ipv6= k8sPodName=openstack/rook-ceph-detect-version-7242x subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-detect-version;k8s:batch.kubernetes.io/controller-uid=8c38bdb4-adc3-4e78-a989-d0b9c34b6424;k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version;k8s:controller-uid=8c38bdb4-adc3-4e78-a989-d0b9c34b6424;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=rook-ceph-detect-version;k8s:rook-version=v1.15.9;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=cdffc0f174 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2757 identity=2819 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=8c38bdb4-adc3-4e78-a989-d0b9c34b6424,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=8c38bdb4-adc3-4e78-a989-d0b9c34b6424,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.38 ipv6= k8sPodName=openstack/rook-ceph-detect-version-7242x oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=cdffc0f174 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2757 identity=2819 ipv4=10.0.0.38 ipv6= k8sPodName=openstack/rook-ceph-detect-version-7242x subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=cdffc0f174 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2757 identity=2819 ipv4=10.0.0.38 ipv6= k8sPodName=openstack/rook-ceph-detect-version-7242x subsys=endpoint level=info msg="Successful endpoint creation" containerID=cdffc0f174 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2757 identity=2819 ipv4=10.0.0.38 ipv6= k8sPodName=openstack/rook-ceph-detect-version-7242x subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=cdffc0f174 endpointID=2757 k8sNamespace=openstack k8sPodName=rook-ceph-detect-version-7242x subsys=daemon level=info msg="Releasing key" key="[k8s:app=rook-ceph-detect-version k8s:batch.kubernetes.io/controller-uid=8c38bdb4-adc3-4e78-a989-d0b9c34b6424 k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version k8s:controller-uid=8c38bdb4-adc3-4e78-a989-d0b9c34b6424 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=rook-ceph-detect-version k8s:rook-version=v1.15.9]" subsys=allocator level=info msg="Removed endpoint" containerID=cdffc0f174 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2757 identity=2819 ipv4=10.0.0.38 ipv6= k8sPodName=openstack/rook-ceph-detect-version-7242x subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.116 1f94ad28-6f57-4187-a375-e5f7f6d2b599 default }" containerID=869f23482425168dd9efcbeef9c89b6dfc2de99b881f64c5ec6eb1f92bfed70d datapathConfiguration="&{false false false false false }" interface=lxc886ea0a9293c k8sPodName=openstack/ceph-object-controller-detect-version-r7tfb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=869f234824 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1671 ipv4=10.0.0.116 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-r7tfb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=869f234824 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1671 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=9999c07a-ac13-445b-9279-050d494098b2,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=9999c07a-ac13-445b-9279-050d494098b2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.116 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-r7tfb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=ceph-object-controller-detect-version;k8s:batch.kubernetes.io/controller-uid=9999c07a-ac13-445b-9279-050d494098b2;k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version;k8s:controller-uid=9999c07a-ac13-445b-9279-050d494098b2;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=ceph-object-controller-detect-version;k8s:rook-version=v1.15.9;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=869f234824 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1671 identity=41499 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=9999c07a-ac13-445b-9279-050d494098b2,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=9999c07a-ac13-445b-9279-050d494098b2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.116 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-r7tfb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=869f234824 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1671 identity=41499 ipv4=10.0.0.116 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-r7tfb subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=869f234824 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1671 identity=41499 ipv4=10.0.0.116 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-r7tfb subsys=endpoint level=info msg="Successful endpoint creation" containerID=869f234824 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1671 identity=41499 ipv4=10.0.0.116 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-r7tfb subsys=daemon level=info msg="Delete endpoint request" containerID=869f234824 endpointID=1671 k8sNamespace=openstack k8sPodName=ceph-object-controller-detect-version-r7tfb subsys=daemon level=info msg="Releasing key" key="[k8s:app=ceph-object-controller-detect-version k8s:batch.kubernetes.io/controller-uid=9999c07a-ac13-445b-9279-050d494098b2 k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version k8s:controller-uid=9999c07a-ac13-445b-9279-050d494098b2 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=ceph-object-controller-detect-version k8s:rook-version=v1.15.9]" subsys=allocator level=info msg="Removed endpoint" containerID=869f234824 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1671 identity=41499 ipv4=10.0.0.116 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-r7tfb subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.4 8c175023-00c9-45a3-b022-8269864643d3 default }" containerID=cd1231530928067ea120a98697e6169e6ad24e682d3059762b7f44a69eb6ca29 datapathConfiguration="&{false false false false false }" interface=lxc0dceaf077d9e k8sPodName=local-path-storage/helper-pod-create-pvc-d75bfe85-12c1-4ce8-84cf-b8438686ca37 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=cd12315309 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=531 ipv4=10.0.0.4 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d75bfe85-12c1-4ce8-84cf-b8438686ca37 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=cd12315309 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=531 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.4 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d75bfe85-12c1-4ce8-84cf-b8438686ca37 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=cd12315309 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=531 identity=11276 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.4 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d75bfe85-12c1-4ce8-84cf-b8438686ca37 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=cd12315309 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=531 identity=11276 ipv4=10.0.0.4 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d75bfe85-12c1-4ce8-84cf-b8438686ca37 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=cd12315309 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=531 identity=11276 ipv4=10.0.0.4 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d75bfe85-12c1-4ce8-84cf-b8438686ca37 subsys=endpoint level=info msg="Successful endpoint creation" containerID=cd12315309 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=531 identity=11276 ipv4=10.0.0.4 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d75bfe85-12c1-4ce8-84cf-b8438686ca37 subsys=daemon level=info msg="Delete endpoint request" containerID=cd12315309 endpointID=531 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-d75bfe85-12c1-4ce8-84cf-b8438686ca37 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=cd12315309 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=531 identity=11276 ipv4=10.0.0.4 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d75bfe85-12c1-4ce8-84cf-b8438686ca37 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.58 359f6974-786f-4c64-91db-873ecf79bf58 default }" containerID=e5ff7b8c0ec9e0528cbc656d674e1400becaba0c8369257ba7670a5f4114e296 datapathConfiguration="&{false false false false false }" interface=lxc65fe9eb2b254 k8sPodName=openstack/rabbitmq-glance-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e5ff7b8c0e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=220 ipv4=10.0.0.58 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e5ff7b8c0e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=220 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.58 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-glance;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e5ff7b8c0e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=220 identity=52382 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.58 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e5ff7b8c0e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=220 identity=52382 ipv4=10.0.0.58 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e5ff7b8c0e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=220 identity=52382 ipv4=10.0.0.58 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=e5ff7b8c0e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=220 identity=52382 ipv4=10.0.0.58 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.172 faff43e5-dff8-46a6-b914-106b77e07911 default }" containerID=a31608365c57f6c9bc22b2f3022f5354cbdb80ba9cd68dd76ba1f4c03fcdb3b1 datapathConfiguration="&{false false false false false }" interface=lxc221e6defa29d k8sPodName=openstack/glance-db-init-vqcn9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a31608365c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=928 ipv4=10.0.0.172 ipv6= k8sPodName=openstack/glance-db-init-vqcn9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a31608365c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=928 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=0217108d-475d-47f0-9d46-c8806b33a94c,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=0217108d-475d-47f0-9d46-c8806b33a94c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.172 ipv6= k8sPodName=openstack/glance-db-init-vqcn9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=0217108d-475d-47f0-9d46-c8806b33a94c;k8s:batch.kubernetes.io/job-name=glance-db-init;k8s:component=db-init;k8s:controller-uid=0217108d-475d-47f0-9d46-c8806b33a94c;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-init;k8s:release_group=glance;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=a31608365c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=928 identity=8671 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=0217108d-475d-47f0-9d46-c8806b33a94c,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=0217108d-475d-47f0-9d46-c8806b33a94c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.172 ipv6= k8sPodName=openstack/glance-db-init-vqcn9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a31608365c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=928 identity=8671 ipv4=10.0.0.172 ipv6= k8sPodName=openstack/glance-db-init-vqcn9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a31608365c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=928 identity=8671 ipv4=10.0.0.172 ipv6= k8sPodName=openstack/glance-db-init-vqcn9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=a31608365c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=928 identity=8671 ipv4=10.0.0.172 ipv6= k8sPodName=openstack/glance-db-init-vqcn9 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=a31608365c endpointID=928 k8sNamespace=openstack k8sPodName=glance-db-init-vqcn9 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=0217108d-475d-47f0-9d46-c8806b33a94c k8s:batch.kubernetes.io/job-name=glance-db-init k8s:component=db-init k8s:controller-uid=0217108d-475d-47f0-9d46-c8806b33a94c k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=a31608365c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=928 identity=8671 ipv4=10.0.0.172 ipv6= k8sPodName=openstack/glance-db-init-vqcn9 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.148 14120e34-e1b3-4e8d-8c02-29d86599c11f default }" containerID=970fc5f11e40c1cc8e067cf299af2d89366fd9b68f36b49924ff7fbdcca59836 datapathConfiguration="&{false false false false false }" interface=lxc5fd02046ab79 k8sPodName=openstack/glance-db-sync-dh4hx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=970fc5f11e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=899 ipv4=10.0.0.148 ipv6= k8sPodName=openstack/glance-db-sync-dh4hx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=970fc5f11e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=899 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=0c754d9a-a380-40c3-99b9-f06967d1f95b,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=0c754d9a-a380-40c3-99b9-f06967d1f95b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.148 ipv6= k8sPodName=openstack/glance-db-sync-dh4hx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=970fc5f11e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=899 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.148 ipv6= k8sPodName=openstack/glance-db-sync-dh4hx line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=0c754d9a-a380-40c3-99b9-f06967d1f95b;k8s:batch.kubernetes.io/job-name=glance-db-sync;k8s:component=db-sync;k8s:controller-uid=0c754d9a-a380-40c3-99b9-f06967d1f95b;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-sync;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=970fc5f11e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=899 identity=6190 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=0c754d9a-a380-40c3-99b9-f06967d1f95b,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=0c754d9a-a380-40c3-99b9-f06967d1f95b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.148 ipv6= k8sPodName=openstack/glance-db-sync-dh4hx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=970fc5f11e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=899 identity=6190 ipv4=10.0.0.148 ipv6= k8sPodName=openstack/glance-db-sync-dh4hx subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=970fc5f11e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=899 identity=6190 ipv4=10.0.0.148 ipv6= k8sPodName=openstack/glance-db-sync-dh4hx subsys=endpoint level=info msg="Successful endpoint creation" containerID=970fc5f11e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=899 identity=6190 ipv4=10.0.0.148 ipv6= k8sPodName=openstack/glance-db-sync-dh4hx subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.202 c94b972e-1123-4b1b-889a-70e7ffb8e6e8 default }" containerID=c9865031d3f35cfca63a861e96fccae87d034e6c54e3ca08886e466bdad7a226 datapathConfiguration="&{false false false false false }" interface=lxc88c35cead45d k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-rrlzf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c9865031d3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=724 ipv4=10.0.0.202 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-rrlzf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c9865031d3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=724 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.202 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-rrlzf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-rgw;k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io;k8s:app.kubernetes.io/created-by=rook-ceph-operator;k8s:app.kubernetes.io/instance=ceph;k8s:app.kubernetes.io/managed-by=rook-ceph-operator;k8s:app.kubernetes.io/name=ceph-rgw;k8s:app.kubernetes.io/part-of=ceph;k8s:ceph_daemon_id=ceph;k8s:ceph_daemon_type=rgw;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw;k8s:io.kubernetes.pod.namespace=openstack;k8s:rgw=ceph;k8s:rook.io/operator-namespace=rook-ceph;k8s:rook_cluster=openstack;k8s:rook_object_store=ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c9865031d3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=724 identity=8826 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.202 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-rrlzf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c9865031d3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=724 identity=8826 ipv4=10.0.0.202 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-rrlzf subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.211 fa06f98e-1f74-4b6b-ba1d-3f6b365b930e default }" containerID=e97cc2db3029110f82ed22cd28908bf6bb6a2cc254ed50fde86911f07c84ca69 datapathConfiguration="&{false false false false false }" interface=lxc6fa5e3de85e9 k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-hw6c4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e97cc2db30 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=260 ipv4=10.0.0.211 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-hw6c4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e97cc2db30 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=260 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.211 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-hw6c4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-crashcollector;k8s:ceph-version=18.2.7-0;k8s:ceph_daemon_id=crash;k8s:crashcollector=crash;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default;k8s:io.kubernetes.pod.namespace=openstack;k8s:node_name=instance;k8s:rook_cluster=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e97cc2db30 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=260 identity=7829 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.211 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-hw6c4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e97cc2db30 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=260 identity=7829 ipv4=10.0.0.211 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-hw6c4 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c9865031d3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=724 identity=8826 ipv4=10.0.0.202 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-rrlzf subsys=endpoint level=info msg="Successful endpoint creation" containerID=c9865031d3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=724 identity=8826 ipv4=10.0.0.202 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-rrlzf subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=e97cc2db30 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=260 identity=7829 ipv4=10.0.0.211 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-hw6c4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=e97cc2db30 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=260 identity=7829 ipv4=10.0.0.211 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-hw6c4 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=970fc5f11e endpointID=899 k8sNamespace=openstack k8sPodName=glance-db-sync-dh4hx subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=0c754d9a-a380-40c3-99b9-f06967d1f95b k8s:batch.kubernetes.io/job-name=glance-db-sync k8s:component=db-sync k8s:controller-uid=0c754d9a-a380-40c3-99b9-f06967d1f95b k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-sync k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=970fc5f11e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=899 identity=6190 ipv4=10.0.0.148 ipv6= k8sPodName=openstack/glance-db-sync-dh4hx subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.121 c9301710-6185-458c-b82c-d8a6113446ae default }" containerID=9259ee9f2770bf43cc90b3269426636e866f8b4266d951cc05e261b232f2aeea datapathConfiguration="&{false false false false false }" interface=lxc10837a07c6a4 k8sPodName=openstack/glance-rabbit-init-mrjrt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9259ee9f27 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=24 ipv4=10.0.0.121 ipv6= k8sPodName=openstack/glance-rabbit-init-mrjrt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9259ee9f27 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=24 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=10ec8a08-9fa6-4bc9-8eec-e37795fce725,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=10ec8a08-9fa6-4bc9-8eec-e37795fce725,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.121 ipv6= k8sPodName=openstack/glance-rabbit-init-mrjrt subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=10ec8a08-9fa6-4bc9-8eec-e37795fce725;k8s:batch.kubernetes.io/job-name=glance-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=10ec8a08-9fa6-4bc9-8eec-e37795fce725;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-rabbit-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9259ee9f27 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=24 identity=61603 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=10ec8a08-9fa6-4bc9-8eec-e37795fce725,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=10ec8a08-9fa6-4bc9-8eec-e37795fce725,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.121 ipv6= k8sPodName=openstack/glance-rabbit-init-mrjrt oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9259ee9f27 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=24 identity=61603 ipv4=10.0.0.121 ipv6= k8sPodName=openstack/glance-rabbit-init-mrjrt subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9259ee9f27 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=24 identity=61603 ipv4=10.0.0.121 ipv6= k8sPodName=openstack/glance-rabbit-init-mrjrt subsys=endpoint level=info msg="Successful endpoint creation" containerID=9259ee9f27 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=24 identity=61603 ipv4=10.0.0.121 ipv6= k8sPodName=openstack/glance-rabbit-init-mrjrt subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=9259ee9f27 endpointID=24 k8sNamespace=openstack k8sPodName=glance-rabbit-init-mrjrt subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=10ec8a08-9fa6-4bc9-8eec-e37795fce725 k8s:batch.kubernetes.io/job-name=glance-rabbit-init k8s:component=rabbit-init k8s:controller-uid=10ec8a08-9fa6-4bc9-8eec-e37795fce725 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-rabbit-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=9259ee9f27 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=24 identity=61603 ipv4=10.0.0.121 ipv6= k8sPodName=openstack/glance-rabbit-init-mrjrt subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.124 9d4305f7-4b14-4e41-bc97-9dd550454edb default }" containerID=d220b36e27622bb1ff025993e3f9da5a0b7aa34f2e91b5a85d49104d17c38d67 datapathConfiguration="&{false false false false false }" interface=lxc48de79bd2a74 k8sPodName=openstack/glance-ks-service-jp5gq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d220b36e27 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2389 ipv4=10.0.0.124 ipv6= k8sPodName=openstack/glance-ks-service-jp5gq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d220b36e27 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2389 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=7fcc0a2d-bb62-4550-9cd6-fd1f6fdfc59c,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=7fcc0a2d-bb62-4550-9cd6-fd1f6fdfc59c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.124 ipv6= k8sPodName=openstack/glance-ks-service-jp5gq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=d220b36e27 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2389 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.124 ipv6= k8sPodName=openstack/glance-ks-service-jp5gq line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=7fcc0a2d-bb62-4550-9cd6-fd1f6fdfc59c;k8s:batch.kubernetes.io/job-name=glance-ks-service;k8s:component=ks-service;k8s:controller-uid=7fcc0a2d-bb62-4550-9cd6-fd1f6fdfc59c;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-service;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d220b36e27 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2389 identity=18114 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=7fcc0a2d-bb62-4550-9cd6-fd1f6fdfc59c,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=7fcc0a2d-bb62-4550-9cd6-fd1f6fdfc59c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.124 ipv6= k8sPodName=openstack/glance-ks-service-jp5gq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d220b36e27 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2389 identity=18114 ipv4=10.0.0.124 ipv6= k8sPodName=openstack/glance-ks-service-jp5gq subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d220b36e27 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2389 identity=18114 ipv4=10.0.0.124 ipv6= k8sPodName=openstack/glance-ks-service-jp5gq subsys=endpoint level=info msg="Successful endpoint creation" containerID=d220b36e27 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2389 identity=18114 ipv4=10.0.0.124 ipv6= k8sPodName=openstack/glance-ks-service-jp5gq subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=d220b36e27 endpointID=2389 k8sNamespace=openstack k8sPodName=glance-ks-service-jp5gq subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=7fcc0a2d-bb62-4550-9cd6-fd1f6fdfc59c k8s:batch.kubernetes.io/job-name=glance-ks-service k8s:component=ks-service k8s:controller-uid=7fcc0a2d-bb62-4550-9cd6-fd1f6fdfc59c k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-service k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=d220b36e27 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2389 identity=18114 ipv4=10.0.0.124 ipv6= k8sPodName=openstack/glance-ks-service-jp5gq subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.59 6b96d081-f39e-4c95-8d33-95a7d4de4dd1 default }" containerID=06944af068d78e04865652478294680ee7b60c85b80428aa1ff3b9bf91a13031 datapathConfiguration="&{false false false false false }" interface=lxca5587af2aaf2 k8sPodName=openstack/glance-ks-endpoints-jbjbg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=06944af068 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=629 ipv4=10.0.0.59 ipv6= k8sPodName=openstack/glance-ks-endpoints-jbjbg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=06944af068 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=629 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=4d6765a0-8236-491a-8f6a-9e740f798960,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=4d6765a0-8236-491a-8f6a-9e740f798960,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.59 ipv6= k8sPodName=openstack/glance-ks-endpoints-jbjbg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=4d6765a0-8236-491a-8f6a-9e740f798960;k8s:batch.kubernetes.io/job-name=glance-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=4d6765a0-8236-491a-8f6a-9e740f798960;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-endpoints;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=06944af068 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=629 identity=19046 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=4d6765a0-8236-491a-8f6a-9e740f798960,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=4d6765a0-8236-491a-8f6a-9e740f798960,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.59 ipv6= k8sPodName=openstack/glance-ks-endpoints-jbjbg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=06944af068 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=629 identity=19046 ipv4=10.0.0.59 ipv6= k8sPodName=openstack/glance-ks-endpoints-jbjbg subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=06944af068 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=629 identity=19046 ipv4=10.0.0.59 ipv6= k8sPodName=openstack/glance-ks-endpoints-jbjbg subsys=endpoint level=info msg="Successful endpoint creation" containerID=06944af068 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=629 identity=19046 ipv4=10.0.0.59 ipv6= k8sPodName=openstack/glance-ks-endpoints-jbjbg subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=06944af068 endpointID=629 k8sNamespace=openstack k8sPodName=glance-ks-endpoints-jbjbg subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=4d6765a0-8236-491a-8f6a-9e740f798960 k8s:batch.kubernetes.io/job-name=glance-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=4d6765a0-8236-491a-8f6a-9e740f798960 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-endpoints k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=06944af068 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=629 identity=19046 ipv4=10.0.0.59 ipv6= k8sPodName=openstack/glance-ks-endpoints-jbjbg subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.91 0c787a38-a603-4c88-bd94-dd9b0a263e2d default }" containerID=24418ee93f10658c0d6fbed18d39ffd9647ab5aee9b326eedf4bf67cea5028f2 datapathConfiguration="&{false false false false false }" interface=lxc9ffa35e70860 k8sPodName=openstack/glance-ks-user-qdv92 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=24418ee93f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1553 ipv4=10.0.0.91 ipv6= k8sPodName=openstack/glance-ks-user-qdv92 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=24418ee93f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1553 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=6190fbd3-53d5-454e-96dc-c92e32e021ce,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=6190fbd3-53d5-454e-96dc-c92e32e021ce,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.91 ipv6= k8sPodName=openstack/glance-ks-user-qdv92 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=6190fbd3-53d5-454e-96dc-c92e32e021ce;k8s:batch.kubernetes.io/job-name=glance-ks-user;k8s:component=ks-user;k8s:controller-uid=6190fbd3-53d5-454e-96dc-c92e32e021ce;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-user;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=24418ee93f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1553 identity=4599 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=6190fbd3-53d5-454e-96dc-c92e32e021ce,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=6190fbd3-53d5-454e-96dc-c92e32e021ce,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.91 ipv6= k8sPodName=openstack/glance-ks-user-qdv92 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=24418ee93f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1553 identity=4599 ipv4=10.0.0.91 ipv6= k8sPodName=openstack/glance-ks-user-qdv92 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=24418ee93f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1553 identity=4599 ipv4=10.0.0.91 ipv6= k8sPodName=openstack/glance-ks-user-qdv92 subsys=endpoint level=info msg="Successful endpoint creation" containerID=24418ee93f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1553 identity=4599 ipv4=10.0.0.91 ipv6= k8sPodName=openstack/glance-ks-user-qdv92 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=24418ee93f endpointID=1553 k8sNamespace=openstack k8sPodName=glance-ks-user-qdv92 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=6190fbd3-53d5-454e-96dc-c92e32e021ce k8s:batch.kubernetes.io/job-name=glance-ks-user k8s:component=ks-user k8s:controller-uid=6190fbd3-53d5-454e-96dc-c92e32e021ce k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-user k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=24418ee93f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1553 identity=4599 ipv4=10.0.0.91 ipv6= k8sPodName=openstack/glance-ks-user-qdv92 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.86 ea8d820b-a89a-40d1-9367-cbb26dcc373b default }" containerID=bf8ac305215ca1299cece5566e207b5750265c25c4d52ecaf815bc0d893efdd1 datapathConfiguration="&{false false false false false }" interface=lxcb64684c58974 k8sPodName=openstack/glance-metadefs-load-xgj9x labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bf8ac30521 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2438 ipv4=10.0.0.86 ipv6= k8sPodName=openstack/glance-metadefs-load-xgj9x subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bf8ac30521 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2438 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=5a99bc47-85b9-46d1-b691-4cc09f76a0fd,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=5a99bc47-85b9-46d1-b691-4cc09f76a0fd,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.86 ipv6= k8sPodName=openstack/glance-metadefs-load-xgj9x subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=5a99bc47-85b9-46d1-b691-4cc09f76a0fd;k8s:batch.kubernetes.io/job-name=glance-metadefs-load;k8s:component=metadefs_load;k8s:controller-uid=5a99bc47-85b9-46d1-b691-4cc09f76a0fd;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-metadefs-load;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=bf8ac30521 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2438 identity=30274 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=5a99bc47-85b9-46d1-b691-4cc09f76a0fd,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=5a99bc47-85b9-46d1-b691-4cc09f76a0fd,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.86 ipv6= k8sPodName=openstack/glance-metadefs-load-xgj9x oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=bf8ac30521 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2438 identity=30274 ipv4=10.0.0.86 ipv6= k8sPodName=openstack/glance-metadefs-load-xgj9x subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=bf8ac30521 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2438 identity=30274 ipv4=10.0.0.86 ipv6= k8sPodName=openstack/glance-metadefs-load-xgj9x subsys=endpoint level=info msg="Successful endpoint creation" containerID=bf8ac30521 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2438 identity=30274 ipv4=10.0.0.86 ipv6= k8sPodName=openstack/glance-metadefs-load-xgj9x subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=bf8ac30521 endpointID=2438 k8sNamespace=openstack k8sPodName=glance-metadefs-load-xgj9x subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=5a99bc47-85b9-46d1-b691-4cc09f76a0fd k8s:batch.kubernetes.io/job-name=glance-metadefs-load k8s:component=metadefs_load k8s:controller-uid=5a99bc47-85b9-46d1-b691-4cc09f76a0fd k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-metadefs-load k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=bf8ac30521 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2438 identity=30274 ipv4=10.0.0.86 ipv6= k8sPodName=openstack/glance-metadefs-load-xgj9x subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.126 16d6beff-3040-4258-b72f-64ddfe09eb24 default }" containerID=9d2ac5f82ff2bf81e55b9fcb5b451754952f8131ffecf10feaebad051054b329 datapathConfiguration="&{false false false false false }" interface=lxcf0d61717d056 k8sPodName=openstack/glance-storage-init-ht2n2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9d2ac5f82f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=257 ipv4=10.0.0.126 ipv6= k8sPodName=openstack/glance-storage-init-ht2n2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9d2ac5f82f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=257 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=e0b2bf38-1d19-4e95-bdaf-7be1df56263b,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=e0b2bf38-1d19-4e95-bdaf-7be1df56263b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.126 ipv6= k8sPodName=openstack/glance-storage-init-ht2n2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=e0b2bf38-1d19-4e95-bdaf-7be1df56263b;k8s:batch.kubernetes.io/job-name=glance-storage-init;k8s:component=storage-init;k8s:controller-uid=e0b2bf38-1d19-4e95-bdaf-7be1df56263b;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-storage-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9d2ac5f82f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=257 identity=6906 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=e0b2bf38-1d19-4e95-bdaf-7be1df56263b,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=e0b2bf38-1d19-4e95-bdaf-7be1df56263b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.126 ipv6= k8sPodName=openstack/glance-storage-init-ht2n2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9d2ac5f82f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=257 identity=6906 ipv4=10.0.0.126 ipv6= k8sPodName=openstack/glance-storage-init-ht2n2 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=9d2ac5f82f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=257 identity=6906 ipv4=10.0.0.126 ipv6= k8sPodName=openstack/glance-storage-init-ht2n2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=9d2ac5f82f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=257 identity=6906 ipv4=10.0.0.126 ipv6= k8sPodName=openstack/glance-storage-init-ht2n2 subsys=daemon level=info msg="Delete endpoint request" containerID=9d2ac5f82f endpointID=257 k8sNamespace=openstack k8sPodName=glance-storage-init-ht2n2 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=e0b2bf38-1d19-4e95-bdaf-7be1df56263b k8s:batch.kubernetes.io/job-name=glance-storage-init k8s:component=storage-init k8s:controller-uid=e0b2bf38-1d19-4e95-bdaf-7be1df56263b k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-storage-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=9d2ac5f82f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=257 identity=6906 ipv4=10.0.0.126 ipv6= k8sPodName=openstack/glance-storage-init-ht2n2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.163 4681a25e-1eaf-4c1d-9e38-9b3f57f3eb38 default }" containerID=e7bbabb617b581e69987056cfedfa62891a3934b078b72579fe25c83b63a148d datapathConfiguration="&{false false false false false }" interface=lxc25afbbfd8615 k8sPodName=openstack/glance-api-655598dcf5-xhgfz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e7bbabb617 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1023 ipv4=10.0.0.163 ipv6= k8sPodName=openstack/glance-api-655598dcf5-xhgfz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e7bbabb617 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1023 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.163 ipv6= k8sPodName=openstack/glance-api-655598dcf5-xhgfz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e7bbabb617 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1023 identity=1618 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.163 ipv6= k8sPodName=openstack/glance-api-655598dcf5-xhgfz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e7bbabb617 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1023 identity=1618 ipv4=10.0.0.163 ipv6= k8sPodName=openstack/glance-api-655598dcf5-xhgfz subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=e7bbabb617 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1023 identity=1618 ipv4=10.0.0.163 ipv6= k8sPodName=openstack/glance-api-655598dcf5-xhgfz subsys=endpoint level=info msg="Successful endpoint creation" containerID=e7bbabb617 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1023 identity=1618 ipv4=10.0.0.163 ipv6= k8sPodName=openstack/glance-api-655598dcf5-xhgfz subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.11 a9e7b098-e758-472c-8edf-af839b8ad77e default }" containerID=0edbca7df62f17ac92644821f4ab24517c6698883b586c8406e6807fcfd4a2f9 datapathConfiguration="&{false false false false false }" interface=lxcda36aaf8dcec k8sPodName=openstack/staffeln-api-77c5f7ffcb-tk8mh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0edbca7df6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=782 ipv4=10.0.0.11 ipv6= k8sPodName=openstack/staffeln-api-77c5f7ffcb-tk8mh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0edbca7df6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=782 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.11 ipv6= k8sPodName=openstack/staffeln-api-77c5f7ffcb-tk8mh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0edbca7df6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=782 identity=24264 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.11 ipv6= k8sPodName=openstack/staffeln-api-77c5f7ffcb-tk8mh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0edbca7df6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=782 identity=24264 ipv4=10.0.0.11 ipv6= k8sPodName=openstack/staffeln-api-77c5f7ffcb-tk8mh subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.136 360188a2-bf8d-4a91-8749-5ea76c401b96 default }" containerID=49bca75a7539214814f06dbdb3d53ce9657a5a6dbc0d9a7675c8431d8a9693a1 datapathConfiguration="&{false false false false false }" interface=lxc9ce3fe010bcc k8sPodName=openstack/staffeln-db-init-pvrbt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=49bca75a75 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=67 ipv4=10.0.0.136 ipv6= k8sPodName=openstack/staffeln-db-init-pvrbt subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.230 57a2010b-b73c-4afb-9465-b6a5a206b6c0 default }" containerID=7808299a43c5a99526e4083257e31d70ced5acef0df606fca69d284b13b900ed datapathConfiguration="&{false false false false false }" interface=lxcb547420844fe k8sPodName=openstack/staffeln-conductor-6dff8b9687-fkf6z labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7808299a43 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=818 ipv4=10.0.0.230 ipv6= k8sPodName=openstack/staffeln-conductor-6dff8b9687-fkf6z subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=49bca75a75 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=67 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=36630be7-48a6-426d-a916-61fb95571be1,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=36630be7-48a6-426d-a916-61fb95571be1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.136 ipv6= k8sPodName=openstack/staffeln-db-init-pvrbt subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Resolving identity labels (blocking)" containerID=7808299a43 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=818 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.230 ipv6= k8sPodName=openstack/staffeln-conductor-6dff8b9687-fkf6z subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=36630be7-48a6-426d-a916-61fb95571be1;k8s:batch.kubernetes.io/job-name=staffeln-db-init;k8s:component=db-init;k8s:controller-uid=36630be7-48a6-426d-a916-61fb95571be1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-init;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=49bca75a75 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=67 identity=9852 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=36630be7-48a6-426d-a916-61fb95571be1,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=36630be7-48a6-426d-a916-61fb95571be1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.136 ipv6= k8sPodName=openstack/staffeln-db-init-pvrbt oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=49bca75a75 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=67 identity=9852 ipv4=10.0.0.136 ipv6= k8sPodName=openstack/staffeln-db-init-pvrbt subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=conductor;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7808299a43 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=818 identity=28751 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.230 ipv6= k8sPodName=openstack/staffeln-conductor-6dff8b9687-fkf6z oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7808299a43 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=818 identity=28751 ipv4=10.0.0.230 ipv6= k8sPodName=openstack/staffeln-conductor-6dff8b9687-fkf6z subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0edbca7df6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=782 identity=24264 ipv4=10.0.0.11 ipv6= k8sPodName=openstack/staffeln-api-77c5f7ffcb-tk8mh subsys=endpoint level=info msg="Successful endpoint creation" containerID=0edbca7df6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=782 identity=24264 ipv4=10.0.0.11 ipv6= k8sPodName=openstack/staffeln-api-77c5f7ffcb-tk8mh subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=49bca75a75 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=67 identity=9852 ipv4=10.0.0.136 ipv6= k8sPodName=openstack/staffeln-db-init-pvrbt subsys=endpoint level=info msg="Successful endpoint creation" containerID=49bca75a75 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=67 identity=9852 ipv4=10.0.0.136 ipv6= k8sPodName=openstack/staffeln-db-init-pvrbt subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=7808299a43 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=818 identity=28751 ipv4=10.0.0.230 ipv6= k8sPodName=openstack/staffeln-conductor-6dff8b9687-fkf6z subsys=endpoint level=info msg="Successful endpoint creation" containerID=7808299a43 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=818 identity=28751 ipv4=10.0.0.230 ipv6= k8sPodName=openstack/staffeln-conductor-6dff8b9687-fkf6z subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=49bca75a75 endpointID=67 k8sNamespace=openstack k8sPodName=staffeln-db-init-pvrbt subsys=daemon level=info msg="Releasing key" key="[k8s:application=staffeln k8s:batch.kubernetes.io/controller-uid=36630be7-48a6-426d-a916-61fb95571be1 k8s:batch.kubernetes.io/job-name=staffeln-db-init k8s:component=db-init k8s:controller-uid=36630be7-48a6-426d-a916-61fb95571be1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=staffeln-db-init k8s:release_group=staffeln]" subsys=allocator level=info msg="Removed endpoint" containerID=49bca75a75 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=67 identity=9852 ipv4=10.0.0.136 ipv6= k8sPodName=openstack/staffeln-db-init-pvrbt subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.67 7c7617f8-7ab8-4e25-ace1-f108ee1895ba default }" containerID=45cdf7af5b6077c0de19f0cf4ee7fe3feda9bd9bf1706dffbe164fa979aa6552 datapathConfiguration="&{false false false false false }" interface=lxc6158a9588fda k8sPodName=openstack/staffeln-db-sync-5f9vl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=45cdf7af5b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3915 ipv4=10.0.0.67 ipv6= k8sPodName=openstack/staffeln-db-sync-5f9vl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=45cdf7af5b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3915 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=c4de6ace-2608-4336-b634-1ec009a85a1f,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=c4de6ace-2608-4336-b634-1ec009a85a1f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.67 ipv6= k8sPodName=openstack/staffeln-db-sync-5f9vl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=c4de6ace-2608-4336-b634-1ec009a85a1f;k8s:batch.kubernetes.io/job-name=staffeln-db-sync;k8s:component=db-sync;k8s:controller-uid=c4de6ace-2608-4336-b634-1ec009a85a1f;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-sync;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=45cdf7af5b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3915 identity=7672 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=c4de6ace-2608-4336-b634-1ec009a85a1f,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=c4de6ace-2608-4336-b634-1ec009a85a1f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.67 ipv6= k8sPodName=openstack/staffeln-db-sync-5f9vl oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=45cdf7af5b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3915 identity=7672 ipv4=10.0.0.67 ipv6= k8sPodName=openstack/staffeln-db-sync-5f9vl subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=45cdf7af5b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3915 identity=7672 ipv4=10.0.0.67 ipv6= k8sPodName=openstack/staffeln-db-sync-5f9vl subsys=endpoint level=info msg="Successful endpoint creation" containerID=45cdf7af5b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3915 identity=7672 ipv4=10.0.0.67 ipv6= k8sPodName=openstack/staffeln-db-sync-5f9vl subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager